Privacy Policy
1. Local-first processing
The current version does not require an account. Artwork, inventory, progress, and settings are stored primarily on your device. Check-in, free-continuation, display-ad pass expiry, and historical ad-removal records also stay on-device.
2. Data processed by the game
The game processes vessel shapes, decoration choices, artwork names, virtual inventory, preferences, transaction records, and recovery records on-device so its features can work. These local records also include check-in dates and cycle rewards, free-pass grants and uses, display-ad pass purchases and expiry, and historical result-skip and banner-hiding records.
3. Advertising and third parties
The game includes optional rewarded ads, firing-result interstitials, and banners on browsing pages. Where required, the game first uses Google User Messaging Platform (UMP) to request or refresh consent. Ads are requested and Google Mobile Ads is initialized only when UMP currently allows ad requests (CanRequestAds). Google may process IP address, device or advertising identifiers, coarse location, app and device information, diagnostics, ad interactions, and consent state under its policies. The iOS app requests non-personalized ads and disables the Google publisher first-party advertising ID. This version does not request App Tracking Transparency permission or use the IDFA for personalized advertising. Regional advertising consent remains separate from these settings.
4. Artwork boundary
The current ad adapter does not send artwork images, artwork names, vessel shapes, decorations, or local saves as ad-request parameters. App stores, the operating system, the Unity runtime, and Google services may independently process necessary technical data under their policies.
5. Your choices
Rewarded ads are optional. Firing-result interstitials appear automatically before decoration when ad-request and display conditions are met, without a per-work coin-skip offer or purchase prompt. My Studio has one Remove display ads entry: 3,000 game coins buys 30 days without these interstitials and browsing banners, and renewal adds 30 days to the remaining period. Optional rewarded ads remain available. Previously purchased benefits retain their original terms. Ad availability and format after refusing or withdrawing consent are determined by UMP and ad SDK rules. The game requests ads only when the current consent state allows requests; it does not guarantee that ads can still be shown after refusal. If an ad is unavailable or loading fails, your work stays on your device and you can continue free of charge. When UMP requires it, privacy options can be reopened from My Studio settings.
6. Device capabilities, retention, and deletion
Device motion, display brightness, audio, and local storage are used only when enabled or needed. Local records remain until removed through supported features, app-data clearing, or uninstalling.
7. Children, updates, and contact
Minors should use the game with guardian guidance and applicable local age rules. Material changes update this version and date. Contact us through Share feedback in My Studio or the support channel on the App Store page.
8. Optional first-party gameplay analytics
In the Unity version that provides this feature, basic gameplay analytics are on by default for new installations. You can turn sharing off on the Privacy Policy page in Settings. Updates preserve an existing choice to turn it off. While enabled, analytics are recorded and uploaded. They include a random installation identifier, session and craft identifiers, game generation and build, device capabilities and coarse country, page visits, segmented gameplay/waiting/idle time, accepted interactions and tutorial attempts, shop purchases and sales, virtual currency changes, setting changes, rewarded-ad, interstitial and banner loading/display/reward or revenue results, check-in dates and cycle rewards, paid ad-removal transactions, and necessary performance diagnostics. They help us understand gameplay, version issues, reward delivery, and game balance. Installation identifiers do not reliably identify the same person across reinstalls or devices.
When first-party gameplay analytics are enabled, completed artwork names, the full artwork JSON (including vessel shape, firing and decoration results), and a 512x256 gallery thumbnail are uploaded to our private database so we can reconstruct creation flows and verify work outcomes. This artwork data is not shown publicly or sent as ad-request content. Analytics still do not upload per-touch trajectories, contact details, or authentication secrets. The service processes necessary network information for delivery and abuse prevention; raw network addresses are not stored in analytics events. First-party sharing and Google ad consent are separate choices. Turning off sharing does not prevent gameplay or rewarded benefits. The Privacy Policy page in Settings lets you stop future collection or request deletion of uploaded analytics, artwork JSON, and thumbnails. Offline deletion requests resume when the network and service are available. Uninstalling or clearing local app data does not automatically delete server-side records.
9. Messages you choose to send
When you submit feedback, we send your message, category, optional rating, v2 identifier, app version, build, interface language, random installation identifier and submission time to our server. We use messages to understand feedback and plan improvements, independently of optional analytics. Messages are not shown publicly to other players. No name, email or phone number is required; please do not include sensitive information. Offline submissions remain on your device for retry. We show received only after server confirmation. Unsubmitted drafts remain on your device.
10. Apple purchases and transaction verification
Apple processes payments; we do not receive your payment card details. To validate purchases, prevent duplicate grants and handle refunds, our server receives the Apple-signed transaction, product and transaction identifiers, purchase environment, purchase intent, and an installation public key. The corresponding private signing key stays in this device’s keychain. Transaction identifiers needed for later verification are stored encrypted on the server; delivery and refund records are retained for purchase support and fraud prevention. These operational records are separate from optional gameplay analytics and do not depend on the analytics switch.
11. Older iOS records
During an update, the app reads only this app’s former local pottery records, creates a local archive, and transfers the stored coin balance once. The archive includes older works, thumbnails, material unlocks, order progress and studio choice. The migration itself does not upload this archive or alter the original web storage.
12. Creator features you choose to use
Submitting a work to Creator centre sends its title, artwork data, thumbnail and an anonymous creator identifier to our service for review. Approved works or voting entries may be displayed to other players under the relevant in-app instructions. Creator messages, applications, votes and virtual royalty records are processed to provide these features, independently of optional gameplay analytics. A share action opens the system share sheet; the app does not access your contacts or send invitations automatically.
13. Optional community, friendships and AI conversations
You may choose to publish an original pottery blog. Only after you agree to public sharing and tap Publish do we upload your chosen name, bio, artwork title, journal, and this work's image and rotatable model for public access. Other works and personal portraits are not uploaded. You can withdraw public access; necessary revision, moderation and retry records remain.
Enabling player messaging stores your chosen display name, installation-level creator identity, friend requests and accepted relationships, blocks and message content on our server to provide private messaging between accepted friends. Your chosen name is visible to people you add. Chats are not public. Removing or blocking a friend stops further chat access or sending but does not automatically delete existing server records.
Virtual creators are clearly labelled AI characters. Only after you consent and send a message do we send up to 12 recent messages from that character conversation to DeepSeek to generate a reply. Private player chats, artwork files and installation secrets are not included. Character friendships and recent chat history stay on your device. Our server keeps a request hash and short-lived reply receipt for seven days to prevent duplicate calls. Withdraw AI consent in Friends to stop future character messages; withdrawing cannot recall already processed content. DeepSeek may process requests and replies under its service policies.
Blogs, player messaging, AI chats and content reports are voluntary and separate from gameplay analytics and advertising consent. Reports send only the reference and explanation you review to our in-app feedback moderation channel, together with that channel's disclosed installation identifier and build information. Do not include sensitive information or other people's private details. You can block players or creators. For deletion of server-side community or chat data, use the developer contact on Contact & About and retain your creator ID before uninstalling. Uninstalling does not delete server records and may prevent recovery of proof of an installation-level creator identity.
First creation and continuation: The first creation is exempt from firing-result interstitials. After saving the first work, you can start the second creation free without spending coins or watching a rewarded ad.