Privacy Policy

Who is responsible

Sunlight provides Cricket Legacy and is responsible for the personal data described here. The legal operator is identified on the Publisher Information page.

Information the app handles

• Local game data: careers, squads, match history, settings, rewards and other progress stored on your device.
• Account and cloud data: an anonymous or linked account identifier, authentication records and cloud saves when the online backend is enabled.
• Purchases: product, entitlement, transaction status and pseudonymous verification identifiers supplied by Google Play, Apple or RevenueCat. Sunlight does not receive your full payment-card number.
• Online play and security: leaderboard entries you submit, server timestamps, app/build version, fraud checks, IP address and service logs.
• Advertising: Google Mobile Ads may process device or advertising identifiers, IP address, ad interactions, diagnostics and consent choices according to the build and your settings. Ad requests are configured as non-personalized, but that setting does not prevent all technical processing.
• Support: your email address, message and attachments if you contact support.
• Device features: notification permission and locally scheduled reminders. The current app does not upload a push-notification token.

The public legal site does not intentionally set advertising or analytics cookies. Cloudflare may process ordinary network and security logs when it hosts these pages.

Why it is used

• Run the game, save progress and provide requested online features.
• Verify purchases, restore eligible entitlements and prevent duplicate or fraudulent grants.
• Show and measure ads where enabled, subject to the applicable consent and age rules.
• Secure the service, diagnose failures, answer support requests and comply with law.

Depending on the context and applicable law, processing is based on providing the service you request, your consent, legitimate service-security interests, or a legal obligation. You may withdraw consent for optional processing, although this does not affect earlier lawful processing.

Service providers and disclosures

Information may be processed for Sunlight by Supabase (authentication and cloud data), RevenueCat (purchase entitlement management), Google Play and Apple (billing), Google Mobile Ads (advertising), and Cloudflare (site delivery and security). Their handling is also governed by their own terms and privacy notices.

Information may also be disclosed when required by law, to protect users or the service, or in connection with a business transfer. Sunlight does not sell personal data. Public leaderboard information is shared publicly only when that feature is enabled and you submit an entry.

Storage, transfers and retention

Local data remains on the device until you delete it or remove the app. Active account and cloud-game data remains while the account is used and is removed after a verified deletion request, normally within 7 days. Residual backup copies, where present, rotate out within 7 days and are not returned to the active service.

Pseudonymous deletion-request status is retained for up to 30 days so interrupted requests can be retried safely. Security and support records are retained for up to 90 days. Minimum pseudonymized purchase, refund, chargeback, fraud and accounting evidence is retained for up to 365 days when needed for legal compliance or dispute handling. Provider-controlled records may follow the provider’s independently disclosed schedule.

Providers may process data outside India. Where required, Sunlight uses provider terms and safeguards intended to protect transferred data.

Your choices and rights

• Use local play without enabling optional cloud or leaderboard features.
• Control notifications in the app or device settings.
• Manage subscriptions through Google Play or the App Store.
• Ask for access, correction, a copy, deletion, withdrawal of consent or grievance review where applicable law provides those rights.

Use the account-deletion instructions or contact the email above. We may need to verify that you control the relevant account before acting.

Children and younger users

Cricket Legacy is not directed to children. Users in India must be at least 18. Users elsewhere must be at least 13 and, where local law requires it, have permission from a parent or guardian.

We do not knowingly collect personal data from anyone below the applicable minimum age. A parent or guardian who believes a child supplied personal data may contact us so that we can investigate and delete it.

Security and changes

Sunlight uses access controls, encrypted transport and restricted server credentials, but no service can guarantee absolute security. Material policy changes will be posted here with a new effective date and, when appropriate, explained in the app.