Squishy Empire — Privacy Policy

Last updated: 7 October 2026
App: Squishy Empire (iOS)

Die deutsche Fassung finden Sie unter Datenschutzerklärung. Both versions say the same.

1. Controller

The Lucas Agency GmbH
Am Kabellager 11, 51063 Köln, Germany
Represented by: Maxim David Dambietz
Register: Amtsgericht Köln, HRB 127141
Contact: privacy@socialix.ai

2. Summary

No account, no servers of our own. Squishy Empire never asks for your name or e-mail. Your progress is stored only on your device; we never receive it.
Ads: optional reward ads (you tap to watch one; there are no forced ads) are served by Google AdMob. Personalised only with your consent (EEA/UK: Google's consent form) and your permission in Apple's tracking prompt (ATT).
Purchases: payments are handled by Apple. To verify and restore purchases we use RevenueCat with a random, anonymous user ID.
No analytics, no tracking of our own, no sale of data.

3. What is processed and why

a) Save game (on your device only)

Progress, settings and the status of your purchases are stored locally (app storage plus a backup copy in the iOS app settings, "UserDefaults"). We run no servers and never receive this data. It may be part of your device backups (e.g. iCloud Backup) under Apple's terms. To delete it, remove the app.

Legal basis: Art. 6(1)(b) GDPR; storage on your device: § 25(2) no. 2 TDDDG (strictly necessary).

b) Advertising (Google AdMob, Google User Messaging Platform, Apple ATT)

Squishy Empire is free to play and is partly funded by rewarded ads: you decide whether to watch a short ad for an in-game reward (e.g. VIP guest, customer bus, boost, double offline earnings). The reward is granted only when the ad was watched to the end.

Ads are served by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). So that an ad is ready when you ask for one, the app starts the ads SDK shortly after launch and preloads one ad – only after the consent step below has finished. Google's SDK processes:

device identifiers: the advertising identifier (IDFA) only if you chose "Allow" in Apple's tracking prompt, and an app-scoped device identifier (IDFV) for frequency capping and fraud prevention;
IP address and an approximate location derived from it (country/region) – the app never asks for location permission;
advertising and interaction data (which ad was shown, watched, tapped or closed);
technical device and diagnostic data (device model, OS, app version, the SDK's crash and performance data).

Google uses this to deliver and measure ads, cap ad frequency and detect fraud and invalid traffic; with your consent also for personalisation. Google acts as an independent controller. More: policies.google.com/technologies/partner-sites, policies.google.com/privacy.

Your choices:

EEA, UK, Switzerland: before the first ad request the app shows Google's consent form (User Messaging Platform, IAB TCF). Without consent only non-personalised ads are requested.
Apple App Tracking Transparency: afterwards Apple's prompt may appear. Only if you choose "Allow" does Google receive the advertising identifier. If you decline, ads stay non-personalised. Change it in iOS Settings → Privacy & Security → Tracking.
Nothing depends on your answer. No feature, content or price in the game changes.
Withdraw / change: any time in the game under Settings → "Privacy options" (shown where the consent form applies).
No ads at all: with the "Ad-free" purchase the app no longer starts the ads SDK and sends no ad requests.

Purpose: funding the free game. Legal basis: for personalised ads your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); for non-personalised ads you request yourself, our legitimate interest in funding the free game (Art. 6(1)(f) GDPR) and – where information is stored on or read from your device – your consent or § 25(2) no. 2 TDDDG for the reward ad you explicitly asked for.

c) In-app purchases (Apple, RevenueCat)

Purchases and the "Squishy Pass" subscription are billed exclusively through your Apple account; we never see your payment details. Apple's terms and privacy policy apply.

To verify, unlock and restore purchases we use RevenueCat (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA) as our processor. RevenueCat receives a randomly generated, anonymous app user ID, the transaction data from Apple (product, time, price, country, subscription status) and basic device data (model, iOS version, app version, IP address). Your name, e-mail address or Apple ID are not transmitted; the ID is not linked to any account. RevenueCat's privacy policy: revenuecat.com/privacy.

Purpose: unlocking purchased content, restoring purchases, managing the subscription, handling refunds. Legal basis: Art. 6(1)(b) GDPR (contract) and (c) (statutory retention).

d) Apple App Store

When you download the app, Apple processes data under its own responsibility. From Apple we only receive aggregated, non-personal statistics (e.g. downloads; crash counts only if you enabled "Share with App Developers" in iOS).

e) E-mail contact

If you write to us, we use your e-mail address and message to answer you (Art. 6(1)(b)/(f) GDPR) and delete it once the request is closed and no retention duty applies.

f) This website

This website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which processes technically necessary connection data (IP address, time, page, browser) to deliver it securely. No cookies, no analytics, no third-party content. Legal basis: Art. 6(1)(f) GDPR.

4. What we do not do

No user account, no sign-in, no chat, no leaderboards.
No servers of our own, no analytics or crash tools (apart from the diagnostic data Google's ads SDK collects itself).
No sale of your data. No access to contacts, photos, microphone, camera or location permission.
Mystery boxes are never sold for real money; they open only with in-game cash or for free.

5. Recipients

Google Ireland Limited (AdMob, User Messaging Platform) – independent controller for ad delivery.
RevenueCat, Inc. – processor for purchase verification (data processing agreement, Art. 28 GDPR).
Apple – distribution and payment under its own responsibility.
Cloudflare, Inc. – delivery of this website (processor).

6. International transfers

Google, RevenueCat and Cloudflare may process data in the USA, based on the EU Commission's adequacy decision for the EU-US Data Privacy Framework (where the recipient is certified) and additionally the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

7. Retention

Save game: on your device until you delete the app.
Advertising data: according to Google's retention periods (business.safety.google).
Purchase data at RevenueCat: as long as needed to provide your purchases and as required by law (tax retention up to 10 years); on request we delete the anonymous customer record at RevenueCat.
E-mails: until your request is closed, at most until statutory periods expire.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)) – in the game under Settings → Privacy options, or in iOS under Privacy & Security → Tracking.

As we keep no accounts, we can only match data at Google or RevenueCat if you tell us the anonymous identifier; write to privacy@socialix.ai and we will help. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

California / US residents: we do not sell or "share" personal information for money; the advertising data described in 3 b) is used for personalised ads only with your ATT permission and can be stopped at any time as described above.

9. Children

Squishy Empire is a game for a general audience and is not intended for the App Store Kids category. If you are under 16, please ask a parent before consenting to personalised ads or buying anything. Parents can control purchases via iOS Screen Time ("Ask to Buy").

10. Changes

We update this policy when the app or the law changes; the date above marks the current version.

Contact

The Lucas Agency GmbH — privacy@socialix.ai — Am Kabellager 11, 51063 Köln, Germany