The Lightwell: Endless Idle TD ("the game") has no accounts of its own, and your progress is saved on your device. Most data that leaves your device goes to Google: through Google Play when you sign in to Play Games or make a purchase, through Google AdMob for the optional rewarded videos, and through Firebase Crashlytics for anonymous crash and error reports, which you can turn off in Settings. If you are signed in to Play Games, your Weekly runs also go to our own server, the Lightwell service at lightwell.bukowskaii.com, which replays them to build the Weekly ranking (see Weekly ranking). You can remove yourself from it in Settings.
If you sign in to Google Play Games, the game uses Play Games Services to back up your save to your Google account, and to record your achievements. Google handles that data under the Google Privacy Policy, and describes what the Play Games SDK collects at developer.android.com/games/pgs/data-collection. You can play without signing in, and you can delete your Play Games data at any time (see Deleting your data).
The Weekly ranking is our own board, run by Bukowskaii Creations LLC on the Lightwell service (lightwell.bukowskaii.com). It is not a Google Play Games leaderboard. The game sends the following only when you are signed in to Play Games, and only for the Weekly:
How long we keep it: the move lists of runs for 8 weeks; the board rows (rank, name and wave for each week) as the ranking's history; your player record (player id and name choice) until you remove yourself. Data travels over HTTPS, is stored only on our server, and is not sold or shared.
To remove yourself, open Settings > Weekly ranking > Remove me. This deletes your player record, your name and all your runs and board rows from the server at once, and the game stops sending new runs until you choose Join the ranking again. You can also email tom@bukowskaii.com. If you never sign in to Play Games, the only thing the game sends to the Lightwell service is the time request.
Purchases go through Google Play Billing. The game receives only the purchase record Google sends (which product, and its order and purchase tokens) and keeps it on your device so that a purchase is never granted twice and can be restored. It never sees your payment details.
The game offers optional rewarded videos: one plays only when you tap to watch it for a boost, and nothing else in the game shows ads. The videos come from Google AdMob. To serve them and to prevent fraud, Google's Mobile Ads SDK collects your device's IP address (which can estimate your general location), your interactions with the ads (such as app launches, taps and video views), diagnostic information about the app and the SDK, and device identifiers such as the Android advertising ID and app set ID. Google uses this for advertising, analytics and fraud prevention, as described in How Google uses information from sites or apps that use our services and at developers.google.com/admob/android/privacy/play-data-disclosure.
In the European Economic Area, the UK and Switzerland, the game asks for your consent through Google's consent form before personalized ads are shown, and you can change that choice at any time in Settings > Ad privacy. You can reset or limit the advertising ID in your device's settings (Settings > Privacy > Ads, or Google > Ads). A Supporter Pack skips the videos, so no ad is requested at all.
When the game hits an error or crashes, it can send an anonymous report to Google's Firebase Crashlytics, so that we can find and fix the problem. A report holds the kind of error and its technical stack trace, short breadcrumbs of what the game was doing (such as "app resumed" or "a sheet opened"), the game version, whether it is a release build, your best wave and number of zones, your device model and Android version, and a random Firebase installation ID that Crashlytics creates to count affected devices. It never holds your save, your Lumens, your purchases, your name, your email or any other personal information. Firebase keeps these reports for 90 days under the Google Privacy Policy and Firebase's privacy and security terms. You can turn this off at any time in Settings > Send error reports (it is on by default); when it is off, nothing is collected or sent.
Settings has a Report a problem button. It copies a text report (game version, device model and Android version, a summary of your save, and recent error messages) to your clipboard. Export save copies your save as text to your clipboard. In both cases nothing is sent: the text goes only where you choose to paste it.
| Permission | Purpose |
|---|---|
INTERNET | Play Games sign-in, cloud save, achievements, the Weekly ranking, rewarded videos and error reports |
ACCESS_NETWORK_STATE | Lets the ad and error-reporting SDKs check for a connection before sending |
AD_ID | Lets the ad SDK read the advertising ID (added by Google's Mobile Ads SDK) |
ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS | Android's Privacy Sandbox ad services, which the ad SDK may use in place of the advertising ID (added by Google's Mobile Ads SDK; you can turn them off in Android's privacy settings) |
WAKE_LOCK, FOREGROUND_SERVICE | Added by Google Play services libraries for background work they schedule; the game itself does not run in the background |
com.android.vending.BILLING | Purchases through Google Play |
POST_NOTIFICATIONS | The optional notice when your away time is full; asked only if you turn it on, and the notice is made on your phone (nothing is sent) |
VIBRATE | Short taps of haptic feedback, which you can turn off in Settings |
The game does not request your location, contacts, camera, microphone, storage or any sensor.
The game has no accounts of its own, so there is nothing to close. You can delete everything it keeps:
The game is not directed at children under 13 and does not knowingly collect data from them.
Any change to this policy will be published at this address, with the effective date updated.