How we use your data

This build: the November 2026 showing

The showing build sends no crash reports, run logs, play events or bug reports. It does not sign in to Unity Gaming Services.

Google and Apple share install and crash information with us. See “Other services” below.

The rest of this page applies from the tester stage.

Who we are

Project Alchemy is made by Violet Arc Studios Ltd, a company registered in England and Wales (company number 17511972). Contact: privacy@violetarc.io.

Violet Arc Studios Ltd decides how your test data is used. We are the “controller” of it.

What this covers

The private test of Project Alchemy. You install it in one of two ways:

• Android: from Google Play, through a closed testing track.
• iPhone: through Apple’s TestFlight.

Who can join

The private test is for adults. You must be 18 or over to take part. We invite every tester ourselves. The test is not open to the public.

Crash reports come with joining the test

If you join, the game sends crash reports automatically. The “Share test data” switch does not control them. The provider is Unity (Unity Diagnostics).

A crash report holds:

• an installation ID, a unique ID for your install of the game. It is personal data. It is the only personal data a report always holds;
• a session ID;
• your device model, its operating system version, and its CPU and GPU;
• the Unity version;
• the stack trace, which shows where the game failed;
• breadcrumbs, which are the events leading up to the crash;
• log messages;
• other details about your device and the game.

By default a crash report does not include your Unity player ID or a Unity account ID. When a crash report uploads, Unity also receives your IP address.

Everything else is your choice

Sharing test data is off until you switch it on. The game asks you once, the first time you open it. You can say no. If sharing is off, the game does not sign in to Unity Gaming Services, and it does not send us your run logs, play events or bug reports.

If you switch on “Share test data”, we collect:

• Run logs. Each run’s seed, the cards in your set, the moves you make (summons, placements, merges, fusions and choices), and the game and settings version. We replay runs in our test tools to balance the game.
• Play events. When you pause or quit a run, how long you spend on each screen, and which tutorial steps you finish or skip.
• Bug reports you send. A screenshot of the game, the run’s seed, the game state, and the note you type. Please don’t put personal details in your note.

Switching sharing on also involves two more things:

• A Unity player ID. The game signs in to Unity Gaming Services only after you switch sharing on. Signing in creates the player ID. It is personal data. Unity keeps it until it is deleted. We hold your run logs, play events and bug reports under it. It isn’t your name or email. Settings → Privacy shows it once sharing is on.
• Your IP address. Unity’s services can record your IP address with your player ID. Its Cloud Save service does this by default.

What the game doesn’t collect

The game doesn’t collect your name, email address, contacts, payment details or advertising IDs. The test has no purchases and no ads. The game doesn’t read your phone’s location (GPS). Your IP address can show roughly where you are. The game takes no photos. The only pictures we get are screenshots you choose to send in a bug report.

Google and Apple give us some details themselves. See “Other services”.

Where your data goes

When you have switched sharing on and your phone is online, run logs, play events and bug reports upload to a Unity Gaming Services test project, run for us by Unity Technologies. Crash reports go to Unity as well, through Unity Diagnostics.

Unity is based in the United States. It may process your data in the US and in other countries where Unity and its sub-processors operate. Unity gives us no choice of region, so your data can leave the UK and the European Economic Area (EEA). Unity’s Data Processing Addendum (DPA) with us covers those transfers. It includes the EU Standard Contractual Clauses (2021) and the UK International Data Transfer Addendum. Unity is not certified under the EU-US Data Privacy Framework or its UK Extension. It relies on those contract safeguards instead.

Unity handles this data on our behalf. Unity is our “processor”.

Violet Arc Studios Ltd reads the data. So do AI tools that analyse test runs for us. Your test data is not used to train their models.

Other services

Google Play (Android) is run by Google. It handles the download and updates, under Google’s own privacy policy. Google Play Console also shows us some information about installs and crashes. We use the email address you give us for your invitation to put you on the test.

TestFlight (iPhone) is run by Apple, under Apple’s own privacy policy. Apple shares with us:

• the name and email used for your invitation;
• how you were invited, and your status;
• your device model and identifier, operating system version and language;
• your session and crash counts;
• crash logs. Apple says you can’t opt out of these.

If you send feedback or a screenshot from TestFlight, we also get your comments and screenshot. We get technical details too: carrier, time zone, battery, free disk space, connection type and screen resolution.

Why we’re allowed to use your data

UK data protection law (UK GDPR) requires a legal basis for each use. Ours are:

• Run logs, play events, bug reports, the Unity player ID and your IP address: your consent, given by switching on “Share test data”. You can withdraw it at any time by switching sharing off.
• Crash reports: our legitimate interests. That means finding and fixing crashes in a test you chose to join. It is not consent.
• Your invitation, and the details Google and Apple share with us: our legitimate interests in running the test you asked to join.

You can object to our use of crash reports. They are part of the test, so the way to stop them is to stop playing and uninstall the game.

How long we keep your data

We keep these until the test ends, and at most 1 year from when we collect them: crash reports, run logs, play events, bug reports, the player ID and any other data in our Unity test project, and the invitation and TestFlight details we hold about you.

At the end of each test we delete the test’s crash reports, and all players and all other data in the Unity test project. We delete run logs, play events and bug reports then too.

Google and Apple keep the information they hold under their own policies. We don’t control how long they keep it.

Your choices

You can switch sharing off at any time in Settings → Privacy. The game then stops sending run logs, play events and bug reports. Switching off does not delete what you already sent, or your Unity player ID. That stays until you ask us to delete it, or until the test ends.

Crash reports are part of joining the test, so the switch does not stop them. To stop them, stop playing and uninstall the game.

Deleting your data, or getting a copy

Settings → Privacy shows your installation ID, with a copy button. Once you have switched sharing on, the same screen also shows your Unity player ID, with a copy button.

Email privacy@violetarc.io to ask us to delete your data or send you a copy. You don’t need to wait for the test to end. Put both IDs in the email, or just the installation ID if you never switched sharing on.

The installation ID finds your crash reports. When you ask us to delete your data, we delete the crash reports held under that installation ID. Deletion is permanent.

The Unity player ID finds your run logs, play events, bug reports and other data in the Unity test project. If you have switched sharing on, we delete or copy these under your player ID too. If you have never switched sharing on, you have no player ID and we hold none of this data. We delete all of it when the test ends.

We answer your request within one month.

Other rights

You can also ask us to correct your data, or to restrict how we use it while a question about it is settled. For the data you shared by switching sharing on, you can ask for a copy in a common, machine-readable format, to keep or pass to someone else. Write to privacy@violetarc.io. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

Changes to this notice

If we change this notice, we post the new version on this page with a new version number and date.