Privacy Policy
Last updated: November 6, 2026
This policy describes how the Lucciola app ("the app") handles data. Data controller: Lidmila Maršálková, Company ID 05684447, Jindice 115, 285 04 Rašovice, Czech Republic. Contact: hello@codewhiskers.app.
In short
Lucciola is built privacy-first. Your in-game progress (name, tree vitality, stats, settings) is stored primarily on your phone. An account is optional.
What data we process
- Data on your device: your name, progress (vitality, streak, seeds, inventory) and settings. This data never leaves your device and you can erase it anytime using the "Start over" feature or by uninstalling the app.
- Account (optional): if you register (by email, sign-in link, Google or Apple), we process your email and sign-in identifier through Firebase Authentication (Google) to verify your sign-in and, in the future, back up your progress. Registration is voluntary – the app works without it.
- Notifications: reminders are scheduled locally on your phone. We do not send push notifications from a server.
- App analytics: to improve the app and fix problems, the app uses Firebase Analytics (Google). It records which screens and features you use, along with the device type, system version and language. The data is pseudonymous, not anonymous: it is linked to a random app instance identifier and, on Android, also to your device's advertising ID. We never send your name or email. Analytics runs without asking for consent; the legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR).
- Website analytics: on lucciola.app we load Google Analytics 4 (Google) only after you allow analytics cookies in the cookie banner. Without consent its script is not loaded at all and nothing is sent. It records which pages you open, how far you scroll (25/50/75/90 %), clicks on links to other websites and on the App Store / Google Play buttons, and submissions of the contact form (only that one happened, not what you wrote), together with the type of page. We truncate the IP address. Data in Google Analytics is kept for 14 months. The legal basis is your consent; if you withdraw it, measurement stops and the Google Analytics cookies are deleted.
- Heatmaps and session recordings: with the same consent we also load Microsoft Clarity (Microsoft) to see where visitors get stuck on lucciola.app. Text on the page and anything you type is masked in the recordings. Without consent Clarity is not loaded at all. Microsoft keeps session recordings for 30 days, and flagged recordings, heatmaps and aggregate data for 9 months.
- Your cookie choice: is stored in your browser's local storage (lucciola-consent) for one year; then we ask again. You can change it anytime via "Cookie settings" in the footer.
- Contact form: if you write to us via the form on lucciola.app, your name, email and message are delivered to our inbox through the FormSubmit service (formsubmit.co). We use them only to reply.
- Ads: the app shows rewarded ads and, to users without Premium, interstitial ads (Google AdMob). AdMob may process device identifiers such as the advertising ID to serve and measure ads. In the EU/EEA, the UK and Switzerland we ask for your consent using Google's consent form (UMP); without consent you only get non-personalised ads. You can change your choice anytime in the app under Settings → Ad privacy settings. On iOS the app also asks for permission via App Tracking Transparency; you can change it in the iPhone Settings (Privacy & Security → Tracking). The legal basis is your consent; outside the EEA, the UK and Switzerland our legitimate interest.
- Purchases: the monthly Premium subscription and one-off seed packs are sold through the App Store / Google Play; payment details are processed exclusively by Apple/Google. Purchases are managed via RevenueCat (RevenueCat, Inc., USA), which receives the purchase records together with an anonymous identifier it generates for the app – not your name, email or account. The legal basis is the performance of the contract.
Children
The app is not intended for children under 13 and we do not knowingly collect data about them.
Your rights (GDPR)
You have the right to access, correct and erase your data. Local data can be erased directly in the app using "Start over" or by uninstalling. You can delete your account directly in the app (Settings → Account → Delete account), or request deletion at codewhiskers.app/en/delete-account or by emailing hello@codewhiskers.app.
Changes
We may update this policy. The current version is always available in the app and on this page.