DoubleCat LLC operates the SpellBurst mobile game and the websites spellburst.app and doublecat.com. We are based in Maryland, United States, and are responsible for deciding how information is used in these services.
SpellBurst does not ask you to provide your name, email address, phone number, or a password to play. We do not use the game's anonymous identifiers to determine who you are. Anonymous identifiers, purchase records, analytics information, and technical connection information may nevertheless be treated as personal information under applicable law.
The game and websites work differently. The game keeps an anonymous player record so you can retain progress and purchases. The websites serve static pages and do not offer accounts or purchases; their only form is the account deletion request described in section F. This notice covers both.
A. The SpellBurst mobile game
Your anonymous player record
When you start the game, Firebase Authentication creates an anonymous player record. We use that record to associate saved progress, game currency, statistics, settings, and purchased items with the same player over time. It does not contain your name, email address, or telephone number.
On supported devices, SpellBurst may use the device's platform game service, such as Game Center or Play Games, to preserve access to the same anonymous player record. This does not create a DoubleCat registration or tell DoubleCat who you are. Apple and Google operate their platform game services separately.
Purchases and game currency
The Apple App Store and Google Play process purchases of game currency and the coin doubler. They handle your payment method. We do not receive or store your payment-card number or security code through the game's purchase flow.
We process purchase confirmations and entitlement information to provide what you bought, maintain balances, restore eligible purchases, prevent duplicate grants and fraud, and resolve transaction problems. This information is associated with your anonymous player record. The store also keeps its own purchase records under its privacy policy.
Game analytics and diagnostics
We use Amplitude to understand how the app is used and improve the game. Events may describe app startup, screens and features used, level attempts and outcomes, purchases, errors, and app or device characteristics. Analytics records use technical identifiers rather than your name, email address, or telephone number.
We use Sentry to receive crash reports and technical diagnostics needed to find and correct errors. Reports may include the app version, device and operating-system information, error details, and technical identifiers or connection information supplied by the service.
The website cookie-banner choice does not control analytics or diagnostics inside the app.
Optional push notifications
We send push notifications only if you opt in. Firebase Cloud Messaging uses an app-installation identifier and notification token to route messages to your device. These are technical delivery identifiers, not an email address or telephone number.
You can turn notifications off in your device's settings. Turning them off does not delete your saved game, purchases, or analytics history. We do not send game notifications by email or SMS.
Technical information
Connections to Firebase and our other providers expose technical information needed to deliver and secure their services. This can include an IP address, user-agent information, app or device characteristics, timestamps, and service logs. This is separate from asking you for personally identifying information.
B. The spellburst.app and doublecat.com websites
Serving the pages
Both websites consist of static pages served through Google's Firebase Hosting. Visiting them does not create a SpellBurst player record. There are no website account forms, contact forms, purchase forms, or checkout systems. The one exception is the account deletion request form on spellburst.app, described in section F, which asks only for your User ID.
Firebase Hosting receives technical request information, including IP addresses, to deliver pages and operate and protect the hosting service. This happens when a page is requested, regardless of the analytics choice below.
Optional website analytics
Both sites use Google Analytics 4. These website integrations are separate from the SpellBurst app's Amplitude analytics.
On your first visit, a banner offers Accept and Decline. Website analytics loads only after you select Accept. If you decline, it does not load. The websites do not use Amplitude or create an identifier to connect a website visit with a later game installation.
If accepted, website analytics measures visits and interactions using information such as pages visited, referring sources, browser and device characteristics, and analytics identifiers. Google may process an IP address to derive approximate geographic information, but GA4 does not log or store individual IP addresses. This does not describe Firebase Hosting's separate handling of IP addresses.
The websites do not display advertisements. Analytics is configured with ad storage, ad user data, and ad personalization denied.
Cookies and browser storage
cookie_consentin localStorage: Remembers whether you accepted or declined analytics on that site. It persists until cleared or changed._gaand_ga_*cookies: Allow Google Analytics to distinguish visits and maintain analytics session information. They are used only after you accept analytics.
Account deletion form: On spellburst.app's account deletion page, Google reCAPTCHA loads when you start a request by selecting the User ID field. It uses device and browser information, and may set its own cookie, to check that a request comes from a person; it is not used for analytics. Starting a request also lets the Firebase SDK create IndexedDB storage in your browser for that site, which it uses for App Check and to record which SDK versions were used and when. Sending a request passes the User ID you entered, and your connection's IP address, to the SpellBurst game servers on Google Cloud, which use them to handle the request.
Each website remembers its own choice in that browser. Choices do not automatically carry to another browser or device.
To reset an earlier choice, close the site's open tabs, use your browser's privacy settings to clear that site's cookies and local storage, then revisit and choose Decline. Repeat this for the other site if necessary. This stops analytics on future visits with that choice; it does not erase analytics already collected.
C. Information you send us
If you email support, we receive your email address, message, and any attachments you choose to include. We use them to respond and investigate the issue. This voluntary correspondence is separate from the anonymous game record. Please do not send passwords, payment-card details, or unnecessary sensitive information.
For game support or privacy requests, we may need information that connects the request to an anonymous player record. We do not ordinarily know which player record belongs to a particular email address.
D. Why we process information
We process information to:
- Save and recover game progress and settings.
- Deliver purchases, maintain balances, and prevent transaction fraud.
- Provide push notifications you request.
- Understand use of the game and websites and improve them.
- Diagnose errors and keep the services reliable and secure.
- Respond to support and privacy requests.
- Meet legal obligations and address disputes.
Where European or UK data-protection law applies, we rely on performance of our agreement where processing is necessary to provide the game and purchases; consent for optional website analytics and push notifications; legitimate interests in operating, improving, diagnosing, and protecting the services; and legal obligations where applicable. You may withdraw consent for future processing based on consent. Other jurisdictions may apply different requirements.
E. Who receives information
We use providers to deliver particular functions:
- Google / Firebase: Anonymous authentication, game services, notification delivery, static website hosting, reCAPTCHA on the account deletion form, and related technical information.
- Amplitude: Analytics information sent by the SpellBurst mobile app.
- Sentry: App crash reports and technical diagnostics.
- Google Analytics, including Firebase Analytics on the websites: Website analytics after you accept the banner.
- Apple: Game Center continuity and App Store transactions.
- Google Play: Play Games continuity and Android store transactions.
Apple and Google operate their consumer accounts and stores under their own privacy policies. Providers processing information for DoubleCat operate under the applicable service agreements; their role depends on the service and processing involved.
See Firebase's privacy information, Google's privacy policy, Amplitude's privacy information, Sentry's privacy policy, and Apple's privacy policy.
We may also disclose relevant information when legally required, to investigate fraud or protect rights and security, or in connection with a transfer of the business, subject to applicable law.
F. Storage, retention, and deletion
We keep an anonymous player record to preserve game progress and purchased entitlements. We periodically remove some inactive player records that have no purchases or meaningful progress. This routine cleanup is separate from deletion requested by a player and is not a fixed deletion schedule for every record.
Retention depends on why a record is needed:
- Game records support continued access to progress, balances, and purchases.
- Transaction records support delivery, restoration, refunds, fraud prevention, and applicable accounting or legal obligations. Apple and Google maintain their own store records separately.
- Analytics and diagnostic records support evaluation, reliability, and improvement of the game and websites. Their retention depends on the settings and practices of the relevant service.
- Technical records support hosting, delivery, and security and are subject to the relevant service's logging and retention practices.
- Support correspondence is retained as needed to address the issue and any related follow-up or dispute.
When information is no longer needed, we delete it or make it non-identifying, subject to applicable legal requirements and backup processing. Provider deletion and backup processes may take additional time.
Removing a player record does not automatically remove separately held analytics, diagnostic, notification, or transaction records. We consider those records separately when handling a deletion request. If information must be retained, we will explain the relevant reason where required by law.
Deletion requests
In SpellBurst, open Settings, choose Help & Info, choose Delete Account, then tap Delete My Account and confirm with Delete Forever. This permanently removes the anonymous player record, saved progress, game currency, statistics, and game entitlements associated with it. The game then starts again with a new anonymous player record.
If you no longer have the app, you can request deletion with the web form linked from SpellBurst's Google Play listing. It asks for the User ID shown in the app under Settings → Help & Info. Because the form cannot confirm who submits an ID, a request is held for 30 days, and signing in to or playing SpellBurst during that time cancels it. If it is not cancelled, the player record is then deleted as described above, regardless of its level or purchases. To delete immediately, use the app.
You or a parent or guardian may also contact support@doublecat.com about information associated with a player record. We may need information that demonstrates control of the record before acting. Contacting us does not add an email address to the game record.
Deleting the app from a device does not itself request deletion of server-side records. Apple and Google retain their own store records, and deleting the player record does not remove any legal rights relating to a purchase.
G. International processing and security
DoubleCat operates from the United States. Our providers may process information in the United States and other countries. Their privacy laws may differ from those where you live.
We use technical and organizational measures intended to protect the information we process. Protecting access to your device and platform game service also helps protect your saved game. No online service can eliminate every security risk.
H. Your privacy rights
Depending on your location, applicable law, and the information involved, you may be entitled to:
- Learn whether we hold information about you and obtain access or a copy.
- Correct inaccurate information or ask for deletion.
- Restrict processing, object to certain processing, or receive portable data where applicable.
- Withdraw consent for processing based on consent.
- Opt out of applicable sales, targeted advertising, or other legally defined sharing and certain significant profiling decisions.
- Use an authorized agent where the law permits and appeal a refusal where an appeal right applies.
To make a request, email support@doublecat.com. Explain whether it concerns the game, spellburst.app, or doublecat.com. For a game request, include your player identifier if available. Do not send passwords or full payment details.
We may ask for proportionate information to verify control of the relevant record or an agent's authority. If we cannot connect an email address to an anonymous player record, we may need another way to verify the request. We will explain any limitation rather than disclose someone else's records.
We will respond within the period required by applicable law and explain any lawful exception or refusal. To request review of a refusal, reply to our response or email us with the subject “Privacy appeal.” You will not be treated unfairly for exercising a protected privacy right.
You may complain to the privacy regulator where you live or work, or where you believe an infringement occurred.
I. Younger players
SpellBurst is a word game with content intended to be suitable for a broad audience. A store content rating describes the game's content; it does not replace children's privacy requirements or any parental permission required for accounts, purchases, or data processing.
We do not ask players for their name, email address, or telephone number to play. Technical identifiers and gameplay information may nevertheless be treated as personal information, including when associated with a child.
Parents and guardians may contact us to ask about information associated with their child's use of the game or request its deletion where applicable. We may need to verify the request and identify the relevant anonymous player record.
If we learn that a child's information has been collected without consent or another authorization required by applicable law, we will take appropriate steps to stop the unauthorized processing and delete the information, or obtain the required authorization before further processing.
J. Updates and contact
We will update this notice when our practices change and show the revised date. For changes requiring additional notice or consent, we will provide that notice or request consent as applicable. Publishing a revised notice does not itself opt you into new optional tracking.
For privacy questions, requests, or complaints:
DoubleCat LLC
7108 Cedar Ave
Takoma Park, MD 20912
United States