RiftCraft Privacy Policy

Effective Date: 7 July 2025

Key-Point Summary (Plain Language)

We (Sneaky Panda Ltd.) show ads and measure gameplay to improve the Game.
Advertising and analytics partners (listed below) receive an advertising ID, device details and gameplay events.
You can limit personalised ads via your device settings or partner links in Section 6.
We never ask for your real name, email or precise GPS and we do not send remote push notifications.
Need help? Contact our DPO (see Section 16).

This summary is just a quick overview - please read the full policy below.

1. Scope

This policy explains how Sneaky Panda Ltd. (“we”, “us”, “our”) collects, uses and shares data when you play RiftCraft (the “Game”) on Android or iOS. It aligns with the disclosures shown in Google Play’s Data Safety section and Apple App Store’s App Privacy details.

2. Data We Collect and Receive

We do not run our own tracking servers. Instead, your device sends data directly to the partners listed in Section 4, who share aggregated dashboards with us.

Gameplay activity - level attempts, session length, in-app purchases, ads viewed.
Device and usage - advertising ID (GAID / IDFA), coarse IP (region only), device model, OS version, screen resolution, language, crash logs.

3. Smartlook Session Replay and Analytics

We integrate the Smartlook SDK to replay anonymised sessions (taps, gestures, screens) so we can debug issues and improve user experience. Smartlook masks text inputs and never captures personal identifiers. Learn more at help.smartlook.com/docs/privacy-policy.

4. Third-Party SDKs and Service Providers

Partner	Purpose	Typical data shared	Opt-out / info
Google AdMob / Ad Manager	Ad serving and measurement	Advertising ID, IP (region), device info	link
Unity Ads and ironSource (LevelPlay)	Ad serving and mediation	Same	link
AppLovin (MAX)	Ad mediation and consent UI	Same	link
Meta Audience Network	Ad serving	Same	link
Firebase Analytics and Crashlytics	Analytics and crashes	App events, device info	link
Dev2Dev	Cohort analytics	App events	link
Kinda (Kinoa.io)	Monetisation analytics	Revenue stats	link
Smartlook	Session replay	Screens, taps	link
AppsFlyer	Attribution and marketing	Advertising ID, install referrer	link

5. How and Why We Use Information

Operate and improve the Game (legitimate interest or performance of contract).
Serve ads and measure their performance (consent where required).
Analyse gameplay to balance levels and fix bugs (legitimate interest).
Prevent fraud and ensure fair play (legitimate interest).

6. Ad Personalisation Choices

Device controls
Android 14: Settings → Privacy → Ads → “Delete advertising ID”
Android 13-: Settings → Privacy → Ads → “Opt out of Ads Personalisation”
iOS: Settings → Privacy and Security → Tracking → disable “Allow Apps to Request to Track”.
Global Privacy Control or Limit Ad Tracking - the Game honours these signals and forwards them to partners.
Partner portals - see the opt-out links in Section 4.

An in-app toggle is on our roadmap; in the meantime please use the methods above.

7. Legal Bases (EEA and UK)

Consent - personalised advertising.
Legitimate interests - analytics, fraud prevention, game operation.
Performance of contract - delivering gameplay and in-app purchases you request.

8. Data Retention

Raw analytics logs are kept by our partners for no longer than 24 months (shorter if they offer a shorter default). Aggregated, de-identified statistics may be stored indefinitely for trend analysis.

9. Region-Specific Disclosures

Brazil (LGPD): You have rights to access, correct or delete your data. Contact us to exercise them.
Canada (PIPEDA): Our practices comply with the ten Fair Information Principles.
Australia (Privacy Act 1988): We do not transfer personal data outside Australia unless adequate protections apply.
Other regions: We honour applicable rights where you reside.

10. International Data Transfers

We are headquartered in Israel. The European Commission recognises Israel as providing an “adequate” level of protection for personal data. Where partners transfer data outside the EEA or UK, they rely on Standard Contractual Clauses or equivalent safeguards.

11. California Privacy Rights (CCPA and CPRA)

You have rights to know, delete and correct personal information.
We “share” identifiers for cross-context behavioural advertising. Use device controls or partner links to opt out.
No financial incentives are offered for your data.

12. Children’s Privacy

The Game is directed to users aged 13 plus. We do not knowingly collect personal data from children under 13. If we become aware of such collection, we will delete the information as quickly as practicable or seek parental consent.

13. Security Measures

We follow industry-standard practices, including TLS 1.2 plus for data in transit and partner-level encryption at rest, to protect information. No method of transmission or storage is 100 percent secure, but we aim to mitigate risks through regular audits and access controls.

14. Your Rights and How to Exercise Them

Depending on your location you may request access, correction, deletion, restriction or portability of your data. Send a request to support@sneaky-panda.com and we (or our partners) will respond within 30 days.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in-app or on our website at least 7 days before they take effect.

16. Contact Us

Sneaky Panda Ltd.
Tel Aviv 6701422, Israel
support@sneaky-panda.com
Data-Protection Officer: Ron Rejwan, ron@sneaky-panda.com

17. Glossary

Advertising ID - a device-level ID (GAID or IDFA) that resets from system settings.
Personal information - data that identifies or can reasonably identify an individual.
Standard Contractual Clauses (SCCs) - EU model clauses for cross-border transfers.

↑ Back to top