Privacy Policy
In short. You play without an account. Your progress stays on your device. Photos you turn into pictures are processed on your device and never uploaded. We use a few services to sell optional purchases, show ads you choose to watch, count how the game is used and fix crashes. We do not sell your personal data.
1. Who we are
- Controller
- KSATALSIN, S.L.
- Tax ID (NIF)
- B44954568
- Company details
- Legal Notice on ksatalsin.com
- Contact
- support@ksatalsin.com
This policy covers the Zen Chroma game. Our website has its own privacy policy.
2. What the game handles, and why
Your game progress
Levels, stars, coins, boosters, settings, paused levels and the pictures you finish are stored on your device. We do not receive them. If you sign in to Game Center (iOS) or Google Play Games (Android) to keep your progress in the cloud, Apple or Google store that copy under their own terms, together with your player ID.
Photos you turn into pictures
When you pick a photo to make your own coloring page, the game reads only that photo, with your permission, and does all the work on your device. The photo is not uploaded to us or to anyone else. You can delete the resulting picture in the game at any time.
Purchases
Payments are handled by the App Store or Google Play; we never see your card details. To confirm a purchase and know whether your Chroma Club subscription is active, the game uses Adapty, which receives the store's purchase receipt, the product, price and currency, your country and an anonymous ID created for this app. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).
Ads you choose to watch
The game shows rewarded video ads only when you tap to watch one, for example to get five more moves. There are no ads that interrupt play. Ads are served through AppLovin MAX and the ad networks it works with (such as Google AdMob, Meta Audience Network, Unity Ads, Mintegral, Pangle and Liftoff). To show and measure an ad they process your IP address, device and app information and how you interact with the ad, and, where you allow it, your device's advertising ID (IDFA on iOS, advertising ID on Android) to personalise ads.
- In the EEA, the UK and Switzerland, the game asks for your consent first (Google's consent dialog, based on the IAB framework). You can change your choice at any time in the game's settings. Without consent you still get ads, but they are not personalised.
- On iOS, the advertising ID is used only if you allow tracking in Apple's prompt.
- Chroma Club members get these rewards without watching ads.
Legal basis: your consent for personalised ads (Art. 6(1)(a)); our legitimate interest in funding a free game for non-personalised ads (Art. 6(1)(f)).
How the game is used, and crashes
We use Google Firebase (Analytics, Crashlytics and Remote Config) to see which levels are too hard or too easy, which features are used, and why the game crashed. Firebase receives events such as "level started" or "moves bought", an app instance ID, device model, operating system, language, country and crash reports. We do not use this to identify you. Legal basis: our legitimate interest in keeping the game working and balanced (Art. 6(1)(f)), or your consent where the law requires it.
Where an install came from
If we advertise the game, AppsFlyer tells us which campaign led to an install. It processes device and install information and, where you allowed it, the advertising ID. Legal basis: your consent where required, otherwise our legitimate interest in measuring our advertising.
Sharing a picture
When you share a finished picture, the game hands the image to your phone's share menu. Where it goes next is your choice; we do not receive it.
3. Who else processes the data
- Apple and Google: app stores, payments, Game Center and Google Play Games.
- Adapty: purchase and subscription status.
- AppLovin and the ad networks it works with: rewarded ads.
- Google Firebase: usage statistics, crash reports, remote settings.
- AppsFlyer: install attribution.
Some of them are outside the European Economic Area. Transfers rely on adequacy decisions (such as the EU-U.S. Data Privacy Framework) or Standard Contractual Clauses. We do not sell your personal data.
4. How long it is kept
Data on your device stays until you delete the game. Purchase records are kept as long as the law requires for tax and accounting. Usage statistics are kept for up to 14 months and crash reports for up to 90 days. Advertising and attribution partners keep data for the periods set in their own policies.
5. Children
Zen Chroma is made for players aged 13 and older and is not directed at children under 13. We do not knowingly collect personal data from them. If you think a child has shared personal data with us, write to us and we will delete it.
6. Your rights
You can ask to access, correct, delete, restrict or port your personal data, and object to its processing. Where we rely on consent, you can withdraw it at any time. To delete the data on your device, delete the game. For data held by the services above, write to support@ksatalsin.com from your device and we will help you find it. Your purchase history with Apple or Google stays with them. Step by step instructions are on Delete your data.
You may also complain to the Spanish Data Protection Agency (AEPD), www.aepd.es, or to the authority in your country.
7. Security
Data travels over encrypted connections, and we give each service only what it needs. No system is perfectly secure, so we cannot promise absolute security.
8. Changes
If we change how the game handles data, we will update this page and its date, and tell you in the game when the change matters.