Star Cluster Conquest Privacy Policy

Last updated: October 8, 2026.

This policy applies to the Star Cluster Conquest game. Visiting this website is covered by the website Privacy Policy.

1. Who we are

Star Cluster Conquest is provided by Pom Studios, an independent app studio, which is the controller of the data described here. For any privacy matter, write to [email protected].

2. Summary

The game works without an account, without a login and without asking for your name, email, phone or location.
Matches, the AI and your progress stay on your device.
We collect usage events (for example, level completed), linked to a random code and without name, email or location, to improve the game.
You can send feedback from the app; the text goes only to us.
The game shows ads (Google AdMob). You choose whether ads can be personalized.
Purchases are processed by the App Store or Google Play. We use RevenueCat to validate them.

3. Data we process

3.1 Usage events

What: short records such as "app opened", "level completed (level, stars, time)", "ability used", "setting changed". They never include name, email, typed text, location or device identifiers.
Identifier: a random code (anon_id) created on first launch and stored only on your device. Since we do not have your name, email or any other data that identifies you, we cannot link the code to a person. When you clear the app data or uninstall, a new code is created.
Technical data added: platform (iOS or Android), app version and app language. As with any internet connection, the server also receives the IP address of the request.
Purpose: measure usage, retention and level difficulty, fix problems and balance the game.
Legal basis: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)), with minimal impact on you.
Retention: raw events for 13 months. After that they are summarized into daily totals, without an identifier, and the raw events are deleted.
Where: servers of Supabase, our processor, which handles the data on our behalf.

3.2 Feedback you send

What: the category (bug, suggestion, other) and the text of up to 500 characters that you write in Settings > Send feedback.
Please note: do not write personal or sensitive data in the text. If you do, it will be handled as part of the feedback.
Purpose: fix bugs and decide on improvements. Legal basis: consent, given by you when you send it (LGPD art. 7, I; GDPR art. 6(1)(a)).
Retention: up to 24 months or until you ask for deletion.
Where: Supabase, separate from usage events. Events record only the category, never the text.

3.3 Ads

We use Google AdMob, which may collect device data, such as the advertising identifier, IP address, ad interaction data and diagnostics, to show ads, measure results and prevent fraud.
Consent: on first launch we show Google's consent form (UMP). On iPhone, after the tutorial, we ask for Apple's tracking permission (ATT) with a screen explaining why.
If you decline: the game stays the same, only with non-personalized ads. You can change your choice later in your device settings (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads) and, in the app, through the privacy options when available.
Ads never interrupt a match in progress.
Google's policy: policies.google.com/technologies/ads

3.4 Purchases

Purchases (Credits, factions, ad removal) are made through the App Store or Google Play. We do not receive card or payment details.
We use RevenueCat to validate and restore purchases. It receives an anonymous subscriber identifier and the app's purchase history. Legal basis: performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
Purchased advantages apply only against the AI.

3.5 Data kept only on your device

Progress, Credits, preferences (volume, vibration, language) and the event queue stay on your device. Clearing the app data or uninstalling removes all of it. There is currently no cloud save.

4. Who we share data with

Supabase (processor): storage of events and feedback.
Google AdMob (ads).
RevenueCat (purchase validation).
Apple and Google (stores and payments).
Authorities, when required by law.

We do not sell data for money. Sharing with the ad network happens as described in section 3.3.

Some of these providers are located outside Brazil and the European Economic Area (for example, in the US). When that happens, we rely on the safeguards provided by law, such as standard contractual clauses.

5. Your rights

Under the LGPD (art. 18) and the GDPR, you may request access, correction, deletion, portability, objection to processing based on legitimate interest, withdrawal of consent and information about sharing. You may also complain to the ANPD (Brazil) or to the data protection authority of your country.

Because events use a random code that exists only on your device, we can only locate your data if you send us that code (anon_id). To request access or deletion, write to [email protected] and, if the app shows your code, include it in the message. We reply within 15 days.

6. Children

The game is not directed at children under 13 and we do not knowingly collect personal data from children. If a parent or guardian believes a child sent personal data in feedback, write to [email protected] and we will delete it.

7. Security

Data travels over an encrypted connection (HTTPS). Events and feedback are written to Supabase through controlled server functions, with restricted access. No system is completely secure.

8. Changes

We may update this policy. The date at the top shows the latest version and, for material changes, we will notify you in the app.

9. Contact

[email protected]