Outwork Labs
← All work

Color Shuffle

Privacy Policy

Explains what data Color Shuffle handles, what never leaves your device, and what rights you have over it.

Effective date: 27 August 2026

1.Data Controller

This privacy policy has been prepared by Arda Coşkun (independent developer) ("the developer", "we", "us"), who develops and operates the Color Shuffle mobile game (the "App"). We act as the data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR").

  • Data controller: Arda Coşkun (independent developer)
  • Contact: support@weareoutwork.com

This page explains what the game does with data. It covers the iOS and Android versions of Color Shuffle and nothing else.

2.The Short Version

  • You do not need to sign up to play. If you choose to create an account — entirely up to you — we receive your name and email address; otherwise we ask for neither. We never ask for your phone number or location.
  • Your progress lives on your device. It leaves it if you tap Back up, or if you sign in to an account.
  • If you post a score to the leaderboard, your nickname and that score become visible to other players. Taking part is optional and starts when you finish a daily puzzle.
  • The game sends anonymous usage and crash data to Google Firebase, and shows ads through Google AdMob.
  • We do not sell your data, and we do not build advertising profiles ourselves.

3.What Stays on Your Device

The game stores the following in its own private storage. We cannot read it, and it is removed when you uninstall the app:

  • Your highest completed level, and your coin balance.
  • Which tube themes you own and which one is selected.
  • Sound and haptics preferences.
  • Remaining undo / hint / extra-tube charges.
  • Your daily-reward streak and when you last claimed it.
  • Which levels you finished perfectly (the crowns).
  • Which day you last finished the daily challenge, in how many moves and how long it took, whether you doubled the reward, and your streak.
  • The nickname you appear under on the leaderboard.
  • Whether you bought the ad-free upgrade, and a counter used to pace ads.
  • Your Player ID — a random code such as CS-7KMQ4XB2, generated on your device the first time it is needed. It is not derived from your device, your account or anything about you, and it is not linked to your identity.

4.What the Game Sends Off Your Device

a) Usage Analytics (Google Firebase Analytics)

To understand where players get stuck and which features are used, the game reports these events:

  • app_open — nothing beyond the event itself.
  • level_start, pour — level number.
  • undo_used, hint_used, extra_tube_used — level number.
  • level_complete — level number, number of moves, whether it was a perfect clear, and the move budget that level allows for the crown.
  • daily_start — the day's number.
  • daily_complete — the day's number, number of moves, whether it was a perfect clear, and whether it was that day's first finish.

Google Analytics also collects standard technical information on its own — app version, device model, operating system version, coarse region, and a randomly generated app-instance identifier. None of this identifies you by name. See Firebase's privacy information at firebase.google.com/support/privacy.

b) Crash Reports (Google Firebase Crashlytics)

When the game crashes or hits an unexpected error, we receive a crash report: the error and its stack trace, the app version, the device model and operating system version, and the state of the app at the time. We use these only to fix bugs.

c) Remote Configuration (Google Firebase Remote Config)

The game fetches a small settings file from Google that controls things like how often an ad is shown between levels. This is a download; the request carries only what Firebase needs to serve it.

d) Cloud Save — Only When You Ask for It

Settings offers Back up and Restore. Nothing is uploaded unless you tap Back up. When you do, we store a copy of your save in Google Cloud Firestore under your Player ID, which doubles as your transfer code. The copy contains:

  • Highest completed level and coin balance;
  • Owned and selected tube themes;
  • Sound and haptics preferences;
  • Daily-reward streak and last claim date;
  • Remaining helper charges;
  • The levels you finished perfectly, and your daily-challenge record;
  • Your leaderboard nickname;
  • Your Player ID, and the time of the backup.

It deliberately does not contain your ad-free purchase (that belongs to your App Store or Google Play account, not to the save) or anything about advertising.

Your transfer code is the only thing protecting that backup. Anyone who knows it can read the save behind it from inside the game, and can overwrite it with their own. Treat the code the way you would a password: it is fine to write it down, but do not post it publicly. Backups cannot be deleted by guessing a code — see "Deleting Your Data" below for how to have one removed.

To write to Firestore at all, the game signs in to Firebase anonymously. That creates an anonymous identifier held by Google; on its own it is not tied to any account of yours and we do not use it to recognise you. If you create an account as described below, that anonymous identity is upgraded into it.

e) An Account — Only If You Want One

The game is played without an account. If you choose to create one from Settings, your progress follows you between devices without you having to write a code down. There are three ways, and all of them are optional:

  • Email and password — we receive the email address you enter and the display name you pick. The password is held by Firebase Authentication; we never see it.
  • Sign in with Google — Google tells us your name and email address.
  • Sign in with Apple — Apple tells us your email address, and your name only on the very first sign-in. If you use "Hide My Email", we receive the relay address Apple generates rather than your real one.

While you have an account, your save is also backed up under it; that is the same job the transfer-code backup does, carrying the same fields. If you played separately on two devices, the saves are merged when you sign in: progress fields keep the higher value and the coin balance keeps the larger one.

You can delete your account and the cloud save attached to it from inside the app, at Settings → Account → Delete Account. Deletion is permanent; the progress on that device stays where it is and you carry on playing as a guest.

f) The Leaderboard — This Part Is Public

This is the one place where the game shows other players something about you, which is why it gets its own section. When you finish the daily challenge, your score is posted to that day's table, and these three become visible to other players:

  • Your nickname;
  • How many moves that day's puzzle took you and — used only to break ties — how long;
  • How many levels you have finished perfectly (on the "All time" table).

Your nickname is generated automatically when you first post a score (something like "Brave Ember 69"); it is not derived from your name, your email or anything about you. You may change it if you like. Because whatever you type will be public, it goes through a filter; a name the filter refuses is never stored and never reaches the table.

Taking part is optional: if you never play the daily challenge, no score is ever posted. A day's score is that day's first finish and cannot be changed afterwards. If you want a score removed from the table, write to us; deleting your account also removes your "All time" row.

g) Advertising (Google AdMob)

Color Shuffle shows two kinds of ad: a full-screen ad between levels, and an optional rewarded video you can choose to watch for coins. Ads are served by Google AdMob, which may use device and advertising identifiers to select and measure ads. We do not receive that data — we only see aggregate revenue reporting. Google's handling of it is described in Google's advertising terms at business.safety.google/adsprocessorterms and at policies.google.com/technologies/partner-sites.

You can limit ad personalisation on your device: on iOS under Settings → Privacy & Security → Tracking, and on Android under Settings → Google → Ads. Buying the ad-free upgrade removes the between-levels ads; the rewarded video stays, because it is how coins are earned, and it only ever plays when you start it.

h) Purchases

The ad-free upgrade is sold through Apple's App Store or Google Play. They handle the payment; we never see your card details, billing address or store account. We are told only whether the purchase is active, so the game can honour it.

i) If You Email Us

Contact Support opens your mail app with a message addressed to support@weareoutwork.com, pre-filled with your app version and Player ID so we can find the right save. If you send it, we receive your email address and whatever you write, and we keep the thread while we deal with it.

5.What We Never Collect

  • Your date of birth, phone number or postal address.
  • Your location, contacts, photos, microphone or camera.
  • Your name and email address, unless you choose to create an account. If you do, those two are all we receive; see (e) above.
  • Anything you type, other than a transfer code you enter to restore, what you enter when creating an account, a leaderboard nickname you pick, and an email you choose to send us.

6.Purposes and Legal Bases

  • Running the game and saving your progress — performance of a contract; you asked us to provide the game.
  • Cloud backup and restore — performance of a contract, on your instruction.
  • Creating and keeping an account — performance of a contract; you asked for the account and you can delete it whenever you like.
  • The leaderboard — performance of a contract; taking part begins by playing the daily challenge, and not playing keeps you out of it entirely.
  • Crash reports and usage analytics — legitimate interest in a game that works and improves.
  • Showing ads — legitimate interest in funding a free game. Where personalised advertising requires consent, that consent is the basis, and you give or withhold it in your device's advertising settings.
  • Answering support email — legitimate interest in replying to you.

7.How Long We Keep Things

  • Cloud saves are kept until you ask us to delete them, so that a code you wrote down years ago still works.
  • Account data is kept until you delete the account.
  • Leaderboard scores are kept with the day's table they belong to; your "All time" row stays until you delete your account or ask for it to be removed.
  • Crash reports are kept for up to 90 days by Crashlytics.
  • Analytics events are retained for up to 14 months by Google Analytics.
  • Support email is kept for up to 24 months.

8.Deleting Your Data

Uninstalling the game removes everything stored on the device.

If you have an account, you can delete it and the cloud save attached to it from inside the app: the profile button at the top left of the main menu → Delete Account. That also removes your "All time" leaderboard row.

To have a transfer-code backup deleted, email support@weareoutwork.com from any address with the code, and we will remove it. Because the code is the only thing identifying a save, please do not send us one that is not yours.

If you want a leaderboard score you posted on a past day taken down, email support@weareoutwork.com with your nickname and the day.

9.Your Rights

If you are in the EEA, the UK or Türkiye, you have the right to ask what we hold about you, to have it corrected or deleted, to object to processing based on legitimate interest, and to complain to your data protection authority (in Türkiye, the KVKK Board). Write to support@weareoutwork.com — please include your Player ID, since without it we usually have no way to find anything that relates to you.

10.Children

Color Shuffle is a general-audience game. It is not directed to children under 13 (or under the equivalent age in your country), and we do not knowingly collect personal information from them. If you believe a child has sent us something, email us and we will delete it.

11.Where Data Goes

Our service providers — Google (Firebase, AdMob), Apple and Google Play — process data on servers outside Türkiye and the EEA, including in the United States, under the safeguards those companies publish (such as the EU Standard Contractual Clauses).

12.Changes to This Policy

If we change how the game handles data, we will update this page and the date at the top. Material changes will also be noted in the app's release notes.

13.Contact

Arda Coşkun (independent developer) — support@weareoutwork.com · weareoutwork.com

For questions about this document, contact support@weareoutwork.com · Arda Coşkun (independent developer)