Privacy Policy

Effective 12 October 2026

In short: your game is saved on your phone. The only ads are ones you choose to watch, and if you tell us you're under 13 they are set for children and online features stay off. Online play (friends and cloud save) is optional and only for players 13 and over. We never sell your data.

This policy explains how the Sploosh app (package uk.co.sixpaths.sploosh), made by Six Paths Software Ltd ("we", "us"), handles information.

What's stored on your phone

So the game can pick up where you left off, it saves information in the app's private storage on your phone:

your progress: your level, the stars you've earned, zones you've seen, ducklings you've found, hearts, and spare undos, tubes and hints
your daily reward and daily puzzle streaks
your settings (sound, music, vibration, reduced motion, colour-blind mode)
whether you own unlimited hearts
the result of the age check, which is only "13 or over" or "under 13" (see below)

None of this is sent anywhere unless you sign in to online play. Uninstalling the app or clearing its storage deletes it. If you've turned on Android's device backup, Android may include this data in your backup to your Google account. That backup is handled by Google under your account settings, and we can't access it.

Age check

The first time you open Sploosh it asks for your month and year of birth. We use it once, on your phone, to decide whether you are 13 or over. We keep only the answer, "13 or over" or "under 13", and never the date you entered. The check relies on what you tell us.

If you are under 13, ads are set for children (see below) and online play is not available.

Sploosh has no banner or pop-up ads. The only ads are rewarded ones that play when you tap a button marked with a ▶, for example to earn a heart, an extra tube or extra moves. We show them using Google AdMob.

When an ad is requested, Google and the advertisers it works with may receive information from your phone, such as your IP address, device and operating-system details, and your advertising ID, and may use cookies or similar technology. This is described in Google's advertising policy.

If you are 13 or over and in the UK or EU, the app asks for your consent to ad personalisation the first time, using Google's consent message, and you can change your choice later in Settings, under "Ad privacy choices". If you say no, you see ads that aren't personalised.
If you are under 13, ads are requested with Google's child-directed treatment and an under-the-age-of-consent setting, are limited to content rated for general audiences ("G"), and are not personalised.

You can reset or delete your advertising ID in your Android settings.

Unlimited hearts (optional purchase)

Unlimited hearts is an optional one-off purchase. You pay through Google Play (or the App Store on iPhone), so we never see your name, email address or payment details.

To know whether you own it, and to let you restore it on a new phone, the app uses RevenueCat, a service that checks purchases with the store on our behalf. When the app starts, and when you buy or restore, it sends RevenueCat:

a random identifier created by the app, which isn't linked to your name or account
the store's record of your purchase
basic technical details: the app version, your phone's operating system and version, and your country and language settings

RevenueCat will also see your IP address, as any internet service does. It uses this information only to provide purchase checking to us, and keeps it under its privacy policy. Google or Apple handle the payment itself under their own privacy policies. RevenueCat is based in the United States, so this information may be processed there, under a data processing agreement that includes the safeguards UK and EU data protection law require for transfers outside the UK and EEA.

Buying through the store is covered by Google's and Apple's family and parental controls.

Online play (optional, 13 and over)

Online play is off until you choose to sign in, and it is never offered to players who said they are under 13. Without signing in, Sploosh works fully offline.

If you sign in with Apple or Google, we create a Sploosh account for you using our service provider, Supabase, which hosts our database and sign-in. The account holds:

a sign-in identifier from Apple or Google, and the email address they share with us if you let them (we use it only to run your account, never to contact you about anything else)
a player name that the game generates for you, like "Brave Duck 42". Nobody types a name, and the server only accepts names in that shape, so it never contains personal details
a friend code made up of 8 letters and numbers, which you can give to people you want to play with
your level and total stars
a copy of your game progress (the cloud save), uploaded a few seconds after each change so it can be restored on a new phone
your friend requests and friendships, and the free hearts you and your friends send each other (one a day)

Your friends can see your generated name, your level and your star total. Strangers see nothing about you: there is no search, no chat, no photos and no public profiles. Friends who haven't accepted each other can't see each other's details.

We don't use this information for advertising, and we don't share it with anyone except Supabase, which processes it on our behalf. Supabase may process data outside the UK and EEA under safeguards that UK and EU data protection law require.

Deleting your data

On your phone: uninstall the app or clear its storage.
Your online account: in the Friends panel, "Delete my account" deletes your Sploosh sign-in account and everything attached to it straight away: your online profile, cloud save, friendships and gifts. Your game on the phone is left as it is. If you can't use the app, email privacy@sixpaths.co.uk from the address on your Apple or Google account and we'll do it for you.
Purchase records: the purchase is tied to a random identifier. Email us from the phone that has Sploosh installed and we'll explain how to find and delete it. You can restore the purchase afterwards from the store.

Who's responsible, and why

Six Paths Software Ltd is the data controller for the online-play and purchase information described above. We use your online-play information to provide the features you asked for by signing in, and we use purchase information to provide the unlimited hearts you bought and, when the app starts, because we have a legitimate interest in making sure a purchase you've paid for works on every device you use. Ad information is handled by Google as described under Ads.

Your rights

Under UK and EU data protection law, you can ask us for a copy of the information held about you, or to correct or delete it. You can also object to how we use it, and withdraw your consent to ad personalisation at any time. Email us at the address below and we'll help.

If you're unhappy with how we've handled your information, please contact us first. You also have the right to complain to the UK's Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Permissions

Internet access: to show ads, check unlimited-hearts purchases, and for online play if you use it.
Advertising ID: used by Google's ad service as described under Ads.
Vibration: for buzzes during play, which you can turn off in the settings.
Google Play billing: to let you buy unlimited hearts through Google Play.

Sploosh does not use your microphone, camera, location, contacts or files.

Children

Sploosh is a game anyone can play. We don't knowingly collect personal information from children under 13 for our own purposes: online play is switched off for them, and ads are set for children as described above. If you think a child under 13 has used online play, email us and we'll delete the account.

Changes to this policy

If the app changes in a way that affects your privacy, we'll update this page and the date at the top.

Contact

Questions about this policy? Email us at privacy@sixpaths.co.uk.