Carnival Derby – Privacy Policy
Summary
Carnival Derby (iOS and Android) does not ask for your name, e-mail, phone number, location, contacts or photos. The app shows ads from Google AdMob (see "Advertising" below); there are no third-party analytics. Your coins, characters, friends list and match history are stored on your device.
What we process
- Random player ID. On first launch the app creates a random identifier and keeps it in secure storage on your device (the iOS keychain or the app's private storage on Android). It is not linked to your real identity. It is sent to our server only to check when your next free daily scratch card is available, and with nickname reports.
- Nickname reports. If you report another player's nickname, we receive the reported nickname, the reason you chose, your nickname and the random player ID, plus a one-way hash of your IP address (used only to limit abuse). Moderators use reports to rename offensive nicknames.
- Nickname changes. If a moderator renames a nickname, the app downloads the list of changed nicknames.
- Purchases. In-app purchases are processed entirely by Apple (App Store) or Google (Google Play). We never see your payment details. To check that a purchase is valid and deliver it, the app sends the store's purchase receipt together with the random player ID to RevenueCat (RevenueCat, Inc.), our purchase-validation service. RevenueCat's privacy policy: revenuecat.com/privacy.
- Notifications. Reminders (for example "your free card is ready") are local notifications created on your device; we do not use a push notification service.
Advertising
Carnival Derby shows a full-screen ad from Google AdMob (Google LLC) about once every five games. To serve and measure ads, Google may collect your device's advertising identifier (IDFA on iOS, Android Advertising ID on Android), IP address and approximate location, and information about ad interactions. Ads are personalised only if you allow tracking in Apple's App Tracking Transparency prompt (and, in the EEA/UK, give consent in the privacy message); otherwise ads are non-personalised. On Android, personalised ads follow the EEA/UK consent choice and your device's ad settings. You can change these choices at any time in iOS Settings → Privacy & Security → Tracking, or on Android in Settings → Google → Ads (or Settings → Privacy → Ads), where you can also delete your advertising ID. Buying No Ads in the shop removes all ads permanently. Google's privacy policy: policies.google.com/privacy; how Google uses data from partner apps: policies.google.com/technologies/partner-sites.
How long we keep it
Report records are kept only as long as needed for moderation. The daily-card record is a single date per random player ID and is overwritten each day you claim a card. You can ask us to delete any record linked to your player ID at the address below.
Opponents
To make sure you can always find a match, some opponents in Carnival Derby may be computer-controlled players.
Children
Carnival Derby contains simulated gambling with virtual coins and is intended for adults (17+ on the App Store, 18+ on Google Play). It is not directed at children and we do not knowingly collect personal information from children.
Your rights and contact
You may request access to or deletion of data related to your player ID, or ask any privacy question, by writing to info@noventislab.com (see how to delete your data). NoventisLab LTD, United Kingdom.
We will post any change to this policy on this page.