Privacy
Policy
Effective date: June 18, 2026 · Last updated: June 18, 2026
This Privacy Policy explains how DropSet ("DropSet", "we", "us") handles information when you use the DropSet mobile application ("the App"). DropSet is developed and operated by Benjamín González, an individual based in Chile (the "Developer"). The App's bundle identifier is com.benjagc2002.dropset.
We built DropSet to respect you. There is no advertising, no third-party analytics, and no tracking. We do not sell personal information. The sections below explain exactly what we process and why.
You can delete your account and all associated data at any time from inside the App, under Profile → Delete account & data. See "Your rights and choices" below.
1. Information we collect
Account & authentication
When you first open the App, you are signed in with an anonymous session identified by a randomly generated UUID — no email or name is required. You may optionally create a persistent account using:
- Email and password, or
- Sign in with Apple, or
- Sign in with Google.
If you create an account, we process the identifier associated with that method (for example, your email address, or the private/relay identifier provided by Apple). Authentication is handled through our backend provider, Supabase (see "Third parties").
Gameplay & profile data
To run the game and keep your progress, we store: your profile, your premium status, your coin ledger (balance and transactions), your roll history, and your collectibles inventory. This data is associated with your account or anonymous session ID.
Purchases & subscriptions
If you subscribe to DropSet Premium, purchases are processed by Apple through the App Store and managed via our purchase provider, RevenueCat. We receive purchase/receipt history, an anonymous app user ID, and limited device information used to validate and restore your subscription. Payment is processed by Apple; DropSet never sees or stores your credit card or payment-card details.
What we do not collect
- No advertising and no advertising identifiers.
- No third-party analytics or tracking SDKs at this time.
- No health or fitness data. DropSet does not use Apple HealthKit and does not read health metrics.
- No precise location data.
2. Why we process your data (legal bases)
- To provide the App — running your account, saving progress, rolls, coins, and collectibles. (Performance of a contract.)
- To process subscriptions — validating, restoring, and managing DropSet Premium. (Performance of a contract.)
- To keep the App secure — preventing abuse and protecting accounts. (Legitimate interests.)
- To comply with the law — for example, tax and consumer-protection obligations related to purchases. (Legal obligation.)
Where you optionally sign in or subscribe, you provide that information voluntarily to enable those features.
3. Third parties & sub-processors
We share the minimum data necessary with the following service providers, only for the purposes above:
- Supabase — authentication and backend database (hosted on AWS infrastructure). Stores your profile, premium status, coin ledger, roll history, and inventory.
- RevenueCat — subscription management. Receives purchase/receipt history, an anonymous app user ID, and device data needed to manage your subscription.
- Apple — processes all payments through the App Store and, if you choose it, provides Sign in with Apple.
- Google — provides Sign in with Google, if you choose that method.
These providers act as our processors/sub-processors and are bound to use the data only to deliver their service to us. We do not sell or rent your personal information to anyone.
4. Data retention
We keep your account and gameplay data for as long as your account exists. Anonymous-session data persists while that session remains active on your device. When you delete your account, we delete the associated personal data from our systems within a commercially reasonable period, except where we must retain limited purchase records to meet legal, tax, or accounting obligations.
5. International data transfers
DropSet is operated from Chile, and our providers (Supabase, RevenueCat, Apple, Google) may process and store data on servers located in other countries, including the United States. Where data is transferred internationally, we rely on the safeguards and contractual protections offered by these providers. By using the App you understand that your data may be processed outside your country of residence.
6. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing.
- Delete your account and data — directly in the App under Profile → Delete account & data. This removes your profile, premium status record, coin ledger, roll history, and inventory from our systems.
- Access or correct your data — contact us at the email below and we will respond within a reasonable time.
Chile. We process personal data in accordance with Chilean Law No. 19.628 on the Protection of Private Life. You may exercise your rights of access, rectification, and deletion as provided by that law.
European Union / EEA / UK (GDPR). If you are in these regions, you have the rights described above and the right to lodge a complaint with your local data protection authority.
California (CCPA/CPRA). California residents have the right to know what personal information we collect, to request deletion, and to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information, and we do not discriminate against you for exercising your rights.
7. Security
We use industry-standard measures provided by our infrastructure partners, including encryption in transit, access controls, and authentication tokens. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit the data we hold in the first place.
8. Children
DropSet is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide notice in the App. Continued use of the App after changes take effect means you accept the updated policy.
10. Contact
For privacy questions or to exercise your rights, contact the Developer at gonzaliflags@gmail.com.