Privacy Policy

This policy covers the games and applications published by K3 Games Studio, the games label of Yellowkode Studios e Solucoes Digitais LTDA (CNPJ 57.564.582/0001-56, Sao Paulo, Brazil). That includes our Android apps on Google Play, such as Lantern Logic, Stitch Logic, Kilnlight, Melt Tower and Countryside Cove, the next games of our Google Play line, and our web games (including the web version of daily puzzles at k3gamesstudio.com). Where a game works differently, this page says so.

The short version

Which game does what

• Countryside Cove (Android): no ads, no purchases. Sends anonymous usage data to our servers, as described below, crash reports and, when your device is not set to a European time zone, anonymous session analytics (Microsoft Clarity).
• Lantern Logic and Stitch Logic (Android), and the next games of our Google Play line: ads (Unity Ads in Lantern Logic and Stitch Logic; Google AdMob may also be used), optional purchases (Google Play Billing), Google Play Games Services, optional local notifications, a daily ranking, crash reports and, outside the European Economic Area, the UK and Switzerland, anonymous session analytics (Microsoft Clarity).
• Kilnlight (Android): ads (Unity Ads), optional purchases (Google Play Billing), Google Play Games Services when it is turned on, and an optional local reminder for the daily kiln. Since version 1.3, Kilnlight has a weekly league: a random nickname, a random player ID, your endless-workshop scores and short "someone passed you" alerts are stored on our server (see "A nickname" below). It sends no crash reports and no session analytics: the rest of your progress stays on your device (and in Google Play Games Saved Games, if you use it). It downloads the seasonal event calendar from k3gamesstudio.com, which sends nothing about you.
• Melt Tower (Android): ads (Unity Ads), optional purchases (Google Play Billing: Melt Pass subscription, remove ads and cosmetic items, never random items), Google Play Games Services, optional local and push notifications, a weekly league with a random nickname, crash reports (our own error server) and, outside the European Economic Area, the UK and Switzerland, anonymous session analytics (Microsoft Clarity). Optional: your Google account email through Play Games (see "Email (Melt Tower)" below).
• Web games and the web version of daily puzzles: no ads and no purchases. Some send anonymous usage data and have optional leaderboards.

1. What our own servers receive

Our servers (api.k3gamesstudio.com) only receive what a game needs to work:

• A random install identifier. Generated on your device the first time you play. It is a random string, it is not linked to your name, your Google account or your device's hardware, and it is removed from your device when you clear the app's data or uninstall.
• Gameplay events (some games, such as Countryside Cove): things like "a session started" or "a level was completed", with the app version, interface language code and whether the device is mobile.
• Error reports (some games): if the game hits a bug, the technical error message, so we can fix it.
• Leaderboards and daily rankings. When you finish a ranked challenge, the game sends your random identifier, your result and the details needed to check it. In Lantern Logic that is: the puzzle date, your time zone offset, the game version, your time on each puzzle, whether you used a hint, your streak and your Light points. The solution you send is checked by the server to stop cheating and is not stored. In Stitch Logic the daily ranking is only on Google Play Games (your time on the daily patch, without a nickname of our own).
• A nickname. In Stitch Logic, Lantern Logic 0.6 and later, Kilnlight 1.3 and later (and the games that follow the same standard) the game creates a random nickname such as BraveOtter42 the first time you open it, and you can change it. It is shown publicly in the weekly league and rankings, and it does not need to identify you. Inappropriate or duplicated nicknames are refused. The game also stores a weekly-league score, your preferred language and short "someone passed you" alerts so it can notify you (on screen, and as a push notification if you turn that on, see "Notifications"). In other games, a nickname is optional and chosen by you.
• Push notification token (optional). If you allow "ranking alerts" in Lantern Logic 0.6.2, Stitch Logic 1.4.2 or Kilnlight 1.3.2 (and the games that follow the same standard), the game gets a push token from Firebase Cloud Messaging (Google) and sends it to our server together with your random player ID, your language and your time zone, only so we can tell you when someone passes you in the league while the app is closed. See "Notifications".
• IP address. Like any website, our server sees the IP address of each request. We use it only to limit abuse (too many requests) and, when a ranking submission is rejected by our anti-cheat checks, we keep it with that rejected submission for auditing. We do not use it to locate you.

2. Ads (Unity Ads and Google AdMob)

Some of our Android games show ads. Lantern Logic (since version 0.5.0), Stitch Logic (since version 1.3.0) and Kilnlight (since version 1.0.0) show ads served by Unity Ads, an ad network operated by Unity Technologies. Our other ad-supported games may show ads from Unity Ads or from Google AdMob. Ads never interrupt a daily puzzle: reward videos are optional and only play when you ask for them, and short ads may appear between practice puzzles. In Kilnlight, short ads may appear only between walls in the workshop (never in the daily kiln, never in your first games and at most once every 3 minutes). The "Remove ads" purchase turns off the ads that show up on their own.

To show and measure ads and prevent ad fraud, the ad network's SDK collects and shares with that network (Unity Technologies or Google):

• your device's advertising ID and other device identifiers (such as the app set ID);
• device information, such as model, operating system version, language and screen size;
• your IP address, which the network may use to estimate your general (approximate) location;
• interactions with ads, such as views, taps and videos watched;
• diagnostic information, such as app launch time and performance.

Your choices. In the European Economic Area, the UK and Switzerland, the game asks for your consent through Google's consent message (UMP) before personalized ads, and you can refuse; the game passes your choice to the ad network. You can review or change that choice anytime in the game's settings under "Privacy and ads choices". Where US state privacy laws apply, you can opt out of the use of your data for targeted advertising in the same place when the option is shown. On any Android device you can reset or delete your advertising ID in Settings > Google > Ads (or Settings > Privacy > Ads), which also limits personalized ads.

Kilnlight: non-personalized ads by default where we can't ask. Kilnlight does not show a consent message yet. So that nobody gets personalized ads without having agreed: when your device is set to a European time zone (we treat that as the European Economic Area, the UK and Switzerland), Kilnlight tells Unity Ads that there is no consent and asks for non-personalized (non-behavioral) ads only. Everywhere else, because the US state opt-out can't be collected in the app yet, Kilnlight tells Unity Ads that you opted out of the sale or sharing of your data for targeted advertising. When Kilnlight gets a consent message, your own choice will replace these defaults.

Unity's privacy policy, including how to opt out of personalized ads and request access to or deletion of the data Unity holds: unity.com/legal/game-player-and-app-user-privacy-policy. How Google uses this data: policies.google.com/technologies/partner-sites.

3. Purchases (Google Play Billing)

Optional purchases (such as removing ads, hint packs or a subscription) are processed entirely by Google Play. Google collects your payment details under its own terms; we never receive your card number, name or billing address. The game only receives a confirmation of what was bought (product, purchase token and status) so it can deliver it and restore it on a new device. Subscriptions renew automatically until you cancel them in the Google Play app (Payments and subscriptions).

4. Google Play Games Services

Games that use Google Play Games may sign you in automatically with your Play Games profile. Through it, Google stores your leaderboard scores, achievements and a saved game (for example, your progress, streak and settings) in your Play Games account, so your game can follow you to a new phone. Your Play Games name may be shown inside the game, on your own device. We do not receive your email address and we do not send your Play Games identity to our servers. You can delete this game data in the Play Games app (Profile > Settings) or at myaccount.google.com. Google's privacy policy applies: policies.google.com/privacy.

5. Notifications

Reminders. Some games can send reminders (for example, "new puzzles are here" or "your streak ends at midnight"). They are local notifications: scheduled and shown by your own device, with no data sent to us. The game only asks for permission after explaining it, and you can turn each kind of reminder off in the game's settings or in Android's notification settings.

Ranking alerts (push notifications). Lantern Logic (0.6.2 and later), Stitch Logic (1.4.2 and later) and Kilnlight (1.3.2 and later) can tell you when a rival passes you in the weekly league or the daily ranking, even when the app is closed. This is optional: after your first league score, the game explains it and asks; nothing is requested on the first launch. If you say yes, the game registers with Firebase Cloud Messaging (a Google service that delivers push notifications) and sends the resulting push token, your random player ID, your language and your time zone to our server. We use them only to send these alerts: at most one per game every 3 hours, never between 10 pm and 8 am in your time zone, and in your language. The token is not used for ads or marketing and is not shared with anyone besides Google, which delivers the message under its privacy policy. You can turn it off any time in the game's settings ("Ranking alerts") or in Android's notification settings; "Delete my data" in the game removes the token from our server, and invalid tokens are deleted automatically.

6. Stored on your device

Game progress, settings, streaks and purchases you made are saved locally on your device. They stay there until you clear the app's data or uninstall (and, if you use Google Play Games, in your saved game as described above).

7. Crash reports and session analytics

Crash reports. When Lantern Logic (app or web), Stitch Logic, Melt Tower or Countryside Cove hits an error, it sends a technical report to our own error server (errors.wunka.tech): the error message and where in the code it happened, the game version, the device model and Android or browser version. It does not include your nickname, your Google account, your advertising ID or your IP address in the report, and we use it only to fix bugs.

Session analytics (Microsoft Clarity). In the Android app, outside the European Economic Area, the UK and Switzerland, we use Microsoft Clarity to understand how the game is played: which screens and buttons are used, where players get stuck, and anonymous recordings of the game screen and taps. It uses a random identifier, never your name, and the nickname field is hidden from recordings. In the EEA, the UK and Switzerland, Clarity is not loaded at all. Countryside Cove, which has no consent message because it has no ads, uses Clarity the same way and treats any device set to a European time zone as being in Europe, so Clarity is not loaded there either. Microsoft's privacy statement applies: privacy.microsoft.com/privacystatement.

Email (Melt Tower). Melt Tower has no login screen of its own. If, at a moment that matters (for example after you win a gift, join the league or in Settings), you tap to connect, Google Play Games asks for your permission and then gives our server the main email of your Google account. We keep it only on our server, to send you game notices (league podium, gifts, streaks, "we miss you") and, only if you tick a separate box that starts unticked, news and offers. It is never shown in the game, never sold and never shared with ad networks. You can unsubscribe with one tap in any email, turn it off in Settings, or delete it with "Delete my data" (Settings). If you say no, the game works the same and nothing is locked.

8. YouTube API Services (our studio tool)

We use YouTube API Services in one internal tool, K3 Studio Ops, only to publish short videos of our own games on our own YouTube channel, "K3 Games Studio". Our games and apps do not use YouTube API Services and do not access anyone's YouTube account.

• What it accesses: only the K3 Games Studio channel, authorized by its owner (our studio). It uploads our videos (title, description, the video file) and reads the channel's own name and ID to confirm it is ours. It does not access, collect, store or share data about other users or channels.
• Terms: by using YouTube, you are bound by the YouTube Terms of Service: youtube.com/t/terms. Google's privacy policy applies to YouTube: policies.google.com/privacy.
• Revoking access and deletion: the authorization can be revoked at any time on the Google security settings page, security.google.com/settings/security/permissions. The tool keeps only the access token on the studio computer; it is deleted when access is revoked, and we store no data received from YouTube beyond the links to our own published videos.

How we use it

• To run the game: rankings, leaderboards, saved progress and delivering purchases.
• Fair play and security: checking ranking results and limiting abuse.
• Stability and analytics: finding bugs and understanding which parts of our games are played.
• Ads: in ad-supported games, through Unity Ads or Google AdMob as described above.

Under the GDPR and Brazil's LGPD, we rely on your consent for personalized ads (where consent is required), on the performance of a contract for purchases, and on our legitimate interest in running fair rankings, keeping our games stable and preventing abuse.

Who we share it with

• We do not sell or rent your data.
• Unity Technologies, as our ad partner (Unity Ads) in ad-supported games, such as Lantern Logic, Stitch Logic, Kilnlight and Melt Tower.
• Google, as a possible ad partner (AdMob) in ad-supported games, and as the platform for Google Play Billing and Google Play Games Services.
• Microsoft, as the provider of Clarity session analytics in the Android app outside the EEA, the UK and Switzerland.
• Infrastructure providers that host our servers, only to store the data described above on our behalf.
• Authorities, only when the law requires it.

Our servers and our partners' servers may be located outside your country. Data sent to our servers is always encrypted in transit (HTTPS).

Storage, retention and security

Data on our servers is stored in a private database. Ranking and leaderboard records are kept while that game's rankings are online, so that rankings stay correct, or until you ask us to delete them. Rejected ranking submissions are kept only for abuse prevention. When a game's rankings are shut down, we delete its records.

Data deletion and your rights

• Your nickname, league scores, alerts and push token: in Stitch Logic open Settings and tap "Delete my online data"; in Kilnlight open Settings and tap "Delete my player data" (twice, to confirm); in Melt Tower open Settings and tap "Delete my data" (which also removes your email from our server) (nickname, weekly-league scores and alerts are removed from our server right away). In other games, clear the nickname in the game's settings.
• Everything our servers have about you (rankings, nickname, install identifier and related records): email contato@yellowkode.com with the game name and your nickname (or the player ID shown in the game's settings, where available). We delete it within 30 days and confirm by email.
• Your device: uninstalling the app or clearing its data removes the install identifier and local progress, which permanently disconnects any data already sent from your installation.
• Google Play Games data: delete it in the Play Games app or at myaccount.google.com.
• Advertising ID: reset or delete it in Android's settings.

Depending on where you live (for example under the GDPR, the LGPD or US state laws), you may also have the right to access, correct, or object to the processing of your data. Write to us at the email above and we will answer within 30 days.

Children

Our ad-supported games, including Lantern Logic, Stitch Logic, Kilnlight and Melt Tower, are made for players aged 13 and over and are not directed to children. Our other games are made for a general audience and do not collect personal information. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child sent us data (for example, a nickname), email us and we will delete it.

Changes

If this policy changes, the new version will be published at this address with an updated date. Important changes will also be mentioned in the game's update notes.

Contact

Yellowkode Studios e Solucoes Digitais LTDA
Av. Paulista 1636, Conj 4, Sao Paulo - SP, Brazil
Email: contato@yellowkode.com