Privacy Policy

Last updated 2 September 2026

Spot 50 is a game. You can play every mode without an account. We collect a small amount of anonymous usage data, and — only if you sign in — your Google name and email so you can appear on leaderboards. No ads, no ad IDs, no third-party trackers, nothing sold.

Who we are

Spot 50 (“the game”, “we”, “us”) is operated by the developer of spot50.com. Contact: support@spot50.com.

What we collect, and why

• Anonymous gameplay analytics. Your browser or the app generates a random ID (stored on your device) that is not tied to your identity. We record events like which mode you played, whether you won, how long a round took, and the board size — so we can see how the game is doing overall. These records contain no name, email, or precise location. They are deleted automatically after 90 days. If your browser or device sends a “Do Not Track” or Global Privacy Control signal, we don’t send this data at all.
• Your Google account details — only if you sign in. Signing in is optional and only needed for online 1‑v‑1 matches and the global leaderboards. When you sign in we receive your Google account’s email address, display name, and profile picture URL. We use them to identify you to opponents and on leaderboards. We never post anything to your Google account and request no access beyond your basic profile.
• Purchases. If you buy “Spot 50 Pro”, the purchase is handled by RevenueCat and by Apple or Google on mobile. We receive a record that you own the unlock — not your card number or billing address.
• Diagnostics. If the game crashes or runs slowly we may collect an error report and basic performance metrics (Core Web Vitals) to fix it. Error tracking uses a self-hosted service on our own server.
• Server logs. Our server keeps standard request logs. IP addresses appear there and are used briefly to rate-limit and block abuse; they are not stored in the analytics database and are not used to profile you.

What we don’t do

• No advertising and no advertising identifiers (no IDFA / AAID).
• No third-party analytics or tracking SDKs — no Google Analytics, no social-media SDKs, no cross-site tracking.
• We never sell or rent your data, and we don’t share it with data brokers.

Cookies and local storage

If you sign in, we set one secure, http-only session cookie (nsc_sess) that lasts about 30 days so you stay signed in. Your device’s local storage holds your settings, your single-player stats, your daily-challenge history, and the anonymous analytics ID — all of it stays on your device. Clearing site data or the app’s storage wipes it.

Third parties

• Google — sign-in. Google’s own privacy policy covers the sign-in step.
• RevenueCat — processes purchase and entitlement records.
• Apple App Store / Google Play — process purchases made on mobile.

Your choices

• Play without signing in — then we hold no personal information about you.
• Send a “Do Not Track” / GPC signal to switch off analytics collection.
• Clear your browser or app storage to remove all local data.
• To delete your account and the data linked to it (leaderboard entries, match history), follow the steps at spot50.com/delete-account — email support@spot50.com from the address you signed in with. We action it within 30 days.

Children

Spot 50 is suitable for all ages. We do not knowingly collect personal information from children; the anonymous analytics contain none. If you believe a child has provided us personal information, contact us and we will delete it.

Where data is held

Game data is stored on our own server. Depending on where you are, your information may be processed in a country with different data-protection laws than yours.

Changes

If this policy changes materially we’ll update the date above and, for signed-in players, note it in the app.