Privacy Policy

Path of Light: Mirror Puzzle (Android, package com.AJM.Lightbringer)

Last updated: 6 August 2026

1. Who we are

This game is published under the EchoWall Games label by Adam Suchodolski Worldweaver Studio, a sole proprietorship registered in Poland ("we", "us"). We are the data controller for the processing described here.

Adam Suchodolski Worldweaver Studio
Grochowska 42/11, 04-282 Warszawa, Poland
VAT ID (NIP): PL1133182868
info@worldweaver-studio.com

2. What the game processes for every player

This part applies to everyone who plays, with or without a Google account. It is handled by third-party providers acting as independent controllers for their own services, and it is unrelated to your Google account identity: none of these providers receives your Play Games identity or your cloud save.

Provider	Purpose	Typical data
Google AdMob	Serving the ads that fund the game, frequency capping, fraud prevention.	Advertising ID, IP address, device and ad-interaction data.
Firebase Analytics	Understanding which levels are played and where players get stuck, so we can improve the game.	Random app-instance ID (not linked to your name or account), device model, OS and app version, approximate region, in-game events.
Unity	Game engine and its diagnostics.	Device and diagnostics data.

If you are in the European Economic Area, the United Kingdom or Switzerland, the game shows you a consent form before personalized advertising is enabled. If you decline, ads are served in non-personalized mode. The same choice governs the ad-related signals the game passes to Google Analytics; gameplay events themselves are collected either way, without your name or account and identified only by the random app ID described in the table above. You can change your choice at any time from the options panel in the game.

These providers process data on infrastructure that may be located outside your country, including in the United States, under the safeguards they put in place, such as the European Commission's standard contractual clauses.

2.1 Purchases

The game offers optional purchases. They are made through Google Play, which processes the payment under its own terms and privacy policy. We never receive your card, bank or address details – only the confirmation that a purchase happened. What you own as a result is recorded in your save (section 2.2), which survives a reinstall only if cloud save is switched on – without it, uninstalling the game clears what you own together with the save. Billing questions and refunds are handled by Google Play; see our Terms and Conditions.

2.2 Your save

The save is a single small file holding your progress, your purchases and your settings. It contains no names, e-mail addresses, contacts, messages, photos, location data or payment data.

The game always keeps this file on the device itself, encrypted, alongside a few values in Android preferences. We never send that copy anywhere, and it disappears when you uninstall the game. If you also use cloud save, the same file is mirrored into your own Google account – that copy, and only that one, is what section 3 is about.

3. Cloud save and Google user data (optional)

Cloud save is optional and works through Google Play Games Services. The first time you launch the game, Play Games offers to sign you in with the Google account you already use for Play Games on that device. If you decline that prompt, or you do not use Play Games at all, the game stays on the local save only and none of the data described in this section is accessed. You can start the sign-in later from the options panel in the game.

3.1 Which Google permissions we request and why

OAuth scope	What it gives access to	Why we need it
`.../auth/games_lite`	Your Google Play Games player identity: player ID and gamertag (your public Play Games profile).	To sign you in to Play Games Services, to recognise which cloud save belongs to you and to show which account is currently signed in.
`.../auth/games`	Google Play Games Services for this game, including the saved games feature.	To create, read and update your cloud save through Play Games Services.
`.../auth/drive.appdata`	A hidden, application-specific folder in your Google Drive. This scope gives access only to files this game created there. It does not allow the game to see, list, open or modify any other file in your Drive.	This is where Play Games Services physically stores the saved-game file.

3.2 Where the save is stored and who can access it

The saved game is stored by Google, inside your own Google account – in Play Games Services and in the application data folder of your Google Drive. We operate no backend for this feature: we do not copy the save to our own servers, we do not keep a database of players, and we have no technical way to read your cloud save or your Play Games profile from outside the game running on your device.

We do not share, sell, rent or transfer Google user data to anyone. It is not passed to our advertising or analytics providers.

3.3 Retention and how to delete your cloud save

Because the cloud save lives in your Google account, it stays there until you remove it, including after you uninstall the game. The game currently does not include an in-game "delete cloud save" button, and since the data is not on our servers we cannot delete it on your behalf. You remove it with Google's own controls, which is possible at any time and does not need our involvement:

delete the game's saved data in the Google Play Games app,
delete the game's hidden application data in Google Drive, where Play Games stores the file,
or revoke the game's access to your account entirely at myaccount.google.com/permissions, after which the game stops reading and writing anything in your Google account.

Google documents the current steps for each of these in its own help pages, and they take effect immediately. If you cannot find them, write to info@worldweaver-studio.com and we will point you to the right screen.

3.4 Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained through the scopes listed above is:

used only to provide and improve the cloud save feature described in this policy;
never used for advertising of any kind, including personalized, re-targeted or interest-based advertising;
never sold or transferred to data brokers, information resellers or any other third party;
never used to develop, improve or train generalized or non-personalized artificial-intelligence or machine-learning models;
never used for creditworthiness assessment or lending purposes;
never read by a human, except with your explicit consent, where required for security purposes such as investigating abuse, where required by applicable law, or in aggregated and anonymized form.

4. Legal bases for processing (GDPR)

Performance of a contract – providing the game, your purchases and the cloud save feature.
Consent – personalized advertising and the ad-related signals sent to Google; you may withdraw it at any time from the options panel in the game.
Legitimate interests – gameplay analytics that are not tied to your identity, security, fraud prevention and improving the game.

5. Your rights

If the GDPR applies to you, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. How you exercise those rights here depends on who actually holds the data, because we hold none of it ourselves:

We keep no player accounts or records. The Studio operates no server, no database and no login of its own, so there is nothing on our side that we could look up, correct, export or delete, and no way for us to tell which player is which. Under Article 11 GDPR we are not required to collect additional data merely to be able to identify you, and we will not do so.
Data held by our providers (Google AdMob, Firebase Analytics, Unity) is keyed to identifiers that belong to your device, not to an account with us. You control it through the device: withdraw or change your advertising consent from the options panel in the game, and reset or delete your advertising ID in your Android privacy settings. Requests addressed to those companies go directly to them under the policies linked in section 2.
Data in your own Google account (the cloud save and your Play Games profile) is under your direct control. Deleting or revoking it takes effect immediately and does not need our involvement – see section 3.3.

You also have the right to lodge a complaint with a supervisory authority – in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

6. Children

The game is not directed to children under 13, and we do not knowingly collect personal data from them. If you are a parent or guardian and want to remove what your child's device or Google account holds, the routes in sections 3.3 and 5 apply to you as well; write to info@worldweaver-studio.com if you need help with them.

7. Security

Sign-in is handled entirely by Google; we never see or store your Google password. Access tokens stay on your device and are managed by Google Play services. The local save file is encrypted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with a new "Last updated" date, and material changes will also be announced in the game or on our website.

9. Contact

EchoWall Games (Adam Suchodolski Worldweaver Studio)
Grochowska 42/11, 04-282 Warszawa, Poland
info@worldweaver-studio.com