SUPERNOVA.IOSupportPrivacyTermsDelete account

Supernova.io Privacy Policy

Effective date: 17 October 2026 · Last updated: 17 October 2026

This policy explains what personal data the game Supernova.io collects, why, who receives it, how long it is kept, and what choices and rights you have. It applies to the iOS app, and the Android app of Supernova.io (together, the "Game").

The Game is operated by Itai Zeilig ("we", "us"). We are the controller of the personal data described here. Contact: itaizeilig1@gmail.com.

If we become required to appoint a representative in the EU or the UK under Article 27 of the GDPR or the UK GDPR, we will list their details here.

1. The short version

2. What we collect and why

2.1 Data you give us

Data Why we use it Legal basis (EEA/UK)
Nickname (display name) that you choose Shown to other players in matches, on the kill feed and on leaderboards Performance of our contract with you (providing the Game)
Messages you send to support (email address and what you write) To answer you Contract; legitimate interests (helping players)
Reports about other players (who you reported, the reason, when) To review abusive nicknames or behaviour Legitimate interests (a safe game)

Choose a nickname that does not reveal your real name or other personal information. Nicknames that are offensive, impersonate others or contain personal data may be changed or removed (see the Terms of Service).

2.2 Data created when you play

Data Why we use it Legal basis (EEA/UK)
Account identifiers: our account ID and a random device identifier created by the Game for guest login (a random ID made by the Game, not the advertising ID) To create and recognise your guest account Contract
Country, taken from your device's region setting The country leaderboard Contract; legitimate interests
Game progress: coins and gems, owned and equipped skins, avatar, chests, daily missions and awards, daily spin and its streak, XP and level, best scores, kills and match results, including rounds played offline (sent when you are back online) To run the Game and save your progress Contract
Leaderboard entries (nickname, avatar, country, score, rank) Public all-time, weekly and country leaderboards visible to other players Contract
Match data: your in-game movement and actions during a match To run the real-time multiplayer match. Movement input is processed in memory and not stored after the match Contract
Purchase records: product bought, store transaction ID, date, and whether it was refunded To deliver what you bought, restore purchases, and prevent fraud. We never receive your card or payment details: Apple and Google process payments Contract; legal obligation; legitimate interests (fraud prevention)
Ad reward records: when you watch a rewarded ad and what you received To give the reward and enforce daily limits Contract; legitimate interests (fraud prevention)
Technical and security data: IP address, connection times, device model, operating system and app version, server logs To connect you to a server, keep the service secure, prevent cheating and abuse, and fix problems Legitimate interests (security, anti-cheat, service reliability)

2.3 Data collected by advertising partners

The Game is free and paid for by ads. We use Google AdMob (by Google LLC and Google Ireland Limited) to show ads. AdMob can fill an ad from Google's own advertisers or from other ad partners it works with. A full list of ad partners is shown in the consent message and in the Game's privacy settings.

When an ad is requested or shown, these partners may collect:

They use this data to show ads, to measure ads, to prevent ad fraud, and, if you consent (EEA/UK/Switzerland) or don't opt out (elsewhere), to show personalised ads based on your activity across apps and websites. These partners act as independent controllers for their own purposes. See their policies:

2.4 What we do not collect

We do not ask for or collect your precise (GPS) location, contacts, photos, microphone, camera, real name, phone number or payment card details. There is no chat, so we do not collect messages between players.

3. Consent, tracking and your ad choices

EEA, UK and Switzerland. On first launch we show a consent message powered by Google's User Messaging Platform (UMP), which follows the IAB Transparency & Consent Framework. You can accept or refuse personalised ads and the related purposes for each partner. If you refuse, you will still see ads, but they will not be personalised. You can change your choice at any time in Settings → Privacy choices.

iPhone and iPad: App Tracking Transparency. Apple asks you whether Supernova.io may track you. If you tap "Ask App Not to Track", the IDFA is not shared and our partners may not track you across other companies' apps and websites. You can change this in iOS Settings → Privacy & Security → Tracking.

Android. You can reset or delete your advertising ID in Settings → Google → Ads (the path varies by device).

United States. Some U.S. state laws treat sharing data with ad partners for targeted advertising as a "sale" or "sharing" of personal information. You can opt out at any time in Settings → Privacy choices → Do Not Sell or Share My Personal Information. See section 9.

4. Who we share data with

We do not sell your personal data for money. We share it only as follows:

Recipient Role What Where
Amazon Web Services (AWS) Hosting provider (processor) All game server data Frankfurt, Germany (EU)
Google AdMob and the ad partners it works with Advertising (independent controllers) See section 2.3 Worldwide, including the United States
Apple and Google App stores, payments, sign-in Purchase validation; sign-in tokens Worldwide
Other players — Your nickname, skin, in-match performance and leaderboard entries are visible to everyone in the Game —
Authorities, advisers, buyers — When required by law, to protect our rights or players' safety, or as part of a merger or sale of the Game (we would tell you first) —

5. International transfers

Our servers are in Frankfurt, Germany (EU). Some partners (for example Google) are based in the United States or process data there. Where personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on the partner's certification under the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where available, or on the Standard Contractual Clauses approved by the European Commission (and the UK Addendum). You can ask us for a copy of the relevant safeguards.

6. How long we keep data

Data Retention
Account, nickname, progress, wallet, leaderboard entries Until you delete your account. Guest accounts with no activity for 24 months are deleted automatically.
Purchase records (transaction IDs, product, date) For the life of the account; after account deletion we may keep a minimal record (transaction ID, product, date) for up to 7 years to handle refunds, chargebacks, fraud and legal obligations.
Server logs (including IP addresses) 14 days
Server backups Rolling daily backups kept for 7 days. Deleted data disappears from backups within 7 days.
Support emails Up to 2 years after the conversation ends
Data held by ad partners Under their own policies (see section 2.3)

7. Deleting your account

Deletion cannot be undone. Coins, skins and other items you bought are lost and are not refunded (see the Terms of Service). Deleting your account in the Game does not delete data held by ad partners; to reset that data, reset your advertising ID and use the partners' own tools listed in section 2.3.

8. Your rights (EEA, UK and similar laws)

You have the right to: access your data and get a copy; correct it (you can change your nickname in the Game); delete it; restrict or object to processing based on legitimate interests; data portability; and withdraw consent at any time (Settings → Privacy choices), without affecting processing before withdrawal.

To exercise these rights, email itaizeilig1@gmail.com. We will answer within one month. We may ask for information to confirm the account is yours (for example your player ID).

You may complain to your local data protection authority. In the EU, the list is at https://edpb.europa.eu/about-edpb/about-edpb/members_en; in the UK, the Information Commissioner's Office (https://ico.org.uk).

9. U.S. state privacy rights (including California)

The CCPA/CPRA and other state laws apply only to businesses that meet certain thresholds. This section is written to honour these rights regardless.

In the last 12 months we collected these categories of personal information: identifiers (account ID, device ID, advertising ID, IP address, nickname); commercial information (purchase records); internet or other electronic network activity (gameplay and ad interactions); geolocation data (approximate, from IP address); and inferences made by ad partners for personalised ads. We collect them from you, from your device and from our partners, for the purposes in section 2. We do not collect "sensitive personal information" as defined by the CCPA.

We do not sell personal information for money. Allowing ad partners to collect identifiers and activity data for cross-context behavioural advertising may count as "sharing" or "selling" under these laws. You can opt out in Settings → Privacy choices → Do Not Sell or Share My Personal Information, or by emailing itaizeilig1@gmail.com. We do not knowingly sell or share the personal information of consumers under 16.

You have the right to know, access, correct and delete your personal information, to opt out of sale/sharing, and not to be discriminated against for using these rights. You may use an authorised agent. We will verify requests by confirming control of the account. Retention periods are in section 6.

10. Children

Supernova.io is not directed at children under 13 and we do not knowingly collect personal data from children under 13 (or under the higher minimum age of digital consent in your country). If you believe a child has given us personal data, contact itaizeilig1@gmail.com and we will delete the account.

Players aged 13 to 17 may use the Game. In countries where the age of digital consent is above 13 (up to 16 in some EEA countries), players under that age should play only with a parent's or guardian's consent.

11. Security

Connections between the Game and our servers are encrypted (TLS). Access to servers and databases is restricted to authorised staff, and secrets are stored in a managed secrets service. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

12. Changes

We may update this policy. We will post the new version at https://supernova.moshub.co/privacy and update the date above. If the changes are significant, we will tell you in the Game before they take effect.

13. Contact

Itai Zeilig Email: itaizeilig1@gmail.com Web: https://supernova.moshub.co