Spark Rush — Privacy Policy

Effective date: 3 August 2026  ·  Last updated: 11 September 2026

This policy explains what Spark Rush (Chinese name 招招带火花) does with your information. It covers every version of the game: the iOS app, the browser version distributed on portals such as CrazyGames, Poki, GameDistribution and GamePix, and the WeChat and Douyin mini-game versions.

The game is published by Changsha Shengyue Network Technology Co., Ltd. ("we", "us"), a company registered in Hunan, China.

1. The short version

• You do not need to create an account or password. In the WeChat version, the leaderboard uses WeChat's one-time platform login to keep your score together after reinstalling. With your consent, a separate login also supports Tencent advertising attribution described in section 4.
• We do not ask for your name, email address, phone number, or location.
• Your progress is stored on your own device.
• If you use the WeChat leaderboard, our server derives a pseudonymous leaderboard ID from the WeChat login result. Our first-party databases do not store OpenID or session keys; with your consent, a verified OpenID is passed to the Tencent attribution SDK, which maintains its own local cache. If you choose to authorise it in WeChat, we also store your display nickname and avatar for leaderboard display.
• We use limited first-party gameplay analytics to count anonymous users and understand how long each mini-game is actively played.
• We do not sell or rent your data to anyone, ever.
• Advertising is served by the platform you are playing on. Their rules are linked in section 4.

2. What we store on your device

The game saves the following locally (in browser localStorage, or the equivalent storage on iOS / WeChat / Douyin). This data stays on your device and is not transmitted to us unless stated otherwise:

• Best scores, levels reached and achievements for each of the 12 mini-games
• Energy count, daily sign-in record, quest progress and Daily Three challenge progress
• Your chosen interface language
• A randomly generated installation ID (for example u7f3k92ba1cd8) and a randomly generated nickname (for example "Swift Comet 482")
• In the WeChat version only, a short-lived leaderboard authentication token and an opaque leaderboard ID returned by our server; neither is your OpenID or WeChat session key
• Whether you have purchased the ad-free full version (iOS only)

Clearing your browser data, or deleting the app, erases all of it permanently.

3. What we send to our own server

Our first-party server is at www.tiaoying2026.com/sparkrush-api. It receives leaderboard submissions and limited gameplay analytics:

The analytics database does not contain your nickname, avatar, phone number, location, advertising identifier, share ticket, or referrer payload. We do not use tracking cookies or third-party SDKs for these first-party gameplay metrics. The separate Tencent advertising attribution SDK is explained in section 4. Our HTTPS hosting provider may process IP addresses temporarily in ordinary security/access logs, but IP addresses are not written to the gameplay analytics database or used to build player profiles.

4. Third parties, by platform

iOS App Store version

• Google AdMob serves the optional rewarded video ads (you only ever see one if you tap "Watch ad"). AdMob may use an advertising identifier to limit repeat ads and measure performance. On first launch iOS asks for your permission via the App Tracking Transparency prompt — if you decline, ads still work, they are simply less personalised. See Google's policy.
• Apple processes the one-time purchase of the ad-free full version. We never see your payment details — Apple only tells the app whether the purchase succeeded.

Browser versions (CrazyGames, Poki, GameDistribution, GamePix, itch.io …)

• Ads are served entirely by the portal hosting the game, through their own SDK. We receive no advertising data from them and set no advertising cookies ourselves.
• Each portal's own privacy policy governs that advertising: CrazyGames · Poki · GameDistribution · GamePix.

WeChat and Douyin mini-game versions

• For leaderboard continuity after reinstall, the WeChat version sends a one-time wx.login code to our first-party server in mainland China to derive a pseudonymous, stable leaderboard ID. Our databases do not store OpenID or session keys. A separate consented SDK login may pass the verified OpenID to Tencent as described below; the leaderboard ID itself is not sent to Tencent or used in gameplay analytics. With your explicit consent, we may also read your WeChat profile nickname and avatar to display your own entries in the friend, all-time and daily leaderboards. You can decline profile authorisation; the game works the same with a generated display name.
• The friend leaderboard uses WeChat's open data context. Your friends' avatars and nicknames are rendered by WeChat inside a sandbox that our code cannot read, and are never transmitted to our server.
• Rewarded video ads are served by Tencent's or ByteDance's own ad platform under their respective privacy policies.
• Tencent Marketing Mini-game SDK, provided by Shenzhen Tencent Computer Systems Company Limited, supports advertising measurement, attribution and effectiveness optimisation in the WeChat version. After the SDK disclosure is effective and you consent, it processes device basics (brand/model, system/WeChat/library versions, screen size, performance tier and network type), de-identified user identifiers (including verified OpenID and an SDK-generated local ID), launch scene and advertising click/source parameters, app lifecycle/login/share and actual tutorial-completion events. The SDK sends these to Tencent and maintains its own local identifiers and retry queue. Our integration does not report ad rewards as purchases, and does not report unverified new registrations. SDK processing follows Tencent's SDK privacy rules. Declining initial SDK authorisation leaves gameplay available. SDK receipt/queue diagnostics kept by our wrapper contain numeric codes/counts only. Contact us or Tencent using the policy's privacy channels for data rights requests.

5. Children

Spark Rush is suitable for a general audience and contains no violent, sexual, gambling or frightening content. It is not directed at children under 13, and we do not knowingly collect personal information from children.

The game does not ask a child for direct identifiers. It may send the same limited anonymous gameplay analytics described in section 3. If you are a parent or guardian and want those records removed, contact us with the in-game nickname and we will delete the associated data.

The one-time in-app purchase on iOS can be blocked entirely using Apple's Screen Time → Content & Privacy Restrictions.

6. Where data is stored, and for how long

• Leaderboard records are stored on a server located in mainland China.
• Records are kept for as long as the leaderboard exists, or until you ask us to delete yours.
• Pseudonymous account authentication records (first and last verified login) are kept separately from gameplay events for account continuity and duplicate-registration prevention, until that account record is deleted or the related service ends.
• User-level gameplay events and sessions are retained for up to 180 days. Anonymous aggregate totals that no longer contain a player or session identifier may be retained for longer.
• All data in transit is encrypted with HTTPS/TLS.
• If you play from outside China, leaderboard submissions and the limited gameplay analytics described in section 3 are transferred to and stored in China. The game remains playable without a network connection and displays local scores while offline.

7. Your rights

Depending on where you live, you may have rights under the GDPR (Europe), the CCPA/CPRA (California), or the Personal Information Protection Law (China), including the right to access, correct, delete, or restrict processing of your information, and to withdraw consent.

Because we hold almost nothing about you, most of these are easy to exercise:

• Delete everything held locally — clear your browser data, or delete the app. No request to us is needed.
• Delete your leaderboard entry — email us the nickname; we action it within 30 days.
• Delete gameplay analytics — email us the in-game nickname so we can locate the associated random player ID; we action it within 30 days.
• Opt out of personalised ads — decline the iOS tracking prompt, or use your platform's ad settings.

We do not sell personal information. Consented advertising measurement and attribution involve sharing the information listed in section 4 with the named platform providers. You can contact us to withdraw consent or request restrictions on this processing.

8. Contact

Questions, complaints, or deletion requests:

Email: zhaodadao123456@gmail.com
Publisher: Changsha Shengyue Network Technology Co., Ltd.
Registered in: Hunan Province, China

We reply to privacy requests within 30 days.

9. Changes to this policy

If we change how we handle your information, we will update this page and move the "last updated" date at the top. Material changes will also be announced inside the game. New processing that requires consent starts only after the required notice and consent; continuing to play alone does not authorise the advertising attribution SDK.