Privacy policy.

Prism Corporation · Owner Andreas Felber
Ägidienstraße 12
92224 Amberg
Germany
Email: prismcorp.info@gmail.com

The game does not require an account. The game save itself and sound, display and language settings are stored on your device. Only with your separate consent are the selected game statistics described below sent to us. In game versions with language selection, your device language is used locally to select German, English, Spanish, French or Portuguese (Brazil) initially; other languages fall back to English. You can change the language in “Settings”.

This local processing provides the game functions you request (Article 6(1)(b) GDPR). The language selector on this privacy page uses no cookies; at the general entry page, your browser may open a version matching its language.

Before starting advertising services, the game asks for your birth year. The year is used in memory to assign an age group and is not permanently stored. Only the age group and time of the check are saved locally. If you do not provide your age, the most protective advertising treatment applies. You can reset your age information under “Settings” → “Privacy”; restarting the app may then be required.

This protects younger users and supports age-appropriate advertising (Article 6(1)(f) GDPR). For children, teenagers and unknown ages, the game disables personalized advertising and applies the relevant protective signals.

The game uses Google AdMob (Google Mobile Ads SDK) for optional videos that provide in-game rewards. Privacy requests are handled through Google’s User Messaging Platform (UMP). You can continue playing without watching a video.

These services do not start before you complete or skip the age check. Afterwards, the game checks your privacy status and prepares permitted ads in the background. This can connect to Google before you choose to watch a video. Ads are not loaded without the required clearance from the privacy system.

Google may process your IP address and approximate location inferred from it, app and ad interactions, device data and diagnostic information, for purposes such as advertising, measurement and fraud prevention. Device and other technical identifiers may also be involved, including the App Set ID for analytics and fraud prevention. The game does not use this identifier for personalized advertising or ad measurement. The Android configuration removes the Android advertising ID permission and disables the first-party ID; this does not exclude all technical identifiers. See Google’s privacy policy and the Google Mobile Ads SDK data disclosure.

For adults, UMP presents consent requests where required. Open “Settings” → “Privacy” → “Manage consent” to access the options available for your region and change your choices for the future. Available options depend on factors including your region and age group.

In the European Economic Area, the United Kingdom and Switzerland, the EU dialog offers consent and rejection options. It is available in German, English, Spanish, French and Portuguese (Portugal); the device language determines the choice, with English as fallback. The dialog language can differ from the language selected in the game. In US states supported by Google, the same menu lets you opt out of using your data for personalized advertising. The US dialog offers the “Do not sell or share my personal information” choice to opt out of the sale or sharing of personal data. It is displayed in English or Spanish. See Google’s restricted data processing information. Opting out does not stop every form of data processing, such as technical delivery or fraud prevention.

Processing that requires consent relies on Article 6(1)(a) GDPR. Technically necessary status checks and secure operation rely on Article 6(1)(f) GDPR where permitted. Section 25(1) of the German TDDDG additionally applies where storing or accessing information on your device requires consent. You can withdraw consent at any time with effect for the future.

With your separate consent, we collect selected game statistics to improve difficulty, progression and the game economy. This choice is independent of advertising. You can decline without disadvantage and continue playing. The feature is available only to players confirmed as adults, using the age group stored locally. No statistics reports are collected and no statistics identifiers are created before consent. The legal basis is Article 6(1)(a) GDPR.

The data includes level and experience, active playtime, coins at the end of a level and the lowest coin balance, income and expenses, pumpkins harvested and sold by type, customers, including aggregate waiting times for served and abandoned orders, curses and other game events, rewards, reputation and witch favor, including their lowest values per level, as well as pumpkin and seed stocks, fields, buildings and staff, including wages and wage debt. Game version, balancing version, platform, report sequence and the server receipt time are also recorded. The coin balance at level completion is measured before the reward for the next level. Selected tutorial steps and progression milestones are also summarized, together with active playtime until they are first reached after measurement starts. Goals already reached before measurement starts are marked only as the starting state; earlier gameplay is not reconstructed retrospectively. Summary reports are created at level completion, approximately every five minutes of active play, additionally when new milestones are reached and when leaving the app.

Random installation, game-save and report identifiers link related data. The statistics are pseudonymized, not anonymous. Names, email addresses, advertising IDs and birth dates are not part of statistics reports. Your consent choice, statistics identifiers, a key for deletion requests and pending reports are stored locally. A limited queue allows later transmission while consent remains active and an internet connection is available.

Data is encrypted in transit using HTTPS to telemetry.prism-corp.de. Access to analysis is protected. We do not use these separate balancing statistics for advertising or send them to Google or advertising partners for analysis. The advertising services described above operate separately.

Your IP address is processed to establish the technical connection. To limit excessive requests, the statistics service uses hashes generated with a temporary key in memory. IP addresses are not stored in the statistics database, and HTTP access logs are disabled for this statistics service. The legal basis for these safeguards and the deletion records described below is Article 6(1)(f) GDPR: our legitimate interest in keeping the service secure and preventing deleted data from being uploaded again.

In game versions that include Google Analytics for Firebase, “Allow statistics” covers both our game statistics above and the Google analytics described here after the expanded consent request. It measures returning players, usage duration and estimated advertising revenue by player cohort. Consent for our own statistics in an earlier game version does not activate Google Analytics; renewed consent to the expanded scope is required. The feature is available only to players confirmed as adults and remains independent of the UMP advertising options. Firebase analytics stays disabled without consent. Declining does not disadvantage you in the game. The legal bases are Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German TDDDG.

With consent, Google processes a random app-instance identifier and information about first use, sessions, returns and usage duration, app version, operating system, device characteristics and language. Selected tutorial steps and progression milestones, with the level and active playtime since measurement began, are also recorded. Collection starts only with valid consent; earlier steps are not reported retrospectively as new events. Your IP address is processed for the connection and to derive an approximate location. Through the AdMob link, ad interactions and estimated ad revenue can be associated with analytics reports. The data is pseudonymized, not anonymous. For this feature, the game code does not send names, email addresses, birth dates, complete game saves or our separate balancing reports. Android advertising ID collection remains disabled.

Prism Corporation uses the reports to understand game usage and the economics of acquiring players. This analytics choice does not authorize personalized advertising. Data is encrypted in transit to Google; processing outside the European Economic Area is possible. See the Firebase privacy information and the international transfer information below.

Analytics retention for user-level and event-level data is set to two months. New activity does not extend this period; data due for deletion is removed in Google’s monthly deletion process. This setting does not limit aggregated standard reports, which may remain available for longer.

Your statistics choice is stored locally. You can withdraw it under “Settings” → “Privacy”. Further collection by our statistics and Firebase stops; deletion of our previously uploaded reports is requested as described below. Locally stored Firebase analytics data and the app-instance identifier are reset. This does not automatically delete data already processed by Google. Use the contact below for related requests. Advertising options remain independently manageable. See Google Analytics data retention for retention and deletion information.

Google receives data to provide AdMob and UMP. Depending on your privacy choices, other advertising partners named in the dialog may be involved. Please refer to the providers and purposes shown there. Data may be processed outside your country, including outside the European Economic Area. Google describes safeguards and transfer arrangements in its international data transfer information.

Prism Corporation receives the optional game statistics. Our statistics server is hosted by Hetzner Online GmbH, which provides the hosting infrastructure. The transfers to advertising partners described here concern the separate advertising services.

Local game saves and settings remain until you reset them or remove the app’s data. The game asks for the age group again at the next app launch after 30 days have elapsed for unknown ages, or 366 days for minors. UMP may store your privacy choices locally. For data processed by Google, see Google’s retention information.

Raw statistics reports are retained in the active system for no more than 90 days. After deletion, they may remain in regularly expiring backups for up to seven further days. A hash of the random installation identifier may be retained as a deletion record for up to 90 days after deletion to reject delayed uploads. This record contains no game statistics.

You can withdraw statistics consent at any time under “Settings” → “Privacy” → “Manage game statistics” using “Withdraw and delete data”. Collection and further statistics uploads stop immediately, pending reports are discarded, and deletion of previously uploaded data is requested. Withdrawal does not affect the lawfulness of processing before withdrawal. Without a connection, the deletion request stays pending and is retried when the app is open again with an internet connection. Wait for deletion confirmation before uninstalling or clearing app data. Simply removing local app data or resetting your progress does not automatically delete uploaded statistics. The retention periods above apply to backups and deletion records.

You can reset your progress in the game. To remove all local app data, open Android settings → “Apps” → “Spooky Pumpkin” → “Storage” → “Clear data”; labels may differ by device. We cannot remotely access your local game save.

To request deletion of other personal data, email prismcorp.info@gmail.com with the subject “Spooky Pumpkin – Delete data”. Describe the data concerned without sending an ID document or unnecessary personal details. We review the request, any legal retention duties and, where relevant, how advertising providers can be involved. Deleting local app data does not automatically erase data already processed by providers.

If you email the game contact address above, we process your email address, message and any information you choose to provide to handle your request. This mailbox uses Google’s Gmail service, to which Google’s privacy information also applies. Contact channels on the company website may use different email providers.

The legal basis is Article 6(1)(b) GDPR for contract-related requests, or Article 6(1)(f) GDPR for handling other enquiries. We delete the information after handling your request unless legal duties or legitimate retention reasons require otherwise.

Subject to applicable data protection law, your rights may include access, correction, deletion, restriction, portability and objection to certain processing. This includes the corresponding GDPR rights where it applies. For requests or questions about regional privacy rights, contact prismcorp.info@gmail.com.

You may complain to a competent data protection authority. The Bavarian State Office for Data Protection Supervision is responsible for our location in Bavaria, Germany.