PRIVACY POLICY FOR OVERFLOW
Last updated: 27 September 2026
Overflow is a free-to-play puzzle game published by Cairn Games ("we", "our", "us"). This policy
explains exactly what the game collects, why, and who processes it.
We have tried to describe what the app actually does rather than list every service we might
hypothetically use. If something here is unclear, please contact us at the address at the bottom.
THE SHORT VERSION
• Overflow has no accounts, no sign-up, and no login of its own, and never asks for your name,
email address or phone number.
• It does not collect payment information. Overflow offers optional in-app purchases of
in-game coins, but Google Play processes every payment — we never see or store your card
details, billing address or any payment credentials.
• It shows optional rewarded adverts — short videos you choose to watch in exchange for
something, such as a rewind or bonus coins. There are no banner adverts and nothing that
interrupts play. Our advertising partners receive your device's advertising identifier.
• It does not sell your data.
• It does not collect your location, contacts, photos, files, messages, or microphone/camera input.
• What it does collect is gameplay statistics, crash reports, and — only if you choose to sign in to
Google Play Games — your saved game progress.
WHAT WE COLLECT AND WHY
1. Gameplay analytics (Google Analytics for Firebase)
When you play a level, the game records the outcome so we can tell which levels are too hard, too
easy, or too slow. Each event contains only:
• which level number it was, and its name
• how many stars were earned, the score, and how much of the board was filled
• how long the attempt took, in seconds
• whether the level was completed or failed
Firebase also automatically attaches technical information such as an app instance identifier,
device model, operating system version, and approximate country. It does not attach your name or
email address.
Why: to balance level difficulty and improve the game. We do not use this to target advertising.
2. Crash and error reports (Firebase Crashlytics)
If the game crashes or hits an error, we receive a report containing the error and its stack trace,
plus the device model, operating system version, and app version.
Why: to find and fix bugs. Nothing in these reports identifies you personally.
3. Saved game progress (Google Play Games Services) — optional
If you sign in to Google Play Games, your progress is stored in Google's Saved Games service so it
can be restored after a reinstall or on a new device. The saved data contains only game state: coin
balance, per-level scores and star ratings, owned and selected cosmetic items, powerup inventory,
tutorial progress, daily-login streak, and your sound settings.
Signing in also means Google Play Games provides the game with a player identifier associated with
your Google account.
Why: so you don't lose your progress. This is optional — declining sign-in leaves the game
fully playable, with progress saved only on your device.
4. Game configuration downloads
The game downloads its level and shop data from our hosting provider (Cloudflare) at startup. Like
any internet request, this involves your device's IP address reaching that server, where it may
appear in standard server logs. We do not use these requests to build a profile of you.
5. Data stored only on your device
Your game progress, settings, and preferences are also stored locally on your device. This never
leaves your device unless you have signed in to Google Play Games (see section 3). Uninstalling the
app removes it.
WHO PROCESSES YOUR DATA
We use the following third-party services, which act as data processors on our behalf. Each has its
own privacy policy governing how it handles data:
• Google Analytics for Firebase — Gameplay analytics
https://firebase.google.com/support/privacy
• Firebase Crashlytics — Crash and error reporting
https://firebase.google.com/support/privacy
• Google Play Games Services — Optional cloud save and sign-in
https://policies.google.com/privacy
• Cloudflare — Hosting game configuration files
https://www.cloudflare.com/privacypolicy/
• Unity LevelPlay (ironSource) — Advert mediation, and serves adverts itself
https://unity.com/legal/game-player-and-app-user-privacy-policy
• Unity Ads — Serves rewarded adverts
https://unity.com/legal/game-player-and-app-user-privacy-policy
• Google AdMob — Serves rewarded adverts
https://policies.google.com/technologies/partner-sites
• Google Play Billing — Processes in-app purchases
https://policies.google.com/privacy
We do not sell your data, and we do not share it with any third party beyond the processors
listed above. Three of those are advertising companies: LevelPlay decides which advert to show
and can serve its own, while Unity Ads and AdMob compete to fill each request. Each receives your
advertising identifier when an advert is requested.
DATA RETENTION
Analytics and crash data are retained according to Google's Firebase retention settings for our
project. Cloud saved-game data is retained by Google Play Games for as long as you keep the game
associated with your Google Play Games profile.
YOUR CHOICES AND RIGHTS
• Cloud save: decline the Google Play Games sign-in prompt, and no progress data leaves your
device.
• Local data: uninstalling Overflow deletes everything stored on your device.
• Cloud saved games: you can delete these from your Google Play Games account settings.
• Analytics and crash data: contact us at the address below and we will delete data associated
with your app instance where we are able to identify it.
Full step-by-step instructions, and what is deleted versus kept, are on our
data deletion page.
https://sites.google.com/view/cairngames-overflow/data-deletion
If you are in the UK or the EEA, you have rights under UK GDPR / GDPR including access, correction,
deletion, and objection. Our lawful basis for analytics and crash reporting is legitimate interest in
maintaining and improving the game; for cloud save it is your consent, given by signing in.
CHILDREN
Overflow is not directed at children under 13, and we do not knowingly collect personal information
from children. If you believe a child has provided us with personal information, contact us and we
will delete it.
IN-APP PURCHASES
Overflow offers optional in-app purchases of in-game coins. Payments are processed entirely by
Google Play — we never see or store your card details, billing address, or any payment
credentials. We receive confirmation that a purchase completed, and which product it was, so
the coins can be credited to your game.
Why: to deliver what you bought, and to support refunds and purchase restoration.
Google's handling of the payment itself is covered by the Google Play Terms of Service and
Google's own privacy policy.
Nothing in Overflow is locked behind a purchase. Every coin can be earned by playing.
ADVERTISING
Overflow shows optional rewarded video adverts — you choose to watch one in exchange for an
in-game benefit, such as an extra rewind or bonus coins. We never show adverts you haven't opted
into, and there are no banners or adverts between levels.
To serve these, our advertising partners receive your device's advertising identifier and basic
technical information about your device. This identifier can be reset or blocked at any time in
your device settings (Settings ▸ Google ▸ Ads on most Android devices), and you can opt out of
personalised advertising there.
Why: advertising revenue is what keeps Overflow free to play.
CHANGES TO THIS POLICY
We may update this policy as the game changes. Advertising and in-app purchases were previously
listed here as planned; both arrived in version 1.0.6, and this policy was updated in the same
release that introduced them rather than afterwards.
CONTACT
Questions about this policy or your data: cairngames@gmail.com