Privacy Policy

Protecting your personal data is important to us. This Privacy Policy explains how personal data is collected, processed, and stored when using the Wonderslot mobile application.

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

2. Nature of the App

Wonderslot is a social casino game without real money gambling.
No real money stakes, payouts, or cash winnings are offered.

3. Data Collected

When using the app, the following categories of data may be collected, processed, and stored:

a) Identification Data

• Game character nickname
• Game character gender

b) Localization Data

• Locale / language preference

c) Technical Data

• Device type, operating system and version, app version
• IP address and access timestamp (used for security and abuse detection; never for advertising or cross-site tracking)

d) Usage and Game Data

• Game progress, achievements, in-game interactions
• Error and crash reports
• Daily activity metrics (games started, spins, in-game currency wagered, won and bought, items used, login streak, referrer source) used to operate game features such as daily bonuses and to inform internal product, retention and pricing analysis on first-party data
• Purchase records (item, date, region as reported by the payment processor)

e) Push Notifications Data

• Firebase Cloud Messaging (FCM) registration token, used solely to deliver transactional notifications related to your account or gameplay

f) Google Play Games Sign-in Data

When you sign in, the app authenticates you with Google via OAuth and our backend retrieves your Google Play Games player ID, display name, and (only if you grant permission) your friends list. The OAuth tokens involved are used only for this sign-in flow and are not shared further.

g) Public Leaderboards

Top players in weekly and monthly events appear on in-game leaderboards visible to other players, showing your in-game nickname and gender (Section 3a) and your event result. You can avoid being listed by not entering the event.

h) Server-side Logs

Each request to our backend is logged for security, abuse detection and diagnostics: user ID, IP address, timestamp, script, and (for failed or suspicious requests) the request payload. These logs are not used for advertising and are not shared with third parties.

i) Firebase Analytics (only with your explicit consent)

Firebase Analytics is disabled by default. If, and only if, you accept the in-app analytics consent prompt, the app uses Google Firebase Analytics (provided by Google Ireland Limited) to collect the following data:

• Firebase installation ID / app instance ID — a randomly generated, pseudonymous identifier specific to this app install on this device. The app does not read the Android Advertising ID (AAID) or Android ID (SSAID): the AD_ID permission is removed at build time, and AAID/SSAID collection by Firebase Analytics is disabled in the app manifest.
• App events (e.g. screen views, in-app actions)
• App version, device model, operating system version, language
• Approximate region derived from IP address (the IP itself is used only to derive country and is then discarded by Firebase)

This data is used solely to understand how the game is used and to identify issues. We do not use these identifiers for advertising, do not run ads in the app, and do not share Firebase Analytics data with advertisers. If you decline or have not yet been asked, none of the above is collected. You can grant or withdraw your consent at any time from the in-game privacy settings; your choice will apply to all future sessions.

Where possible, data is processed in a pseudonymized form and is not used to identify you outside the app.

4. Purpose of Data Processing

The collected data is processed for the following purposes:

• Providing and operating the app
• Creating and managing user profiles
• Ensuring age verification (18+)
• Personalizing language and in-game experience
• Saving game progress and user preferences
• Operating in-game leaderboards and competitive events
• Improving gameplay and user experience
• Internal product, retention and pricing analysis on first-party data
• Detecting errors and ensuring technical stability
• Security event logging, abuse detection, and request-replay protection
• Preventing misuse, fraud, and manipulation
• Delivering transactional push notifications
• Where you have consented: understanding aggregated usage of the app via Firebase Analytics, in order to identify issues and prioritize improvements

5. Legal Basis

• Article 6(1)(b) GDPR — performing the contract (running the app for you)
• Article 6(1)(f) GDPR — legitimate interest in security, abuse detection, and first-party product analytics. We do not use your data for cross-site behavioural advertising or third-party ad targeting.
• Article 6(1)(a) GDPR — your consent, for optional Firebase Analytics. You can withdraw consent at any time from the in-game privacy settings; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Article 6(1)(c) GDPR — legal obligations (age restriction and tax record-keeping for purchases)

6. Data Sharing with Third Parties

We do not sell your data. We share it only with the parties below.

Processors (acting on our instructions):

• Google Ireland Limited — Firebase Analytics (only when you have granted consent), Firebase Cloud Messaging (push notifications) and Google Play Games Services (sign-in, friends list).
• Hosting, CDN, and infrastructure providers running the game backend and the wonderslot.app website. A current list is available on request via Section 12.

Independent controllers (deciding for themselves how data is processed):

• Google Ireland Limited / Google LLC — handles in-app purchases via Google Play Billing under Google's Privacy Policy. We receive only the purchase token, the item, the date, and the country/region of the purchase.

Some of these parties may transfer data to the United States; transfers are made under safeguards required by Chapter V of the GDPR (the EU–US Data Privacy Framework or Standard Contractual Clauses, as applicable). Data may otherwise be disclosed only where required by law.

7. Data Retention

• Account profile and game progress — until you delete your account.
• Daily activity metrics — alongside your account.
• Server-side logs — kept as long as needed for security and operations; deletion of logs relating to your account is available on request.
• Purchase records — for the period required by tax law (typically six years in the UK).

Anything no longer needed is deleted or anonymized.

8. User Rights

Under the GDPR, users have the right to:

• Access their personal data
• Rectify inaccurate or incomplete data
• Request deletion of their data
• Restrict data processing
• Receive their data in a portable format
• Object to data processing
• Withdraw consent for analytics at any time

Where processing is based on your consent (e.g. Firebase Analytics), you can withdraw your consent at any time from the in-game privacy settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Requests can be submitted at any time to: support@wonderslot.app

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

10. Age Restriction

The app is intended exclusively for users aged 18 years and older.

Wonderslot is not designed for children or minors. We do not knowingly collect or process personal data from individuals under the age of 18.

If we become aware that personal data of a person under 18 has been collected, such data will be deleted immediately.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal, technical, or operational changes. The current version will always be available within the app and on our website.

Last updated: 10 May 2026.

12. Contact

For questions regarding this Privacy Policy or data protection matters, please contact:
support@wonderslot.app