Privacy policy

Color Lagoon, iPhone and Android apps. Last updated: 6 November 2026.

1. Who is responsible

The controller of the data described here is Yannick Demicheli, sole trader registered in French Polynesia (TAHITI no. F89611), who publishes games under the name Llys Games. When a company takes over the publishing of the game, this policy will be updated to name it.

Contact for any question about privacy, and privacy officer: contact@llysgames.com.

2. What the app collects, and why

Downloading the levels

New levels, sounds and game settings are downloaded from our servers (Amazon Web Services, delivered by its CloudFront network close to you). As with any internet connection, your device's IP address is used to send you the files. We do not record it: no log of these downloads is kept.

Anonymous game statistics

To see which levels are too hard, too easy or too long, and which phones struggle, the app sends short messages when a level starts and ends:

• the level, whether it was won, lost or given up (and why: replayed, another level chosen, app closed), the stars, the attempt number on this phone, the time played, how full the goal was, pauses, how many times the wheels were held, the screen tapped or the phone shaken, the controls you chose (tilt, vibrations, wheel inertia), and how smoothly the screen moved (images per second); whether the attempt follows an ad (between two levels, or a video watched for a reward);
• when the app starts: whether the levels and settings come from a download or from the app itself, and whether “Remove ads” or level packs have been bought on this phone (not what you paid);
• with each message: the app version, the system (iOS or Android) and its version, the phone model, the game's language, the versions of the levels and settings in use, the time, and a number drawn at random at each launch of the app, kept only in memory, which links the messages of that launch and nothing else.

These statistics contain no name, no account, no e-mail address, no advertising or device identifier and no IP address: they are not linked to you and we cannot use them to identify you. The app counts attempts on your phone and sends only their number. They are stored by Amazon Web Services in Sydney, Australia, and used only to improve the game.

Crash reports

When the app crashes, freezes or meets an error, it sends a technical report so that we can fix it: the place in the code, the app, levels and settings versions, the level being played, the game's language, the phone model, the system version, free memory and storage, and the last steps in the game (level started or finished, levels downloaded). At each launch, the app also sends a short session message (started, ended normally or crashed) used to count the share of launches without a crash; it carries an installation number drawn at random by the crash-reporting tool, used for nothing else.

Reports contain no name, account, e-mail address, advertising or device identifier, screenshot or recording, and your IP address is not stored. They are processed by our provider Sentry (Functional Software, Inc.) and stored in the United States.

What stays on your phone

The app keeps on your phone: your progress and stars, your choices (sound, vibrations, tilt, sharing), the attempt counts per level, the downloaded levels and the statistics waiting to be sent. Except as described above, none of this leaves your phone. The motion sensors are used only to move the game when you tilt or shake the phone; their readings are not sent.

Advertising (Google AdMob)

The game is free and shows ads, including ads you can choose to watch in exchange for a reward. They are provided by Google AdMob (Google Ireland Limited in the European Economic Area and Switzerland, Google LLC elsewhere). To show, measure and limit ads and to prevent fraud, Google's software in the app may collect: the advertising identifier of your phone (on Android only: on iPhone the game never asks to track you, so it is never shared), your IP address and the approximate location it reveals, information about the phone and the app, and your interactions with the ads.

• Your consent. In the European Economic Area, the United Kingdom and Switzerland, the game shows Google's consent form before any ad. If you refuse, ads are not personalized; Google may still use some data to limit how often an ad is shown, to measure ads and to prevent fraud, as allowed by the law and described in the form.
• On iPhone, the game never asks to track you: the advertising identifier is never shared and the ads are not personalized.
• Changing your mind: “Privacy options”, on the game's pause screen, shows the form again (where the law requires the form). On Android, you can also reset or delete the advertising identifier in Settings › Google › Ads.
• Partners. The consent form lists Google's advertising partners and what each does. Google uses the data under its own policies as an independent controller: Google Privacy Policy, How Google uses information from apps that use its services.
• We receive from Google only totals (ads shown, revenue), never data about you.
• Ads are limited to content suitable for a general audience.

In-app purchases

Purchases are made and paid through the App Store or Google Play, under Apple's or Google's terms. We never receive your name, e-mail address or payment details. The app records on your phone what you have bought and can ask the store to restore your purchases on a new phone.

3. What we do not do

• We do not ask for an account, a name, an e-mail address, contacts, photos, the camera, the microphone or the location.
• We do not sell, rent or exchange data.
• We do not cross the statistics or crash reports with any other data, and we make no automated decision about you.

4. Legal bases

• Downloads, data kept on your phone: needed to provide the game you asked for.
• Anonymous statistics and crash reports: our legitimate interest in balancing the game and keeping it working, with little impact on you since nothing identifies you; you can object at any time with the switch in the game (section 7). The statistics follow the rules for first-party audience measurement exempt from consent (limited to statistics, never shared, kept 13 months at most).
• Personalized ads, and storing or reading information on your phone for ads where the law requires it: your consent, which you can withdraw at any time (see “Advertising” in section 2).
• Messages you send us: our legitimate interest in answering you.

5. Who receives data

Our providers act on our instructions under data processing agreements. For data leaving the European Economic Area or New Zealand, we rely on safeguards recognised by those laws, such as the European Commission's standard contractual clauses included in our providers' agreements. Data may also be disclosed if the law requires it.

6. How long data is kept

7. Your choices and your rights

Stop sharing: the chart button under a level stops the statistics and the crash reports at once; the messages waiting on the phone are deleted. Press it again to share again. Ads: see “Advertising” in section 2.

Depending on where you live (for example under the European GDPR, the French law on data protection or the New Zealand Privacy Act 2020), you may ask to access your data, to correct or delete it, to restrict or object to its use, and to receive it in a portable form. Write to contact@llysgames.com; we answer within one month (20 working days for a request under the New Zealand law). Since the statistics and reports are not linked to you, we usually cannot find which ones are yours; if you give us details (phone model, day and time, level), we will look and tell you what we found.

You may also complain to a data protection authority: in France and its overseas territories, including French Polynesia, the CNIL; in the European Union, the authority of your country; in New Zealand, the Office of the Privacy Commissioner.

8. Children

Color Lagoon is made for a general audience. It asks no one, child or adult, for personal information, and has no account, chat or exchange between players. In some countries, the consent to ads must be given by a parent for children under a certain age. If you think a child has sent us personal information by e-mail, write to us and we will delete it.

9. Security

All exchanges between the app and our servers are encrypted (HTTPS). Data is stored encrypted, and only the publisher's team can reach it, with two-factor sign-in.

10. This website

This website uses no cookies, no audience measurement and no advertising, and we keep no log of visits.

11. Changes

We will update this policy when the game changes what it collects, and change the date at the top. Important changes will also be announced in the game or on this page before they apply.