Coastcoil - Privacy Policy
This policy explains what data the Coastcoil app (the "App") and coastcoil.com (the "Website") collect, why we collect it, who processes it, and your choices. Using the App or Website does not require joining our email list.
Service-description clarification: September 16, 2026. Every player who has not bought Remove Ads sees ads; the iOS tracking permission only decides whether ads are personalized and whether Unity Analytics runs. iOS progress backup uses iCloud; Game Center sign-in links the identity used to claim a player name.
Service-description clarification: September 23, 2026. On Android, Google Play Games sign-in links the identity used to claim a player name, to keep coins, unlocked snakes and level with our game services, and to back up your other game progress and settings with Unity Gaming Services. Android has no iCloud backup, and Google Play handles Android purchases.
Service-description clarification: September 23, 2026 (Android privacy choices). On Android devices in the European Economic Area, the UK and Switzerland, the App asks for your consent before ads are personalized and before Unity Analytics runs. Every player who has not bought Remove Ads still sees ads; without your consent they are not personalized.
Service-description clarification: September 23, 2026 (iOS privacy choices). On iOS devices in the European Economic Area, the UK and Switzerland, if you allow tracking when iOS asks, the App then asks for your consent before ads are personalized and before Unity Analytics runs. Both answers are needed. Every player who has not bought Remove Ads still sees ads.
Service-description clarification: September 26, 2026 (ad partners). Outside the European Economic Area, the UK and Switzerland, Google (AdMob) and Meta Audience Network also bid to show the App's ads. Players in those three places are served only by Unity Ads and ironSource Ads, the partners the App's privacy choices name.
Service-description clarification: September 27, 2026 (event progress). Wind-Up Week progress is saved on your device and backed up with your player ID in Unity Gaming Services Cloud Save when you are online on iOS. Other iOS game-progress backup continues to use iCloud.
Service-description clarification: September 24, 2026 (crash diagnostics). The App sends crash, error and freeze reports, with basic device details and an installation ID, to Unity (Unity Diagnostics) so we can find and fix problems. Unity keeps this data for 90 days.
Summary
Coastcoil is a single-player and co-op arcade game. We do not ask for your real name, email, or phone number in the App. To run online features (player names, leaderboards, co-op, purchases) and to show ads, the App and our service providers collect a limited set of data such as a player ID (linked to Game Center when you claim a name), device identifiers, purchase records, and gameplay or usage events. Every player who has not bought Remove Ads sees ads. On iOS we show personalized ads, and run Unity Analytics, only if you allow tracking when iOS asks you and, in the European Economic Area, the UK and Switzerland, also agree in the App's privacy choices. On Android in those countries, we do so only if you agree in the App's privacy choices. The Website collects your email address only when you choose to request launch updates or contact support.
Data we collect and why
| Data | Why | Provider |
|---|---|---|
| Player ID and platform sign-in identity | Reserve and recover your player name, run leaderboards | Unity Gaming Services, Apple Game Center, Google Play Games Services |
| Display name you choose | Reserve a unique name and show it on leaderboards | Unity Gaming Services |
| Game progress, scores, earned coins and settings | Back up and recover iOS and Android progress; run online leaderboards and game services | Apple iCloud for iOS progress backup; Unity Gaming Services (Cloud Save) for Android progress backup, iOS event-progress backup, and online game services |
| Purchase records | Deliver and restore in-app purchases; count purchases in analytics wherever Unity Analytics runs (see the row below) | Apple / Google, Unity IAP, Unity Analytics |
| Advertising identifier (on iOS, only if you allow tracking) and other device identifiers, ad interactions, device details such as model, language and connection type, ad performance data, coarse location | Show and measure ads, personalize them where allowed (see Advertising and tracking), and protect them from fraud | Unity LevelPlay / ironSource, Unity Ads; outside the EEA, the UK and Switzerland also Google (AdMob) and Meta Audience Network |
| Gameplay and usage events, a device identifier and approximate device info | Understand and improve the game (on iOS, only if you allow tracking and, in the EEA, the UK and Switzerland, also consent; on Android in those countries, only if you consent) | Unity Analytics |
| Network or connection data during multiplayer | Connect players in co-op matches | Unity Multiplayer / Netcode |
| Crash, error and freeze reports, with device model, OS version and an installation ID | Find and fix crashes and keep the game stable | Unity (Unity Diagnostics) |
For coin packs, Coastcoil's server checks the purchase with Apple on iOS or Google on Android before adding coins to your balance.
The App does not collect your real name, email address, phone number, contacts, photos, precise GPS location, health data, or browsing history. Website email collection is described separately below.
Website launch updates and support
If you request launch updates, we collect the email address you enter, a consent record including the date and current consent-statement version, the source site, and your confirmation or unsubscribe status. Signup uses Double opt-in: you must follow the confirmation link sent to your inbox before we send studio or game updates.
Supabase stores and processes the subscription record. Resend delivers the automated confirmation and welcome messages. Once a separate, non-public sending workflow is verified, Resend will also deliver future Coastcoil and Dexter Interactive updates. It does not send a separate unsubscribe confirmation message. Cloudflare Turnstile processes limited network, device, browser, and interaction signals to prevent automated abuse. Vercel hosts the Website and may process routine request information while serving it. Cloudflare provides authoritative DNS as well as Turnstile. Google Workspace processes support messages sent to support@coastcoil.com and privacy requests sent to privacy@dexterinteractive.com.
To prevent abuse and preserve consent evidence, Dexter-controlled publishing tables store a keyed hash derived from the request IP address; they do not store the raw address or a visitor user-agent hash. The protected Cloudflare request gateway forwards the raw IP address, but not the visitor's user-agent, to the receiving Supabase Edge Function. The function sends the IP address to Cloudflare Turnstile to verify the short-lived token and intentionally leaves the user-agent hash empty. Cloudflare, Supabase, Vercel, and other infrastructure providers may process request or network metadata in their security logs under their own policies. Dexter's IP hash follows the retention and deletion schedule of the associated subscription and consent record.
Launch updates are intended for people age 16 or older. Confirmation and unsubscribe links open the Dexter Interactive email-preferences page. Simply opening one of these links does not confirm or unsubscribe the address: the visitor must complete a fresh Cloudflare Turnstile check and press the explicit action button. Every future update includes an unsubscribe link, and a completed unsubscribe action stops future marketing messages from that Coastcoil list.
Advertising and tracking
The App uses Unity LevelPlay (ironSource) ad mediation with Unity Ads. Outside the European Economic Area, the UK and Switzerland, Google (AdMob) and Meta Audience Network also bid to show ads; players in those three places are served only by Unity Ads and ironSource Ads. Every player who has not bought Remove Ads sees between-game ads. On iOS, before ads or Unity Analytics start, we show Apple's App Tracking Transparency prompt. If you allow tracking, ads may be personalized using your device advertising identifier, and Unity Analytics runs. If you deny, we and our partners do not use that identifier to track you across other apps, we tell our ad partners that you have not consented to personalized advertising and have opted out of the sale or sharing of your personal information, Unity Analytics does not run, and you still see ads that are not personalized. You can change your choice anytime in iOS Settings, Privacy & Security, Tracking, which Settings, Ad Privacy in the App opens. In the European Economic Area, the UK and Switzerland, once you allow tracking, Settings, Ad Privacy opens the App's privacy choices instead.
In the European Economic Area, the UK and Switzerland, the App also asks for your consent. On Android it asks before ads or Unity Analytics start, if your device's SIM, mobile network or time zone places it there. On iOS it asks after you allow tracking, if your App Store country or your device's time zone places it there (the Region setting counts only when the time zone names no place). If you deny tracking, iOS players are not asked, because ads are then not personalized and Unity Analytics does not run. The App reads these signals on your device only. You can accept all, reject all, or choose separately whether ads may be personalized and whether Unity Analytics may record how you play:
- If you consent to personalized ads, Unity LevelPlay, Unity Ads and their ad partners may use your advertising identifier and ad activity to personalize and measure ads.
- If you decline, you still see ads, but we tell our ad partners that you have not consented to personalized advertising and have opted out of the sale or sharing of your personal information.
- Unity Analytics runs only if you allow game analytics.
- On iOS, ads are personalized and Unity Analytics runs only if you also allow tracking.
We keep your choice, with the time you made it, only on your device. You can change or withdraw it anytime in Settings, Ad Privacy in the App (on iOS, turning tracking off in iOS Settings also withdraws it); Delete My Data erases it, and the App asks again. Elsewhere on Android, ads may be personalized and Unity Analytics runs; you can reset or limit your advertising ID in the device's settings, which Settings, Ad Privacy opens.
Legal bases (EEA, UK and Switzerland)
- Consent: personalized ads and Unity Analytics, given through the App's privacy choices on Android and iOS; on iOS, Apple's tracking permission is required as well. You can withdraw it anytime, as described above.
- Providing the game you use: your player ID, name, leaderboards, co-op, progress backup and purchases.
- Legitimate interests: showing non-personalized ads that keep the game free, measuring them and protecting them from fraud, keeping the App stable with crash and error diagnostics, and keeping our services secure.
Who we share data with
We do not sell your personal data. App data is processed by the providers that power App Store purchases, Google Play purchases, Google Play Games sign-in, Unity Gaming Services, Unity Analytics, Unity Diagnostics, Unity IAP, Apple Game Center, Apple iCloud, Unity Ads, Unity LevelPlay / ironSource ads, and, outside the EEA, the UK and Switzerland, Google AdMob (how Google uses data from apps that use its services) and Meta Audience Network (Meta privacy policy) ads. Website subscription and security data is processed by Supabase, Resend, Cloudflare Turnstile, and the hosting providers only for the purposes described above. Vercel hosts the Website; Cloudflare provides DNS and abuse prevention; and Google Workspace processes human support and privacy-request mail.
Children's privacy
Coastcoil is intended for a general audience and is not directed to children under 13, or under 16 in some regions. Launch updates are limited to people age 16 or older. We do not knowingly collect personal data from children; a parent or guardian may contact us to request deletion.
Data retention and deletion
iCloud progress backups stay in your own iCloud account until you delete them. Android progress backups and iOS event-progress backups are kept with your player ID in Unity Gaming Services until you delete your data. Unity keeps crash and error diagnostics for 90 days. Leaderboard entries and player names are kept while your player ID is active, until you delete your data. Unconfirmed and confirming newsletter requests are deleted after 7 days. Confirmed subscription records are kept until you unsubscribe or ask us to delete them. Unsubscribed suppression records are retained for 24 months so we can honor that choice, and newsletter delivery metadata is retained for 90 days. Resend currently retains email data for 30 days across standard plans. Its account data, including email metadata, logs, and API records, remains stored in the United States regardless of the selected sending region. Resend's DPA says customer data is deleted within 90 days after account termination unless continued storage is required or authorized by law.
Newsletter records in the Supabase backend are separate from support correspondence.
Messages sent to support@coastcoil.com and privacy@dexterinteractive.com are handled in Dexter Interactive's Google Workspace. The support route uses a Collaborative Inbox with private Google Groups conversation history enabled. Individual messages in the licensed owner's Gmail mailbox are scheduled for permanent deletion when they are more than 700 days old; later replies and messages have their own age and do not reset an older message's clock. The support Group archive is a separate store that is not removed by the Gmail mailbox rule. A recurring procedure, run at least every 30 days, deletes each support conversation that would reach 700 days before the next review. A missed or unverified review disables the affected route until the archive is back within the retention bound. The archive is also searched and deleted through the privacy-request procedure when an approved request covers it. Limited recovery copies may remain briefly in Google's backup systems after deletion from the active mailbox. A separate record may be retained longer when reasonably necessary for legal obligations, security investigations, fraud or abuse prevention, or dispute resolution. The newsletter backend's purge process does not delete copies held in a support mailbox or Group archive.
You can delete your App data at any time inside the App: open Settings › Delete My Data and confirm. The App deletes your leaderboard scores, reserved player names, player ID and the Unity Gaming Services data stored for it, including your Android progress backup and iOS event-progress backups, asks Unity Analytics to delete its data about you, on iOS deletes your iCloud progress backup and resets this game's Game Center achievements, and erases your progress on the device, then starts fresh. If the App cannot reach our servers or iCloud, nothing on your device is erased until the deletion finishes. Your Game Center account and Game Center scores are managed by Apple, and your Google Play Games account is managed by Google. In-app purchases stay with your Apple ID or Google account and can be restored with Restore Purchases.
If you cannot use the App, email privacy@dexterinteractive.com with your Game Center or Play Games name, or your in-game display name, and we will delete the data tied to your player ID within 30 days. You may use the same address to request deletion of Website data. Purchase records may be retained where required for tax, audit, or fraud prevention.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your data, and to opt out of sale or sharing of personal information. We do not sell personal information. Where we rely on your consent, you can withdraw it at any time without affecting processing that took place before: in the App's Settings, Ad Privacy, or on iOS by turning off tracking in iOS Settings, Privacy & Security, Tracking. Use the unsubscribe link in any update to stop marketing messages, or contact us to exercise another right.
Security and international transfers
We use reasonable technical measures to protect data. Our providers may process data on servers located outside your country, including the United States, under appropriate safeguards.
Changes to this policy
We may update this policy; we will change the effective date above and, for material changes, provide notice in the App, on this page, or in an email when appropriate.
Contact
Questions or privacy requests: privacy@dexterinteractive.com
Game support: support@coastcoil.com
Dexter Interactive.