Last updated October 5, 2026
Foxlight privacy policy
You play Foxlight without creating an account, and your progress stays on your device. If you want, you can sign in with your Apple or Google account and back your progress up to the cloud. We run no server of our own. What leaves the game is this: what Google AdMob needs to show you ads and, if you sign in, your account and your save (Google Firebase).
The short version
You don't need an account. If you don't sign in, we never learn your name or e-mail address; we never ask for your telephone number or location.
If you don't sign in, your progress is stored only on your own device. If you do, your save is backed up to Google Firebase, in data centres in the EU.
We operate no server of our own for the game.
The game shows Google AdMob ads, and those ads may use device identifiers.
Payment for optional purchases is taken by Apple or Google; we never see your card details.
The only third parties that receive anything are AdMob and, if you sign in, Firebase.
Who this covers
This policy applies to the iOS and Android versions of Foxlight, published by Kaya Can Kaya (Team Eks Games), İzmir, Türkiye. The website you are reading it on has a policy of its own.
Information stored on your device
The game keeps your progress in the operating system's own storage — NSUserDefaults on iOS, SharedPreferences on Android. That covers your level progress, stars and times, coins, the looks you have unlocked, your Endless Mode records, and your sound, music, motion, speed and language settings. If you have signed in, your account session (account ID, session token, which account you signed in with, the name your account provided) is kept here too, and so are your ad-free entitlement and your last 50 transaction IDs if you have made a purchase. On first launch the game gives you a random player code (for example M1231298747892149); that code never leaves your device.
The game also keeps a small gameplay log on the device — for example “level 5 started” or “game stalled” — to help us improve the game. The log holds no identifier, no advertising ID and no exact time; it is at most 5 MB and is never sent anywhere. Turning off Settings › “Measurement data” stops it and deletes what it holds; Settings › “Reset progress” deletes it too.
If you have not signed in, none of this leaves your device. It is removed when you delete the game. Because it is not backed up to us, uninstalling means your progress is gone (your phone's own cloud backup may keep a copy; we cannot see it). If you have signed in, your save is also backed up to the cloud save described below.
Advertising
The game shows two kinds of ads, both served by Google AdMob:
a full-screen ad between games, once every two games;
rewarded videos you choose to watch: “Continue with an ad” when you are caught, “Skip level” after a few attempts, and “Coins x2” on the reward screen.
To show and measure ads, prevent fraud and limit how often the same ad is shown, AdMob may collect information such as your IP address (to estimate your general location), your device advertising ID, app and device information, crash and performance information, and ad interactions. This information does not come to us and we do not combine it with anything else. Ad content is limited to the general-audience (PG) rating.
How Google handles this data: policies.google.com/technologies/partner-sites, and Google's privacy policy at policies.google.com/privacy.
Your choices about advertising
In the EU, the UK and Switzerland you are asked for consent before any personalised ad is shown. You can change your choice at any time from the Settings › “Privacy policy” row.
On iOS, the game can reach your advertising identifier only if you tap “Allow” on the App Tracking Transparency prompt. You can change this under Settings › Privacy & Security › Tracking.
On Android, you can reset or delete your advertising ID under Settings › Privacy › Ads.
Account and cloud save (optional)
You can choose to sign in from Settings › Account, with Apple or Google, on both iPhone and Android. If you don't sign in, no account or network identifier is created for you.
When you sign in, your account is held by Google Firebase Authentication: an account ID, your Apple or Google account ID and the name your account provided. If you sign in with Google, the e-mail address Google sends and (if Google provides one) a link to your profile picture are also stored in the account record; we never ask Apple for your e-mail. Apple gives your name only on the first sign-in, so it is written to the account record for your other devices to know it. Firebase also logs your IP address and client information during sign-in to prevent abuse.
Your save is a single document in Google Cloud Firestore: level, stars, best times, coin balance, the looks you own and wear, your Endless Mode records and tutorial flags. Your sound, language and accessibility settings, the gameplay log and your ad-free entitlement are not uploaded. Only your own account can read or write your save. When you sign in, your account is given a player name made of your first name, the initial of your surname and a sequence number (for example “Ali Y.-1”); so that no two accounts get the same name, this name is kept with your account ID in a name list in Firestore.
We do this for one purpose only: to carry your save between your devices and bring it back when you reinstall the game. We do not show your name or e-mail to other players; we do not use them for advertising, tracking or analysis, sell them or share them with anyone. Our legal basis is providing the service you asked for (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)); for sign-in security logs it is legitimate interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
The data controller is Kaya Can Kaya (Team Eks Games). Google processes this data on our behalf as a processor, under the Firebase Data Processing and Security Terms. Your save is kept in data centres in the EU (Belgium and the Netherlands); Firebase Authentication processes the account record only in data centres in the US. Google's infrastructure is global; transfers outside the EU and Türkiye take place under Google's contractual terms and the European Commission's Standard Contractual Clauses. Details: firebase.google.com/support/privacy.
Your account is kept until you delete it. Settings › Account › Sign out ends the session on this device; your account and your save remain, and you can sign back in with the same account.
Deleting your account and data
In the app: Settings › Account › Delete account. Your cloud save, your player name and your account are deleted; if you signed in with Apple, the game's access to your Apple account is revoked as well. The progress on your device stays with you.
Without the app: send an e-mail to info@eksgames.com with the subject “Delete my Foxlight account”. If you signed in with Google, include your Google account's e-mail address; we delete the account record and cloud save linked to it and let you know within 30 days at the latest. If you signed in with Apple, we do not know your e-mail, so delete from the app (install the game, sign in with the same Apple account, tap Delete account). You can also cut off the game's access in the “Sign in with Apple” section of your Apple ID settings; this does not delete the record we hold.
Once deleted, the data can no longer be reached by anyone; Google removes it from its systems and backups within 180 days at the latest. We keep no other data about you.
Deleting the game from your phone, or Settings › “Reset progress”, does not delete your cloud save.
In-app purchases
The game offers optional purchases: No ads (permanent; it removes the full-screen ads between games, while the rewarded videos you choose to watch stay available as an option) and three coin packs. Payment is handled entirely by Apple or Google; we never see your card details, your billing address or any part of your payment information. The game receives only the store's confirmation that the purchase completed, and delivers the item.
On your device the game keeps only your ad-free entitlement and your last 50 transaction IDs, so the same coins are never delivered twice. We do not send purchase information to any server of our own. Purchases are not tied to your account; Settings › Account › “Restore purchases” brings them back through your store account. For refunds, contact Apple or Google.
Children
The game is not directed at children under 13 and we do not knowingly collect personal information from them. It has no chat, no user-generated content and no way to contact other players. Sign-in is optional; if we learn that a child under 13 has linked an account, we delete the account and the cloud save. Purchases are subject to Apple's and Google's family settings (Ask to Buy, parental approval).
Your rights
If you have not signed in, we hold no personal data about you; to remove everything the game has stored, delete the app from your device. If you have signed in, you have the right to access, copy, correct and delete your account and cloud save: write to info@eksgames.com and we will answer within 30 days at the latest; to delete, see the section above. If you find our answer unsatisfactory, you can complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority of the EU country you live in. For questions about the advertising identifier, contact Google through the links above.
Changes
If this policy changes, the date at the top of this page changes with it.
Contact
Kaya Can Kaya — İzmir, Türkiye. Write to info@eksgames.com and we will answer.