Garden of Light · myky4labs

Privacy policy

Effective date: 7 October 2026

1. Your garden and your choices

Basic play does not require Google sign-in. Progress, currency, companions, settings, offline timestamps and reward records are stored on your device. Google sign-in and cloud synchronization are optional. Clearing app storage can erase local progress; uninstalling does not itself delete a cloud account.

2. Sign-in and cloud saves

If you connect Google, Firebase Authentication processes your Google account identity, including an account identifier, email address and available profile name, plus technical information used for authentication and security. We do not receive your Google password. When you enable synchronization, Firebase Cloud Firestore stores your game state, save revision, integrity checksum and update time, associated with your Firebase account. The save database is in Frankfurt, Germany (europe-west3). We use this information to provide account access, backup and restoration. Signing out or disabling sync does not delete previously saved cloud data.

3. Optional diagnostics

“Help improve the game” enables Firebase Analytics and Crashlytics. It is off by default and can be disabled in Account & cloud. These services process gameplay and interaction events, level and upgrade information, installation identifiers, app/device/operating-system information and crash diagnostics. We use them to understand progression and fix faults. Our custom event parameters do not contain your email, Google credentials or cloud-save contents. Disabling the option stops future optional collection; it does not automatically erase reports already received.

4. Rewarded advertising

In versions with advertising enabled, Google AdMob provides optional ads in exchange for a clearly described game reward. No forced ads are part of this feature. Google’s SDK may process IP address (including approximate location inferred from it), advertising or other device identifiers, device/app information, ad interactions and diagnostic information for ad delivery, measurement and fraud prevention. Consent messages and privacy choices are shown where applicable; an ad privacy entry is available in the game when required by the consent system. Ads may be prepared before you choose to watch, after the SDK is allowed to request them. Choosing not to watch does not stop basic gameplay.

The current internal test configuration uses Google test ads. Rewards are recorded locally following the SDK reward notification. We do not currently operate a separate server for ad-reward verification or attach your Firebase user ID to reward-ad requests.

5. Providers and use of data

Google provides authentication, cloud storage, optional analytics, crash reporting and advertising. Hosting and email providers process website requests and support correspondence. We do not sell players’ account or save data. We may disclose information when legally required or to protect the service. Depending on the feature and your location, processing is based on providing the service you request, your consent for optional collection, or legitimate interests in security and responding to support requests. Providers may process data outside your country with the safeguards described in their terms.

Provider information: Google Privacy Policy, Firebase privacy information and Google advertising information.

6. Retention and deletion

Local saves remain until you clear them. Cloud account and save data remain while the account exists, until deletion is requested. In-game deletion removes the Firebase game account and its cloud save; Google may retain temporary security records or backups according to its service policies. Crashlytics describes a 90-day retention period before removal begins; Analytics and advertising records follow the services’ retention settings and policies. Diagnostics are not attached to a Firebase account by our game code, so deleting a game account does not automatically identify and remove every diagnostic record. Contact us to request deletion of other identifiable data. Support correspondence is retained as needed to handle your request and any applicable legal obligations.

7. Your rights and account removal

You can request access, correction or deletion, withdraw consent and, where applicable, request restriction, portability or object to processing. Contact the address above; we may need to verify account ownership. You may also contact your local data protection authority. To delete the game account, use Account & cloud → Delete account, or follow our external deletion instructions. This does not delete your Google account or the local garden.

8. Website, children and updates

This website does not use analytics, advertising scripts or tracking cookies. Hosting may process basic request and security logs such as IP address, time, requested path and browser details. If you believe a child has provided personal data without the required permission, contact us so we can investigate and arrange deletion where appropriate. We will update this page when our data practices change and request new consent where necessary. Purchases are not currently enabled.