SUPERNOVA.IOSupportPrivacyTermsOddsDelete account

Supernova.io Privacy Policy

Effective date: 17 October 2026 · Last updated: 23 October 2026

This policy explains what personal data the game Supernova.io collects, why, who receives it, how long it is kept, and what choices and rights you have. It applies to the iOS app, and the Android app of Supernova.io (together, the "Game").

The Game is operated by Itai Zeilig ("we", "us"). We are the controller of the personal data described here. Contact: itaizeilig1@gmail.com.

If we become required to appoint a representative in the EU or the UK under Article 27 of the GDPR or the UK GDPR, we will list their details here.

1. The short version

2. What we collect and why

2.1 Data you give us

Data Why we use it Legal basis (EEA/UK)
Nickname (display name) that you choose Shown to other players in matches, on the kill feed and on leaderboards Performance of our contract with you (providing the Game)
Messages you send to support (email address and what you write) To answer you Contract; legitimate interests (helping players)
Reports about other players (who you reported, the reason, when) To review abusive nicknames or behaviour Legitimate interests (a safe game)

Choose a nickname that does not reveal your real name or other personal information. Nicknames that are offensive, impersonate others or contain personal data may be changed or removed (see the Terms of Service).

2.2 Data created when you play

Data Why we use it Legal basis (EEA/UK)
Account identifiers: our account ID and a random device identifier created by the Game for guest login (a random ID made by the Game, not the advertising ID) To create and recognise your guest account Contract
Country, taken from your device's region setting The country leaderboard Contract; legitimate interests
Game progress: coins and gems (and a record of how they were earned and spent), owned and equipped skins, avatar, chests and what they gave you, daily offers, daily missions and awards, daily spin and its streak, XP and level, best scores, kills and match results, including rounds played offline (sent when you are back online) To run the Game, save your progress and settle disputes about it Contract
Leaderboard entries (nickname, avatar, country, score, rank) Public all-time, weekly and country leaderboards visible to other players Contract
Match data: your in-game movement and actions during a match To run the real-time multiplayer match. Movement input is processed in memory and not stored after the match Contract
Purchase records: product bought, store transaction ID, date, and whether it was refunded To deliver what you bought, restore purchases, and prevent fraud. We never receive your card or payment details: Apple and Google process payments Contract; legal obligation; legitimate interests (fraud prevention)
Ad reward records: when you watch a rewarded ad and what you received To give the reward and enforce daily limits Contract; legitimate interests (fraud prevention)
Your privacy choices: whether you turned personalised ads off in the Game (stored on your device), and Google's consent record (stored on your device by Google's consent tool) To respect your choice Legal obligation; consent
Technical and security data: IP address, connection times, device model, operating system and app version, server logs To connect you to a server, keep the service secure, prevent cheating and abuse, and fix problems Legitimate interests (security, anti-cheat, service reliability)

2.3 Data collected by advertising partners

The Game is free and paid for by ads. We use Google AdMob (by Google LLC and Google Ireland Limited) to show ads, and Google's User Messaging Platform to ask for and remember your consent. AdMob can fill an ad from Google's own advertisers or from other ad partners it works with. A full list of ad partners is shown in the consent message and in the Game's privacy settings.

When an ad is requested or shown, these partners may collect:

They use this data to show ads, to measure ads, to prevent ad fraud, and, if you consent (EEA/UK/Switzerland) or don't opt out (elsewhere), to show personalised ads based on your activity across apps and websites. These partners act as independent controllers for their own purposes. See their policies:

2.4 What we do not collect

We do not ask for or collect your precise (GPS) location, contacts, photos, microphone, camera, real name, email address, phone number or payment card details. There is no chat, so we do not collect messages between players. The Game does not use an analytics or crash-reporting service; if we add one, we will update this policy first.

2.5 Purchases inside the stores

Purchases go through Apple or Google. The Game uses Unity's in-app purchasing library to talk to the store on your device; it may process limited technical information needed to complete the purchase, which is not kept. Our server receives the store's signed transaction to check it is genuine (section 2.2).

3. Consent, tracking and your ad choices

EEA, UK and Switzerland. On first launch we show a consent message powered by Google's User Messaging Platform (UMP), which follows the IAB Transparency & Consent Framework. You can accept or refuse personalised ads and the related purposes for each partner. If you refuse, you will still see ads, but they will not be personalised. You can change your choice at any time in Settings → Data & Ads → Change.

iPhone and iPad: App Tracking Transparency. Apple asks you whether Supernova.io may track you. If you tap "Ask App Not to Track", the IDFA is not shared and our partners may not track you across other companies' apps and websites. You can change this in iOS Settings → Privacy & Security → Tracking.

Android. You can reset or delete your advertising ID in Settings → Google → Ads (the path varies by device).

United States. Some U.S. state laws treat sharing data with ad partners for targeted advertising as a "sale" or "sharing" of personal information. You can opt out at any time in Settings → Data & Ads (Google's "My data preferences" where your state's law applies, or the Personalised ads switch). See section 9.

Everywhere else. You can turn personalised ads off in Settings → Data & Ads → Personalised ads. You will still see ads, just not personalised ones.

4. Who we share data with

We do not sell your personal data for money. We share it only as follows:

Recipient Role What Where
Amazon Web Services (AWS) Hosting provider (processor) All game server data Frankfurt, Germany (EU)
Google AdMob and the ad partners it works with Advertising (independent controllers) See section 2.3 Worldwide, including the United States
Apple and Google App stores and payments Purchase validation (the store's transaction record) Worldwide
Unity Technologies In-app purchase library (on your device) Limited technical data needed to complete a purchase, not kept Worldwide
Other players — Your nickname, skin, in-match performance and leaderboard entries are visible to everyone in the Game —
Authorities, advisers, buyers — When required by law, to protect our rights or players' safety, or as part of a merger or sale of the Game (we would tell you first) —

5. International transfers

Our servers are in Frankfurt, Germany (EU). Some partners (for example Google) are based in the United States or process data there. Where personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on the partner's certification under the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where available, or on the Standard Contractual Clauses approved by the European Commission (and the UK Addendum). You can ask us for a copy of the relevant safeguards.

6. How long we keep data

Data Retention
Account, nickname, progress, wallet, leaderboard entries Until you delete your account. Guest accounts with no activity for 24 months are deleted automatically.
Purchase records (the store's transaction record: transaction ID, product, date, store response) For the life of the account. When you delete your account, the link to your account is removed, and the unlinked transaction record is kept for up to 7 years to handle refunds, chargebacks, fraud (a receipt can't be used twice) and legal obligations.
Server logs (including IP addresses) 14 days
Server backups Rolling daily backups kept for 7 days. Deleted data disappears from backups within 7 days.
Support emails Up to 2 years after the conversation ends
Data held by ad partners Under their own policies (see section 2.3)

7. Deleting your account

Deletion cannot be undone. Coins, skins and other items you bought are lost and are not refunded (see the Terms of Service). Deleting your account in the Game does not delete data held by ad partners; to reset that data, reset your advertising ID and use the partners' own tools listed in section 2.3.

8. Your rights (EEA, UK and similar laws)

You have the right to: access your data and get a copy; correct it (you can change your nickname in the Game); delete it; restrict or object to processing based on legitimate interests; data portability; and withdraw consent at any time (Settings → Data & Ads), without affecting processing before withdrawal.

To exercise these rights, email itaizeilig1@gmail.com. We will answer within one month. We may ask for information to confirm the account is yours (for example your player ID).

You may complain to your local data protection authority. In the EU, the list is at https://edpb.europa.eu/about-edpb/about-edpb/members_en; in the UK, the Information Commissioner's Office (https://ico.org.uk).

9. U.S. state privacy rights (including California)

The CCPA/CPRA and other state laws apply only to businesses that meet certain thresholds. This section is written to honour these rights regardless.

In the last 12 months we collected these categories of personal information: identifiers (account ID, device ID, advertising ID, IP address, nickname); commercial information (purchase records); internet or other electronic network activity (gameplay and ad interactions); geolocation data (approximate, from IP address); and inferences made by ad partners for personalised ads. We collect them from you, from your device and from our partners, for the purposes in section 2. We do not collect "sensitive personal information" as defined by the CCPA.

We do not sell personal information for money. Allowing ad partners to collect identifiers and activity data for cross-context behavioural advertising may count as "sharing" or "selling" under these laws. You can opt out in Settings → Data & Ads, or by emailing itaizeilig1@gmail.com. We do not knowingly sell or share the personal information of consumers under 16.

You have the right to know, access, correct and delete your personal information, to opt out of sale/sharing, and not to be discriminated against for using these rights. You may use an authorised agent. We will verify requests by confirming control of the account. Retention periods are in section 6.

10. Children

Supernova.io is not directed at children under 13 and we do not knowingly collect personal data from children under 13 (or under the higher minimum age of digital consent in your country). If you believe a child has given us personal data, contact itaizeilig1@gmail.com and we will delete the account.

Players aged 13 to 17 may use the Game. In countries where the age of digital consent is above 13 (up to 16 in some EEA countries), players under that age should play only with a parent's or guardian's consent.

11. Security

Connections between the Game and our servers are encrypted (TLS). Access to servers and databases is restricted to authorised staff, and secrets are stored in a managed secrets service. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

12. Changes

We may update this policy. We will post the new version at https://supernova.moshub.co/privacy and update the date above. If the changes are significant, we will tell you in the Game before they take effect.

13. Contact

Itai Zeilig Email: itaizeilig1@gmail.com Web: https://supernova.moshub.co