Chroma Bloom
Privacy policy.
Last updated:
Chroma Bloom is developed by CREAIT LTD. This policy explains how information is handled when you play, use optional test ads or contact us.
This policy covers the private beta with optional rewarded test ads. Earlier offline builds do not include Google’s advertising or consent tools; the Google sections below apply when you install a build that includes those tools. Both versions keep solo progress on your device.
Who we are
CREAIT LTD is responsible for personal information we receive in connection with Chroma Bloom. We are registered in England and Wales under company number 17438757.
For privacy questions or requests, email support@creait.co.uk or write to CREAIT LTD, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Our support page lists the available contact routes.
Information stored on your device
The game saves your puzzle progress, completed levels, a generated player nickname and preferences on your device. Preferences include music, sound, haptics and display settings. This information lets the game remember where you left off and how you prefer to play.
Solo progress, your nickname and settings remain locally stored. The beta does not connect to our account backend, offer cloud saves or upload scores to a leaderboard. Google’s separate processing for consent and ads is described below.
Optional rewarded test ads
The beta includes Google Mobile Ads and Google’s User Messaging Platform, or UMP, to manage advertising privacy choices. Outside tutorials, you can choose “Watch test ad for a hint”. One hint is granted only when Google reports that the reward was earned. Free hints remain available, so you do not have to watch an ad to get help.
Only Google test ads are requested, including in Release and TestFlight builds. There are no live ad requests, automatic ads, interstitial ad placements or additional mediation networks. We have not integrated Firebase Analytics. Test ads still communicate with Google and do not mean that no data is collected.
Information Google may process
Google’s iOS SDK data disclosure identifies information its advertising SDK may collect:
- IP address, which can indicate approximate location.
- Device identifiers, including app- or developer-scoped identifiers where available.
- Crash reports and performance information, such as launch time and energy use.
- Information about ads shown and interactions such as video views and taps.
Google describes uses including ad delivery and measurement, analytics, diagnostics and improving its advertising services. Google also explains its fraud and abuse prevention uses in How Google uses information from apps that use its services. The information processed depends on the SDK, device settings, privacy choices and serving mode. These disclosures apply to the Google services, even though we have not added a separate analytics service.
The app does not request location permission or show an App Tracking Transparency permission prompt, and our game code does not access Apple’s advertising identifier, IDFA. This does not prevent Google from receiving an IP address or other permitted identifiers, and does not make requests anonymous.
Consent and your choices
At app startup, UMP contacts Google to refresh consent information and determine which privacy choices are required. This check can happen even if you do not choose to watch an ad. UMP handles consent status and choices separately from your locally saved puzzle progress.
When you choose a test ad, the app asks UMP to display any required consent form before requesting the ad. It starts Google Mobile Ads and requests an ad only when UMP reports that requests are permitted. If the consent refresh fails, UMP may rely on a valid choice from an earlier session.
Where required, the consent form explains purposes and providers and lets you make your choices. You can revisit or withdraw consent through “Advertising privacy choices” in the game’s settings when UMP makes that option available. You can continue using free hints without selecting the ad option.
Permission to request an ad does not necessarily mean consent to personalised advertising. Depending on your choices and Google’s settings, non-personalised or limited ads may be permitted. Google’s limited ads guidance explains that IP addresses are still used for delivery and that programmatic limited ads may use local storage for fraud prevention. Declining personalisation does not necessarily stop all processing. This beta nevertheless requests only test ads.
Where consent is required for advertising-related processing or device storage, it is requested through the consent form. Google explains its purposes, legal grounds and your controls in its privacy policy. Selecting the optional ad is not a substitute for those privacy choices.
Google’s storage and international processing
Google’s SDKs can store consent choices and advertising-related information on the device. Resetting puzzle progress does not reset Google privacy choices or delete information Google has already received.
Google may process information outside the UK. Its privacy policy describes international processing and safeguards. Retention varies by data and purpose; see Google’s retention information. We do not set a single retention period for information held by Google or promise that deleting the game deletes that information. Google’s policies provide the relevant controls and contact routes.
Apple services and beta testing
Apple operates iOS, the App Store and TestFlight under its own privacy terms. Device diagnostics and backups are also subject to your Apple settings and Apple’s services.
If you install a beta through TestFlight, Apple processes beta-testing information, including crash logs, usage information, device and app details, and feedback. Apple shares these with us and, depending on how you were invited, may also share your name and email address. See TestFlight and privacy and Apple’s privacy policy. This is separate from analytics or tracking built into the game.
We use beta-testing information to investigate faults and improve Chroma Bloom, relying on our legitimate interest in testing and maintaining the game. We do not share information received through TestFlight with third parties. If we retain a copy of a report, we keep it only while needed to investigate and resolve the issue or meet a legal obligation. Apple controls retention within its own service.
When you contact us
If you request help or send feedback, we receive the information you choose to share, such as your contact details, message, device information and screenshots. Please avoid sending passwords or personal information that is not needed to explain the issue.
We use this information to respond, investigate problems and improve the game. Our lawful basis for handling support correspondence is our legitimate interest in providing support and resolving faults. We also use information where necessary to comply with legal obligations.
Support email is forwarded by Namecheap and received through Microsoft’s email service. These providers process message content and delivery information to deliver and store correspondence. Their services may process information outside the UK. See Namecheap’s privacy policy and Microsoft’s privacy statement for their processing and international-transfer safeguards. We do not sell support correspondence or use it for targeted advertising. We may disclose information where required by law.
Keeping and deleting information
Local progress remains on your device until you reset it or remove the app’s data. The game’s “Reset solo progress” option clears saved solo boards and completion marks; it keeps your nickname and preferences. Copies in device backups are managed through your backup service.
We keep support correspondence only for as long as needed to deal with your enquiry, follow up on an unresolved issue or meet a legal obligation. The appropriate period depends on the issue and whether there is an ongoing dispute or legal requirement. You can ask us to delete correspondence using the contact details above.
Your rights
Under applicable data-protection law, you may have rights to access, correct or erase personal information we hold, restrict or object to its use, and request a portable copy where that right applies. These rights depend on the circumstances. We cannot access or recover game progress that is stored only on your device.
Contact us to make a request. You can also complain to the UK Information Commissioner’s Office or your local data-protection authority.
Age eligibility for this beta
The current private beta is restricted to testers aged 18 and over. This age restriction applies to the private beta; the intended audience for a future public release has not yet been decided.
The game does not ask players to enter their name, email address or other contact details to play. This does not exclude the SDK processing described above in builds with test ads. A parent or guardian can contact us about a child’s privacy or personal information sent in a support message.
Changes to this policy
We will keep this policy at this address and change the “Last updated” date when it is revised. Changes to account features, online play or advertising, including any move from test ads to live ads, will be reflected here before they are introduced, with any notices or consent choices required for those features.