Privacy Policy

Last updated: August 16, 2025

Scope. This Policy covers our websites, browser-based games, and mobile apps (the “Services”). It explains what we collect, how we use/share it, and your choices.

1) Who is the controller?

Cursora Labs OÜ (“Cursora,” “we,” “us”) is the data controller for personal data processed through the Services, except where we act as a processor for a partner. Address: Pirita tee 26c/1-13, Tallinn, 12011, Estonia.

2) What data do we collect?

Gameplay & Usage Data: level attempts/completions, session length, items used, reward views, crash/diagnostic events.
Device & Technical Data: IP address, country/region, language, device/OS model, screen size, app version, browser type, referrer/UTM.
Online Identifiers: cookies, mobile advertising IDs (IDFA/GAID), SDK identifiers, and similar technologies for analytics, fraud prevention, and ad delivery.
Contact Data (if you reach out): email, support messages, and any information you provide.

3) How do we collect it?

Automatically via our Services and integrated SDKs (e.g., analytics and advertising), and directly from you (e.g., support emails). On the web, we may use a consent management platform (CMP) to obtain and store your choices.

4) Why do we use your data? (Purposes & Legal Bases)

Provide and operate the Services (e.g., deliver levels, rewards, bug fixes). Legal basis: legitimate interests and/or performance of a contract.
Analytics & performance (measure installs, retention, session quality). Legal basis: consent (where required) and/or legitimate interests.
Advertising (show interstitial/rewarded ads, frequency capping, fraud prevention, measurement, personalization where allowed). Legal basis: consent in the EEA/UK where required; legitimate interests or consent elsewhere as applicable.
Safety & abuse prevention (detect spam/cheats/fraud; secure our network). Legal basis: legitimate interests.
Legal obligations (e.g., tax, compliance, requests from authorities). Legal basis: legal obligation.

5) Cookies, SDKs, and similar technologies

We (and our partners) use cookies, local storage, and mobile SDKs to run analytics and deliver/measure ads. In regions where consent is required (e.g., EEA/UK), you can manage choices through our consent banner/CMP. On mobile, platform dialogs or in-app settings may be used to gather consent/opt-outs.

6) Advertising partners

We use Google products such as Google Analytics (for usage stats) and AdMob / Google Ad Manager (for interstitial and rewarded ads, mediation, measurement, and fraud prevention). Advertising partners may receive your device identifiers, coarse location (e.g., country), and usage signals to deliver and measure ads and to limit abuse. Interest-based ads are shown only where permitted by your consent or local law. You can withdraw consent at any time via the consent banner (web) or device settings (mobile), as described below.

7) Do we share your data?

Service Providers/Processors: analytics, hosting, and ad tech providers process data on our behalf.
Advertising Partners: to deliver, personalize (where permitted), and measure ads.
Authorities & Legal: when required by law or to protect rights, safety, and property.
Business transfers: in connection with a merger, acquisition, or sale of assets.

8) International data transfers

Where data is transferred outside your region (e.g., from the EEA/UK to the U.S.), we rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or adequacy decisions, as applicable.

9) Data retention

We retain data only as long as necessary for the purposes above—typically short to medium periods for analytics and ad measurement—and longer if required by law or to resolve disputes. We periodically aggregate or anonymize data where feasible.

10) Your rights & choices

EEA/UK (GDPR): You may request access, correction, deletion, restriction, objection, or portability. Where processing is based on consent, you may withdraw consent at any time.
California (CPRA): You may request access, deletion, correction, and to opt-out of “sale”/“sharing” (cross-context behavioral advertising). Use the link below.
Other regions (e.g., Brazil LGPD): Similar rights may apply under local law.

11) How to control analytics & ads

Web (cookies): Use our consent banner/CMP to manage purposes and vendors. You can also adjust browser cookie settings.
Mobile advertising ID: Reset or limit ad tracking in device settings (e.g., “Allow Apps to Request to Track” on iOS; “Ads” settings on Android).
Google Ads settings: https://adssettings.google.com
Industry opt-outs (web): https://www.youronlinechoices.eu/, https://optout.aboutads.info/

12) Children

Our Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, please contact us and we will take appropriate steps (e.g., deletion). If you publish child-directed titles, we will apply child privacy modes and disable personalized ads as required.

13) Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data. No system is completely secure; please use the Services responsibly.

14) Do Not Track

Some browsers send “Do Not Track” signals. Because there is no common standard, we do not respond to DNT signals. We honor consent choices where required by law via our CMP.

15) Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you (e.g., in-app/web notice). The “Last updated” date shows the latest revision.

16) Contact

Email: E-mail us

California: Do Not Sell or Share

If you are a California resident, you may opt-out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising by using your device settings (mobile) or using the consent banner on the websites where we publish our games you played on.