Privacy Policy

Last updated: 13 September 2026

Who we are

Ever After Games (everaftergames.com) is a UK games studio and online shop, part of the Ever After Group.

Ever After Games is the data controller for the personal data described on this page. You can reach us about anything privacy-related at hello@everaftergames.com.

What we collect, and why

Your Ever After account

Sign-in is handled by Firebase Authentication (a Google service). When you create an account or sign in (including with Google sign-in) we receive and store your email address, display name and, if you use Google sign-in, your profile photo. One Ever After account works across Ever After Games, Ever After Books and our other sites, so this account data is shared across those Ever After services.

Purpose: providing your account, library, wallet and saved satchel. Lawful basis: performance of a contract with you.

Your game and shop data

We store data linked to your account in Cloud Firestore (a Google database): the games you own, your LitCoin wallet balance and purchase history, achievements, your saved cart, your saved game progress, and similar app data.

Purpose: making the store and games work and keeping your progress. Lawful basis: performance of a contract; legitimate interests (preventing abuse and fraud).

Orders and payments

Physical products (tabletop and hobby stock) are sold through our Shopify store. When you check out, Shopify and its payment providers collect your name, delivery address, email and payment details. We never see or store your full card number. We receive the order details we need to pack and post your order and to provide customer service.

Purpose: fulfilling your order, receipts, delivery and returns. Lawful basis: performance of a contract; legal obligation (tax and accounting records).

Mailing list and beta sign-ups

If you join our mailing list (for example by registering interest in a game that is still in closed beta) we store your email address in The Town Gossip, our own newsletter tool, and may mirror your opt-in onto your Shopify customer record. We email you about Ever After news and game releases. Every email includes an unsubscribe link, and you can also ask us to remove you at any time.

Purpose: sending you the news you asked for. Lawful basis: consent, which you can withdraw at any time.

Technical data

Our hosting provider (Google Firebase Hosting) keeps short-lived server logs, which include IP addresses, for security and to keep the service running. Some browser games, including Drakudoku, use Google AdSense to display adverts. Google may process your IP address, device and browser information, cookies or local storage, and ad interactions to serve adverts, measure performance and prevent fraud. Drakudoku requests non-personalised ads only after the applicable consent check and suppresses requests for accounts with the website ad-free entitlement. Use Ad privacy in the game menu to change your advertising choice. The website Remove Ads purchase costs 199 LitCoins and applies across Ever After Games on the web; store purchases apply to the relevant app. See our cookie notice and Google advertising privacy information.

Lawful basis: legitimate interests for security and service operation; consent for advertising storage and access where required.

Our mobile apps

Some Ever After Games titles are also available as native mobile apps from app stores (for example Cici's Farm and Gearloom). This section describes those apps.

What the apps collect

Cici's Farm does not require an account or ask for your name, email address or device location permissions. Its game progress stays on your device. Advertising services receive the technical data described below for the relevant platform.

Advertising in the apps

App versions that use Google AdMob, including Cici's Farm on Android, send advertising data to Google. This can include your IP address and approximate location, app launches and ad interactions, crash logs and performance diagnostics, and app-set or other device identifiers. Google uses this information to serve and measure adverts, analyse performance, and prevent fraud. The advertising SDK encrypts data in transit. This data is not limited to temporary processing in memory. You can read how Google uses it at policies.google.com/technologies/ads.

In Android apps made for children, such as Cici's Farm, every Google ad request is flagged as child-directed, requests non-personalised adverts and restricts content to the general audience rating. The advertising ID is not used or transmitted. We never request personalised advertising for children.

The ad-supported iOS version of Cici's Farm uses SuperAwesome AwesomeAds. Its SDK collects information about adverts shown and technical diagnostics such as ad loading times and whether videos play correctly. This data is not linked to the user and is used to deliver adverts and maintain their performance. It does not collect user or device identifiers, location, contact information or gameplay interactions, and does not track users across other companies' apps or websites. Ad videos and temporary ad information may be cached on the device. See AwesomeAds data collection details.

Parents can use Report an advert inside Cici's hold-to-open grown-ups menu to contact our support team. A permanent Remove Ads purchase is available there, with a Restore purchases option.

Purchases in the apps

Where an app offers a purchase (for example removing ads permanently), payment is handled by the app store you installed from, such as Google Play or Apple's App Store. We never see your payment details. The app uses the store's purchase result to unlock the purchased feature and restore it later. In our children's apps, purchase controls sit behind a hold-to-open grown-ups gate.

Embedded content

Some pages can embed content from third parties: painting tutorial videos from YouTube and a shop map from Google Maps. These embeds stay switched off until you allow them (through the cookie banner or by tapping to load an individual embed). Once loaded, the third party may set its own cookies and receive your IP address. See our cookie notice for details. Video thumbnail images are loaded from YouTube's image servers; images cannot set cookies.

Who we share data with

We do not sell your personal data. Advertising-supported mobile apps share the technical advertising data described above with the advertising provider used by that app version.

International transfers

Google and Shopify may process data outside the UK, including in the United States. Where that happens it is protected by the safeguards required by UK law, such as the UK Extension to the EU-US Data Privacy Framework, adequacy regulations, or the International Data Transfer Agreement / standard contractual clauses.

How long we keep things

Your rights

Under UK GDPR you have the right to:

To use any of these rights, email hello@everaftergames.com. We will respond within one month. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk.

Children

The kids' Play Hub and Cici's Farm do not require an account. Child-directed mobile apps that include advertising can transmit the technical advertising data described above. Their adverts are non-personalised and child-appropriate, with the Android advertising ID disabled. Accounts, purchases and the mailing list are for people aged 16 or over; younger players should ask a parent or guardian to manage these for them.

Changes

If we change this policy we will update this page and the date at the top. Significant changes will be flagged on the site.