Privacy Policy

Prism · Last updated 12 August 2026

Prism is a daily puzzle game. It does not ask for your name, your email address or your phone number, and it has no account to sign up for. This page explains the data it does handle, why, and how to have it removed.

The short version. The game works without you telling us who you are. It stores your progress on your device, syncs it to an anonymous ID so leaderboards and cloud save work, and shows ads supplied by Google. We do not sell your data.

Who is responsible

MCODE is the data controller for the information described here. You can reach us at hello@mcode.hr about anything on this page, including requests to see or delete your data.

What the game handles

An anonymous account identifier

On first launch the game creates an anonymous account with Firebase Authentication. This produces a random identifier that is not derived from you, your device or any other account. It exists so your progress can be saved to the cloud and so leaderboard entries can be attributed to a player. It is not linked to your name, email, or any Google account.

Gameplay data

Stored on your device and synced to our servers under the anonymous identifier above:

Analytics

The game uses Google Firebase Analytics to understand how it is used — for example how many people finish a puzzle, which screens they visit, and where they get stuck. This includes your device model, operating system version, app version, language, and approximate region (country level, derived from IP address). It does not include your precise location.

Advertising

Ads are supplied by Google AdMob. To select and cap ads, Google receives your device's advertising identifier, IP address, and how you interact with ads shown in the game. Google's handling of this data is covered by Google's Privacy Policy.

On iOS you are asked, once, whether the app may track you across other companies' apps and websites. Declining changes nothing about the game. Every puzzle, every feature and every reward stays exactly the same; the ads you see become less personalised. In the European Economic Area and the UK you are also shown a consent form before personalised ads are used.

Settings that never leave your device

Sound, haptics, reduce-motion, the colour-blind palette and the daily reminder switch are stored only in the app's local storage. They are not uploaded anywhere.

What the game does not collect

Notifications

If you allow it, the game schedules a daily reminder. These are local notifications: they are created and delivered by your own device, on a schedule the app sets. No reminder is sent from a server, and no device token is collected. You can turn them off in the game's settings or in your device's system settings at any time.

Why we are allowed to handle this

DataLegal basis (GDPR)
Anonymous ID, gameplay data Performance of a contract — without it there is no cloud save and no leaderboard
Analytics Legitimate interest in understanding and improving the game
Personalised advertising Consent, given through the consent form and the iOS tracking prompt

Who else sees it

Google, as our provider for Firebase (authentication, database, analytics, hosting) and AdMob (advertising). Data may be processed outside your country, including in the United States, under Google's standard contractual clauses. We do not sell your data and we do not share it with anyone else.

How long it is kept

Gameplay data is kept while you keep playing, so your streak and history survive a new device. Analytics data is retained according to Firebase's default retention period. Everything is deleted on request — see below.

Your rights

If you are in the European Economic Area or the United Kingdom you have the right to access, correct, delete, restrict, object to, and receive a copy of your data. Email hello@mcode.hr and we will act on it. Because the account is anonymous, we may ask you to send the request from the device in question so we can identify which records are yours.

You also have the right to complain to a supervisory authority. In Croatia that is AZOP.

If you are a California resident: we do not sell or share personal information as those terms are defined by the CCPA/CPRA. You can limit ad personalisation at any time using your device's advertising settings.

You can also delete everything yourself without contacting anyone — uninstalling the app removes all local data, and resetting progress in the game's settings clears your saved record.

Children

Prism is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided data, contact us and we will delete it.

Changes

If this policy changes in a way that affects you, the date at the top of this page changes and the new version is published here before it takes effect.