Privacy Policy
Last updated: April 6, 2026
1. Who We Are
CrazyWicket is a mobile cricket game developed by Thinkmakr ("we", "us", "our"). This privacy policy explains how we collect, use, and protect information when you use the CrazyWicket app on iOS and Android.
Data Controller: Thinkmakr
Contact: [email protected]
2. Information We Collect
We are committed to collecting as little data as possible. Below is everything we collect, why, and the legal basis under GDPR.
2.1 Account Data
When you first open CrazyWicket, we create an anonymous account using Supabase Auth. This account has no email, no password, and no personal information. It is identified only by a random unique ID generated on your device. Your CrazyWicket ID (e.g., CW-XXXXXXXX) is derived from this anonymous account.
| Data | Purpose | Legal Basis |
|---|---|---|
| Anonymous user ID | Identify your account, sync game progress | Contract performance |
| CrazyWicket ID (CW-XXXXXXXX) | Friend discovery, multiplayer invites | Contract performance |
| Team name, country, city | In-game identity, matchmaking | Contract performance |
| Device ID | Account recovery on reinstall | Legitimate interest |
2.2 Account Linking (Optional)
You may optionally link a Google or Apple account for cross-device recovery. When you do, the following data is received from the OAuth provider and stored:
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | Account linking, recovery | Consent |
| Name (from OAuth provider) | Stored by auth system; not displayed in-game | Consent |
This data is only collected if you choose to link your account. Anonymous users have no email or name on file.
2.3 Game Data
We store gameplay data linked to your anonymous account ID:
| Data | Purpose | Legal Basis |
|---|---|---|
| Match history & scores | Game progression, stats | Contract performance |
| Tour progress | Save game state | Contract performance |
| Coin & XP transactions | In-game economy | Contract performance |
| Friends list & invites | Social features | Contract performance |
| Equipped cosmetics | Personalization | Contract performance |
2.4 Analytics Data (PostHog)
We use PostHog to understand how the game is used and improve it. Analytics can be disabled in the app under Settings > Privacy & Data.
| Data | Purpose | Legal Basis |
|---|---|---|
| Gameplay events (match start/end, onboarding) | Product improvement | Legitimate interest |
| Economy events (coins earned/spent) | Balance game economy | Legitimate interest |
| Error events (auth/purchase failures) | Bug detection & fixing | Legitimate interest |
| App lifecycle (open, background) | Usage patterns | Legitimate interest |
PostHog does not record your screen, capture keystrokes, or auto-capture interactions. Person profiles are only created for identified users.
EEA/UK users: Analytics do not start until you consent via the consent dialog shown at first launch. If you decline, no analytics data is collected.
2.5 Advertising Data (Google AdMob)
CrazyWicket displays rewarded video ads through Google AdMob. AdMob may collect:
| Data | Purpose | Legal Basis |
|---|---|---|
| Device advertising ID (IDFA/GAID) | Serve and measure ads | Consent |
| Ad interaction data | Ad performance measurement | Consent |
You can manage ad personalization in the app under Settings > Ad Privacy (available for EEA/UK users), or through your device settings:
- iOS: Settings > Privacy > Tracking
- Android: Settings > Google > Ads > Opt out of Ads Personalization
Declining personalization does not disable ads — you will see non-personalized (contextual) ads instead.
2.6 Purchase Data (RevenueCat)
In-app purchases are processed entirely by Apple (App Store) or Google (Play Store). We use RevenueCat to manage purchase entitlements. RevenueCat receives transaction receipts from Apple/Google to verify purchases. We never see or store your payment card details, credit card numbers, or billing address.
| Data | Purpose | Legal Basis |
|---|---|---|
| Purchase receipts | Grant purchased items | Contract performance |
| Subscription status | Check active entitlements | Contract performance |
3. How We Use Your Data
We use the data we collect to:
- Provide and maintain the game (accounts, matchmaking, progression)
- Process in-app purchases and grant entitlements
- Enable multiplayer and social features (friends, invites, tournaments)
- Improve the game based on anonymous usage patterns (analytics)
- Show ads to support the free-to-play model
- Detect and prevent fraud
We do not sell your data. We do not use your data for profiling or automated decision-making.
4. Data Sharing
Data is shared only with the following processors who help us operate the game:
5. Multiplayer & Social Features
When you play online matches, your team name, city, country flag, and CrazyWicket ID are visible to your opponent. Your friends list, match invites, bilateral series, and tournament participation are stored on our servers. We do not collect or display real names, email addresses, or other personal information in multiplayer.
Share Cards: When you share match results, a share card image is generated locally on your device containing only team names, scores, and game branding. No personal information (email, real name, CrazyWicket ID) is included in share cards.
6. Your Rights (GDPR / EEA / UK)
If you are in the European Economic Area or United Kingdom, you have the following rights under GDPR:
- Access — Request a copy of your personal data by emailing us with your CrazyWicket ID.
- Rectification — Change your team name and country directly in the game.
- Erasure — Delete your account in Settings > Danger Zone, or email us. See Account Deletion for details.
- Portability — Request a copy of your data in a machine-readable format by emailing us.
- Object — Disable analytics in Settings > Privacy & Data.
- Withdraw consent — Change ad consent in Settings > Ad Privacy. Unlink your Google/Apple account in Settings.
To exercise any right, email [email protected] with your CrazyWicket ID. We will respond within 30 days.
7. Account Deletion
You can delete your account at any time:
- In-app: Settings > Danger Zone > Delete Account (two-step confirmation)
- By email: Send your CrazyWicket ID to [email protected]
- Web: crazywicket.com/account-deletion
When your account is deleted, all associated data is permanently removed: player profile, match history, friends, coins, XP, transaction history, and owned cosmetic items. RevenueCat purchase records become orphaned but are managed by Apple/Google independently. Analytics data is anonymized.
8. Data Retention
- Account & game data: Retained until you delete your account.
- Analytics data: Retained for 12 months, then auto-deleted.
- Ad interaction data: Managed by Google per their retention policy.
- Purchase data: Managed by Apple/Google per their retention policies.
9. Data Storage & Security
Your game data is stored on Supabase (hosted on AWS). All communication between the app and our servers uses HTTPS encryption. We implement row-level security policies to ensure players can only access their own data. The game does not store passwords — authentication is via Apple/Google OAuth or anonymous auth.
International Transfers: Our service providers (Supabase, PostHog, RevenueCat) are based in the United States. Google AdMob operates globally. If you are located outside the US, your data may be transferred to and processed in the US. These providers maintain appropriate safeguards for international data transfers, including standard contractual clauses where applicable.
10. Children
CrazyWicket is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. The game uses anonymous authentication by default — no personal information is required to play. If you believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will delete it.
11. Third-Party Services
CrazyWicket uses the following third-party services:
- Supabase — anonymous authentication, game data storage, real-time multiplayer (privacy policy)
- PostHog — product analytics, opt-out available in Settings (privacy policy)
- RevenueCat — in-app purchase management and receipt validation (privacy policy)
- Google AdMob — advertising (privacy policy)
12. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of CrazyWicket after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this privacy policy or your data, contact us at: