Privacy Policy

Effective 14 October 2026. Applies to the Doodle Downpour app for iOS and Android, published by LARK Enterprises LLC.

The short version

There are no accounts and no sign-in. We never ask for your name, email address, phone number, contacts, photos, location, camera or microphone.
Your coins, upgrades, stickers, best wave and daily streak are saved only on your device. Deleting the app deletes them.
The leaderboard is optional. If you join it, the nickname you choose and your best wave are stored on our server and shown to other players. You can delete them in the app at any time.
Friend invites use a random 6-letter code. Our server stores the code and which code invited which, so both players can get their coins.
The game shows ads between runs, never during one, plus an optional ad you can choose to watch to double a run's coins. Every ad is requested as child-directed, non-personalised and family-safe.
Remove Ads and the VIP Pass subscription are sold through Apple or Google. We never see your payment details.
If you allow it, the app shows local reminders before a checkpoint expires. They are scheduled on your device; nothing is sent to us.
The app sends anonymous usage analytics to PostHog: game events such as runs started and finished, tagged with a random identifier the app makes up. It is not linked to you or to any account, and it is used only to understand how the game is played and to improve it, never for advertising.
The iPhone app uses Tenjin to measure which of our own ads led to an install, through Apple's privacy-preserving SKAdNetwork. Tenjin receives your IP address, an identifier Apple gives each app maker (IDFV), device and app details and a small summary of game progress. It receives your advertising identifier only if you tap Allow when the app asks.
We use no crash reporting. On iPhone the app asks once whether it may track you, only to measure our own ads. If you say no, nothing about the game changes.

Who we are

Doodle Downpour is made by LARK Enterprises LLC, a company in the United States. For anything about this policy or your data, email [email protected].

What the app stores on your device

The app keeps one save file on your phone or tablet. It holds your coins, the permanent upgrades you bought, the stickers you collected, the sticker you play as and your shield color, your best wave and checkpoint, how many runs you have played, the date of your last daily gift and your streak, and whether you bought Remove Ads or the VIP Pass. The file never leaves the device. We do not back it up and cannot read it.

The analytics described below also keeps two things on the device: the random identifier it made up for this installation, and any game events waiting to be sent. On iPhone, the ad measurement described below keeps its own random installation identifier, when it first ran, counts and lengths of app sessions, any events waiting to be sent, and the progress summary it last reported.

If you join the leaderboard or use a friend invite, the app also keeps the random identifiers and the secret our server gave it, so that only this installation can change or delete its own record.

Leaderboard and friend invites

Both are optional and run on our own server, hosted by Cloudflare in the United States.

Leaderboard. If you choose to join, the server stores the nickname you type (3 to 14 letters, numbers or underscores), your best wave, a random player identifier, and when the record was created and last updated. Other players see your nickname and best wave. Please do not use your real name. Names on a blocklist are refused. Any player can report a name or block it on their own device; a name reported by several players is hidden from everyone, and we review reports. Tapping "Leave the board" deletes your nickname, best wave and any reports tied to you from the server straight away.

Friend invites. When you open the Invite screen, the server creates a random 6-letter code and a random identifier for your installation. If a friend enters your code, the server records that your code invited theirs, and whether they have cleared wave 10 so that both of you can collect your coins. Sharing the code uses your phone's own share sheet; the app never sees your contacts or who you send it to. To have an invite record deleted, email us.

The server does not store your IP address, device details or any advertising identifier with these records.

Ads come from Google AdMob. A full-screen ad can appear when you leave a finished run, no more than once every few runs and never during play. Separately, the game can offer a button to watch an ad, to double a run's coins, unlock an extra boost or continue with one more heart; such an ad plays only if you press it.

Every ad request is sent with the following settings, regardless of who is playing:

child-directed treatment on
under the age of consent on
non-personalised ads only
maximum content rating G, which means suitable for general audiences

Google receives the information it needs to serve the ad, which can include your IP address, the device model and operating system, and the advertising identifier your device makes available. Because every request is marked child-directed and non-personalised, Google does not use it to build an advertising profile of you. How Google handles this data is described in Google's privacy policy and in How Google uses information from sites or apps that use its services.

On iPhone, if you allowed tracking (see "Measuring our own ads"), the advertising identifier is available to Google too. Ad requests stay child-directed and non-personalised either way.

Remove Ads and the VIP Pass

Remove Ads is a one-time purchase, and the VIP Pass is an auto-renewing monthly subscription, both through the App Store or Google Play. You can cancel the VIP Pass at any time in your store account settings. Apple or Google handles the whole payment. To confirm the purchase and let you restore it on another device, the app uses RevenueCat, a purchase service. RevenueCat receives the store's receipt for the purchase or subscription and a random identifier the app creates for your installation. It does not receive your name, email address or card details, and neither do we. Refunds are handled by Apple or Google under their rules.

Coins are earned by playing and cannot be bought directly with money; the VIP Pass doubles the coins you earn.

Usage analytics

To understand how the game is played, for example how far players get, which waves are too hard, and whether people come back the next day, the app sends anonymous usage events to PostHog, an analytics service based in the United States that processes the data on our behalf.

What is sent:

a random identifier the app creates when it is first opened. It is not your name, email address, advertising identifier or any account, the game has no accounts, and we never connect it to who you are. Deleting the app deletes it from the device. Events also carry a session identifier, which is random too and starts again each time the app is opened.
gameplay events: the game being opened, a run starting, a run ending (the wave reached, how many waves were cleared, how long the run lasted, and whether it was lost or left early), a daily gift being claimed, a boost being used, a run being continued, an invite being shared, an ad being shown, and Remove Ads or the VIP Pass being bought. A purchase event names the product only, never the price, receipt or any payment detail.
device and app details: that it is a mobile device, the screen size, whether it runs iOS or Android, the app version, and the version of the analytics library.

Like any internet service, PostHog receives your device's IP address when the app sends events. PostHog stores the IP address with each event and uses it to estimate an approximate location, such as country and city. It is not your precise location, and the app never asks for location access.

We use this data only to understand and improve the game. It is not used for advertising, is not shared with advertisers or data brokers, and is not combined with data from other apps or websites to track you. Our PostHog plan keeps these events for one year. The app does not record your screen, your touches or what you draw.

How PostHog handles data is described in PostHog's privacy policy.

Measuring our own ads

We may advertise Doodle Downpour inside other apps, for example through AppLovin. To learn which of those ads led to installs, the iPhone app uses Tenjin, a measurement service in the United States that processes the data on our behalf. The Android app does not use it.

The measurement itself comes from Apple's SKAdNetwork. When an ad leads to an install, Apple sends the ad network, and a copy to Tenjin, a report that a campaign produced an install. Apple delays and groups these reports and leaves out anything that identifies you, your device or the app where you saw the ad. The game adds one number to that report, from 0 to 63, summing up the first days after install: whether a run was started, the furthest wave reached, whether the game was opened again on a later day, whether an ad was shown, and whether Remove Ads was bought. Nothing else about your play is in it.

The first time you open the iPhone app, Apple's App Tracking Transparency prompt asks whether the app may track you. You can answer either way and the game is exactly the same. You can change your answer at any time in Settings > Privacy & Security > Tracking.

When the app opens, the Tenjin software inside it also sends Tenjin:

the identifier for vendor (IDFV), an identifier Apple gives each app maker for a device. It is the same in every LARK Enterprises LLC app on that device and different for every other company. It resets when you delete all of our apps.
a random identifier Tenjin's software creates for this installation
your IP address, which Tenjin also uses to estimate your country
device and app details: device model, operating system and version, language and region settings, time zone, and the app's version and build
app opens and when they happen, the progress number above each time it changes, and, only if you came from an Apple Search Ads ad, the attribution token Apple's own framework provides for that ad

If you tapped Allow, Tenjin also receives your device's advertising identifier (IDFA). Tenjin matches it with the same identifier from the ad network that showed you our ad, to tell us which ad led to your install, and may tell that ad network (for example AppLovin) that the install happened, so it can judge how well its ads for us work. That is "tracking" in Apple's sense, which is why the app asks first.

If you did not tap Allow, Tenjin does not receive your advertising identifier: the app tells Tenjin's software never to send it, and Apple keeps it hidden anyway. Tenjin's probabilistic matching, which tries to pair installs with ad clicks using details such as the IP address, is switched off for this app. Either way, we do not use Tenjin to target ads at you or to build a profile of what you do in other companies' apps or websites, and we never sell any of this data. How Tenjin handles data is described in Tenjin's privacy policy.

Children

Doodle Downpour is a general-audience game. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13 in the United States, or under the equivalent age where you live. If you believe a child under 13 has given us personal information, email us and we will delete what we can find. Every ad request is still marked child-directed and non-personalised, as described under Ads, and the game has no chat. The only text a player can enter is an optional leaderboard nickname, which is checked against a blocklist and can be reported, blocked or deleted as described above.

Permissions

After you reach your first checkpoint, the app asks whether it may show notifications. They are only local reminders, scheduled on your device, before a checkpoint expires; you can turn them off in your phone's settings. The app does not request access to your location, contacts, camera, microphone, photo library, calendar, health data or Bluetooth. It uses the internet only for the ads, the purchases, the usage analytics, the leaderboard and friend invites, and, on iPhone, the ad measurement described above.

Your rights

Wherever you live, you can ask us what we hold about you, ask us to delete it, or object to how it is used, by emailing [email protected]. We hold nothing that identifies you by name. The analytics identifier is random and is not shown in the app, so we usually cannot tell which events are yours; if you can tell us roughly when and where you played, we will try. If you are in the European Economic Area or the United Kingdom, our lawful basis for ads and purchases is our legitimate interest in funding a free game, for usage analytics our legitimate interest in understanding and improving the game, and for ad measurement our legitimate interest in knowing which of our own ads work, with the safeguards above. You also have the right to complain to your local data protection authority. We do not sell personal information.

Changes

If we change what the app collects, this page changes first and the effective date at the top moves.