Bleed
PRIVACY POLICY

What stays
on the paper

Last updated 17 October 2026

We keep what the game needs to save your paintings and run fair duels, plus a small amount of play data that tells us which puzzles are too hard. Ads only play when you choose to watch one, and we don't sell anything about you.

The colour chart

Everything we collect, one pan each
Game progress
Levels, stars, drops used, your gallery
WHY
To save your game and sync it between devices
KEPT FOR
As long as your account exists
SEEN BY
Us and our hosting provider
Player name and duels
Display name, player ID, rank, duel results
WHY
Matchmaking, leagues and leaderboards
KEPT FOR
As long as your account exists
SEEN BY
Other players see your name and rank
Gold leaf purchases
Store receipt, item, price, date
WHY
To deliver what you bought and restore it
KEPT FOR
7 years, for tax records
SEEN BY
Apple or Google, who take the payment. We never see your card.
Rewarded ads
Advertising ID, IP address, device model and OS, ads watched
WHY
To show an ad when you choose to watch one, and give you its reward
KEPT FOR
By our ad partners, under their own policies
SEEN BY
AppLovin and the ad networks it works with
Play data
Attempts per level, assists used, session length
WHY
To find puzzles that are unfair or too easy
KEPT FOR
13 months, then only as totals
SEEN BY
Us. You can switch it off.
Device and crashes
Model, OS version, language, crash logs
WHY
To fix bugs on the devices you play on
KEPT FOR
90 days
SEEN BY
Us and our crash reporting provider
Not on the palette
Things we never collect
Your location, contacts, photos or microphone. Ads never interrupt a puzzle or a duel: they only play when you tap to watch one for a reward. We don't sell or rent your data to anyone.

The full policy

1 · Who we are

Bleed is made by Netcive Ltd, Ikeja, Nigeria. We are the controller of the personal data described here. This policy covers the Bleed app on iOS and Android and this website.

2 · How we use data

We use game progress and your player profile to run the game you asked for. That is our legal basis for it: it's needed to provide the service. Purchase records are kept because tax law requires it.

Play data and crash logs are used under our legitimate interest in keeping the puzzles fair and the app stable. We look at them in aggregate, for example "38% of players run out of drops on level 14", not to profile individual players.

On this website, our hosting provider keeps standard request logs (IP address, browser and the page asked for) to run and protect the site. The site sets no cookies and has no analytics. The one thing it loads from another company is on the delete account page: Cloudflare Turnstile, which checks that a person, not a program, is using the form. When that page opens, Cloudflare receives your IP address and details of your browser. It uses them to tell people from programs, and to improve that check.

Rewarded ads are optional. When you choose to watch one, our ad partner uses your advertising ID and device details to pick the ad, check it was watched, and stop fraud. Where the law asks for your consent to personalised ads, the app asks before any ad is shown, and you can say no and still watch ads that are not personalised.

3 · Who we share it with

Only with companies that run parts of Bleed for us, under contracts that stop them using it for anything else: our hosting provider Google Cloud (deletion requests are handled in London and their records are stored there, this website's pages are served from Google's worldwide network, and the game's servers are added here when they launch), Firebase Crashlytics for crash reports, Brevo to send account emails, and Apple or Google for purchases. Netcive is based in Nigeria, so your data is handled by us there and by these companies in the places they run their services. Where Google (for Google Cloud and Firebase) and Brevo move personal data out of the UK or EU, their data processing terms with us use standard contractual clauses.

For rewarded ads, AppLovin and the ad networks it works with receive the data in the colour chart's rewarded ads row. They use it under their own privacy policies, starting with AppLovin's.

On the delete account page, Cloudflare receives the data described in section 2 for its Turnstile check. It uses it on our behalf to check you're a person, and on its own account to improve that check, under its Turnstile privacy notice.

Your display name, rank and duel results are visible to other players. That is the only data other players see.

4 · Your choices

In the app, go to Profile, then Settings, then Privacy. Turn off Share play data to stop sending play data. The game works the same with it off.

You never have to watch an ad. To limit how ads use your advertising ID, reset or delete it in your phone's settings: on Android under Privacy, then Ads; on iPhone, leave Allow Apps to Request to Track off, or say no when Bleed asks.

You can delete your account in the app under Profile, Settings, Account, or on the delete account page. If you use the page, we keep a record of the request: your player ID, your email address and a scrambled copy of your deletion code. We use it only to send the confirmation and to show the request was carried out. If you never confirm, it is erased within a day of the link expiring, 7 days after you asked. If you confirm, it is erased about 4 months later.

5 · Your rights

You can ask for a copy of your data, ask us to correct it, delete it, or stop using it for play data analysis. Email us and we'll reply within 30 days. You can also complain to your local data protection authority, or to the Nigeria Data Protection Commission.

6 · Children

Bleed is not directed at children under 13. If you think a child under 13 has given us personal data, email us and we will delete it.

7 · Changes and contact

If we change what we collect, we'll update this page and tell you in the game before the change takes effect.

Questions: info@netcive.com