1. Who we are
Coilsy is published by Bashar DigiLab and operated by Abul Bashar (referred to as "Bashar DigiLab", "we", "us" or "our" in this policy).
This Privacy Policy applies to the Coilsy mobile game and its related in-app privacy features on Android. It explains how information is handled when you install, open or play the game.
For privacy questions or requests, contact us at contactme.bashar@gmail.com. We use this email address as our privacy contact.
We do not require you to create a Coilsy account to play. In the version described by this policy, campaign progress and game preferences are stored locally rather than in a Coilsy player account hosted by us.
2. Information stored on your device
Coilsy saves the information needed to run the game and remember your progress. This information is stored in the app's local database and preferences on your device.
| Game progress | Completed levels, stars, scores, coins, unlocked content and the current campaign position. |
|---|---|
| Active puzzle | The remaining snakes, current board state, hearts remaining and other information needed to resume a puzzle where you left it. |
| Game preferences | Sound, music, haptics, display preferences, equipped snake appearance and similar settings. |
| Daily activity | Local challenge completion, streak progress and reward state needed to show in-game daily features. |
| Privacy choices | Consent and advertising preference status needed to respect the choice you make in the app. |
This local information is used to provide the game, restore your active board and remember your settings. The current version does not send your puzzle save file to a Bashar DigiLab game server.
Your device may include app data in its own backup service, depending on your Android backup settings and the app's backup configuration. A device backup is controlled by your operating system and account settings, not by Coilsy's game server.
3. Advertising and Google AdMob
Coilsy may display banner advertisements provided by Google AdMob. When the Google Mobile Ads SDK is active, it can automatically collect and share certain information with Google. Google's published SDK disclosure identifies the following categories:
- IP address: may be used to estimate a device's general location, deliver ads, measure advertising and help prevent fraud.
- App and ad interactions: information such as app launches, taps, ad impressions and ad views or interactions.
- Diagnostic information: technical and performance information, such as app launch time, hangs, crashes or energy usage.
- Device and advertising identifiers: identifiers such as the Android Advertising ID or App Set ID, where available and permitted by device settings and SDK configuration.
Google may use this information to deliver and measure advertising, understand ad performance, maintain its services and detect invalid activity. Depending on your location, device settings and privacy choices, ads may be personalised or non-personalised. Turning off personalised advertising does not necessarily prevent all technical information from being processed for ad delivery, measurement, security or fraud prevention.
Google explains its handling of information from apps that use its services in its How Google uses information from sites or apps that use its services notice and its Privacy Policy.
4. Diagnostics and platform services
Coilsy uses Google Play Services for supported Android platform functions. The app may also use Google diagnostic or crash-reporting components included in the installed version to identify technical problems and improve stability.
Where a diagnostic component is enabled, it may process information such as app version, device model, operating system version, crash details, timestamps, performance measurements and technical identifiers. This information is used to investigate crashes, diagnose faults, protect the service and improve app reliability.
Google Play Services and Google diagnostic products are not used by this policy as a blanket description of every Google product. The exact products and data categories must match the SDKs included in the version you install. Google explains its data handling in the Google Privacy Policy.
5. How information is used
Information handled by Coilsy and its disclosed Google services is used for the following purposes:
- Save and restore your level progress, current puzzle and settings.
- Provide daily challenges, streaks, rewards and local reminders that you have enabled.
- Display, measure and maintain banner advertising through Google AdMob.
- Respect privacy and advertising choices where the app or applicable law requires them.
- Detect invalid advertising activity, protect the app and investigate technical problems.
- Meet legal requirements and respond to privacy requests.
Where a privacy law requires a legal basis, the basis depends on the activity and your location. Local storage needed to provide the game is used to perform the service you request. Advertising that requires consent is enabled only in accordance with the consent choices and rules that apply to you. Security, fraud prevention and service diagnostics may be handled on the basis permitted by applicable law, including legitimate interests where that basis is available and appropriate.
We do not use puzzle progress to make decisions that produce legal effects or similarly significant effects about you.
7. Advertising and privacy choices
Where required, Coilsy presents a privacy or consent message so you can review the available advertising choices before the relevant advertising processing takes place. Depending on your location and the consent configuration in the app, the message may let you accept, reject or customise advertising purposes and vendors.
You can revisit available choices through Settings > Privacy Preferences in Coilsy. The options shown in the app are the controls that apply to the current release and your region. You can also manage your Android Advertising ID and device-level ad settings through Android settings, where available.
Google's User Messaging Platform (UMP) can be used to request and manage consent information for Google ads. If it is included in the app build, Coilsy uses the UMP flow and its configured messages to present the choices required for the regions in which the app is available. Google describes the process in its AdMob privacy and consent documentation.
Withdrawing consent does not make earlier processing unlawful, and it may not stop processing that has a separate lawful basis. It also does not necessarily remove technical processing needed to deliver a non-personalised ad or prevent fraud.
Where the in-app consent message displays vendor names or advertising purposes under an applicable consent framework, that live message provides the current configuration. We do not represent that a particular IAB Transparency and Consent Framework version or purpose configuration is in use unless that framework is actually enabled in the released app.
8. Notifications
Coilsy may ask for permission to send notifications about daily challenges, streaks or rewards. You can decline permission or turn notifications off later in your Android system settings.
For local reminders, the app schedules notification content and timing on your device. The reminder schedule is used to provide the feature and does not, by itself, require us to receive your notification history or precise location.
If a future version introduces remote push notifications or a new messaging service, we will update this policy to identify the service, the information it processes and the available controls.
9. Retention and deletion
Local game data: remains on your device until you remove it, clear the app's storage or uninstall Coilsy. Some information may remain in a device backup if your Android backup settings include app data.
Privacy preferences: are retained locally for as long as needed to remember and apply your choices. If a consent record is also retained by a consent or advertising service, that service's retention rules may apply.
Support messages: if you email us, we keep the message and information you choose to include for as long as reasonably necessary to respond, handle follow-up and meet applicable legal obligations.
Google advertising and diagnostic information: is handled under Google's applicable retention and deletion practices. Uninstalling Coilsy does not necessarily delete information already received by Google. Use Google's privacy controls or contact Google where its services provide the relevant request route.
To remove locally stored game progress, use Android's app storage controls to clear Coilsy data or uninstall the app. This removes local progress from the device and may not remove information held by Google or included in an independent device backup.
10. Security and international transfers
We take reasonable steps to protect information handled by Coilsy. Local game data is stored within the app's data area on your device and is subject to the security features and access controls provided by Android. Google states that data collected by its Google Mobile Ads SDK is encrypted in transit using Transport Layer Security (TLS).
No app, device or internet transmission can be guaranteed to be completely secure. Keep your device's operating system up to date and use the security controls available on your device.
Google operates services in multiple countries. Information processed by Google may therefore be transferred to or accessed from countries other than the country where you live. Google describes the transfer mechanisms and safeguards that apply to its services in its privacy and legal documentation. We do not independently control Google's international infrastructure.
11. Your privacy rights
Your rights depend on where you live and which privacy laws apply. You may contact us at contactme.bashar@gmail.com to ask about information that we hold directly. We may need to verify your request before acting. We will respond within the time required by applicable law.
European Economic Area and United Kingdom
Where the GDPR or UK GDPR applies, you may have rights to request access to your personal data, correct inaccurate information, request erasure, restrict or object to certain processing, and receive certain information in a portable format. Where processing is based on consent, you can withdraw that consent. You may also complain to your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).
United States, including California
Depending on your state and whether the relevant law applies to our activities, you may have rights to know or access personal information, request deletion or correction, obtain a portable copy, and opt out of certain sale, sharing or targeted advertising. California residents may have additional rights under the CCPA as amended by the CPRA, including rights relating to sensitive personal information and certain automated processing. We do not knowingly sell personal information for money. However, some personalised advertising activity may be treated as "sharing" or targeted advertising under applicable state law. Use the in-app privacy preferences where available or email us to make a request.
India
We will handle personal data in accordance with Indian law as it applies to the service. India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 have notified commencement in stages. As of the effective date of this policy, the Government's 13 November 2025 notification schedules many substantive processing duties and data principal rights to take effect 18 months after publication, on 13 May 2027. Rights and obligations that are already in force, and any other applicable Indian legal requirements, continue to apply. We will update this notice as the remaining provisions take effect.
Canada
Where Canadian privacy laws such as PIPEDA or applicable provincial laws apply, you may have rights to request access to personal information we hold, ask for corrections and raise a complaint with the relevant privacy regulator.
Brazil
Where Brazil's LGPD applies, you may have rights to confirm processing, access and correct personal data, request anonymisation, blocking or deletion where available, request portability where applicable, and withdraw consent. You may also contact the Brazilian National Data Protection Authority (ANPD).
Other locations
People in other countries may have similar rights under local privacy laws. We will consider and respond to requests in line with the requirements that apply to the request.
Some rights are subject to legal exceptions. The availability of a right does not mean that every request can always be granted, particularly where information is held by Google rather than by Bashar DigiLab.
12. Children's privacy
Coilsy is designed as a general-audience puzzle game and is not intended to be a service directed specifically at children under 13. We do not knowingly ask children to submit personal information directly to Bashar DigiLab.
Advertising services may process device or advertising information as described in this policy. The app's audience settings, advertising configuration and consent flow must be configured to match its actual age rating, target audience and the laws that apply in each market.
If you are a parent or guardian and believe a child has sent personal information to us, contact contactme.bashar@gmail.com. We will review the request and take appropriate steps where required.
13. Changes and contact
We may update this Privacy Policy when Coilsy changes, when we add or remove a service provider, or when privacy requirements change. The updated version will be published at this page with a revised effective date. If a change materially affects the way information is handled, we will provide an additional notice in the app where appropriate.
Please review this page from time to time, especially after installing a major app update.