Witensi

Legal

Privacy Policy

Last updated: 2026-10-25

This Privacy Policy explains what personal data is processed when you play Dinos Blast Island (the “Game”) or visit https://www.witensi.com (the “Website”), why, on what legal basis, with whom it is shared and what your rights are. It is based on the services actually integrated in the Game at the date shown above.

1. Data controller

The data controller is Witensi, publisher of the Game and the Website. Full legal information about the publisher is available in the Legal notice section of the website. Contact for privacy matters: contact@witensi.com. No data protection officer has been appointed; you can reach us directly at this address.

2. Scope

This Policy covers the Game on Android and iOS and the Website. It does not cover the practices of Google Play or the Apple App Store, which process your store account and payment data under their own privacy policies.

3. Data you provide directly

The Game does not require an account and does not ask you for your name, e-mail address or password. The only information you may enter is an in-game nickname shown in Multiplayer, which is stored on your device only. When you contact our support, we process the data you send us (e-mail address, message content, attachments) to answer you.

4. Data collected automatically in the Game

Game progress (levels, collection, currencies, items, settings, nickname) is stored locally on your device and is not transmitted to us.

The Game integrates the following services, which collect data automatically:

  • Firebase Analytics (Google LLC): usage events (for example app opens, sessions, screens viewed, offers granted), approximate location derived from your IP address (country or region), device information (model, operating system version, language, screen size), an app-instance identifier generated by Firebase, and the mobile advertising identifier of your device (Google Advertising ID or Apple IDFA) where your system settings allow it. IP addresses are used transiently by Google to derive approximate location and are not stored in reports.
  • Firebase Crashlytics (Google LLC): crash and error reports, including stack traces, the state of the device at the time of the crash (model, operating system, free memory and storage, orientation), the Game version and a Crashlytics installation identifier.
  • Advertising (AppLovin MAX, AppLovin Corporation, and its mediated networks): when an advertisement is displayed or a rewarded video is watched, the advertising SDK processes your mobile advertising identifier (where allowed), IP address, device information, and ad interaction data in order to serve, measure and limit the frequency of ads. On iOS, ad tracking requires your consent through the App Tracking Transparency prompt.
  • In-app purchases (Google Play Billing / Apple In-App Purchase): the store processes your payment. We receive only a purchase token or receipt and the product identifier in order to deliver and verify the purchase. We never receive your payment-card details.
  • Local notifications: reminders (for example for the daily chest or the gift wheel) are scheduled on your device by the Game itself. No data is sent to a server for this purpose, and you can disable notifications in your system settings.

5. Data received from third parties

When you download the Game or make a purchase, Google (Google Play) or Apple (App Store) provides us with limited information needed to deliver the Game and your purchases: the product identifier, a purchase token or receipt, the store country, and aggregated, non-identifying download, performance and crash statistics shown in the developer consoles.

We never receive your name, e-mail address, payment details or store account identity from Google or Apple. The Game does not offer sign-in through social networks or other identity providers, so we receive no data from such services.

6. Purposes and legal bases

  • Providing the Game and its features, including delivering purchases — performance of the contract (Article 6(1)(b) GDPR).
  • Measuring usage and improving the Game (Firebase Analytics) — our legitimate interest in understanding how the Game is used (Article 6(1)(f) GDPR), or your consent where the law requires it, in particular for the use of advertising identifiers.
  • Detecting and fixing crashes (Firebase Crashlytics) — our legitimate interest in providing a stable Game (Article 6(1)(f) GDPR).
  • Displaying advertisements and rewarded videos — our legitimate interest in financing a free-to-play Game (Article 6(1)(f) GDPR); personalised advertising and tracking only with your consent (Article 6(1)(a) GDPR) where required.
  • Answering support requests — our legitimate interest and, where applicable, performance of the contract.
  • Complying with legal obligations (accounting, responding to authorities) — legal obligation (Article 6(1)(c) GDPR).

7. Recipients and processors

Your data is shared only with the following categories of recipients, strictly for the purposes above:

  • Google LLC (Firebase Analytics, Firebase Crashlytics, Google Play Billing) — 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
  • Apple Inc. (App Store, In-App Purchase) — One Apple Park Way, Cupertino, CA 95014, United States.
  • AppLovin Corporation (AppLovin MAX advertising mediation) and the advertising networks it mediates — 1100 Page Mill Road, Palo Alto, CA 94304, United States.
  • Our hosting provider for the Website (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France), which processes server connection logs.

We do not sell your personal data.

8. International transfers

Some recipients are located in the United States. Transfers are covered by the European Commission's adequacy decision for organisations certified under the EU-US Data Privacy Framework and/or by the European Commission's Standard Contractual Clauses, together with additional safeguards where necessary.

9. Retention periods

  • Game progress: stored on your device until you delete the Game's data or uninstall it.
  • Firebase Analytics: user-level and event data are retained for two months by default (the retention period configurable in Firebase, up to 14 months); aggregated reports may be kept longer.
  • Firebase Crashlytics: crash reports are retained for 90 days.
  • Advertising data: processed by the advertising partners for the periods described in their own policies.
  • Purchase tokens and receipts: for the duration needed to deliver and verify purchases and to meet accounting obligations.
  • Support e-mails: up to three years after our last exchange.

10. Security

We apply appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS/TLS) to the services used, access limited to what is necessary, and reliance on the security measures of Google and Apple for their respective services. No system is perfectly secure; if we become aware of a breach affecting your data, we will act in accordance with applicable law.

11. Controlling your information

You can control the data processed in connection with the Game at any time:

  • Personalised advertising: where the law requires consent, it is requested when you first launch the Game; you can give, refuse or withdraw it at any time in the Game's settings. On iOS, ad tracking also requires your permission through the App Tracking Transparency prompt.
  • Advertising identifier: you can reset or delete your device's advertising identifier, or opt out of personalised ads, in your Android or iOS privacy settings.
  • Parental control: the Game includes a parental control protected by a password, which allows a parent to restrict in-app purchases; Google Play and the App Store offer additional parental controls, including purchase approval.
  • Notifications: you can disable the Game's notifications at any time in your device's system settings.
  • Local data: you can erase all local game data by clearing the Game's data in your device settings or uninstalling the Game.
  • Support data: you can ask us at contact@witensi.com to delete the e-mails you have sent us.

12. Your rights

Under the GDPR and French data-protection law, you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may also give instructions on the fate of your data after your death.

To exercise your rights, write to contact@witensi.com. We may ask you for information needed to verify your request. Because most Game data is stored only on your device, you can delete it yourself by clearing the Game's data or uninstalling it; you can also reset or limit your advertising identifier in your Android or iOS settings.

You have the right to lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr), or with the supervisory authority of your country of residence.

13. Children

The Game is not intended for children under 16, and we do not knowingly collect personal data from children under 16. Users aged 16 to 17 (or under the age of majority in their country) may only use the Game with the consent of a parent or legal guardian; in France, a child under 15 may only consent to the processing of their personal data jointly with a parent or guardian.

The Game includes a parental control protected by a password, which allows a parent to restrict in-app purchases, and Google Play and the App Store provide their own parental-control tools. If you are a parent or guardian and believe that your child has provided us with personal data, contact us at contact@witensi.com and we will delete it.

14. Cookies and trackers on the Website

The Website does not use cookies, analytics or any third-party tracker. The only information stored in your browser is your chosen language (local storage key “witensi-lang”), which is strictly necessary to display the Website in your language and is never transmitted to us. Our hosting provider keeps standard server logs (IP address, date and time, page requested, browser) for security purposes, for a limited period.

15. Account deletion

The Game does not offer or require a user account; therefore there is no account to delete. To erase all local game data, clear the Game's data in your device settings or uninstall it. To request the erasure of data held by the services described above, contact us at contact@witensi.com.

16. Changes to this Policy

We may update this Policy when the Game, the services it uses or the law change. The latest version is always available at https://www.witensi.com/privacy/ with its update date. Material changes will be announced in the Game or on the Website.

17. Contact

For any question about this Policy or about your personal data: contact@witensi.com.