Effective date: 18 September 2026
CONTROLLER AND CONTACT DETAILS
- Company
- Archura Digital Solutions AB
- Swedish organisation number
- 559480-3529
- EU VAT number
- SE559480352901
- Official registered company information
- View the official Bolagsverket record
- Privacy and support email
- hello@phigrid.games
1. SCOPE, CONTROLLER, AND GUEST-FIRST PLAY
Archura Digital Solutions AB is the controller for the processing described as ours in this policy. The policy covers the Clout Dash mobile app, its Firebase and purchase services, Game Center or Google Play Games integrations, phigrid.games, and support communications. It does not govern a third-party website or app that you choose to open.
You can play the ordinary career without registering a public-facing Clout Dash account. The app may create a pseudonymous Firebase guest identifier to operate connected features, reconcile progress, protect purchases, prevent duplicate rewards, and support secure weekly competition. That technical identifier is not a public profile and does not require an email or password.
2. DATA KEPT ON YOUR DEVICE
Your active game save can include career progress, tutorial state, scores, stars, earned and spent Clout, inventory, upgrades, costumes, time-ticket stock, preferences, consent choices, and native-service state. It is stored in the app's protected local storage. The game also uses a random installation identifier for safe, idempotent cloud operations; it is not a hardware serial number.
Your operating system may include app data in a device backup or transfer according to your Apple or Google settings. Uninstalling the app, clearing its storage, or changing device without a compatible backup or enabled cloud feature may permanently remove local-only progress. We cannot retrieve information that never reached our services.
3. FIREBASE, OPTIONAL ACCOUNTS, AND CLOUD PROGRESS
Clout Dash uses Google Firebase services including Authentication, Firestore, Cloud Functions, Remote Config, and App Check. We may process a Firebase user ID, the installation identifier, app and device metadata needed for App Check, selected preferences, tutorial and career progress, achievement state, server operation identifiers, and service-security records. Wallet, purchase, and ranked-score operations use server-side ledgers so that the same reward cannot be granted twice.
If you choose Sign in with Apple or Google, Firebase receives the provider identifier and may receive a profile name, email address, or Apple private-relay address that the provider makes available. Linking is optional and is used for cloud continuity, another device, support recovery, and supported cross-platform entitlements. We do not ask for your Apple or Google password.
Creator Circuit may process weekly eligibility, server-issued run tickets, the Heat played, timing and bounded result statistics, your best score per Heat, normalized weekly points, rank, and anti-abuse signals. Native Game Center or Play Games scores and achievements are controlled by the platform account you choose to use.
4. ANALYTICS AND CRASH REPORTS
Firebase Analytics and Crashlytics start disabled. They operate only after you explicitly enable Analytics and crash reports in Settings, and you can turn that choice off again. Withdrawing the choice disables collection and resets pending local Analytics data where the SDK supports it. Advertising storage, ad user data, and ad personalization remain denied independently of this switch.
Permitted analytics events describe bounded product interactions such as tutorial progress, a shift start or result, shop and Creator Circuit discovery, an allowlisted product code and typed purchase result, ad outcome, or league-submission outcome. The event contract excludes Firebase or RevenueCat IDs, names, account handles, run IDs, transaction or receipt IDs, free-form text, and exact timestamp parameters. Crash reports may include stack traces, app and OS version, device model, performance state, and diagnostic context needed to fix a fault.
5. ADVERTISING AND PRIVACY CHOICES
Clout Dash uses Google AdMob for optional rewarded ads and interstitial ads. It does not use a permanent banner in the game interface. The Google Mobile Ads SDK may automatically receive IP address and approximate location derived from it, device or advertising identifiers, app interactions such as ad requests, impressions, taps or video completion, and diagnostic or performance data for delivery, measurement, service operation, security, and fraud prevention.
Current ad requests ask for non-personalized ads with npa=true. Where required, Google's User Messaging Platform presents consent or privacy choices before a live ad request and makes available a Manage ad choices entry in Settings. Non-personalized does not mean that no data is processed: contextual delivery, frequency control, aggregate measurement, security, and legal consent records may still require data. We do not show Apple's App Tracking Transparency prompt unless the actual configuration later requires cross-app tracking permission.
An optional ad reward depends on eligible inventory and a completed callback. Refusing personalized advertising or analytics does not disable ordinary guest play.
6. PURCHASES, REVENUECAT, AND STORE RECORDS
Purchases are billed by Apple App Store or Google Play under your store account. We do not receive your full payment-card details. Clout Dash uses RevenueCat to retrieve product availability, reconcile transactions, restore eligible permanent entitlements, and prevent duplicate delivery of consumable Clout or time-ticket bundles. Data can include the Firebase-based app user ID, product identifier, store, transaction and entitlement state, purchase and expiry information, refund or transfer state, and technical diagnostics with automatic device-identifier collection disabled in our RevenueCat configuration.
Apple and Google keep their own purchase history under their policies. Deleting a Clout Dash cloud account does not delete the store account, the store's legally required transaction history, or purchases already consumed. We may retain a minimal transaction or receipt-proof record where necessary for fraud prevention, tax, accounting, legal claims, or exact-once delivery.
7. GAME CENTER AND GOOGLE PLAY GAMES
Game Center and Google Play Games are optional platform services. If you intentionally open achievements or the leaderboard, the platform may authenticate your gaming profile and process its player identifier, display name or avatar, achievement progress, and submitted weekly score under its own terms and privacy settings. Clout Dash submits a competitive total only after its backend accepts the result.
Cancelling platform sign-in changes nothing in ordinary solo play. Deleting Clout Dash cloud data does not itself delete your Apple or Google gaming profile or data retained by those platform services; use their account and game-activity controls where applicable.
8. WEBSITE AND SUPPORT DATA
phigrid.games does not use advertising cookies or website analytics. It stores only your light, dark, or system theme preference in browser local storage. Our STRATO-hosted server processes standard access and security logs that may include IP address, time, requested URL, response status, referrer, and browser or user-agent information.
If you email support, we receive your email address, any name you provide, the message, attachments, and technical details you choose to share. Support email is hosted by Purelymail, operated by Add Rabbit LLC; Purelymail states that its infrastructure uses AWS US-East-1 in the United States. Do not send passwords, payment-card data, full receipts, identity documents, one-time codes, or unnecessary sensitive information.
9. PURPOSES AND GDPR LEGAL BASES
Where the GDPR applies, we process data as necessary to provide the game, requested cloud, competition, purchase, and support functions under our agreement with you; to comply with tax, accounting, consumer, security, and legal obligations; with consent for optional Analytics, Crashlytics, advertising storage, or personalization where consent is required; and on our legitimate interests in securing the service, preventing duplicate rewards and fraud, balancing and improving the game with opted-in aggregate evidence, answering general feedback, and establishing or defending legal claims.
Consent can be refused or withdrawn without turning it into acceptance of a different legal basis for the same optional purpose. We do not use game activity for solely automated decisions that produce legal or similarly significant effects.
10. RECIPIENTS AND INTERNATIONAL TRANSFERS
Data may be processed by Google/Firebase and Google AdMob/UMP; Apple App Store, Game Center, Google Play, and Play Games when you use those services; RevenueCat for purchase infrastructure; STRATO for website hosting; Purelymail/Add Rabbit LLC and its infrastructure providers for support email; and authorised personnel who need access to operate or support Clout Dash. We may disclose information when required by law or necessary to protect users, the service, or legal rights.
Providers may process data outside the European Economic Area, including in the United States. Where required, a transfer must rely on an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful Chapter V safeguard, together with relevant contractual and security measures. Contact us for information about the safeguard relevant to your data.
11. RETENTION
Local game data remains until you remove it, uninstall or clear the app, or the operating system removes it. Active cloud account and progress records remain while needed to provide the connected feature and are removed when an authenticated deletion completes, subject to the limited exceptions below. Weekly competition records are kept only as long as necessary to operate, verify, secure, and resolve that competition and related disputes.
A completed account deletion leaves a one-way hashed deletion receipt for up to 400 days so that we can prove completion and prevent replay or abuse without retaining the deleted Firebase identifier in readable form. Minimal purchase, fraud, tax, accounting, security, backup, and legal-claim records may be retained for the period required by law or reasonably necessary for those purposes. Processor backups expire on their controlled schedules.
Website access and security logs are normally retained for no more than 30 days unless an incident or legal duty requires longer. Ordinary support correspondence is normally retained for up to 24 months after the last interaction, then deleted or anonymised; relevant material may be kept longer for an unresolved claim or legal duty. Optional Analytics and crash information is retained only for the period configured in Firebase and necessary for aggregate product and reliability analysis; exact production settings are reviewed before public telemetry is enabled.
12. YOUR CHOICES, RIGHTS, AND DELETION
Settings provides the Analytics and crash reports choice, the available Google ad privacy-options form, Restore Purchases, and—when account features are enabled—account, sign-out, support-code, sync, and deletion controls. The Privacy Choices page explains these controls in plain language.
Depending on applicable law and the processing, you may request access, correction, deletion, restriction, portability, or withdrawal of consent, and object to processing based on legitimate interests. Rights have legal conditions and exceptions. Email hello@phigrid.games; we may request proportionate information to verify the requester and locate the relevant pseudonymous record. We normally respond within one month under the GDPR. You may complain to Sweden's Integritetsskyddsmyndigheten (IMY) or another competent authority where you live.
13. CHILDREN AND AGE POSITION
Clout Dash is a general-audience game intended for players aged 13 and older and is not directed to children under 13. Store age ratings describe content and do not replace the legal age for privacy consent or contracts. Where a player cannot legally consent or agree alone, a parent or guardian must act where required. Contact us if you believe a child supplied personal data without the permission required by law.
14. SECURITY, CHANGES, AND CONTACT
We use access controls, encrypted network transport, restricted database rules, server-side purchase and score validation, app-attestation controls, and idempotent operation records appropriate to the data and risks. No mobile app, server, platform, or email system can guarantee absolute security. Protect access to your device, store account, email, and optional linked account.
We may update this policy when the game, providers, or legal requirements change. We will identify material changes and request a new choice where required. Questions and privacy requests can be sent to hello@phigrid.games.