Leave a Light On Privacy Policy

Leave a Light On public legal page. Generated from release legal sources on 2026-08-12 UTC.

Effective date: 2026-08-12
Developer / data controller: CraneLight Studio (CraneLight Studio LLC)
Address: 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States
Privacy contact: privacy@cranelightstudio.com
General support: support@cranelightstudio.com

1. Scope and controller

CraneLight Studio LLC is the controller of personal data processed for Leave a Light On. This policy explains the data we process, its sources, purposes, legal bases, recipients, retention, and your choices. Local-only play does not require optional analytics or crash reporting.

2. Data we process

• Essential account and game data: a pseudonymous account identifier, linked Apple or Google platform identifier if you choose account linking, language and region preferences, save data, story progress, inventory, and entitlement state.
• Purchase and security data: store order identifiers, receipts, settlement and refund status, fraud and security signals, IP address, and audit records. Apple and Google process payment-account details; we do not receive full card or bank details.
• Analytics and crash data: native collection stays off until the age and legal gates are complete. In the EU/EEA and UK, Firebase receives this data only after you actively opt in. In other released regions, it is enabled after those gates by default and can be disabled at any time. Data may include app-instance identifiers, device model, operating-system and app versions, country-level region, screen visits, gameplay events, performance data, and crash logs.
• Optional Apple refund-delivery data: only if you separately select Allow in Settings and ask Apple for a refund may we tell Apple whether that purchase was delivered and that you consented to this sharing. This does not include story text, story choices, or precise location. Consent lasts up to 365 days and can be withdrawn at any time.
• Support data: the email address, message, attachments, and diagnostic information you choose to send when contacting support.
• Optional website pre-registration data: if you register interest in the launch, we store your email address, language preference, submission time, and consent-notice version. We send no messages during the collection-only phase and require confirmation before launch updates begin. Details are available at https://cranelightstudio.com/notify/privacy.html.
• We do not request contacts, precise GPS location, camera, microphone, health, or biometric data. Support messages and platform records may contain a real name if you choose to provide one.

3. Purposes and legal bases

• Contract performance: provide local and cloud gameplay, account linking, purchases, entitlements, restoration, and requested support; GDPR Article 6(1)(b) and UK GDPR equivalent.
• Legal obligations: retain and produce transaction, tax, accounting, consumer-protection, and regulatory records; Article 6(1)(c).
• Legitimate interests: secure the service, prevent fraud and duplicate grants, investigate errors, answer support requests, resolve refund and entitlement disputes, maintain audit integrity, and establish or defend legal claims; Article 6(1)(f). Outside the EU/EEA and UK, this also includes measuring retention and flows and diagnosing crashes, with an anytime opt-out. These interests are balanced against player rights and use limited, pseudonymous data where practical.
• Consent: EU/EEA and UK Analytics and Crashlytics, optional Apple refund-delivery sharing, and optional website pre-registration; Article 6(1)(a). Refusing or withdrawing consent does not affect local play or other essential features.

We do not use personal data for decisions that produce legal or similarly significant effects, and we do not sell personal data or use it for cross-app advertising tracking.

4. Recipients

• Google Firebase acts as infrastructure and, where enabled, analytics and crash-reporting provider. Firebase supports authentication, cloud save, Remote Config, purchase validation, Analytics, and Crashlytics.
• Apple App Store and Google Play process purchases, account linking, platform authentication, refunds, and related records under their own privacy notices.
• Professional advisers, service providers, courts, regulators, or law enforcement receive only data reasonably necessary for a contract, legal obligation, or legal claim.

We do not allow these recipients to use player data for their own cross-context advertising on our behalf.

5. Retention

• Local save data remains on the device until you delete it or uninstall the game.
• Cloud account and save data remains until account deletion or 2 years of inactivity.
• User-level Analytics data is retained for no more than 14 months; Crashlytics reports for no more than 90 days. Opting out or withdrawing consent stops future collection. You may also request deletion of data already associated with your account where technically and legally available.
• Purchase, refund, fraud-prevention, and accounting records are retained for up to 7 years. After account deletion, identifiers are removed or pseudonymized where the record must be retained.
• Apple refund-delivery consent records remain until withdrawal, expiration after 365 days, or account deletion, subject to required transaction records.
• Support messages are retained for up to 2 years.
• Pre-registration data is deleted on request or 90 days after launch. If we later request confirmation and you do not confirm, we delete the unconfirmed record rather than use it for launch updates.

We delete or irreversibly de-identify data when the applicable period ends unless a longer period is required for a live dispute, security incident, or legal obligation.

6. Your choices and rights

All players may request access, correction, export, or deletion through Settings, privacy@cranelightstudio.com, or https://cranelightstudio.com/data-deletion.html. You may disable Analytics and Crashlytics or withdraw Apple refund-delivery consent in Settings. EU/EEA and UK users may withdraw Analytics and Crashlytics consent there. Withdrawal does not affect processing that was lawful before withdrawal.

EU/EEA and UK users may also request restriction, object to legitimate-interest processing, receive portable data they provided, and complain to the supervisory authority where they live or work. UK users may complain to the Information Commissioner's Office. We normally respond within 30 days. We may retain limited transaction or security records where law permits or requires it.

7. Children

The game is intended for players aged 13 and older. Users under 13 cannot use the app, and we do not knowingly process their data. EU/EEA users aged 13-15 receive essential-only features; Analytics and Crashlytics cannot be enabled for that age bracket.

8. International transfers and representatives

Firebase, Apple, and Google may process data in the United States and other countries where they operate. Where EU/EEA or UK data is transferred outside its originating jurisdiction, we use an applicable adequacy decision, the EU-U.S. Data Privacy Framework for certified recipients, the European Commission Standard Contractual Clauses, the UK Addendum, or another lawful safeguard. Contact privacy@cranelightstudio.com to request information or a copy of the relevant contractual safeguard, subject to necessary redactions.

We do not currently offer the game through EU/EEA or UK storefronts. We will not enable distribution there until any representative required by GDPR Article 27 or the UK GDPR has been appointed and the representative's identity and contact details are published in this section.

9. Security

We use access controls, encryption in transit and at rest where provided by our infrastructure, data minimization, pseudonymous identifiers, and audit logging. No system is completely secure; please contact privacy@cranelightstudio.com if you believe your account or data is at risk.

10. AI-assisted content disclosure

Some artwork and text in this game are produced with assistance from AI tools and reviewed by human creators. This does not change how personal data is handled.

11. Changes and renewed acceptance

We will announce material changes in the game and require renewed acceptance before continued use. Analytics and Crashlytics remain off before the legal gate everywhere and require affirmative opt-in in the EU/EEA and UK; elsewhere they can be disabled at any time.

Support

Contact support@cranelightstudio.com for legal, privacy, account, or purchase support.