CopperLight Games

Project POP · Beta

Privacy &
Data Deletion

Your reporting choices, the information used to support the game, and how to request deletion.

Effective October 25, 2026 · Pre-release privacy notice. Project POP has not begun its public beta. This notice covers our website, support and current verification testing, and explains the intended beta reporting design. Platform readiness and availability will be confirmed before distribution.

Who we are

Project POP is provided by CopperLight Games, LLC. This policy explains how we handle information when you play the beta, choose optional reporting, or contact us for help.

For privacy questions or help with a deletion request, email customerservice@copperlightgames.com. Email is our preferred and most reliable contact method. The owner monitors this address.

Registered mailing address: CopperLight Games, LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

The reporting and deletion descriptions below concern the updated Android verification workflow and intended beta design. Equivalent behavior on the older iPhone test build has not been verified. The 14+ eligibility controls and final platform behavior must be verified before public beta distribution.

Playing & saving your progress

You do not need to create a player login or provide an email address to play. The game stores progress, settings, active-game information, coins and specialty inventory on your device. The current beta does not offer player-account cloud synchronization.

The game also keeps a limited local diagnostic history. Choosing not to send optional reports does not stop you from playing. Local information is separate from information transmitted to us or our service providers. Device backup and sharing services you choose may handle copies under their own settings and policies.

Optional gameplay & crash reporting

In the intended beta reporting design, the “I am 18 or older,” Gameplay Analytics and Crash reports boxes start unchecked. Unchecked first-run choices have been verified on Android; final upgrade, relaunch and network behavior remain under verification. Gameplay Analytics and Crash reports are separate choices and become available after you confirm that you are 18 or older. You can play without enabling either option. The adult declaration is stored locally; the game does not request a date of birth. This declaration is not verified age assurance.

You can change these choices in Settings → Privacy. Turning reporting off does not itself delete information previously sent or guarantee removal of previously queued reports.

  • Gameplay Analytics: information such as sessions, screens, level attempts, wins, losses, retries, moves, in-game coin spending and performance measurements, used to understand gameplay and identify problems.
  • Crash reports: technical crash or error information and game context, such as the app version, device/software characteristics, recent actions and performance information. The beta problem-report control can send a diagnostic marker when crash reporting is enabled.

Google Firebase services use generated identifiers to distinguish installations, users and reporting sessions. These are not your name or a public player profile. Network requests involve technical network information. Analytics may derive approximate location from network information; the game does not request GPS access. Analytics advertising personalization and Google Signals are disabled. Granular location and device collection remain enabled in the Analytics configuration.

Authentication and app-integrity checks help protect reporting and privacy-request services. These services can process generated identifiers and technical verification information, including when you request deletion. A user-initiated privacy request may make a network connection even when optional reporting is off.

Beta reports & support

The beta report feature keeps a short, silent sequence of game images locally with diagnostic context. Saving a report does not automatically upload its images. You choose whether and where to share it through your device’s sharing controls.

If you contact us or send a report, we receive what you include, such as your email address, message, screenshots, recordings or diagnostic attachment. We use this information to respond and investigate. Please avoid sending passwords, payment-card details or unrelated personal information.

The owner alone handles support through Gmail on Google Workspace; support mail is not forwarded. Our policy is to delete ordinary developer-held support reports and attachments 90 days after resolution. Provider-held records, backups and platform feedback may follow separate retention arrangements.

If you use Apple TestFlight feedback, Apple processes feedback and diagnostic information through its own services. TestFlight feedback is separate from optional in-app Firebase reporting and does not automatically include POP’s local diagnostic report. Apple-held records are separate from copies retained by CopperLight.

Where to send beta feedback

Android testers can email feedback and voluntarily shared diagnostic reports to customerservice@copperlightgames.com. iPhone testers can submit screenshots and comments through TestFlight; those reports are available to the developer in App Store Connect. You can also use our email address for detailed reports or privacy questions on either platform.

TestFlight feedback, support email and optional Firebase diagnostics are separate channels. Sending feedback through one does not automatically send it through the others.

Apple states that TestFlight automatically collects beta usage information and crash logs and shares them with the developer; these platform records are not controlled by POP’s optional Firebase switches. Apple retains beta feedback for one year and may keep crash and usage data until bugs are resolved. For access or deletion requests relating to TestFlight information, contact our privacy email; you can also manage Apple-held information through Apple’s Data and Privacy page.

Service providers & recipients

Google Firebase processes information for reporting, authentication, app integrity and privacy requests. Google Workspace processes support email. A sharing or email service you select handles information you send through that service. Apple handles TestFlight information when you use its beta platform.

Provider information: Firebase privacy, Google privacy and Apple privacy. Google Analytics is a separate service with its own terms. Provider processing information includes Firebase’s processing terms, the Google Cloud/Workspace processing addendum and Analytics processing-terms information.

BigQuery export is deferred and is not part of the current beta reporting workflow.

How long information is kept

Local progress and settings remain on your device unless changed or removed. Local diagnostics have a rolling capacity; saved reports have no fixed age-based expiry. Removing app data can erase progress.

Our beta Analytics property is configured for two-month retention of applicable user-level and event-level data, without resetting user retention when new activity occurs. This setting does not apply to standard aggregate reports.

Google documents that Crashlytics retains specified crash data and associated identifiers for 90 days before beginning removal from live and backup systems. This is separate from our deletion-request process and is not a guarantee of immediate erasure.

After both provider deletion requests have been accepted, our system marks the request record for expiry after 30 days. Expiry is not immediate deletion and does not prove that provider erasure has finished. Unresolved request records do not receive that expiry automatically.

Our policy is to delete ordinary developer-held support copies 90 days after resolution. Email, testing and backup providers may retain separate records.

Request telemetry deletion

In supported updated beta versions, open Settings → Privacy and use the deletion control. Requesting deletion turns off optional reporting choices. Our service authenticates and stores your request, automatically submits it to the relevant providers and retries unsuccessful submissions. You do not need to keep the game open after it confirms receipt. Before receipt, a failed or offline submission requires a subsequent retry.

“Request received. Deletion is pending.” means our service has stored your request, not that providers have finished erasing information. The current game may continue to show pending after provider submission. Keep your request reference if you contact us.

The automated request targets Analytics records associated with the game’s supplied user identifier and Crashlytics reports associated with its crash-reporting user identifier. Coverage of records without those matching identifiers has not been established.

It does not reset progress or coins, delete local reports or shared copies, or automatically delete all authentication, installation, security-log or support records. If you enable reporting again, new information may be collected.

If you have uninstalled the game, lost your reference or cannot use the control, email customerservice@copperlightgames.com. Include your reference if available and describe the problem. Do not send passwords or authentication tokens. We will help determine what information can be located and what verification is needed. Older records may be difficult to associate with you after pseudonymous identifiers are lost.

This website does not submit requests automatically.

Automatic processing & retained service records

Our beta service processes queued telemetry-deletion requests automatically on a five-minute schedule. This is a processing schedule, not a guarantee that a provider finishes erasing information within five minutes. A received request or a successful processing run does not establish completed provider erasure. Contact our privacy email if you need help with a pending request.

In our beta Google Cloud project, the ordinary log bucket is configured to retain logs for 30 days, and the required audit-log bucket is configured to retain logs for 400 days. These records are separate from the Analytics and Crashlytics deletion requests.

The current telemetry-deletion worker does not delete the anonymous Firebase Authentication user record. Automatic anonymous-account cleanup is disabled. A telemetry-deletion request therefore does not establish deletion of that authentication record or every installation-associated record. Contact us if your request concerns those records.

Audience & purchases

The planned beta is limited to testers located in the United States, aged 14 and older. Under the intended design, players aged 14–17 can play with optional in-app reporting off. Optional Gameplay Analytics and Crash reports are limited to eligible adults aged 18 or older who opt in separately. Email support and TestFlight feedback are separate services with their own information handling. Beta enrollment and distribution restrictions must be verified before invitations begin. Any broader release and its reporting arrangements will be announced separately.

Earned in-game coins can be spent on specialty items. Real-money checkout is unavailable in this gameplay-only beta.

Visiting this website

This website is hosted through ChatGPT Sites with Cloudflare infrastructure. The page source contains no added analytics scripts, advertising pixels, deletion form or automatic game-report upload. Hosting and security services may process technical request information, such as network addresses, browser details and security cookies, to serve and protect the website.

The website uses Cloudflare’s __cf_bm security cookie for bot management. Cloudflare describes this cookie as expiring after 30 minutes of continuous inactivity. See Cloudflare’s cookie information.

Website hosting/security processing is separate from the game’s optional Firebase reporting choices. Following an external link or contacting us by email uses the selected provider’s services.

Your privacy rights

Depending on your location and applicable law, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy, and may object to certain processing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Email customerservice@copperlightgames.com to make a request or raise a concern. Describe the right you want to exercise and include your in-game reference if available. We may request proportionate information to verify your identity and locate the relevant records. Do not send passwords or authentication codes. We will explain if an exception or identifier limitation prevents us from fulfilling a request.

These rights are subject to applicable conditions and exceptions. We respond within the period required by the law that applies to your request; we will explain any permitted extension. Exercising a privacy right will not itself prevent you from playing with optional reporting off.

European Economic Area and United Kingdom

Where the GDPR or UK GDPR applies, rights include access, correction, erasure, restriction, portability where applicable, objection and withdrawal of consent. The usual response period is one month, with extensions allowed in specified circumstances. You may complain to the supervisory authority where you live, work or consider an infringement occurred. Find EEA authorities through the European Data Protection Board; UK residents can contact the Information Commissioner’s Office.

Switzerland

You may request information about our processing, access to your data and correction, and seek deletion or object where applicable. You may contact the Federal Data Protection and Information Commissioner about a concern.

Canada

Subject to applicable federal or provincial law, you may request access and correction, withdraw consent subject to lawful restrictions, and challenge our handling of your information. You may complain to the Office of the Privacy Commissioner of Canada or your applicable provincial authority, including Québec’s Commission d’accès à l’information.

Mexico · México

You may exercise rights of access, rectification, cancellation and opposition (ARCO), and request withdrawal of consent or limitations on use where applicable. Contact our privacy email and describe the right and information concerned. Where Mexican law applies, the ordinary ARCO decision period is 20 business days, followed by 15 business days to implement an approved request, subject to lawful extensions and exceptions.

Puede solicitar acceso, rectificación, cancelación u oposición (derechos ARCO), revocar su consentimiento o solicitar límites al uso de sus datos cuando corresponda. Envíe su solicitud a customerservice@copperlightgames.com e indique el derecho que desea ejercer. No envíe contraseñas ni códigos de autenticación. El responsable es CopperLight Games, LLC, con el domicilio indicado al inicio de este aviso. La autoridad federal competente es la Secretaría Anticorrupción y Buen Gobierno.

United States

State privacy laws may provide rights to access, correct, delete or obtain a copy of information and, where applicable, opt out of certain uses or appeal a request decision. Applicability depends on the law and the business’s activities. Contact our privacy email to exercise an applicable right or appeal a decision. This notice does not limit rights available under your state’s law.

Purposes of processing

Optional adult gameplay analytics and crash reporting use separate opt-in choices. You can decline these categories and still play, or withdraw your choices in Settings → Privacy.

We process support correspondence to respond to requests and troubleshoot the game, and necessary security and integrity information to protect services and prevent abuse. Required service processing is separate from optional analytics consent.

Apple describes its own legal grounds for TestFlight in its TestFlight privacy notice. POP’s Firebase settings do not control Apple’s platform processing.

International processing

CopperLight Games, LLC is based in the United States. Information may be processed there and in countries where our service providers operate. The beta privacy-request worker operates in Google Cloud’s US-central region. Google documents that Firebase Authentication processes data in the United States, while services such as Crashlytics and App Check can use global infrastructure. A configured worker location does not establish the location of every Firebase, support, testing or hosting record.

Provider privacy and processing information is linked above. Contact our privacy email with questions about international processing.

Changes & questions

We will update this notice when our practices or verified beta behavior change and display the updated effective date. Where required, we will provide additional notice or choices before changed processing begins.

Privacy contact: customerservice@copperlightgames.com