Lantern Patch privacy policy

Lantern Patch (iOS, Android and web versions) · Effective 28 October 2026

Who we are

Lantern Patch is published by Creative Coders sp. z o.o., ul. Płk. Zoltána Baló 6 lok. 5, 02-793 Warszawa, Poland (KRS 0001271368, NIP 9512657914), the controller of the personal data described here. Contact: support@quorumwork.com.

Our games share one backend that we run ourselves, the Creative Coders Hub (“the hub”). This policy explains what the Lantern Patch app and the hub process, and which partners help us.

The short version

• No account, email or real name is needed. The game uses an anonymous player ID.
• Your progress is saved on your phone and backed up to the hub so it survives updates and can move to a new phone with a transfer code.
• The app does not use your location, contacts, camera or microphone.
• Ads are provided by Google AdMob: optional reward videos, and occasional full-screen ads between fields (never during play, never in your first five levels, never for players who bought something or are VIP). Where consent is required, you choose in Google’s consent form.
• Payments go through Apple’s App Store on iOS and Google Play on Android. We never see your card details.
• You can erase the game on your phone in Settings and ask us to delete everything on our server.

1. Anonymous player ID

The first time the app goes online, it creates a random identifier on your device and registers it with the hub. The hub returns an anonymous player ID and a secret token. We don’t use your advertising ID, phone number, email or hardware identifiers for this. The ID links your cloud save, leaderboard scores, invite rewards and gameplay analytics. Legal basis: providing the game you asked for (Art. 6(1)(b) GDPR).

2. Gameplay analytics

The app sends gameplay events to the hub, linked to your anonymous player ID: for example session start and length, fields started and finished (mode, size, time, mistakes, stars), level-ups, tutorial steps, quests, achievements, pass tiers, boosts used, purchases (product and price), watched reward videos, shop and offer views, settings you change and notification opens. Events are queued on your device and sent in batches. We use them to fix bugs, balance difficulty and improve the game. Legal basis: our legitimate interest in running and improving the game (Art. 6(1)(f) GDPR). We don’t sell this data or use it for advertising.

3. Cloud save and moving to a new phone

Your progress (levels, stars, coins, gems, boosts, looks, quests, streak, pass and settings, including the leaderboard name you choose) is stored on your device and backed up to the hub. If you create a transfer code in Settings, the hub stores only a hash of it; it works once, for 30 days, and moves your progress to the phone where you enter it.

4. Leaderboards and invites

• Leaderboards show the name you choose (up to 20 characters, checked against a blocklist) or “Player” plus a number, and your score or time.
• Your invite code is only shared when you share it. When a friend uses it, both of you can receive gems. There is no chat or free text between players.
• When you confirm a player report, the hub stores the reporting and reported player IDs, the selected reason and context, and the time, so we can investigate abuse. A successful report blocks that player from your leaderboard results. Report records are retained for up to 90 days; the block lasts until either associated account is deleted. When a name is removed by moderation, a player-linked hash of the removed name prevents automatic resubmission until that player account is deleted; this record does not store the name itself.
• Hide is a separate preference stored only on this device. Settings → Hidden players lets you undo a local Hide. The device also keeps IDs of successfully reported players to filter older offline leaderboard results; Unhide does not undo a report or server block. In-app account deletion clears these local preferences.

5. Purchases (App Store and Google Play)

In-app purchases and subscriptions are processed by Apple on iOS and Google Play on Android. We never receive your card or billing details. To deliver what you bought and to prevent fraud, the app sends the product ID and store transaction proof to the hub. Android purchases are verified with Google Play. Apple purchases are verified with Apple’s signed transaction and App Store Server API, associated with your anonymous player ID, and delivered only after verification. Transaction history may be retained for fraud prevention and legal obligations; deleting your account removes its player association. On iOS, cancel subscriptions in Settings → Apple Account → Subscriptions. On Android, subscriptions can be cancelled any time in Google Play → Payments & subscriptions → Subscriptions.

6. Redeem codes

If you enter a gift or promo code, the hub checks it and records that your anonymous player redeemed it, so a code can’t be used twice.

7. Ads (Google AdMob)

Lantern Patch is free and shows ads from Google AdMob: reward videos you choose to watch (for extra candle time, a hint or double coins), and occasional full-screen ads between fields. They never appear while you play a field, before you have cleared five levels, or for players who made a purchase, bought Remove ads or are VIP.

• Where consent is required (for example in the EEA and the UK), we ask through Google’s User Messaging Platform (UMP) consent form. If you don’t consent, only non-personalised ads are requested.
• AdMob may use your device’s advertising ID and information about your device and app usage to show and measure ads and to prevent fraud.
• You can change your choice any time in Settings → Ad privacy choices, and reset or delete your advertising ID in your phone’s settings.

Learn more: How Google uses information from apps that use its services and the Google Privacy Policy.

On iOS, the app always requests non-personalised ads and does not request Apple’s cross-app tracking permission. Ads are requested only when Google’s current consent information allows them. Changing your ad privacy choices pauses new ads while that permission is checked again. Non-personalised ads can still use identifiers, approximate location and diagnostics for ad measurement, fraud prevention and operation; they do not mean that no data is collected.

8. Notifications

Reminders (the daily field is ready, keep your streak) are local notifications scheduled on your device, at most two a day. No push server is involved. You can turn each type off in Settings or block them in your phone’s settings.

9. Who helps us

• Render hosts the hub and this website. Like any web server, it processes your IP address to answer requests and limit abuse; we don’t use it to identify you.
• Apple processes iOS purchases and subscriptions; see Apple Privacy Policy.
• Google (Google Play, Play Billing, AdMob and its consent platform) as described above.
• OpenAI: if you leave a public review on Google Play, we may use an AI service to help draft our public reply. Your game data is not sent to it.

Some providers may process data outside the European Economic Area. In that case we rely on appropriate safeguards such as an adequacy decision or the EU Standard Contractual Clauses.

10. How long we keep data

• Game progress on your device: until you reset progress in Settings, delete your game account or uninstall the app. Local leaderboard hiding and report preferences remain until you delete the game account or uninstall the app; a local Hide can also be undone in Settings.
• On the hub: as long as your anonymous player exists, until you ask us to delete it.
• Purchase records may be kept as long as tax and accounting laws require.

11. Deleting your data

Open Settings → Delete my data in the app and confirm permanent deletion. This deletes your anonymous account and cloud save and clears the save on this phone. An internet connection is required; if deletion fails, your progress remains available so you can retry. Active subscriptions must be cancelled separately in your store account. For help or an email request, see How to delete your Lantern Patch data.

12. Your rights

Under the GDPR you can ask for access to your data, a copy, correction, deletion and restriction of processing, and you can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. You can also complain to a data protection authority; in Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.

13. Children

Lantern Patch is not directed at children under 13, and we don’t knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.

14. Changes and contact

If we change this policy, we’ll update this page and its date, and tell you in the app if the change is important. Questions: support@quorumwork.com.