Privacy-first documentation

Privacy Policy. Clear by design.

This Privacy Policy explains how NoldCore handles personal data in Worldcoil, its legal and support pages, and related services.

Summary

Controller

NoldCore is the provider of Worldcoil and controls the data processing described here. Stores and SDK providers may also process data under their own policies.

Game data

Worldcoil stores game progress, settings and purchase entitlements locally on your device. It does not use Unity Cloud Save.

Ads, analytics and purchases

Google AdMob serves interstitial and optional rewarded ads when ad requests are permitted. Firebase Analytics collects usage data only after an explicit analytics opt-in. Android purchases use Google Play; Apple purchases require a future iOS release.

Last updated: September 30, 2026

This policy applies to Worldcoil players and visitors to these Worldcoil legal and support pages wherever the game and pages are available.

1. Controller and Contact

Data Controller

NoldCore
Owner: Christof Ewald Nolden

Franz-von-Sales-Straße 4
52531 Übach-Palenberg
Germany

NoldCore decides why and how it processes data for Worldcoil and related support. Third-party providers may separately control their own processing as described in their policies.

2. Scope of This Policy

This Privacy Policy applies to:

  • The Worldcoil mobile game.
  • Worldcoil legal and support pages hosted on GitHub Pages. NoldCore does not operate its own website visitor database or website analytics.
  • Worldcoil support and privacy communications with NoldCore.
  • Local save games, Firebase Analytics, Google AdMob advertising and consent management, and in-app purchases as described below.

This policy does not replace the privacy policies of Google, Apple, Unity or GitHub. Those providers may process data under their own terms and privacy policies.

3. Personal Data We May Process

Category Examples Purpose
Game progress and gameplay data Save-game state, unlocked levels, scores, settings and locally stored purchase entitlements. UMP stores consent preferences on the device. To run the game, retain progress and settings on this device, and restore purchased content from the platform store.
Device and technical data Device model, operating system, app version, language, region, IP-derived coarse location, crash or diagnostic data, advertising identifiers where available and permitted. To operate the app, fix bugs, improve stability, prevent abuse, show appropriate consent choices, and comply with platform rules.
Analytics data After analytics opt-in: app instance identifier, app/device and session data, level starts and selections, run duration, score and end reason, continue offers and results, level unlocks and shop opens. Firebase may also record automatic events such as first open and sessions. To measure Worldcoil usage and improve gameplay and features. Worldcoil does not log its own purchase-revenue or ad-impression events to Firebase.
Advertising data Ad views, rewarded ad completion, ad interaction events, device identifiers, advertising ID, consent status, approximate location, frequency capping and measurement data. To show interstitial and rewarded ads, grant in-game rewards after completed rewarded ads, prevent fraud, measure ad performance, and support personalized or non-personalized ads depending on consent and settings.
Purchase data Product and store IDs, transaction status, store receipt or purchase token used temporarily for local validation, and a hash of a verified transaction identifier stored with the local entitlement. To validate, deliver and restore the two non-consumable purchases and prevent duplicate grants. Worldcoil does not save raw receipts or purchase tokens in its save data.
Support and communication data Email address, message content, attachments you send, support history, technical details provided by you. To respond to support requests, privacy requests, bug reports, and business inquiries.

5. Local Saves

Local save games

Worldcoil stores progress, unlocked levels, scores, settings and purchase entitlements locally on your device. The app has no NoldCore account or Unity Cloud Save integration. UMP stores your privacy choices locally for use by its consent flow.

Local game data generally remains until you delete the app or clear its data, subject to device or platform backups. Purchased entitlements can be restored from the relevant platform store where available.

Where data is stored

Worldcoil does not upload its save game to a NoldCore or Unity cloud save service. The device operating system may separately back up app data under your platform settings.

6. Interstitial & Rewarded Ads, AdMob and Firebase Analytics

Interstitial & Rewarded Ads / Google AdMob

Worldcoil may show interstitial ads between gameplay sessions and offers an optional rewarded ad to continue a run. The continue reward is granted only after the rewarded ad reports a successful reward. The ad-free purchase removes interstitial ads, but rewarded ads remain optional.

Ads may be provided by Google AdMob and its advertising partners. Depending on your region, consent choices, device settings, and the availability of identifiers, ads may be personalized or non-personalized.

  • Personalized ads may use identifiers, approximate location, app activity, ad interactions, and other signals to select ads that may be more relevant to you.
  • Non-personalized ads are selected using more limited signals such as approximate location, app context, language, and basic device information, but may still use identifiers for fraud prevention, frequency capping, and measurement where allowed.
  • Ad impressions and interactions, including interstitial ads and rewarded ad completion data, may be processed for ad delivery, measurement, fraud prevention, and granting an in-game reward after a completed rewarded ad.

Google privacy information: Google Privacy Policy

Firebase Analytics

Worldcoil uses Google Analytics for Firebase to measure usage and improve gameplay and features, but collection is disabled by default and starts only if you explicitly grant the analytics option in the Google UMP privacy message.

Firebase may process an app instance identifier, device and app information, approximate region, the Android advertising ID where available and permitted, and automatic app/session events. Worldcoil sends level starts, selections and unlocks; run score, duration, end reason and continue count; rewarded-continue offers and outcomes; and shop opens. Worldcoil does not send names, email addresses, payment card details, raw purchase receipts or purchase tokens as custom analytics parameters. It does not send its own purchase-revenue or ad-impression events; automatic events from linked Google services may still appear after consent. Any future use of the iOS advertising identifier (IDFA) requires a separate iOS tracking decision and, where required, Apple's tracking permission.

Firebase privacy information: Privacy and Security in Firebase

8. In-App Purchases

Apple App Store and Google Play

Worldcoil currently offers two non-consumable purchases on Android through Google Play: Level Pack 01 and Ad Free. The level pack unlocks five premium levels. Ad Free suppresses interstitial ads but not optional rewarded ads. Apple App Store purchases would apply only if a future iOS version is released and its products are configured.

Unity IAP passes product and transaction information, including a receipt or purchase token, to Worldcoil for local purchase validation. Worldcoil stores the product and entitlement plus a SHA-256 hash of the verified transaction identifier in its local save; raw receipts, tokens and JWS data are not stored there or logged by Worldcoil. Store services remain responsible for payment and account data.

No own payment card processing

NoldCore does not directly collect, store, or process your payment card number, bank account details, Apple ID password, Google account password, or comparable store payment credentials.

Refunds, chargebacks, payment authentication, store-collected taxes and billing support are handled by the relevant store under its own terms and privacy policy.

9. Third-Party SDKs and Service Providers

The data categories depend on the device, platform, region, consent choices and enabled features.

Provider / SDK Purpose Data categories Status
Google AdMob / Google Mobile Ads SDK
Google Privacy Policy
Interstitial and rewarded ads, ad delivery, ad measurement, fraud prevention, frequency capping, personalized and non-personalized advertising. IP address and approximate location derived from it, device and advertising identifiers where available, ad and app interactions, diagnostics, and consent signals. Integrated; ad requests depend on the consent state and app configuration.
Google User Messaging Platform (UMP)
Google Privacy Policy
Display privacy messages, record and manage advertising consent choices, and provide access to privacy options. Consent choices and related technical information needed to determine and display applicable privacy messages. Integrated with Google Mobile Ads.
Unity In-App Purchasing (Unity IAP 5.4.3)
Unity Game Player and App User Privacy Policy
Connect Worldcoil to the platform store, deliver purchases, validate transactions locally, and restore entitlements. Product and transaction information, receipts or tokens used transiently for validation, and technical data needed by Unity IAP. Integrated. Two non-consumable products are configured for Google Play; iOS store products are not yet configured.
Google Play / Apple App Store
Google Privacy Policy · Apple Privacy Policy
Process payments and provide purchase, refund, and restoration information to the game. Store account and payment information held by the platform; product IDs, transaction status, receipts or purchase tokens, and entitlement information shared with the game. Google Play is used for Android purchases and internal testing. Apple App Store purchases require a future iOS setup.
Firebase Analytics / Google Analytics for Firebase
Privacy and Security in Firebase
Measure sessions, gameplay and feature usage to improve Worldcoil after explicit analytics opt-in. App instance identifier, device and app information, approximate region, Android advertising ID where available and permitted, automatic app/session events, and the Worldcoil gameplay events described above. Linked Google services may add automatic events. Integrated and tested on Android. Collection is disabled by default and follows the UMP analytics choice.

10. Sharing, International Transfers and Retention

Sharing

Worldcoil uses the providers listed above to serve permitted ads, process consent, collect opted-in analytics, deliver purchases and respond to support. GitHub hosts this informational website. The game does not use Unity Cloud Save.

NoldCore does not sell your direct contact details to data brokers.

International transfers

Data may be processed in Germany, the European Union, the United Kingdom, the United States, Canada, and other countries where NoldCore, platform providers, or service providers operate.

Where required, NoldCore relies on appropriate safeguards such as adequacy decisions, standard contractual clauses, data processing agreements, or comparable legal mechanisms.

Website hosting (GitHub Pages)

NoldCore's informational website is hosted as a static site on GitHub Pages. NoldCore does not collect visitor information through its own website analytics or maintain its own visitor database. However, GitHub states that it logs and stores visitors' IP addresses for security purposes when GitHub Pages sites are accessed. For details on GitHub's processing and retention, please refer to the GitHub Privacy Statement.

Retention

NoldCore keeps personal data only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Examples: local saves generally remain on the device until the user deletes them or removes the app, subject to device and platform backup behavior; support emails are retained as needed to process the request and any applicable legal obligations. Purchase-related information, where received by NoldCore, is kept only as needed to deliver and restore purchases or meet applicable legal obligations.

Where third-party services such as Google, Apple or Unity independently process data, their applicable retention rules also apply. Their retention periods depend on the relevant service and configuration. For processing controlled by NoldCore, retention is determined by the purpose of processing and applicable legal retention requirements.

11. Your Privacy Rights

EU / EEA / UK / Switzerland

Subject to legal conditions and exceptions, you may have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Delete personal data.
  • Restrict processing.
  • Object to processing based on legitimate interests or direct marketing.
  • Receive data portability where applicable.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with a competent data protection authority.

United States / California and similar state laws

Depending on your state and whether the relevant law applies to NoldCore, you may have rights such as:

  • Know or access categories and specific pieces of personal information.
  • Request deletion of personal information.
  • Request correction of inaccurate personal information.
  • Opt out of sale, sharing, or targeted advertising where applicable.
  • Limit use of sensitive personal information where applicable.
  • Not be discriminated against for exercising privacy rights.

NoldCore does not knowingly sell personal information for money. Some advertising or analytics activities may be considered “sharing,” “targeted advertising,” or “sale” under certain US privacy laws. Available opt-out choices will be provided through in-game privacy settings, device settings, or by contacting NoldCore.

Canada

Depending on the applicable Canadian privacy law, you may have the right to access your personal information, request correction, withdraw consent subject to legal or contractual restrictions, and challenge NoldCore’s compliance with privacy obligations.

Brazil

Where Brazil’s LGPD applies, you may have rights such as confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or excessive data, portability, information about sharing, withdrawal of consent, and review of certain automated decisions where applicable.

How to exercise your rights

Send your request through the privacy request contact link. NoldCore may need to verify your identity and may ask for information required to locate your data, such as your player ID, app version, platform, approximate date of use, or purchase transaction details.

NoldCore will respond within the time required by applicable law. Some requests may be refused or limited where legal exceptions apply, for example for fraud prevention, security, legal claims, accounting records, or where NoldCore cannot verify the request.

12. Children’s Privacy

NoldCore games are not intended for children under 13 years of age, unless a specific game, store page, or age rating clearly states otherwise and appropriate child-protection measures are implemented.

NoldCore does not knowingly collect personal data from children under 13 without appropriate parental consent where required by law. If NoldCore learns that it has collected personal data from a child in a way that violates applicable law, NoldCore will take reasonable steps to delete or disable that data as required.

Parents or guardians who believe that a child has provided personal data to NoldCore can contact NoldCore through the privacy request contact link.

For regions with higher digital-consent ages or additional child privacy rules, NoldCore will apply the relevant local requirements where legally required.

13. Security

NoldCore uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. Measures may include platform security controls, access restrictions, encrypted transport where supported, secure account practices, and limiting access to data to what is necessary.

No app, website, cloud service, device, or network can be guaranteed to be 100% secure. You are responsible for keeping your device, platform account, and email account secure.

14. Changes to This Privacy Policy

NoldCore may update this Privacy Policy from time to time, for example when new games, features, SDKs, advertising partners, analytics tools, cloud services, or legal requirements change.

The “Last updated” date at the top of this page indicates when the policy was last changed. Material changes may be communicated in the game, on the website, through platform notices, or by other appropriate means where required.

15. Contact