NoldCore is the provider of Worldcoil and controls the data processing described here. Stores and SDK providers may also process data under their own policies.
Privacy Policy. Clear by design.
This Privacy Policy explains how NoldCore handles personal data in Worldcoil, its legal and support pages, and related services.
Summary
Worldcoil stores game progress, settings and purchase entitlements locally on your device. It does not use Unity Cloud Save.
Google AdMob serves interstitial and optional rewarded ads when ad requests are permitted. Firebase Analytics collects usage data only after an explicit analytics opt-in. Android purchases use Google Play; Apple purchases require a future iOS release.
This policy applies to Worldcoil players and visitors to these Worldcoil legal and support pages wherever the game and pages are available.
1. Controller and Contact
Data Controller
NoldCore
Owner: Christof Ewald Nolden
Franz-von-Sales-Straße 4
52531 Übach-Palenberg
Germany
NoldCore decides why and how it processes data for Worldcoil and related support. Third-party providers may separately control their own processing as described in their policies.
Contact
Support: Contact Support
Privacy requests: Submit a Privacy Request
2. Scope of This Policy
This Privacy Policy applies to:
- The Worldcoil mobile game.
- Worldcoil legal and support pages hosted on GitHub Pages. NoldCore does not operate its own website visitor database or website analytics.
- Worldcoil support and privacy communications with NoldCore.
- Local save games, Firebase Analytics, Google AdMob advertising and consent management, and in-app purchases as described below.
This policy does not replace the privacy policies of Google, Apple, Unity or GitHub. Those providers may process data under their own terms and privacy policies.
3. Personal Data We May Process
| Category | Examples | Purpose |
|---|---|---|
| Game progress and gameplay data | Save-game state, unlocked levels, scores, settings and locally stored purchase entitlements. UMP stores consent preferences on the device. | To run the game, retain progress and settings on this device, and restore purchased content from the platform store. |
| Device and technical data | Device model, operating system, app version, language, region, IP-derived coarse location, crash or diagnostic data, advertising identifiers where available and permitted. | To operate the app, fix bugs, improve stability, prevent abuse, show appropriate consent choices, and comply with platform rules. |
| Analytics data | After analytics opt-in: app instance identifier, app/device and session data, level starts and selections, run duration, score and end reason, continue offers and results, level unlocks and shop opens. Firebase may also record automatic events such as first open and sessions. | To measure Worldcoil usage and improve gameplay and features. Worldcoil does not log its own purchase-revenue or ad-impression events to Firebase. |
| Advertising data | Ad views, rewarded ad completion, ad interaction events, device identifiers, advertising ID, consent status, approximate location, frequency capping and measurement data. | To show interstitial and rewarded ads, grant in-game rewards after completed rewarded ads, prevent fraud, measure ad performance, and support personalized or non-personalized ads depending on consent and settings. |
| Purchase data | Product and store IDs, transaction status, store receipt or purchase token used temporarily for local validation, and a hash of a verified transaction identifier stored with the local entitlement. | To validate, deliver and restore the two non-consumable purchases and prevent duplicate grants. Worldcoil does not save raw receipts or purchase tokens in its save data. |
| Support and communication data | Email address, message content, attachments you send, support history, technical details provided by you. | To respond to support requests, privacy requests, bug reports, and business inquiries. |
4. Purposes and Legal Bases
Where GDPR or UK GDPR applies
NoldCore relies on the following legal bases, depending on the feature and context:
- Contract performance — to provide Worldcoil, retain local progress, deliver and restore in-app purchases, and provide requested support.
- Consent — for Firebase Analytics and for advertising processing where consent is required.
- Legitimate interests — for basic security, fraud prevention, debugging and business administration where permitted by law.
- Legal obligation — for accounting, tax, consumer protection, legal claims, regulatory duties, and responding to lawful requests.
Consent withdrawal
You can change your UMP advertising and analytics choices at any time in Worldcoil: open Settings, then Privacy Settings. You can also contact NoldCore about privacy requests.
If you withdraw analytics consent, Worldcoil disables future Firebase Analytics collection. Previously collected data is not automatically deleted; contact NoldCore to request deletion where applicable. Advertising choices may change the ads shown or whether ad requests are permitted.
5. Local Saves
Local save games
Worldcoil stores progress, unlocked levels, scores, settings and purchase entitlements locally on your device. The app has no NoldCore account or Unity Cloud Save integration. UMP stores your privacy choices locally for use by its consent flow.
Local game data generally remains until you delete the app or clear its data, subject to device or platform backups. Purchased entitlements can be restored from the relevant platform store where available.
Where data is stored
Worldcoil does not upload its save game to a NoldCore or Unity cloud save service. The device operating system may separately back up app data under your platform settings.
6. Interstitial & Rewarded Ads, AdMob and Firebase Analytics
Interstitial & Rewarded Ads / Google AdMob
Worldcoil may show interstitial ads between gameplay sessions and offers an optional rewarded ad to continue a run. The continue reward is granted only after the rewarded ad reports a successful reward. The ad-free purchase removes interstitial ads, but rewarded ads remain optional.
Ads may be provided by Google AdMob and its advertising partners. Depending on your region, consent choices, device settings, and the availability of identifiers, ads may be personalized or non-personalized.
- Personalized ads may use identifiers, approximate location, app activity, ad interactions, and other signals to select ads that may be more relevant to you.
- Non-personalized ads are selected using more limited signals such as approximate location, app context, language, and basic device information, but may still use identifiers for fraud prevention, frequency capping, and measurement where allowed.
- Ad impressions and interactions, including interstitial ads and rewarded ad completion data, may be processed for ad delivery, measurement, fraud prevention, and granting an in-game reward after a completed rewarded ad.
Google privacy information: Google Privacy Policy
Firebase Analytics
Worldcoil uses Google Analytics for Firebase to measure usage and improve gameplay and features, but collection is disabled by default and starts only if you explicitly grant the analytics option in the Google UMP privacy message.
Firebase may process an app instance identifier, device and app information, approximate region, the Android advertising ID where available and permitted, and automatic app/session events. Worldcoil sends level starts, selections and unlocks; run score, duration, end reason and continue count; rewarded-continue offers and outcomes; and shop opens. Worldcoil does not send names, email addresses, payment card details, raw purchase receipts or purchase tokens as custom analytics parameters. It does not send its own purchase-revenue or ad-impression events; automatic events from linked Google services may still appear after consent. Any future use of the iOS advertising identifier (IDFA) requires a separate iOS tracking decision and, where required, Apple's tracking permission.
Firebase privacy information: Privacy and Security in Firebase
7. Consent and Privacy Settings
Google User Messaging Platform (UMP) displays the applicable privacy message for your region and records your choices. The published EU message offers consent, refusal and an option to manage choices; a US state message may offer different choices. Worldcoil requests ads only when UMP reports that ad requests are permitted. Refusing personalized ads does not necessarily prevent all advertising: Google may still serve limited ads where permitted.
Firebase Analytics is off by default. Worldcoil enables it only when UMP's analytics_storage value is explicitly granted. A missing, refused or unreadable analytics choice keeps it off. At each app start and after you change UMP choices, Worldcoil rechecks the choice and disables future analytics collection when consent is withdrawn. Open Settings > Privacy Settings to review or change the available choices. Depending on region and platform, these may include:
- Accept or reject advertising consent and manage advertising purposes and partners.
- Grant or refuse analytics storage, which controls Firebase Analytics collection in Worldcoil.
- Reset or restrict your device advertising identifier.
- Request access, deletion, correction, restriction, objection, or portability of applicable personal data.
Some processing that is strictly necessary for security, fraud prevention, purchase delivery, app functionality, or legal compliance may continue even if optional consent is withdrawn.
8. In-App Purchases
Apple App Store and Google Play
Worldcoil currently offers two non-consumable purchases on Android through Google Play: Level Pack 01 and Ad Free. The level pack unlocks five premium levels. Ad Free suppresses interstitial ads but not optional rewarded ads. Apple App Store purchases would apply only if a future iOS version is released and its products are configured.
Unity IAP passes product and transaction information, including a receipt or purchase token, to Worldcoil for local purchase validation. Worldcoil stores the product and entitlement plus a SHA-256 hash of the verified transaction identifier in its local save; raw receipts, tokens and JWS data are not stored there or logged by Worldcoil. Store services remain responsible for payment and account data.
No own payment card processing
NoldCore does not directly collect, store, or process your payment card number, bank account details, Apple ID password, Google account password, or comparable store payment credentials.
Refunds, chargebacks, payment authentication, store-collected taxes and billing support are handled by the relevant store under its own terms and privacy policy.
9. Third-Party SDKs and Service Providers
The data categories depend on the device, platform, region, consent choices and enabled features.
| Provider / SDK | Purpose | Data categories | Status |
|---|---|---|---|
| Google AdMob / Google Mobile Ads SDK Google Privacy Policy |
Interstitial and rewarded ads, ad delivery, ad measurement, fraud prevention, frequency capping, personalized and non-personalized advertising. | IP address and approximate location derived from it, device and advertising identifiers where available, ad and app interactions, diagnostics, and consent signals. | Integrated; ad requests depend on the consent state and app configuration. |
| Google User Messaging Platform (UMP) Google Privacy Policy |
Display privacy messages, record and manage advertising consent choices, and provide access to privacy options. | Consent choices and related technical information needed to determine and display applicable privacy messages. | Integrated with Google Mobile Ads. |
| Unity In-App Purchasing (Unity IAP 5.4.3) Unity Game Player and App User Privacy Policy |
Connect Worldcoil to the platform store, deliver purchases, validate transactions locally, and restore entitlements. | Product and transaction information, receipts or tokens used transiently for validation, and technical data needed by Unity IAP. | Integrated. Two non-consumable products are configured for Google Play; iOS store products are not yet configured. |
| Google Play / Apple App Store Google Privacy Policy · Apple Privacy Policy |
Process payments and provide purchase, refund, and restoration information to the game. | Store account and payment information held by the platform; product IDs, transaction status, receipts or purchase tokens, and entitlement information shared with the game. | Google Play is used for Android purchases and internal testing. Apple App Store purchases require a future iOS setup. |
| Firebase Analytics / Google Analytics for Firebase Privacy and Security in Firebase |
Measure sessions, gameplay and feature usage to improve Worldcoil after explicit analytics opt-in. | App instance identifier, device and app information, approximate region, Android advertising ID where available and permitted, automatic app/session events, and the Worldcoil gameplay events described above. Linked Google services may add automatic events. | Integrated and tested on Android. Collection is disabled by default and follows the UMP analytics choice. |
11. Your Privacy Rights
EU / EEA / UK / Switzerland
Subject to legal conditions and exceptions, you may have the right to:
- Access your personal data.
- Correct inaccurate or incomplete data.
- Delete personal data.
- Restrict processing.
- Object to processing based on legitimate interests or direct marketing.
- Receive data portability where applicable.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with a competent data protection authority.
United States / California and similar state laws
Depending on your state and whether the relevant law applies to NoldCore, you may have rights such as:
- Know or access categories and specific pieces of personal information.
- Request deletion of personal information.
- Request correction of inaccurate personal information.
- Opt out of sale, sharing, or targeted advertising where applicable.
- Limit use of sensitive personal information where applicable.
- Not be discriminated against for exercising privacy rights.
NoldCore does not knowingly sell personal information for money. Some advertising or analytics activities may be considered “sharing,” “targeted advertising,” or “sale” under certain US privacy laws. Available opt-out choices will be provided through in-game privacy settings, device settings, or by contacting NoldCore.
Canada
Depending on the applicable Canadian privacy law, you may have the right to access your personal information, request correction, withdraw consent subject to legal or contractual restrictions, and challenge NoldCore’s compliance with privacy obligations.
Brazil
Where Brazil’s LGPD applies, you may have rights such as confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or excessive data, portability, information about sharing, withdrawal of consent, and review of certain automated decisions where applicable.
How to exercise your rights
Send your request through the privacy request contact link. NoldCore may need to verify your identity and may ask for information required to locate your data, such as your player ID, app version, platform, approximate date of use, or purchase transaction details.
NoldCore will respond within the time required by applicable law. Some requests may be refused or limited where legal exceptions apply, for example for fraud prevention, security, legal claims, accounting records, or where NoldCore cannot verify the request.
12. Children’s Privacy
NoldCore games are not intended for children under 13 years of age, unless a specific game, store page, or age rating clearly states otherwise and appropriate child-protection measures are implemented.
NoldCore does not knowingly collect personal data from children under 13 without appropriate parental consent where required by law. If NoldCore learns that it has collected personal data from a child in a way that violates applicable law, NoldCore will take reasonable steps to delete or disable that data as required.
Parents or guardians who believe that a child has provided personal data to NoldCore can contact NoldCore through the privacy request contact link.
For regions with higher digital-consent ages or additional child privacy rules, NoldCore will apply the relevant local requirements where legally required.
13. Security
NoldCore uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. Measures may include platform security controls, access restrictions, encrypted transport where supported, secure account practices, and limiting access to data to what is necessary.
No app, website, cloud service, device, or network can be guaranteed to be 100% secure. You are responsible for keeping your device, platform account, and email account secure.
14. Changes to This Privacy Policy
NoldCore may update this Privacy Policy from time to time, for example when new games, features, SDKs, advertising partners, analytics tools, cloud services, or legal requirements change.
The “Last updated” date at the top of this page indicates when the policy was last changed. Material changes may be communicated in the game, on the website, through platform notices, or by other appropriate means where required.