Paint HarborPrivacy Policy
Last updated: 6 October 2026
This policy explains what information the Paint Harbor game ("the game") and its website use, why, who receives it and the choices you have. Paint Harbor is made by Koray Oksuztepe ("we", "us"). Contact: support@paintharbor.com.
The short version
- There is no account or login. Your progress is saved on your phone, not on our servers.
- Optional rewarded videos and short ads between some levels come from Google AdMob. VIP and No Ads remove the ads between levels. Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), Google's consent tool asks for your consent before analytics start and before ads are personalized. Elsewhere, ads may be personalized using your phone's advertising ID unless you limit it in your phone's settings. On iPhone, the game can use the advertising ID only if you allow tracking.
- Google Firebase helps us understand how the game is played, tune it and fix crashes.
- Purchases go through Apple or Google; RevenueCat checks them for us. We never see your card details.
What stays on your phone
Your levels, coins, buckets, boosters, town, settings and Daily Drip record are stored in the game's storage on your phone. We do not keep a copy. Uninstalling the game deletes them; a backup of your phone (iCloud, Google) may keep a copy under that service's own terms.
The website
This website, including the Daily Drip in your browser, has no account, no cookies, no analytics and no ads. The Daily keeps your streak, record and settings in your browser's local storage, on your device only; clearing the site's data in your browser removes them. The company that hosts the site processes IP addresses in its server logs to deliver and protect the site.
What is collected, by whom and why
| Who | What | Why |
|---|---|---|
| Google AdMob and its consent tool (UMP) | The advertising ID (on iPhone only if you allow tracking) and other device identifiers that the ads software uses either way, an approximate location derived from your IP address, interactions with ads, diagnostics such as launch time | To show and measure the optional videos and the ads between levels, and to prevent fraud. Where consent is required, ads are personalized only with your consent; elsewhere they may be personalized unless you limit the advertising ID in your phone's settings. |
| Google Firebase Analytics | An app-instance identifier; the advertising ID where ad storage is allowed; device model and operating system; and game events of these kinds: sessions; levels (started, each pour, out of pours, completed); continue offers; boosters used; rewarded videos (shown, completed); ads between levels (shown or not); purchases (product, price, currency); town tasks and districts completed; Daily Drip (started, completed, streak); shares and clip exports | To understand how the game is played and improve it. This data may also be used to measure and, where allowed, personalize ads. |
| Google Firebase Remote Config | Country, language, time zone, operating system, app version and the Firebase installation identifier | To adjust game settings (for example rewards) without an update |
| Google Firebase Crashlytics | Crash and error reports, device state at the error, an installation identifier and, only while analytics is allowed, the last 20 game events before the error | To find and fix crashes |
| RevenueCat | Your purchase history and an anonymous app user identifier | To confirm purchases and restore them |
| Apple and Google | Payment and account details | To process payments, under their own privacy policies; we never receive card details |
Analytics and crash data are not linked to your name or email, and the game does not show you any of these identifiers. The game does not ask for your name, email, contacts, photos or precise location. When you share a result, a picture or a clip, you choose the app it goes to; we do not receive it. Saving a clip or picture to your photos happens only when you choose it, with your phone's permission.
Why we may use it (legal bases)
Where the GDPR or the UK GDPR applies: your consent, where the consent tool asks for it, for personalized ads and for analytics storage (you can withdraw it at any time in the game's Privacy options; a withdrawal takes effect the next time the game starts); performing our contract with you for purchases; and our legitimate interest in keeping the game working and secure (crash reports), in adjusting game settings with Remote Config (it uses your country, language and the Firebase installation identifier), and in delivering and protecting the website.
Your choices
- Consent: in the game, Settings → Privacy options, where the law requires the choice. A change takes effect the next time the game starts.
- Tracking on iPhone: Settings → Privacy & Security → Tracking. Saying no never limits the game; the game then cannot use the advertising ID.
- Advertising ID on Android: in your phone's Google settings, opt out of ads personalization or delete the advertising ID. Resetting it only gives you a new ID.
- Everything at once: uninstall the game.
How long information is kept
Progress on your phone: until you uninstall the game. Analytics events: 2 months. Crash reports: 90 days. Purchase records: as long as needed to provide purchases and to meet legal and tax obligations. Ad data: as set out in Google's policies.
Where information goes
Google and RevenueCat process information in the United States and other countries. Transfers from the European Economic Area, the United Kingdom and Switzerland rely on the safeguards those companies provide, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Children
The game is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has used the game and want information about them deleted, contact us.
Your rights
Depending on where you live, you can ask to access, correct or delete information about you, to object to or restrict its use, to receive a copy, and to withdraw consent. There is no account, and analytics and crash data are not linked to your name or email. The game shows no identifier that would let us single out your records, so we cannot find them for a request: they are deleted automatically when the retention period above ends, and uninstalling the game resets the app instance identifier. Purchase records can be found through a store receipt: send it with your request and we will act within the time the law allows. You can also complain to your data protection authority, for example a European supervisory authority, the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information, the Office of the Australian Information Commissioner, or the Philippines' National Privacy Commission.
United States residents
We do not sell personal information for money. Showing personalized ads may count as "sharing" for cross-context behavioral advertising under some state laws; you can opt out by declining tracking on iPhone, by deleting your advertising ID or opting out of ads personalization in your Android settings, and by declining personalized ads where the game offers the choice.
Security
Information travels over encrypted connections. We keep as little as we can, and we will tell you and the authorities about a breach where the law requires it.
Changes
We will post any change on this page and update the date at the top. We will mention important changes in the store's release notes.
Contact and the person responsible for privacy
Koray Oksuztepe is responsible for this policy and for protecting personal information. Write to support@paintharbor.com.