Crafty Crew Privacy Policy
Effective date: 11 November 2026
Crafty Crew ("the game", "we", "us") is a mobile game made by Segev Zrihan Ziv. This policy explains what information the game collects, why, who else handles it, how long we keep it and what you can do about it. Questions: craftycrew196@gmail.com, or Settings > Contact Us in the game.
The short version
- You can play without giving us your name or email. The first time you open the game, it creates an anonymous account for your device so your progress is saved.
- If you create an account, we keep your email and a username so you can log in on another device and add friends.
- The game currently has no ads, no analytics or tracking tools, and no in-app purchases. It does send us error and crash reports so we can fix bugs; they aren't linked to you or your account. We don't sell your information.
- You can delete your account and its data from inside the game: Settings > Delete Account.
What we collect
| Information | When | Why |
|---|---|---|
| An anonymous account ID, and a sign-in token stored on your device | The first time you open the game | To save your progress and keep you signed in |
| Email address and password. The password is handled by our sign-in provider (Supabase) and isn't stored in readable form | Only if you create an account or log in | To log you in, and to email you a one-time code that confirms your address |
| Display name (one is made for you; you can change it), username and friend code | When the account is created, or when you change them | To identify you to other players: on the leaderboard, in friend lists and requests, and in game rooms |
| Game progress: level, XP, cans, gems, unlocked characters, your selected character and the CAN ROAD rewards you've claimed | As you play | To save and restore your progress |
| Match results: mode, character, share of the map painted, eliminations, placement, win or loss, and the cans and XP earned | After each match | To give you your rewards and work out your level and the leaderboard |
| Friends, friend requests and room invites, and a record of when you sent requests and invites | If you use FRIENDS or invite friends to play | To let you add friends and invite them, and to limit spam |
| When you were last online | About once a minute while the game is open and you're signed in to an account | To show your friends whether you're online |
| Players you block, and reports you send: who you reported, the reason, where in the game (friends, requests, leaderboard or a game room), and their display name at that time | If you block or report a player | To stop blocked players from contacting you, and to review reports |
| Your device's IP address, while connected | When the game talks to our servers | Needed to send data back to your device and to run online matches |
| Server logs of online matches: room codes, display names of players joining and leaving, and match start and end | When you play online | To keep the match server running and fix problems |
| Error and crash reports: the game's build number, Android or iOS and its version, the error text and where in the game's code it happened, how many times it happened, whether the last session ended unexpectedly, and a random ID made for each launch that isn't kept on your device | When an error happens, sent when you next open the game or are on its menus | To find and fix bugs. Reports don't include your account ID, name, email or device model, and the game removes anything that looks like a name, email address or sign-in token from the error text before sending it |
Some things stay on your device only: sound, music and vibration settings, aim assist, favourite characters, tutorial progress, and a copy of your progress so the game works offline.
We don't collect your location, contacts, photos, camera, microphone, advertising identifier or payment details.
Third-party services
These companies handle information for us to run the game. They may only use it to provide their service to us.
| Provider | What it does | Data | Its privacy policy |
|---|---|---|---|
| Supabase | Backend and hosting: our database, sign-in system, the small server functions that check match results and award rewards, and the one-time email code | Accounts (anonymous ID, email and password if you create an account), display name and username, progress, match results, friends, blocks and player reports, error and crash reports, and your IP address while connected | supabase.com/privacy |
| Hetzner Online | Hosts our online match server in Germany | Your IP address while you play online, and a one-time join ticket (described below). Match server logs: room codes, display names of players joining and leaving, and match start and end | hetzner.com/legal/privacy-policy |
No analytics, advertising or tracking providers at this time.
Your information may be stored and processed outside your country, including in Germany (our match server) and wherever Supabase hosts our database.
To start an online match, the game gets a one-time join ticket from Supabase and gives it to the match server. The ticket carries your account ID, display name, level, whether you're a guest, your unlocked characters and the players you've blocked, and it expires after a minute. Your sign-in token is never sent to the match server. After the match, the server sends the results to Supabase.
Apple and Google distribute the game through their app stores, under their own privacy policies.
Other players can see your display name, username, level and selected character. Your friends can also see whether you're online. Anyone who opens the leaderboard sees the display name, level and XP of the top players.
If you tap INVITE ON WHATSAPP, the game opens WhatsApp with a message you can choose to send. We don't send anything to WhatsApp ourselves.
We may disclose information if the law requires it, or to protect players or the game from abuse.
Analytics, advertising and tracking
The game currently has no ads, no analytics or tracking tools. This section explains what would change if we add them in the future, so you know what to expect. We will update this policy and the app's privacy details in the store before any such version is released.
What such tools could collect: device identifiers and advertising identifiers (such as Apple's IDFA or Google's Advertising ID), in-app events (for example, matches played, screens opened and purchases), your approximate location derived from your IP address (country or city level, never precise GPS location), and crash data.
Why: to measure how the game is played and improve it, and to show ads and measure how they perform.
Your consent: on iOS, the game will ask your permission through Apple's App Tracking Transparency prompt before any tracking across other companies' apps and websites, and will not track you if you decline. On Android, we will follow Google Play's policies, including its rules on the Advertising ID and on ads in games. Where the law requires your consent (for example, in the EU or the UK), we will ask for it first.
How to opt out: on iOS, turn off "Allow Apps to Request to Track" or tracking for Crafty Crew in Settings > Privacy & Security > Tracking. On Android, delete or reset your Advertising ID, or turn off ads personalization, in your device's Google settings (Settings > Google > Ads, or Settings > Privacy > Ads, depending on the device).
We will never sell your personal data.
How long we keep it
- Your account, progress, match results, friends and blocks are kept until you delete your account.
- Reports are kept for review. If you delete your account, reports you sent stay, but without your ID. Reports about you are kept for 90 days after you delete your account, with only the name you had, the reason and the dates (no IDs), and are then deleted automatically.
- Match server logs are limited in size and overwritten automatically as new ones are written.
- Error and crash reports are deleted automatically after 30 days.
- If you uninstall the game without deleting your account, the data stays on our servers, but a guest account can no longer be reached from your device. Write to us and we'll delete it.
Your rights / delete your data
In the game, go to Settings > Delete Account and confirm twice. This permanently deletes your account from our servers, together with your profile, progress, characters, match history, friends and requests, invites and blocks. Reports about you are kept as described above. It can't be undone. Your device then starts over as a new guest.
You can also ask us to delete your data by writing to us (Settings > Contact Us opens an email with your player ID filled in), or at craftycrew196@gmail.com from the email address on your account. For a guest account, send your display name and roughly when you last played, so we can find it.
You can change your display name in your profile, block or report other players, and delete your account in Settings. Depending on where you live, you may also have the right to access the information we hold about you, correct it, receive a copy, delete it, or object to how we use it. Write to us and we'll reply within one month. If you live in the EU, the UK or Israel, you can also complain to your data protection authority.
Where the GDPR applies, we use your information because it's needed to provide the game you asked for (account, progress, matches, friends), and for our legitimate interest in keeping the game safe and working (server logs, error and crash reports, blocks and reports).
Children
Crafty Crew isn't directed at children under 13 and is rated 13+. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, write to us and we'll delete it.
Security
Accounts, progress, match results and error reports are sent to Supabase over encrypted connections (HTTPS), and each player can read only their own private data. Online match traffic uses the game's own network protocol, which isn't encrypted. No system is perfectly secure, but we work to protect your information.
Changes to this policy
If we change this policy, we'll update it on this page and change the date at the top.
If we add advertising, analytics or other third-party tools in the future, we will update this policy and the app's privacy details in the store before that version is released.
Contact
Segev Zrihan Ziv
craftycrew196@gmail.com