Privacy Policy

Effective 17 October 2026

This policy explains what data the Spin Fish game (the iPhone and Android app and the web version) and the spinfish.app website collect, why, where it is stored and how to delete it. We try to collect as little as possible — only what the game cannot work without.

1. Who we are
2. In short
3. Your account: guest and sign-in
4. What we store
5. Purchases
6. What stays on your phone
7. What we do not do
8. Why, and on what legal basis
9. Who else processes data
10. How long we keep it
11. Your rights and deletion
12. Children
13. Security
14. Changes and contact

1. Who we are

The game is developed and published by Andrii Teslia, Ivano-Frankivsk, Ukraine, who is responsible for processing your data (the “controller” under the GDPR). Contact: support@spinfish.app.

2. In short

• You can play right away, without registering. The game creates an anonymous guest account with no name, email or password.
• If you wish, you can sign in with Apple or Google to keep your progress and move it to another phone.
• We store your game progress: level, catch, records, Scales (the in-game currency), tackle. We never see payment details — Apple and Google handle payments.
• There are no ads, no analytics, no tracking and no location in the game. We do not sell your data or share it for advertising.
• You can delete your account in the game at any time, together with all its data.

3. Your account: guest and sign-in

Guest

On first launch the game quietly creates a guest account on our server. It only has a random technical identifier and is not linked to your name or email. Guest progress is tied to this phone: if you delete the game without signing in, the progress cannot be restored.

Sign in with Apple or Google

If you sign in with Apple or Google, we receive an account identifier from them and, if you allow it, your email address and name. Apple lets you hide your real email — then we only receive a relay address. We never see your Apple or Google password. We use the email only for signing in and to reply if you contact support.

4. What we store in your account

• Account data: identifier, creation and last sign-in dates, sign-in method.
• Game progress: experience and level, unlocked waters, daily tasks and day streak, tutorial, karma, records and the fish in your keep net, lures and tackle, your game settings.
• Scales: the balance and a journal of changes (fish sold, rewards, in-game purchases) with the time of each. The server checks every operation to protect the game from cheating.
• Technical information: game version and platform (iOS, Android or web).
• Network data: like any server, our hosting sees the IP address of a request and keeps technical logs (for example, to limit mass account creation).

5. Purchases

Scales can be bought for money only through the App Store or Google Play. Apple and Google handle the payment completely — we never see your card details. We receive a purchase confirmation (transaction number, product, date, status) to credit the Scales and never credit them twice. Refunds are handled by Apple and Google under their own rules.

6. What stays on your phone

The game keeps a copy of your progress on the device (so it works offline), your sound and vibration settings and a technical sign-in key. This data is not sent anywhere except our server and disappears when you delete the game.

7. What we do not do

• No ads and no advertising identifiers.
• No third-party analytics, no crash reporting, no tracking across apps and websites.
• We do not ask for location, contacts, camera, microphone or photos.
• We do not sell data or share it for advertising.
• The spinfish.app website sets no cookies and has no analytics.

8. Why, and on what legal basis

We process data under the Law of Ukraine “On Personal Data Protection” and, for players in the EU, the EU General Data Protection Regulation (GDPR):

• to run the game — account, progress, Scales, purchases (performance of our agreement with you, Art. 6(1)(b) GDPR);
• to protect the game and its players — checking operations, limiting abuse, technical logs (legitimate interest, Art. 6(1)(f));
• to comply with the law — for example, purchase records (Art. 6(1)(c));
• to answer you — support messages (performance of the agreement or legitimate interest).

9. Who else processes data

We use established services that process data only on our behalf:

• Supabase — database and sign-in, servers in the EU (Frankfurt, Germany).
• Apple and Google — sign-in with their accounts, distribution of the game and payment for purchases.
• Netlify — hosting of the spinfish.app website and the web version of the game; the support form.
• ImprovMX and Google (Gmail) — forwarding and storing the messages you send to support@spinfish.app.

Some of these services may process data outside Ukraine and the EU (for example, in the USA). Such transfers are protected by standard contractual clauses or other mechanisms required by the GDPR.

10. How long we keep it

• Account data — while the account exists. After deletion it is erased immediately.
• Database backups — up to 7 days, then they expire on their own.
• Support messages — while the matter is open and up to 24 months after (we can delete them sooner on request).
• Hosting technical logs — under the rules of each service, usually a few weeks.

11. Your rights and deletion

You can find out what data we hold, correct it, get a copy, restrict or object to processing, and delete your account. The easiest way is to delete the account in the game: how to do it. For other requests write to support@spinfish.app — we answer within 30 days, usually sooner. You may also complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection authority of your EU country.

12. Children

The game is suitable for all ages but is designed for players aged 13 and over. Children under 13 should play with a parent’s permission, and minors may make purchases only with a parent’s permission. We do not knowingly collect data from children under 13. If you are a parent and believe your child gave us data without your permission, write to us and we will delete it.

13. Security

All connections to the server are encrypted (HTTPS). Every player can access only their own data — the database itself enforces this. Server keys are never stored in the game’s code. No protection is perfect, so if you notice a vulnerability, please tell us.

14. Changes and contact

If we change this policy, we will update the date at the top of this page and announce important changes in the game or in the update notes. Questions — support@spinfish.app.

This policy exists in Ukrainian and English. If they differ, the Ukrainian version prevails.