Privacy Policy

Last updated: 13 June 2026

This policy explains what information Numpal collects, why we collect it, and the choices you have. Numpal is operated by Mulder Digital Ltd (company number 11763023), registered in England and Wales. It applies to players worldwide.

Who we are

Mulder Digital Ltd is the data controller for the personal information described here. You can reach us at contact@mulderdigital.com or by post at 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom.

Information we collect

• Account identifier. When you first open Numpal we create an anonymous account through Firebase Authentication. This is a random identifier — we do not ask for your name, email address, or phone number.
• Profile information. The username and country flag you choose, which are shown publicly on leaderboards alongside your scores.
• Gameplay data. Your scores, levels completed, badges, streaks, and similar progress information.
• Device and usage data. Through Firebase Analytics, Crashlytics, and Performance Monitoring we collect app events, crash diagnostics, approximate region, device model, operating system, and similar technical information to keep the app working and improve it.
• Advertising data. If you see ads, our advertising partner (Google AdMob) may process your device's advertising identifier to deliver and measure ads, subject to your consent choices and the children's safeguards below.
• Purchase data. If you buy the ad-free upgrade, the purchase is processed by Apple or Google as merchant of record; we receive confirmation of purchase status but not your payment details.
• Notification token. If you enable notifications, we store a push token so we can send occasional reminders.

We do not collect precise location, contacts, photos, or microphone/camera data.

How and why we use your information

We process your information on the following legal bases:

• Contract — to create your account, run leaderboards, deliver purchases, and provide the game.
• Legitimate interests — to keep the app secure and stable, understand how it is used, and improve it. We have carried out a balancing test to ensure our interests do not override your rights and freedoms.
• Consent — for personalized advertising and, on iOS, app tracking. You can change these choices at any time.
• Legal obligations — where we are required to retain or disclose information by law.

Advertising and your choices

Numpal is free to play and supported by ads, which you can remove with an in-app purchase. Before showing personalized ads we ask for your consent using Google's consent tools (and, on iOS, the App Tracking Transparency prompt). If you decline, you will see only non-personalized (contextual) ads. You can withdraw consent at any time through your device settings.

Children's privacy

Numpal is a general-audience game that is suitable for children, so we take extra care with younger players. When required, we ask for your age in a neutral way; this is optional and is stored only on your device. For any player we identify as under the age of digital consent in their country (for example, under 13 in the United States under COPPA), and for any player whose age we do not know, we apply our most protective treatment.

For these players we collect only a per-install identifier and aggregate usage, diagnostic, and performance information, and we use it solely to support the internal operations of the game — namely:

• maintaining and analysing how the game functions;
• keeping it secure and diagnosing crashes and performance;
• serving non-personalized, contextual ads and limiting how often ads appear.

We do not use this information to build a profile of a child, to contact a child, or for behavioural or targeted advertising, and we do not knowingly collect any other personal information from a child without verifiable parental consent. To prevent any non-permitted use, for these players we:

• disable advertising identifiers and ad-personalization signals, and tag every ad request as child-directed (contextual only);
• do not assign a cross-session advertising or analytics user identifier;
• do not send push notifications;
• require our service providers (Google Firebase and AdMob) to process this information only on our behalf, for the operations above.

We retain children's data only as long as needed for these internal operations and never indefinitely (see How long we keep it). Parents or guardians who believe their child has provided information they would like removed can contact us at contact@mulderdigital.com and we will delete it promptly. You can also delete the account and all associated data at any time from Profile Settings → Account → Delete Account in the app — see how to delete your data.

Who we share information with

We share information only with service providers who help us run Numpal:

• Google / Firebase — authentication, database hosting, analytics, crash reporting, performance, messaging, and remote configuration.
• Google AdMob — advertising.
• Apple App Store / Google Play — purchase processing as merchant of record.

We do not sell your personal information.

International transfers

Our service providers may process your information in countries outside your own, including the United States. Where personal data is transferred from the UK or European Economic Area, it is protected by appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your account and gameplay data for as long as your account exists. If you delete your account, we delete your profile, scores, and associated data; you drop off the leaderboards on the next update. Aggregated or anonymised statistics that no longer identify you may be retained.

For children — and for players whose age is unknown — we keep data only as long as reasonably necessary to support the internal operations described above, and never indefinitely. In particular, Firebase Analytics data is retained for 2 months, and crash and performance diagnostics for 90 days, after which they are deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to our use of your personal information, and to withdraw consent. You can delete your account and data directly in the app, or contact us at contact@mulderdigital.com. We aim to respond within one month. If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection authority; in the UK this is the Information Commissioner's Office (ICO).

Security

We use industry-standard measures to protect your information, but no method of transmission or storage is completely secure.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

Contact us

Mulder Digital Ltd · 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom · contact@mulderdigital.com