Privacy policy

Who we are

Ondular Studio is a game studio based in Portugal. The data controller is[legal name], tax number [NIF], [address].

For anything about your data, email hello@ondularstudio.com. We reply to every message.

This website

No cookies, no ad trackers

ondularstudio.com doesn’t use cookies or ad trackers. Fonts and videos are served from our own site.

To count visits, we use Cloudflare Web Analytics, from the same company that hosts the site. It doesn’t use cookies, doesn’t follow you to other sites and doesn’t identify you. It shows us totals, such as which pages are visited, which site sent people here (for example TikTok or Discord), and the country and type of device. Legal basis: our legitimate interest in knowing whether the site works and how people find it.

The Goldfish demo on the home page saves your best score in your browser’s local storage. It stays on your device, we never see it, and you can clear it by clearing your browser data.

Hosting

The site is hosted by Cloudflare (Cloudflare, Inc.). Like any web server, it keeps short technical logs (such as IP address, browser and time of the request) to keep the site running and secure. We don’t use these logs to identify you.

Newsletter

If you sign up, we store your email address so we can tell you when Goldfish launches and send occasional news. We only use it for that.

• Legal basis: your consent, which you give when you sign up with the form.
• Who processes it: MailerLite (UAB MailerLite, Lithuania, EU), the service we use to send emails.
• How long we keep it: until you unsubscribe. Every email has a one-click unsubscribe link.
• Email opens: our emails include a tiny image that tells MailerLite when an email is opened. We only look at the totals, to know whether the emails are useful. Blocking images in your email app turns this off.

Links to other sites

Links to Discord, TikTok, Instagram and YouTube take you to those services, which have their own privacy policies.

Goldfish (mobile game)

Goldfish doesn’t ask you to create an account, and we don’t ask for your name or email in the game. Your progress and best scores are saved on your device.

Ads

Goldfish is free and shows ads through Google AdMob. To show ads and measure them, Google may collect data from your device, such as your advertising ID, IP address, approximate location and how you interact with ads.

• Your age: when you first open the game, it asks your age. We only use your answer to choose the right kind of ads, and it stays on your device.
• Younger players: if you’re under the age where you can agree to this yourself in your country (between 13 and 16 in the EU), you only see non-personalised ads that are suitable for children, and Google is told not to use your data for personalised ads.
• Everyone else: in the EU, UK and Switzerland, the game asks for your consent before showing personalised ads. You can change your choice at any time in the game’s settings. If you say no, you’ll see non-personalised ads, which use less data.
• You can also reset or limit your advertising ID in your phone’s settings (Android: Settings › Privacy › Ads; iPhone: Settings › Privacy & Security › Tracking).
• Google’s use of this data is described in How Google uses information from apps that use its services (opens in a new tab).

Purchases

Any purchase in Goldfish is handled by the App Store or Google Play. We never see your payment details; the store only tells us that a purchase was made.

Game statistics and crash reports

To find bugs and improve the game, Goldfish uses [analytics or crash reporting service], which collects anonymous data about how the game runs on your device (for example crashes, device model and game events). It isn’t used for ads.

Children

Goldfish is made for players of all ages and follows Google Play’s Families policy. We don’t ask anyone, of any age, for their name, email or other personal details in the game. If you think a child has shared personal data with us, email us and we’ll delete it.

Your rights

Under the GDPR you can ask us to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy of it. Where we rely on your consent, you can withdraw it at any time. Email hello@ondularstudio.com and we’ll answer within a month.

You can also complain to the Portuguese data protection authority, CNPD (opens in a new tab), or to the authority where you live.

Data outside the EU

Some of the services above, such as Google, may process data outside the European Union. When they do, they use the safeguards required by EU law, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Changes to this policy

If we change how we handle your data, we’ll update this page and the date at the top. For bigger changes, we’ll tell newsletter subscribers first.