Privacy policy
Publisher and contact
LUMA REEF is provided by Mark Sobolev, an individual publisher in Spain, at Almansa 7, 1-1, 03130 Alicante, Spain. Contact gadinamark1@gmail.com for support or privacy requests. We use Google Gmail to receive and answer correspondence.
LUMA REEF is designed for children aged 6–8. No player account is required. There is no chat, public sharing, or online multiplayer; two-player play uses one device. The game does not ask children for their name, date of birth or email, or request camera, microphone, contacts or device-location access. These choices do not mean that Google's services process no data.
Versions covered by this policy
- Version 8 internal release: no advertising; purchases and the additional paid habitats are unavailable.
- Version 9 under development: clearly labelled Google test banners may appear after story missions for free players. Test ads generate no advertising revenue. Live advertising and production purchases have not yet been verified. Advertising details below describe this planned test integration and must be checked against the released version.
Game progress and the parent area
The game stores mission checkpoints, scores, earned items, decorations, manta styles, language and audiovisual settings privately on the device, with local recovery copies. Daily activities use the UTC date locally. Random round identifiers prevent duplicate rewards. The publisher does not receive these saved games or offer cloud synchronization.
The parent area stores a salted cryptographic hash of a six-digit PIN and failed-attempt/lockout information locally. It does not store a readable PIN or send the PIN to the publisher. The parent session expires and closes when the app is left or backgrounded. This barrier does not establish age, identity or legal parental consent, and does not authorize a Google payment.
Optional parent purchases
When enabled, one non-consumable Google Play purchase unlocks the remaining 24 missions and removes the game's banners. The first 12 missions remain free. There are no subscriptions or consumable purchases. Parent-area access and Google Play's purchase authorization are separate.
The integration uses Google Play Billing 9.1.0. Google handles the purchasing account and payment method. Our code receives purchase status and signed evidence, not full card details. The receipt can include a product, order identifier, purchase token and time. It is stored privately with its signature, acknowledgement and verification time, protected by Android Keystore authentication. The game does not send receipts to a publisher verification server or write purchase tokens to its diagnostic logs. There is no publisher refund-notification server.
A successful purchase check with Android-confirmed internet access renews up to seven days of offline paid access. A cached offline result cannot extend it. Play may return cached information; an immediate fresh server response or immediate refund revocation is not promised. Expiry alone does not delete a receipt. Restoring a purchase uses the purchasing Play account and does not restore deleted progress. Removing banners does not erase Google's existing billing or advertising records.
Google advertising and technical data
The proposed version 9 integration requests Google AdMob banners with child treatment, general-audience content rating, limited-ad treatment and personalization disabled. It suppresses the Android advertising ID on child ad requests and disables the publisher first-party identifier before requests. It does not request adult advertising consent from children.
Google still processes IP addresses, diagnostic information and ad interactions to deliver and secure advertising. An IP address may indicate a general area; the game does not request device-location permission. Ad content may be cached. With programmatic limited ads enabled, Google also uses fraud-only cookies and local storage. That AdMob feature is enabled by default. Limited ads do not mean zero data collection or parental consent. Google's limited-ads explanation and SDK data disclosure.
The publisher does not operate a separate player-analytics service. Android, Google Play, billing and advertising services nevertheless process their own technical data. Google's information about its purposes, retention, safeguards and rights is at Google Privacy. We do not claim to control Google's complete retention periods or processing locations.
Support, legal bases and retention
If you email us, we use your address, message and any necessary attachments to answer your request. Do not send children's personal details, passwords, full card details or unnecessary purchase tokens. We do not use support messages for marketing or create player profiles from them.
For ordinary support and privacy enquiries, the basis is our legitimate interest in answering and resolving the request. For assistance necessary to provide a purchase, the basis is performance of the relevant contract; applicable recordkeeping or rights-response duties may require processing under a legal obligation. We use only the information needed for the purpose. A privacy notice is not itself a request for consent.
We delete ordinary resolved support correspondence, including copies and attachments in the publisher's mailbox, within 90 days after resolution. We remove unnecessary sensitive or children's information sooner when it is not needed to answer the request. We keep material necessary for a legal obligation or an active dispute only for that obligation or dispute, with restricted access, and review it when the matter ends. Gmail's separate retention and backup practices remain governed by Google's service policies.
Resetting local progress removes scores, adventure progress, decorations and recovery copies but keeps the parent PIN, settings and purchase ownership. Android's Clear storage or uninstall removes the app's local data. Neither operation cancels a purchase or deletes Google's transaction records. The publisher cannot recover or remotely erase a local save. There is no player account to delete.
Your rights and policy changes
Contact the publisher about access, correction, erasure, restriction, objection or portability where applicable. We may request only the information needed to identify the relevant records; we do not collect extra child data simply to identify an otherwise anonymous local save. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. No advertising consent is collected from children in the described test version.
You can complain to the Agencia Española de Protección de Datos (AEPD), or another competent supervisory authority. We update this policy and its effective date before adding live ads or changing the services or data practices it describes.
This parent information website
This website is for parents, guardians and adult testers. It provides support and privacy information; it does not contain a playable game or take payments. The domain framegame.space is registered at Porkbun. The pages are hosted through OpenAI Sites and Cloudflare infrastructure.
Delivering and protecting these pages involves processing technical request information such as your IP address, requested address, request time, browser and network-routing information. Our purpose and legitimate interest are to provide reliable access to support and privacy information and protect it from misuse. We do not add advertising, analytics scripts, forms, external fonts or embedded media to these pages. The email link opens your email application; sending a message is your choice.
Hosting providers may keep operational and security records for the time needed to operate and secure their services, investigate incidents and meet legal obligations. We do not set a universal deletion period for their records. We do not promise that hosting data remains in the EU. Provider processing, retention criteria and international-transfer information are explained in OpenAI Privacy, Sites privacy information and Cloudflare Privacy. Hosting security features may use necessary cookies or similar technologies; this is not a claim that all visits are cookie-free. Contact us using the details above for questions or rights requests.