Privacy Policy

Dark Magic Studio

Effective date: October 4, 2026

This policy explains what information the applications published by Dark Magic Studio handle and how it is used. It covers our mobile and web applications. A feature described below applies only to the applications that offer it.

Information Stored On Your Device

Depending on the application, the following can be stored locally on your device:

• Names and setup preferences you enter.
• Selected language, display and content preferences.
• Progress, timers, custom entries and free/paid usage counters.
• Lists, notes and other content you create inside the application.
• The app lock passcode, if you set one. It is stored as a salted PBKDF2 hash, never as the digits you typed, and it never leaves the device.
• Your confirmation that you are 18 or older, where an application is age restricted.
• A random installation identifier used only to check subscription entitlement, described below.

This information is stored in the application's local storage on your device. Where an application keeps no local storage, the information it works with exists only while the application is open and is cleared when it is closed or refreshed.

Information Sent Off Device

Where an application offers an AI assistant feature and it is configured with a Gemini API key, prompts entered into that feature and related context may be sent to Google's Gemini API to generate a response. Do not enter sensitive information that you do not want processed by a third-party AI service.

Google Play Billing is used to process subscriptions purchased on Android. Purchases and subscription status are handled by Google Play.

To confirm that a subscription is genuine, the application sends the following to our entitlement service, which runs on Cloudflare Workers:

• The Google Play purchase token for the subscription.
• The subscription product identifier.
• A random installation identifier generated by the application. It is not the device advertising ID, the Android ID, or any identifier tied to you or to your hardware, and it is discarded when the application is uninstalled.
• The version number of the premium content already stored on the device.

The service asks Google whether that purchase token is valid, and returns the answer along with the premium content the subscription unlocks. It stores only a one-way hash of the purchase token together with the installation identifiers that have presented it, so a single subscription cannot be shared across an unlimited number of devices. It holds no names, no email addresses and no payment details.

The premium content returned is cached in the application's private storage on the device, and is deleted when the subscription ends.

Firebase/Google SDKs may process technical application information required to provide Firebase AI/App Check functionality, depending on the final Firebase configuration.

Sparks On The Web

The web version of Sparks (darkmagicstudio.com/sparks) works differently from the apps above:

• Account. Signing in with Google or with a one-time email code stores your email address, the sign-in method, your language, the date you confirmed you are 18 or older, and the version and date of the Terms of Use you accepted. A session cookie keeps you signed in.
• Game data. Your play group, limits, custom cards, draw history and subscription status are stored with your account so they follow you between devices.
• Sparks AI. Messages you write in the AI chat are sent, through our server, to a third-party AI model provider (currently via OpenRouter) to generate each reply. The conversation itself is kept in your browser tab and is lost when the tab is closed. To investigate errors and problem replies, our server keeps a log of each message you send, the reply to it, your account identifier and technical details (time, language, model, response status); this log is deleted automatically after 3 days. We also store how many messages each account sends per day, to apply usage limits. Do not include personal identifying information in your messages.
• Voice. If you use the microphone, speech is recognised by your browser (which may use its maker's cloud service); only the resulting text reaches us.
• Reminders. If you allow notifications, a push subscription with your time zone and language is stored to send a nightly reminder; turn notifications off in your browser to stop them.
• Payments. Pro on the web is paid through a third-party payment provider; we receive the subscription status, never your card details.
• Deleting your data. Deleting your account removes it and everything stored with it. For help, write to support@darkmagicstudio.com.

Payments

Dark Magic Studio does not directly collect payment card details.

Subscription purchases made inside an Android application are processed by Google Play. Where a subscription is offered outside the app stores, payment is handled by an authorized third-party payment provider under its own terms and privacy practices, and we do not receive or store your full payment credentials.

Device Permissions

Where an application offers a feature that works together with your device settings, such as silencing notifications while a session is running, it asks for the relevant permission before using it. That permission is used only for the purpose described at the time it is requested, and it can be withdrawn from your device settings at any point.

Data Sharing

Dark Magic Studio does not sell personal data. Data may be processed by Google services used by our applications, such as Google Play Billing, Gemini/Firebase AI and Firebase App Check.

Data Deletion

You can delete local application data by clearing the application's storage or uninstalling it. Where an application keeps no local storage, closing or refreshing it removes the information it was working with. Where an application does not require an account, there is nothing further to delete.

If you need help, contact support@darkmagicstudio.com.

Children

Our applications are intended for adults. Some of them are restricted to users aged 18 or older and are not directed to children.

Contact

For privacy questions, contact support@darkmagicstudio.com, or use the developer contact email provided on the Google Play listing.

Dark Magic Studio - darkmagicstudio.com