Inspector Mindset: Privacy Policy
Last updated: 30 October 2026 (game statistics in the Philippines on Android under legitimate interest, with an opt-out; first launches added to the anonymous counts)
Inspector Mindset ("the game") is made by Magicave Holdings Limited ("we", "us"). This policy explains what the game collects, why, who else handles it, and how to have it deleted. Questions: support@magicave.io.
The short version
- You never give us your name, email or phone number. The game creates an anonymous account by itself.
- Your progress is saved to our servers so it survives a new phone.
- Where we ask first: in most countries, including the EU, the EEA and Switzerland, and on iPhone and iPad everywhere, usage statistics are sent only if you say yes to "Share usage data". You can change your answer in Settings at any time.
- Where we count without asking first: on Android (and on the web) in the Philippines, from version 1.0.8, the game counts how it is played for ourselves from the first launch, without asking (see "Players in the Philippines"). In the UK, we may do the same. In both cases the game tells you, the statistics stay with us, and you can turn them off in Settings ("Game stats").
- We count a few things about every player with no identifier at all, such as how many players open the game for the first time or finish the first puzzle. These counts cannot be linked to you.
- Our servers' own records of the game connecting (signing in, saving your progress, downloading game settings) are also used for overall service statistics, such as how many players come back the next day or the next week, counted as totals only.
- Ads are optional (rewarded ads you choose to watch) and are not personalised unless you allow it.
- We measure which advert or campaign brought each player to the game, through AppsFlyer, for every player from the first launch, without advertising identifiers unless you agree ("limited mode"). Anything more for AppsFlyer, or for any other company, waits for your yes.
- We advertise the game on networks such as Meta (Facebook, Instagram) and TikTok. Through AppsFlyer, they learn that the game was installed and what happened next, so they can measure and improve our adverts.
- Purchases are handled by Apple or Google. We never see your card details.
What we collect and why
| What | When | Why |
|---|---|---|
| An anonymous account ID (a random identifier created by Firebase Authentication) and a random install ID | Always | To keep your save and purchases together and to protect the service from abuse |
| Game progress (cases solved, puzzles, rooms restored, coins, boosts, settings) | Always | To back up your game and restore it on another device |
| Your Game Center or Google Play Games player ID | Only when you are signed in to Game Center (iPhone and iPad) or Google Play Games (Android) on the device | To recognise you on a new device and restore your progress |
| Purchase records (product, date, store transaction ID) | Only when you buy something | To deliver what you bought, restore it later, and handle refunds |
| Usage statistics (which puzzles you play and how long they take, coins earned and spent, offers shown, app version, platform, device model and operating system version, language and time zone setting, and a random install ID) | Only if you agreed to share usage data; on Android in the Philippines (from version 1.0.8), and in the UK, also without asking unless you turned "Game stats" off (see "Players in the Philippines" and "Players in the UK") | To find puzzles that are too hard or too easy, to see where new players stop and whether they come back, and to improve the game |
| Anonymous counts (how many times the game is opened, and opened for the first time after install, how the first question is answered or left, whether the notice about game statistics was shown or "Game stats" turned off, how far players get through the first screens, the tutorial and the first puzzle, with the platform, app version and country). They carry no identifier and cannot be linked to you or your device. The game only notes in its own save that the first opening was counted, so it is not counted twice | Always, for every player, whatever you chose | To see where new players stop, including players who do not share usage data. We keep only daily totals and do not store the IP address the counts come from |
| Install and campaign attribution (the campaign or advert an install came from, the AppsFlyer ID, app opens, when you finish the first case and each case after it, and purchase events reported by RevenueCat) | Always, without advertising identifiers: on Android through the Google Play install referrer, on iPhone and iPad through Apple's SKAdNetwork | To learn which adverts bring players to the game and to pay for them fairly (legitimate interest) |
| More measurement (rewarded ads watched and the ad revenue they earn) | Only if you agreed to share usage data | To understand how the game is played and paid for |
| Advertising identifiers (Google advertising ID, Apple IDFA) | Only if personalised ads are switched on for the game, you agreed to share usage data and, on iPhone and iPad, you allowed tracking when asked | Personalised ads and more precise attribution |
| Bug reports (your message, a picture of the game screen, the game's state, the app version and device type) | Only when you choose to send a report | To fix the problem you reported |
| Technical data (IP address, device type, operating system) | When the game talks to our servers or to an ad network | To deliver the service and keep it secure. Our server logs keep IP addresses only briefly |
| Service records (when your account or install last connected to our servers, on which days in its first month, and the platform) | Always, when the game talks to our servers | To run the service, and for overall service statistics such as how many players return. Only totals are used, never one player's records |
We do not collect your precise location, contacts, photos, microphone or camera, and we do not sell personal data.
Players in the Philippines
From version 1.0.8 of the game on Android (and on the web version), if you are in the Philippines, the game sends the usage statistics above to our own servers from the first launch, without asking first. We do this on the basis of our legitimate interest in understanding how the game is played so we can fix and improve it (section 12(f) of the Data Privacy Act of 2012, Republic Act No. 10173). We have weighed this against your interests: the statistics are about gameplay only, carry no name, email or phone number, and you can stop them at any time. When it does:
- What: the usage statistics in the table above (which puzzles you play and how long they take, coins and offers, sessions and returns, the app version, platform, device model, language and time zone setting), with the game's random install ID and anonymous account ID.
- Why: to find puzzles that are too hard or too easy, see where new players stop or leave, measure how many come back on later days, and fix problems. Never for advertising, and never sold.
- Who sees it: only us, on our own servers (which Google Cloud runs for us). It is not shared with any other company.
- How long: up to 14 months, then deleted.
- How to stop it: the game tells you with a short line on screen the first time. Settings → "Game stats" turns it off at once; the game then stops sending these statistics. (If you said no to the first-launch question in an earlier version, the same applies: you see the line once, and "Game stats" turns it off.) To have what was already sent deleted, ask us (below).
- Everything that goes to other companies still waits for your yes. As the question is not asked at launch, you can agree in Settings → "Share usage data": that turns on Google Analytics for Firebase and AppsFlyer's extra measurement (rewarded ads watched and the ad revenue they earn). AppsFlyer's attribution without advertising identifiers runs for every player from the first launch, as described above.
On iPhone and iPad, the game still asks first in the Philippines too, as everywhere else.
Your rights under the Data Privacy Act of 2012. You have the right to be informed about how your personal data is used; to object to it (here, by turning "Game stats" off or by emailing us); to access your data; to have it corrected; to have it erased or blocked; to data portability; and to claim damages if your rights are violated. You can complain to the National Privacy Commission (https://privacy.gov.ph). To use any of these rights, email support@magicave.io.
We work out whether you are in the Philippines in the same way as for the UK (below). If the game cannot tell which country you are in, it asks first.
Players in the UK
If you are in the UK, the game may send the usage statistics above to our own servers without asking first (when we switch this on; until then the game asks first in the UK too), as UK law allows for statistics that help us improve our own service (the Data (Use and Access) Act 2025, which changed the Privacy and Electronic Communications Regulations). When it does:
- the game tells you once, and you can turn it off at any time in Settings → "Game stats";
- the statistics stay with us (on our servers, which Google Cloud runs for us) and are used only to improve the game: they are never shared with anyone else or used for advertising;
- everything that goes to other companies (Google Analytics for Firebase, AppsFlyer's extra measurement, advertising identifiers) still waits for your answer to "Help improve the game?". AppsFlyer's attribution without advertising identifiers runs for every player from the first launch, as described above.
We work out whether you are in the UK from your app store account's country, else your device's region setting, else the country our server sees your connection coming from. The server does not keep your IP address for this.
Players in the EU, the EEA, Switzerland and elsewhere
Everywhere else (and on iPhone and iPad everywhere), the game asks first: "Help improve the game?". Usage statistics, Google Analytics for Firebase and AppsFlyer's extra measurement start only after you choose "Share" (consent), and stop when you turn "Share usage data" off in Settings. Saying no does not change the game.
Who else handles your data
We use these companies to run the game. They process data on our behalf, or under their own policies where stated.
| Company | What it does | Data |
|---|---|---|
| Google Firebase / Google Cloud (Google LLC) | Anonymous sign-in, cloud save, our servers, and Google Analytics for Firebase (only with your consent) | Account ID, game progress, purchase records, usage statistics, bug reports |
| RevenueCat, Inc. | Checks and records in-app purchases, and reports them to AppsFlyer for attribution | Account ID, purchase records, the AppsFlyer ID |
| Apple and Google Play | Payments, Game Center and Google Play Games sign-in | Handled under their own privacy policies |
| AppsFlyer Ltd. | Install and campaign attribution (for every player, without advertising identifiers unless you agree) | The AppsFlyer ID, device type and operating system, IP address, app opens, the in-game events listed above, and purchase events (sent by RevenueCat). It tells the advertising network that showed you an advert that you installed the game. Where Google's consent form applies (UK, EU, Switzerland), AppsFlyer follows the choices you made there. AppsFlyer's policy: https://www.appsflyer.com/legal/privacy-policy/ |
| Meta (Meta Platforms Ireland Limited and Meta Platforms, Inc.) and TikTok (TikTok Technology Limited in the EU, EEA and Switzerland; TikTok Information Technologies UK Limited in the UK; elsewhere the TikTok company that serves your region) | Advertising networks we use to advertise the game (as we also do with Google Ads and Unity Ads). They receive install and in-game event data from AppsFlyer, to measure which of our adverts work and to show them to people more likely to enjoy the game | That the game was installed and which advert, if any, led to it; app opens; the in-game events listed above; and purchases (product, price and currency, sent by RevenueCat); with device type, operating system and IP address. Your advertising identifier is included only if you allowed it (see above). AppsFlyer may send this for every player, not only players who saw one of our adverts. Meta and TikTok also use this data for their own purposes under their own policies: https://www.facebook.com/privacy/policy/ and https://www.tiktok.com/legal/privacy-policy |
| Unity Technologies (Unity Ads) | One of the networks that may supply the optional rewarded ads, through Google AdMob: delivering the ad, limiting how often you see it, and measuring it | As for Google AdMob below; personalised only when allowed (see above). Unity's policy: https://unity.com/legal/game-player-and-app-user-privacy-policy |
| Google AdMob (Google LLC) | Shows the optional rewarded ads | Device identifiers (such as the advertising ID), IP address and approximate location derived from it, ad views and taps. Ads are requested as non-personalised unless personalised ads are switched on and you allowed them. Google's policy: https://policies.google.com/technologies/partner-sites |
Where the law requires consent for ads (for example in the UK and the EU), the game asks through Google's consent form before any ad is requested. You can decline ads entirely; the game remains fully playable.
How long we keep it
- Your account, game progress and Game Center or Play Games link: while you play, and deleted within 30 days of a deletion request (below).
- Purchase records: kept for as long as tax and consumer law require, but unlinked from your account once you ask for deletion.
- Usage statistics: up to 14 months.
- Bug reports: up to 12 months.
Your choices and rights
- Usage data: Settings → "Share usage data" turns statistics and the extra measurement on or off. Campaign attribution without advertising identifiers continues; to object to it, email us. In the Philippines (Android) and in the UK, Settings → "Game stats" turns off the statistics we count for ourselves without asking. The anonymous counts carry no identifier, so there is nothing in them to turn off or delete for you.
- Advertising networks: on iPhone and iPad, you can stop apps asking to track you in Settings → Privacy & Security → Tracking. On Android, you can delete your advertising ID in your device's Google or Privacy settings (Ads). Meta and TikTok also let you control the adverts they show you in their own ad settings. To object to the attribution data we share without advertising identifiers, email us.
- Ads: watching an ad is always your choice. Where Google's consent form applies, you can change your choice by reinstalling the game or ask us.
- Access, correction, deletion: email support@magicave.io from the address you want us to reply to, describing your device and when you last played, so we can find your account. We answer within 30 days. Deleting the game from your device removes the local copy; ask us to delete the server copy as well.
- If you are in the UK, the EU or another region with data protection law, you also have the right to object, to restrict processing, to data portability, and to complain to your data protection authority (in the UK, the ICO; in the Philippines, the National Privacy Commission: see "Players in the Philippines").
Legal bases: performance of our contract with you (the account, saves and purchases), consent (usage statistics in the EU, the EEA, Switzerland and wherever the game asks first, advertising identifiers and, where required, ads), and legitimate interests (security, fixing bugs you report, attributing installs to advertising campaigns without advertising identifiers, including sharing that data with the advertising networks we use, overall service statistics from our server records, and usage statistics we keep for ourselves to improve the game in the Philippines on Android and, when switched on, in the UK, which you can turn off in "Game stats"). In the UK, those usage statistics also rely on the exemption for statistics that improve our own service (the Data (Use and Access) Act 2025).
Children
The game is meant for players aged 13 and over and is not directed at children. We do not knowingly collect personal data from children under 13. If you believe a child has used the game, email us and we will delete the data.
International transfers
Our service providers may process data outside your country, including in the United States and the European Union. Where data leaves the UK or the EU we rely on the safeguards those providers offer (such as the standard contractual clauses).
Changes
We will update this page when the game changes what it collects, and change the date at the top. Significant changes are announced in the game.
Contact
Magicave Holdings Limited · support@magicave.io