Candy Flash Privacy Policy
Effective date: September 15, 2026Candy Flash is a match-three puzzle game published by neonlabgames ("we", "us"). This policy explains what information the game and the services built into it collect, how that information is used, and the choices you have.
- There is no account and no sign-up. We never ask for your name, email address, contacts, photos or precise location.
- Your game progress is stored only on your device.
- The game shows ads through Google AdMob (some ads are delivered by Unity Ads through AdMob) and uses Google Firebase Analytics. These services collect device and usage information, including your device's advertising ID.
- In the EEA, the UK, Switzerland and US states with privacy laws, you are asked for your ad choices and can change them at any time in Settings → Privacy choices.
Information stored on your device
Your progress — unlocked levels, stars, high scores, achievements, coins, boosters, Candy Garden blooms, daily reward and mission status — and your settings are saved in the app's storage on your device. This information is not sent to us. You can delete it at any time with Settings → Reset progress, by clearing the app's storage, or by uninstalling the game.
Information collected by third-party services
Candy Flash includes the services below. They collect information directly from your device under their own privacy policies. We receive only aggregated reports from them and cannot use them to identify you.
Google AdMob — advertising
AdMob collects your device's advertising ID, your IP address (used to estimate an approximate location), device and app information such as model, operating system version, language and app version, and ad interaction data such as which ads were shown, tapped or completed. It uses this to show and measure ads, to personalise ads where you have allowed it, and to prevent fraud.
Unity Ads — advertising through AdMob mediation
Some ads are delivered by Unity Ads on AdMob's behalf. When that happens, Unity may collect similar information: advertising ID, device information, IP address and ad interactions.
Google Firebase Analytics — game analytics
Firebase Analytics collects an app instance identifier, gameplay events (for example levels started and completed, boosters used, tutorial progress and ads offered), device and app information, and an approximate location estimated from your IP address. We use it to understand how the game is played and to improve it.
More detail is available in the Google Privacy Policy, in how Google uses information from apps that use its services, in Firebase privacy and security, and in the Unity game player privacy policy.
Ads and your choices
- EEA, UK and Switzerland: the first time you open the game you are shown a consent message from Google's certified consent tool. You can agree to personalised ads or decline them. If you decline, you may still see ads that are not personalised.
- US states with privacy laws: some state laws treat sharing an advertising ID with ad networks for targeted advertising as a "sale" or "sharing" of personal information. You can opt out.
- Change your mind at any time: open Settings → Privacy choices. That option appears wherever these rules apply to you.
- Everywhere: you can reset or delete your advertising ID in your device's settings (on most Android phones under Settings → Privacy → Ads).
Watching an ad is never required to play. Rewarded ads are optional, and interstitial ads are limited and never shown during an active board.
We do not sell your personal information for money.
Legal bases
Where the GDPR or UK GDPR applies, personalised advertising and the related use of your device's storage rely on your consent. Keeping the game running, measuring how it performs, showing non-personalised ads and preventing ad fraud rely on our legitimate interest in operating and funding a free game.
How long information is kept
Information on your device stays there until you reset your progress, clear the app's storage or uninstall the game. Information collected by Google and Unity is kept according to their own policies, linked above.
Your rights
Depending on where you live, you may have the right to access, correct or delete personal information, to object to or restrict its use, to withdraw consent, and to complain to your data protection authority. Because we do not hold information that identifies you, we may not be able to match a request to you. For information held by Google or Unity, their policies above explain how to exercise these rights directly. You can always contact us at the address below.
Children
Candy Flash is intended for players aged 13 and over and is not directed at children under 13. We do not knowingly collect personal information from children under 13. In some countries, players under 16 need a parent's permission to give consent. If you are a parent and believe your child has provided information through the game, contact us.
Permissions
The game uses internet access for ads and analytics, and the advertising ID permission so that ad services can read your device's advertising ID. It may vibrate when haptic feedback is turned on in Settings.
Security
The services above send information over encrypted connections. Your progress is stored in the app's private storage on your device.
Changes to this policy
We will update this policy when the game's features change. The effective date at the top always shows the latest version.
Contact
Questions or requests about privacy: neonlabgames@gmail.com
See also the Candy Flash Terms of Service.