Privacy Policy – Alchemy TD
Last updated: October 26, 2026
This policy explains what information AlchemyTD (“the game”, “we”) handles, why, and the choices you have. The short version: you don’t need an account, we never ask for your name or email inside the game, and analytics only run if you say yes.
1. Who is responsible
The game is developed and published by Guillermo Lechuga Rivas (Spain), who is the data controller.
Contact for any privacy question or request: alchemytd@gmail.com
2. Information the game handles
Your game progress
Your progress (gold, gems, discovered recipes, Lab, records, settings) is stored on your device. If you turn on iCloud sync, it is also stored in your private iCloud database, managed by Apple under your Apple Account. We cannot see or access that data.
Analytics and crash reports (only with your consent)
If you agree, the game uses Google Firebase Analytics and Firebase Crashlytics to understand how the game is played and to fix crashes. This includes:
- Gameplay events (for example: a run started or ended, the wave reached, a recipe discovered, a screen opened).
- Basic technical data: device model, OS version, app version, language and country/region.
- Crash reports: the state of the app when it crashed.
Collection is off until you accept. We do not use the advertising identifier (IDFA) for analytics, we do not set a user ID, and analytics data is never used for advertising. You can turn it off at any time in Settings → Privacy, where you can also export the local log of what the game has recorded.
Ads (optional)
The game shows only optional rewarded ads (you choose to watch one in exchange for a reward), served by Google AdMob. To serve and measure ads, Google may process your IP address, device information, ad interactions and, only if you allow it through Apple’s “Allow apps to track” prompt, your device’s advertising identifier.
- In the European Economic Area, the UK and Switzerland, you’ll be asked for consent through Google’s consent form before personalized ads are shown. You can change your choices at any time in Settings → Privacy.
- If you decline, you may still see non-personalized ads.
- Buying the Alchemist’s Pass removes the need to watch ads.
More information: How Google uses data from apps that use its services.
Purchases
In-app purchases are processed by Apple. We never receive your payment details. We use RevenueCat to validate purchases and restore them on your devices; it receives an anonymous app identifier and your purchase receipts (product, date, price, country). It does not receive your name or email.
Notifications
Reminders (for example, when Lab research finishes) are local notifications scheduled on your device. No data is sent to any server to deliver them. You can turn them off in the game’s Settings or in iOS Settings.
What we don’t collect
No account, name, email, phone number, contacts, photos, precise location or health data. The game has no chat and no user-generated content.
3. Why we use it (legal bases)
- Consent: analytics, crash reports and personalized ads.
- Performance of a contract: delivering and restoring your purchases.
- Legitimate interest: serving non-personalized ads to keep the game free, and preventing fraud.
You can withdraw your consent at any time without affecting the game’s core features.
4. Service providers
We share data only with the providers needed to run the game, each bound by its own privacy terms:
- Apple (App Store, payments, iCloud, notifications) — apple.com/legal/privacy
- Google (Firebase Analytics, Crashlytics, AdMob) — policies.google.com/privacy
- RevenueCat (purchase validation) — revenuecat.com/privacy
Some of these providers process data outside the European Union (for example, in the United States). Those transfers are covered by the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
We do not sell your personal data.
5. How long we keep it
- Game progress: on your device (and iCloud, if enabled) until you delete the game or your iCloud data.
- Analytics: kept for a limited time (up to 14 months) and then deleted automatically.
- Crash reports: kept up to 90 days.
- Purchase records: as long as needed to restore purchases and meet legal obligations.
6. Your rights
Depending on where you live (for example, under the EU GDPR or California’s CCPA), you have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent. Because we don’t collect your name or email in the game, we may need some detail from you (for example, the approximate date of a purchase) to find your data.
To exercise any right, write to alchemytd@gmail.com. We’ll reply within 30 days.
If you’re in the EU, you can also file a complaint with your data protection authority (in Spain, the Agencia Española de Protección de Datos).
Deleting your data: turn off analytics in Settings → Privacy, delete the game from your device, and, if you used iCloud sync, delete the game’s data in iOS Settings → [your name] → iCloud → Manage Storage. For anything else, email us.
7. Children
AlchemyTD is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us with data, contact us and we will delete it.
8. Changes to this policy
If we change this policy, we’ll update the date at the top. Significant changes will also be announced in the game.
9. Contact
Guillermo Lechuga Rivas — alchemytd@gmail.com