Privacy Policy
Last updated: 12 August 2026.
This policy covers the mobile game Hydro Loops: Water Ring Toss and the website hydroloops.com. It describes what data we collect, why, and how you can have it removed.
Before publishing: replace the placeholders below with your legal entity name and registered address, and name the advertising provider you actually integrate.
Data controller: [Company name], [registered address], reachable at [email protected].
The short version
The game does not ask for your name, your email or your location. It creates an anonymous account on your device so your scores can appear on the leaderboard, and that is essentially all it needs.
What the game stores
| Data | Why | Kept |
|---|---|---|
| Anonymous player id | Identifies your scores without identifying you. Issued by our backend (Supabase) on first launch. | Until you delete your account |
| Scores and their timestamps | Leaderboards, including the weekly boards | Until you delete your account |
| Alias (nickname) | Shown next to your score on the leaderboard. You choose it; it does not have to be your real name. | Until you delete your account |
| Country code | Country leaderboards. Two letters only (for example CZ). | Until you delete your account |
| Device platform | Distinguishes Android from iOS players | Until you delete your account |
| Private group membership and group codes | Private leaderboards you create or join | Until you leave the group or delete your account |
How the country is determined. When your profile has no country yet, the app asks our server to look it up. The server derives a two-letter country code from the IP address of that single request and stores only that code - the IP address itself is never stored and never returned. You can hide your country in the game at any time, which removes you from all country boards.
We do not collect your name, email address, phone number, precise location, contacts, photos, or any advertising identifier shared with third parties.
If you sign in
Signing in is optional. The game works fully with the anonymous account. If you choose to sign in with Google or Apple, our authentication provider (Supabase) receives the email address associated with that account so your progress can follow you to another device. Your existing scores are carried over to the signed-in account.
Purchases
In-app purchases are processed by Google Play and the Apple App Store. We never see your payment details; we only receive confirmation that a purchase was made, which unlocks the corresponding feature on your account.
Advertising
The game may show optional rewarded video ads and occasional full-screen ads between rounds. Ads are delivered by [advertising provider], which may process device identifiers under its own privacy policy. Where the law requires it, you are asked for consent before any personalised advertising is served, and you can decline. Buying the ad-free upgrade removes ads entirely.
The website
The website is a static page. It loads the public leaderboard directly from our backend - that request sends no personal data about you and sets no cookies.
The trailer is embedded from YouTube and is loaded only after you click play, so nothing is requested from YouTube (and no YouTube cookies are set) until you ask for it. Once you do, YouTube’s own privacy policy applies.
Visitor statistics are collected through Cloudflare Web Analytics, which is cookieless: it sets no cookies, stores no identifier on your device and does not follow you between sites. Because nothing is stored on your device, the site shows no cookie banner.
Who processes data for us
- Supabase - hosts the database and the authentication service (EU region).
- Cloudflare Pages - serves this website and provides cookieless visitor statistics.
- Google Play / Apple App Store - distribution and payments.
- [Advertising provider] - advertising, if ads are enabled in your build.
Your rights
Under the GDPR you can ask for access to your data, its correction, its deletion, a portable copy, or object to its processing. Write to [email protected] and we will respond within 30 days. You also have the right to complain to your local data protection authority.
Deleting your data
See Account deletion for the steps. Deleting your account removes your profile, your scores and your group memberships permanently.
Children
The game is not directed at children under 13 (under 16 where local law sets that limit). We do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Changes
If this policy changes materially, the new version is published here with a new date, and significant changes are announced in the game.