Privacy Policy
Last updated: April 17, 2026
1. Overview
Solora Studio ("we", "us", "our") develops and publishes mobile games, including Lockstep. This policy explains what personal data we and our third-party partners collect, how it is used, your rights, and how to contact us.
Solora Studio is registered in Israel and is the data controller responsible for your personal information under the GDPR and equivalent laws.
2. Data We Collect
We use Google Firebase Analytics to collect:
- Gameplay events (e.g., level completion, mode selection, purchases)
- Session duration and frequency
- Device type, operating system version, app version
- Approximate country, derived from IP address (the IP itself is not stored)
We use Google Firebase Crashlytics to diagnose crashes, which collects:
- Crash stack traces
- Device model, OS version, app version
- App state immediately before the crash (non-personal diagnostic data)
Free titles are monetized through Google AdMob, which may collect:
- Your Google Advertising ID (Android) or IDFA (iOS) — these are resettable by you in your device settings
- Device information (type, language, screen size)
- IP address, used for region detection and fraud prevention
- Interactions with ads
Data collected for analytics is aggregated and anonymized for our internal product decisions.
Sensitive Personal Information
We do not collect sensitive personal information as defined by the California Privacy Rights Act (CPRA) or equivalent laws. This includes government-issued identifiers, precise geolocation, login credentials, biometric data, health information, financial account details, genetic data, and information about your race, ethnicity, religion, union membership, or sexual orientation.
3. Third-Party Services
We use the following services, each governed by its own privacy policy:
- Google Firebase Analytics — firebase.google.com/support/privacy
- Google Firebase Crashlytics — firebase.google.com/support/privacy
- Google AdMob — policies.google.com/privacy
- Google User Messaging Platform (UMP) — our Consent Management Platform, which presents privacy choices and records your consent signals — policies.google.com/privacy
- Google Play Billing (Android in-app purchases) — policies.google.com/privacy
- Apple StoreKit (iOS in-app purchases) — apple.com/legal/privacy
4. Advertising Partners
Our ad network, Google AdMob, works with hundreds of authorized advertising technology partners through the IAB Transparency and Consent Framework (TCF). A complete, current list of these partners, along with their individual privacy policies, is available inside the app via Settings → Privacy options.
Personalized vs. Non-Personalized Advertising (EEA / UK / Switzerland)
If you grant advertising consent, you will see personalized advertising: ads selected based on advertising identifiers and signals drawn from your inferred interests. If you decline, you will see non-personalized (contextual) advertising: ads selected based on the current app context rather than your advertising identifiers. Both types support Solora Studio and allow us to continue offering our games free of charge.
Categories of Personal Information Shared with Advertising Partners
For the purpose of serving advertising, we may share the following categories of personal information with our advertising partners (using the CCPA / CPRA category names):
- Identifiers — advertising identifiers (Google Advertising ID, IDFA), IP address, device identifiers
- Internet or Other Electronic Network Activity Information — interactions with ads, app session information
- Geolocation Information — approximate location (country/region) derived from IP address
- Inferences — inferences drawn from the above to present ads likely to be relevant to you
5. Legal Basis for Processing (EEA / UK / Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases:
- Consent (Article 6(1)(a) GDPR) — for personalized advertising and optional analytics. You can grant, withdraw, or modify your consent at any time via the Privacy options form in the app's Settings.
- Legitimate interest (Article 6(1)(f) GDPR) — for the operation, security, and improvement of our games, for serving non-personalized advertising, and for basic analytics necessary to run the service.
- Contractual necessity (Article 6(1)(b) GDPR) — for processing in-app purchases and delivering purchased content.
6. Data Retention
- Gameplay progress: stored locally on your device until you uninstall the app. We do not retain gameplay progress on our servers.
- Firebase Analytics events: retained for up to 14 months by Google.
- Ad identifiers: not stored by Solora Studio. They are managed by your device and can be reset or limited in your device settings.
- Support correspondence: retained for up to 24 months after the last message, for troubleshooting and dispute resolution.
7. International Data Transfers
Data collected by Firebase Analytics, Google AdMob, and other Google services may be processed on servers located in the United States or other countries outside the European Economic Area. These transfers are conducted under Standard Contractual Clauses approved by the European Commission, and other safeguards required by applicable law.
8. Your Privacy Rights
Residents of the European Economic Area, United Kingdom, and Switzerland
Under the General Data Protection Regulation (GDPR) and equivalent laws, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your personal data
- Restriction — limit our processing of your data
- Data portability — receive your data in a portable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with your local data protection supervisory authority
We do not engage in automated decision-making, including profiling, that produces legal effects or similarly significant effects on you under Article 22 GDPR.
To exercise any of these rights, contact privacy@solora.studio or use the Privacy options form in the app's Settings.
Residents of California and other US states with applicable privacy laws
Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), and similar laws in Colorado, Connecticut, Virginia, Utah, and other US states, you have the right to:
- Know what categories of personal information we collect about you
- Access a copy of the specific personal information we have collected
- Delete personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information for advertising
- Limit use of sensitive personal information
- Non-discrimination — we will not deny you service or charge different prices for exercising your rights
To exercise any of these rights, contact privacy@solora.studio or use the Privacy options form in the app's Settings.
9. Do Not Sell or Share My Personal Information
Solora Studio does not sell your personal information for monetary consideration.
However, when our advertising partners use device identifiers and related signals to serve personalized ads, this activity may constitute "sharing" or "targeted advertising" under some US state privacy laws.
You can opt out of this sharing at any time by:
- Using the Privacy options form in the app's Settings
- Emailing privacy@solora.studio with the subject line "Do Not Sell or Share"
10. Children's Privacy
Our games are intended for users aged 13 and older.
In compliance with the US Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13, and we do not target our apps to children under 13.
If you are a parent or guardian and believe that a child under 13 has provided us with personal information, please contact privacy@solora.studio and we will promptly delete the information.
11. Security
We use reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this policy reflects the most recent version. If we make material changes, we will announce them via an in-app notice.
13. Contact
For any privacy-related questions, or to exercise your rights: