Cricket: Player and Manager Privacy Policy

Scope of this policy

This policy applies specifically to Cricket: Player and Manager and its related support and web pages. It does not apply to other apps published by Sunlight; those apps have their own privacy policies.

Who is responsible

Sunlight provides Cricket: Player and Manager and is responsible for the personal data described here. The legal operator is identified on the Publisher Information page.

Information the app handles

• Local game data: careers, squads, match history, settings, rewards and other progress stored on your device.
• Account and cloud data: an anonymous or linked account identifier, authentication records and cloud saves when the online backend is enabled.
• Purchases: product, entitlement, transaction status and pseudonymous verification identifiers supplied by Google Play, Apple or RevenueCat. Sunlight does not receive your full payment-card number.
• Online play and security: leaderboard entries you submit, server timestamps, app/build version, fraud checks, IP address and service logs.
• Age preferences: the app stores your self-declared age band, India/outside-India residence choice and, where applicable, parent or guardian permission on your device. It does not ask for a date of birth or upload these answers. This is a self-declaration, not verified identity or parental consent.
• Advertising: Google Mobile Ads may process device or advertising identifiers, IP address, ad interactions, diagnostics and consent choices according to the build and your settings. Ads are not initialized for unknown-age users, children under 13, teens in India, or teens without parent or guardian permission. Eligible teens outside India receive child-directed, G-rated, non-personalized ads. For adults, Google uses the consent choice to determine whether personalized, non-personalized, or eligible limited ads may be served. Both eligible groups wait for the Google consent flow to permit requests. Declining consent does not guarantee that a limited ad will be available. Ad privacy choices are available in Settings. Non-personalized or limited ads may still involve technical processing.
• Support: your email address, message and attachments if you contact support.
• Optional diagnostics: if you enable Usage analytics in Settings, Google Firebase Analytics processes app-instance identifiers, app/device information, sessions and limited gameplay events to measure usage. Its SDK may also derive approximate location from masked IP addresses and collect in-app purchase/subscription events, including product and price information. This does not give us your payment-card details or precise GPS location. If you enable Crash reports, Firebase Crashlytics processes installation identifiers, app/device diagnostics, session information and crash traces to diagnose failures. Both choices are off by default and can be withdrawn in Settings. We do not attach account names, emails or save contents to Firebase reports. Analytics advertising-ID collection and advertising consent are disabled. Turning these options off stops future reporting; it does not automatically erase reports already received by Google. Provider retention and deletion procedures apply to previously received data; contact us using the details above for a privacy request.
• Device features: notification permission and locally scheduled reminders. The current app does not upload a push-notification token.

The public legal site does not intentionally set advertising or analytics cookies. Cloudflare may process ordinary network and security logs when it hosts these pages.

Why it is used

• Run the game, save progress and provide requested online features.
• Verify purchases, restore eligible entitlements and prevent duplicate or fraudulent grants.
• Show and measure ads where enabled, subject to the applicable consent and age rules.
• Secure the service, diagnose failures, answer support requests and comply with law.

Depending on the context and applicable law, processing is based on providing the service you request, your consent, legitimate service-security interests, or a legal obligation. You may withdraw consent for optional processing, although this does not affect earlier lawful processing.

Service providers and disclosures

Information may be processed for Sunlight by Supabase (authentication and cloud data), RevenueCat (purchase entitlement management), Google Play and Apple (billing), Google Mobile Ads (advertising), Google Firebase Analytics and Crashlytics (optional usage and crash diagnostics), and Cloudflare (site delivery and security). Their handling is also governed by their own terms and privacy notices.

Information may also be disclosed when required by law, to protect users or the service, or in connection with a business transfer. Sunlight does not sell personal data. Public leaderboard information is shared publicly only when that feature is enabled and you submit an entry.

Storage, transfers and retention

Local data remains on the device until you delete it or remove the app. Active account and cloud-game data remains while the account is used and is removed after a verified deletion request, normally within 7 days. Residual backup copies, where present, rotate out within 7 days and are not returned to the active service.

Pseudonymous deletion-request status is retained for up to 30 days so interrupted requests can be retried safely. Security and support records are retained for up to 90 days. Minimum pseudonymized purchase, refund, chargeback, fraud and accounting evidence is retained for up to 365 days when needed for legal compliance or dispute handling. Provider-controlled records may follow the provider’s independently disclosed schedule.

Providers may process data outside India. Where required, Sunlight uses provider terms and safeguards intended to protect transferred data.

Your choices and rights

• Use local play without enabling optional cloud or leaderboard features.
• Control notifications in the app or device settings.
• Manage subscriptions through Google Play or the App Store.
• Ask for access, correction, a copy, deletion, withdrawal of consent or grievance review where applicable law provides those rights.

Use the account-deletion instructions or contact the email above. We may need to verify that you control the relevant account before acting.

Children and younger users

Cricket: Player and Manager is not directed to children. Users in India must be at least 18. Users elsewhere must be at least 13 and, where local law requires it, have permission from a parent or guardian.

We do not knowingly collect personal data from anyone below the applicable minimum age. A parent or guardian who believes a child supplied personal data may contact us so that we can investigate and delete it.

Security and changes

Sunlight uses access controls, encrypted transport and restricted server credentials, but no service can guarantee absolute security. Material policy changes will be posted here with a new effective date and, when appropriate, explained in the app.