SpotVeyra Privacy Policy
Last updated: October 28, 2026
Data SpotVeyra uses
For guest play, SpotVeyra creates a random player identifier and stores progress, settings, game sessions, level ratings, and bounded first-party product events such as app opens, gameplay milestones, acquisition category, and share outcomes. It does not store raw referrer URLs or free-form analytics text. If you save your profile, SpotVeyra also stores your verified email and the identifier of the connected sign-in provider. When purchases are enabled, product details, transaction status, and granted access rights are also stored.
On Android, when country analytics is enabled, the game may send a two-letter country code based on the SIM card or mobile network. We use it to understand which countries players come from and improve the game. This does not collect GPS coordinates or precise location and does not request location access. If the country is unavailable or collection is disabled, no country code is sent.
Connecting Google Play Games is optional. SpotVeyra verifies and stores your Play Games player identifier and display name to link your profile. Supported achievements, scores and gameplay statistics may be synchronized with Google Play Games, whose profile visibility settings and privacy policy also apply.
If you enable public community visibility, other players can see your chosen public nickname, leaderboard position, support points, supporter tier, frame and selected badges. Your email, internal account identifier and purchase orders are not included in that public leaderboard. You can turn public visibility off in your profile.
When you choose Send report, we receive your optional description and a filtered diagnostic report: app/build versions, connection state, any scene reference and recent error categories with times. The report excludes account/player identifiers, cookies, purchase tokens, request bodies and raw error logs. Please do not put sensitive information in the description. Reports are retained in the server support journal for 30 days. The local copy lets you retry with the same report number for 24 hours, measured by the device clock. An expired copy is removed when you next open the report; you can also remove it by starting a new report. Copies you export are under your control.
Why we use this data
The data is used to operate and improve the game: restoring progress, syncing between devices, protecting sign-in and transactions, granting purchased content, supporting users, and measuring acquisition, activation, retention, and optional sharing. SpotVeyra does not sell personal data or use an advertising identifier.
Protected Android operations use Google Play Integrity to verify the application, device and Play licensing signals. Google processes a request hash and returns security verdicts; SpotVeyra binds verification to a temporary challenge and uses the result to protect progress, rewards and purchases. Raw integrity tokens are not saved in the challenge record or application logs.
Sharing and processors
Data may be processed by infrastructure, email delivery, official Google sign-in, and Google Play Billing providers only to the extent required for the relevant function. Google receives data from its authentication and purchase-processing flows under its own privacy policy. During a chargeback review, SpotVeyra may send Google only a dispute preference and a bounded purchase-consumption percentage, without email, IP address, location, or free-form activity history.
Gameplay images and previews are delivered through Cloudflare Workers and R2. Cloudflare processes network request data, including the IP address and requested image URL, to deliver and protect this content under its privacy policy. Infrastructure-provider logs have their own retention; they are separate from SpotVeyra profile deletion and the application retention periods described below.
Storage and protection
Data is sent over HTTPS. Browser sign-in uses session cookies, and changes are protected against forged requests. Product events are kept for up to 90 days and deleted with your profile. Account data stays until deletion, subject to law and dispute resolution. Guest profiles are deleted after all linked sessions are removed and at least 45 days of inactivity. Any required retention is disclosed to you.
After deletion, anonymous abuse-prevention counters may remain. They do not link to your account or session and cannot restore progress.
Backup and restore
Guest progress stays in this app or browser. It may be lost after uninstalling, clearing app data or losing the device. Android system backups are disabled. On another device, only progress already synced to a linked SpotVeyra account can be restored; unsynced moves cannot. Downloaded scenes must be downloaded again.
Your choices and deletion
From your profile, you can change your name and settings, reset game progress, sign out, or permanently delete your account and associated data. A deletion request is also available on a separate web page.
Contact
The data controller is the SpotVeyra developer listed in the Google Play app listing. For privacy questions, write to: