Privacy policy

Your player and saved game

The game creates a random guest ID and keeps its sign-in credential in secure device storage. We retain your saved game while your player account exists; you can request erasure in Settings. It sends completed levels, stars, best-shot counts, saved powers, rewards and power use to the game service to keep your progress and inventory consistent. It also stores progress, settings including the Daily-reminder preference, tutorials and the latest 500 completed activity records on your device.

There is no name or email sign-up, advertising, cross-app tracking or third-party analytics SDK. The game does not request contacts, photos, location, camera or microphone access.

Purchases

Apple processes payment. Swirlpop receives verified transaction identifiers, product, purchase date, environment, amount, currency and refund status to deliver powers once and maintain the inventory. We do not receive your payment card details. Unused powers and three-move credits remain with your player account. Optional Sign in with Apple links an Apple-provided identifier to your game so you can recover progress and unused powers or move credits on another device. We request no name or email. We verify Apple credentials and store a protected identifier and encrypted revocable token. Signing in does not enable optional reports. Guest saves still depend on the device credential and may be lost if it is lost.

Levels, daily rewards and optional leaderboards

The app checks for new level data when opened online and caches validated levels for offline play. Official daily challenges use a shared UTC day. The service records the challenge, best shots and once-only power reward against your random player ID. A result saved offline can be delivered within the stated reward window.

Leaderboards are off by default. Joining displays a generated nickname, rank and scores to other players, never your name, email or support ID. Turning ranking sharing off hides you locally immediately and removes public entries when the change reaches the service. It does not disable daily rewards. Erasing your saved game removes daily records and leaderboard entries too.

Optional gameplay reports

Reports are off by default. If enabled in Privacy & Support, level results, shots and active time are sent with the random player ID to help improve the game. Essential inventory, progress and purchase syncing continues independently. Turning reports off stops new reports immediately, including offline. Previously shared optional events are removed when the change reaches the service. Optional events are retained for at most 30 days.

Notifications

Daily reminders are off until you enable them in Settings and approve Apple’s permission prompt. The reminder is scheduled on your device for 9:00 local time. Swirlpop also shows temporary in-game notices when a Daily or new level data is ready. Turning the reminder off removes its pending alert; erasing the saved game removes the preference and pending alert too.

Your controls

On Home, open Settings → Privacy & Support to copy your support ID, sync purchases, change gameplay reports, clear local activity, or erase your saved game. Erase requires a connection and deletes the player profile and revokes linked Apple authorization, progress, inventory and optional events from the service, then clears this device. If deletion cannot be confirmed, the local save remains. Unused purchased powers are lost when you erase. Deleting the app alone does not request server deletion.

Minimal purchase records remain de-linked from the player for refunds and financial records; a restricted deletion proof prevents credential reuse and supports a safe retry.

Retention and backup copies

Purchase records remain linked while needed to support your saved game and unused purchases. Erasing the game removes the player link. ABT retains necessary accounting records for seven years after the relevant financial year, or longer where a specific legal duty or dispute requires it. Minimal transaction identifiers and non-reversible deletion proofs remain for the lifetime of the game service to reject duplicate delivery and reuse of deleted credentials; they cannot restore a deleted game.

Encrypted recovery bundles on the game server and off-server Storage Box are removed on a 21-day rotation. The hosting provider separately keeps seven rotating daily server-disk images; older images are replaced when new ones succeed. Those images can contain earlier versions of game records, logs and recovery bundles, so erasing a live account does not immediately remove every backup copy. Storage Box snapshots are disabled. Failed backups or cleanup trigger operational monitoring and require correction. Backup copies are access-restricted and used for recovery; later deletions must be reapplied before a restored service reopens.

Support and optional sharing

Older device backups are outside the game's erase control. If you contact support, your email, message and chosen attachments are used to answer you. Support retention: Support messages and attachments are deleted from ABT's support mailbox within 12 months after the request is closed, unless needed longer for a dispute or legal obligation. This is an ABT-operated process. Google's separate deletion process may retain recovery copies for up to 180 days after customer-irrecoverable deletion, unless legally required to retain them longer. We do not sell your information or use support messages for advertising.

Service diagnostics

We use technical error and security logs to investigate failures and protect the service. They may include connection IP addresses and request metadata. Ordinary web access logging is disabled, and new proxy error logs exclude request headers and URLs. Active server logs use a seven-day expiry rule with daily cleanup; allowing for file rotation, entries can remain for up to eight days in normal operation. Size limits may remove them earlier. Monitoring detects overdue game logs or failed cleanup. Copies inside server-disk backups follow the separate backup rotation. These records are not used for advertising, location profiling or cross-app tracking.

Hosting and your rights

Hetzner Online GmbH hosts the game service in Nuremberg, Germany, and encrypted recovery bundles in Falkenstein, Germany, under a data-processing agreement. Squarespace supplies domain and DNS services. Google Workspace processes support email under its Cloud Data Processing Addendum, accepted for ABT Europe B.V. Google and its subprocessors may process support email outside the European Economic Area; its addendum provides applicable international-transfer safeguards, including European Commission standard contractual clauses where required. Apple handles Apple-account authorization and App Store payments under its own privacy terms. UptimeRobot checks generic service-health responses containing no player records. Contact us for information about applicable transfer safeguards.

We process essential account, saved-game and purchase data to provide the features you request (performance of a contract). We process security and delivery-verification records for our legitimate interests in preventing abuse and keeping the game reliable, and necessary accounting records to meet legal obligations. Optional gameplay reports and public leaderboard participation rely on your consent; you can withdraw it in Settings. Withdrawal does not affect earlier lawful processing. You may request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests, by emailing info@abteurope.com. You may complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

These pages have no advertising or analytics scripts. Service providers process connection information to deliver pages and protect availability.

Contact

ABT Europe B.V.
info@abteurope.com
ABT Europe B.V., Diamantlaan 4, 2132 WV Hoofddorp, The Netherlands.