Privacy Policy

1. Who we are and what this policy covers

Mage Studios is the trade name of I V B HERMAN, a company registered in Brazil and the controller of the data described in this policy. This policy covers data handled by the game, the technical services needed to operate it and our support service for the iOS and Android versions.

Controller contact: hello@mage.games. Address: Rua Amaro Barreto, 1348, Alecrim, Natal–RN, 59040-450, Brazil.

2. Summary of our practices

The game uses pseudonymous identifiers and technical data to save progress, operate services and answer requests. “Pseudonymous” means the data does not directly contain the child's name, but it must still be protected and handled with care.

The game does not ask a child to provide a name, e-mail address, phone number or date of birth. We also do not access photos, contacts, files, camera, microphone or precise location. The exceptions are information voluntarily provided by a parent or guardian to support and, on Android, the Google Play Games player ID and display name received when a parent or guardian chooses to use that sign-in.

• We do not show advertising or use data for ads or behavioral marketing.
• We do not sell personal data.
• We do not use IDFA, AAID or other advertising identifiers.
• We do not track children across other companies' apps, websites or services.
• There is no chat, content posting, friends list or social interaction between players.

3. Data kept on the device

For the game to work and remember the family's choices, we keep data on the device. It is not sent to PostHog, and not all of it is sent to cloud services.

• A random persistent player identifier created locally and used to associate the cloud save.
• Progress, cached inventory, settings and game preferences.
• An age from 5 to 11 selected by the parent or guardian, the selected learning focus and difficulty level. In the current version, these learning choices remain on the device.
• The decision to allow or decline optional analytics and the date of that decision.
• Local data remains until it is cleared in the device settings, deleted by the game where that option is available, or removed by uninstalling. Uninstalling may erase the code needed to locate a pseudonymous cloud save, so contact support before uninstalling if you want to request access or deletion.

4. Cloud save with Google Firebase Firestore

We use Google Firebase Cloud Firestore to save and restore game inventory. We do not use Firebase Analytics in the version described by this policy.

Firestore documents are associated with the random player identifier, not the child's name or e-mail address. Firebase may also process technical information needed to provide and secure the service, such as app metadata, operating-system version, device model, network information and IP address.

• Coins and items acquired in the game.
• Appearance and colors selected for the avatar.
• Premium-content unlock status.
• The pseudonymous identifier used as the save key.

5. Unity technical services

The game uses Unity Authentication to create an anonymous technical identity, Unity Economy to synchronize economy configuration, Unity Remote Config to receive configuration when that feature is used and Unity In-App Purchasing to communicate with the App Store or Google Play about products and purchases.

Depending on the service, Unity may process an installation ID, user or player ID, Unity Authentication ID, identity token, app and device information, IP address and technical logs needed for operation, security and fraud prevention. The anonymous Unity identity does not require the child to provide a name, e-mail address or password.

6. Optional analytics with PostHog

PostHog is started only after a parent or guardian selects “Allow analytics”. Declining does not limit the game or paid content. The choice, including a refusal, lasts for 365 days; after that, the app asks for a new decision.

When allowed, we send only events on a restricted allowlist: session starts and durations, screen, activity and mini-game names, tutorial steps, results, rewards and mini-game progress metrics, together with platform, app version and build channel.

Each app launch receives a new random session identifier. We do not send PostHog the persistent player ID, name, e-mail address, advertising ID, device model, operating-system version, location, screen recording or automatic exceptions. We do not create a persistent profile or link these events to the cloud save.

As with any internet connection, the IP address and other network data may be technically processed by the provider to receive, secure and deliver the request. We configure PostHog to disable geographic enrichment and not include the IP address as an event property.

• The parent or guardian can stop future events at any time in Parent Area.
• Events sent before withdrawal cannot be located by player because they are not linked to the persistent ID.
• Events are kept for no more than 12 months and are then deleted according to the service's retention configuration.

7. Google Play Games and purchases

On Android, a parent or guardian may choose to sign in with Google Play Games. If they do, we receive the Google Play Games player ID and profile display name to authenticate the player and associate progress. Playing without this sign-in remains possible. Use of the Google Account is also subject to Google's policies and settings.

The game may offer an optional one-time purchase to unlock content. Apple or Google processes the payment. The app receives information such as the product, order status, receipt and entitlement to validate or restore the unlock, and stores premium status in the inventory. Mage Studios does not receive card numbers, bank-account details or complete billing information.

8. Data sent to support

When an adult writes to hello@mage.games, we handle the e-mail address, message and information they choose to send, such as the app name, device model, system version, screenshots or videos. We use this data to reply, investigate problems and handle privacy requests.

We ask parents and guardians not to send the child's full name, face, voice, address, school or any other personal information. Support information is kept only as long as needed to handle and document the request, protect the service or comply with a legal obligation, and is then deleted or anonymized when no longer needed.

9. Providers, sharing and international transfers

We share data only with providers needed for the purposes described in this policy, subject to their terms, security commitments and data-protection obligations. They may process information outside Brazil, including in the United States and other countries where they maintain infrastructure or vendors. We use applicable contractual mechanisms and safeguards for these transfers.

We do not authorize these providers to use game data for behavioral advertising or to track children across other companies' services.

• Google LLC — Firebase Cloud Firestore, Google Play, Google Play Games and related services. Policy: https://policies.google.com/privacy
• PostHog Inc. — optional product analytics hosted in the United States. Policy: https://posthog.com/privacy
• Unity Technologies — Authentication, Economy, Remote Config and In-App Purchasing. Game player and app user policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
• Apple Inc. — App Store, purchases and restoration on iOS. Policy: https://www.apple.com/legal/privacy/

10. Children's privacy and legal bases

The games are directed to children, and the child's best interests guide our choices about minimization, use and security. Essential data is handled to provide and secure the game, maintain progress, process purchases requested by a parent or guardian, provide support and comply with legal obligations. Where required by law, we rely on authorization from a parent or guardian or another legal basis compatible with the child's best interests.

PostHog analytics is separate from essential features and depends on an affirmative choice by a parent or guardian. We do not use that choice for advertising, commercial profiling or tracking.

11. Retention, access and deletion

Firestore and personal data in Unity services remain while needed to maintain the save or provide the service, or until a valid deletion request is completed. Deletion is currently manual and the cloud save does not have automatic expiration. Purchase records kept by Apple or Google follow those companies' policies and legal obligations and are not erased by deletion performed by Mage Studios.

A parent or guardian may request information, access, correction or deletion of data associated with the game; withdraw analytics consent; request objection or restriction where provided by law; and complain to the competent data-protection authority.

To make a request, write to hello@mage.games before uninstalling the app. State the game name, platform and, if known, the pseudonymous player identifier. We may request minimal information to confirm that the requester is a parent or guardian and locate the record, without requesting unnecessary child data. If data cannot technically be associated with a player — such as PostHog events with a session-only ID — we will explain that limitation and apply the automatic retention described above.

• We normally acknowledge receipt within 5 business days and complete the request within the deadline required by applicable law.
• Deleting game data does not create a refund and does not erase records Apple or Google must retain.
• Withdrawing analytics stops new events but does not change essential save, authentication or purchase data.

12. Security

We use encrypted connections in transit, access controls and technical and organizational measures proportionate to the nature of the data. No system is entirely free from risk; if we identify an incident that requires notice, we will follow applicable legal obligations.

We also review data and providers to limit collection to what is needed and require appropriate protection from service providers processing data on our behalf.

13. Changes and contact

We may update this policy when the game, providers or applicable rules change. The date at the top shows the latest revision. When a material change requires a new notice or consent, we will present the information appropriately before beginning the new processing.

Questions, support or privacy requests: hello@mage.games. Address: Rua Amaro Barreto, 1348, Alecrim, Natal–RN, 59040-450, Brazil.