Spot to Play — Privacy Policy

Version 2026-10-13.1
Last updated: 13 October 2026

B.E 106 GROUP LTD (Israeli company no. 516444569)
6 Yetzira Street, Rehovot 7638020, Israel
BE106.NET@GMAIL.COM
+972-52-803-0056

1. Who we are and how to reach us

B.E 106 GROUP LTD operates Spot to Play and is responsible for the personal information described in this policy. This policy explains what information is processed when you use the game, why it is used, who receives it and how you can exercise your privacy choices.

You can contact us at BE106.NET@GMAIL.COM, by telephone at +972-52-803-0056, or by post at 6 Yetzira Street, Rehovot 7638020, Israel. Our contact page is https://www.be106.net/page/30. Please include “Spot to Play privacy” in privacy-related messages.

2. Information and choices at a glance

Spot to Play stores game progress and preferences on your device and connects to content servers to download game resources. On Android, signing in to Google Play Games also enables leaderboards and achievements through your Google account. Cloud backup uses your verified Play Games identity to save and restore progress across phones, as described in section 6.

Gameplay analytics and crash reports are separate choices. On Android, the gameplay analytics choice also covers Google Analytics for Firebase and Meta ad measurement (section 4). Where the GDPR or UK GDPR applies (the European Economic Area, the United Kingdom and Switzerland), gameplay analytics and crash reports stay off unless you allow them: on first launch, after Google's advertising consent form, we ask whether you want to allow gameplay analytics, and you can enable crash reports in Settings. Elsewhere, gameplay analytics and crash reports are on by default and you can turn either off at any time; there, gameplay analytics in the Android app also includes screen recordings of your play sent to PostHog and Microsoft Clarity (section 4). We determine which rule applies from the regional signal that Google's consent service stores on your device; if that signal is unavailable, both stay off and we do not ask. We save your choices on your device, and you can change them in Settings > Privacy & data. All game features and rewards remain available with any choice.

On Android, the game also uses Google AdMob for ads between completed stories and optional ads for in-game rewards. Advertising involves separate processing by Google and advertising partners, described in section 14. Advertising privacy choices, when available, are managed through Google's consent form. Turning off gameplay analytics or PostHog crash reports does not turn off advertising SDK data processing. Each choice applies to the service described alongside it.

3. Game progress, preferences and content delivery

On your device, the app stores story progress, found differences, completion results, solve times, favorites, game-coin balances, construction progress, accessibility and audio preferences, and tutorial state. This information lets the game remember your progress, apply rewards and use your preferred settings. Your device or browser backup settings may also allow your operating-system provider to back up local app data.

The app stores your privacy choices, policy version and the times your choices were saved or changed. This allows the app to apply your choices on later visits. When you enable optional sharing, PostHog also receives a record containing your choices, policy version and the time of the change, linked to the installation identifier described below.

The app downloads catalogs, images, sounds and videos from spot.be106.net and the content hosts listed in its published catalog. Hosting and network providers receive your IP address and technical request details, such as the requested resource and request time, to deliver content, maintain availability and protect the service. These details may be recorded in service and security logs. Local storage and content downloads are needed for the game features that use them.

4. Optional gameplay analytics

If gameplay analytics is on, because you allowed it, enabled “Share gameplay analytics” in Settings or, outside the regions where consent is required, by default, PostHog receives gameplay events linked to a randomly generated installation or browser identifier and session identifiers. Events may include story, scene and bonus identifiers; game progress; solve times and attempt duration; mistakes and hints; rewards and game-coin spending; construction activity; which ads were loaded, offered and shown, whether an ad was unavailable or closed before its reward, and the estimated revenue value the ad network reports for each ad shown; tutorial steps; and content-loading failures, such as which picture, video or story screen could not be loaded, the loading stage and timing, and the type of error; and how many animation frames were drawn slowly during a puzzle. PostHog also receives technical app, device and browser details used to interpret these events.

Screen recordings (Android, outside the regions where consent is required). When gameplay analytics is on in the Android app outside the European Economic Area, the United Kingdom and Switzerland, PostHog and Microsoft Clarity receive recordings of the game screen, together with your taps and the screens you visit. Clarity reconstructs sessions from captured rendering and interaction data. Recordings are linked to session and installation identifiers; we also give Clarity the same random Privacy support ID so we can locate recordings for privacy requests. Clarity receives technical app and device details, such as app version, device model and operating-system version, and processes your IP address when receiving requests. We mask the Play Games profile text in Clarity recordings and do not set a name or email as a Clarity identifier. Clarity advertising consent remains denied. Microsoft describes its processing at https://privacy.microsoft.com/privacystatement. Recordings show the game's own pictures and text and stop when gameplay analytics is turned off. We use them to see where players get stuck or leave and to fix confusing screens. Screen recordings are never made where the GDPR or UK GDPR applies, or when the regional signal is unavailable.

We use this information to understand how people play, adjust story difficulty and progression, and improve performance and reliability. The identifiers allow events from the same installation to be connected over time, so this is pseudonymous personal information. Your IP address is processed as part of transmitting requests to the service. Gameplay analytics and crash reports each have their own setting.

Google Analytics for Firebase (Android). When gameplay analytics is on, the Android app also sends the same gameplay events to Google Analytics for Firebase, linked to a Firebase app-instance identifier and the same random installation identifier. The Firebase SDK also records app opens, sessions, engagement time and app updates, with app and device information such as device model, operating-system version, language and app version, and approximate location (country, region and city) derived from your IP address. We do not allow Google Analytics to collect your advertising ID or Android ID, and we do not grant it advertising consent or use it for ad personalization. We use this information for the same purposes as PostHog analytics. Google's use of information from apps that use its services is described at https://policies.google.com/technologies/partner-sites. Turning gameplay analytics off disables Google Analytics for Firebase for future events.

Meta ad measurement (Android). When gameplay analytics is on, the app also enables the Meta (Facebook) SDK so we can measure whether people install and open the game after seeing our ads on Facebook or Instagram. The SDK sends Meta app install and app launch events, together with your Android advertising ID (where your device settings allow it), app and device information and your IP address. We do not send Meta your gameplay events, game progress, Play Games name or support correspondence. Meta processes this information as described in its privacy policy at https://www.facebook.com/privacy/policy and may link it to a Facebook or Instagram account to attribute ad results. Turning gameplay analytics off disables the Meta SDK for future launches and events.

5. Optional crash reports

If crash reports are on, because you enabled “Send crash reports” in Settings or, outside the regions where consent is required, by default, the app sends PostHog information about crashes, unexpected errors and game content that could not be loaded or played. Reports may contain the error type and message, a stack trace identifying the code involved, whether the error was fatal, recent technical steps recorded before the error, the app version, device model and operating-system version. Reports are linked to the same randomly generated installation identifier used for optional analytics. Native crash reports are sent when the app next opens.

We use these reports to find, prioritize and fix faults. Error messages may include technical details such as the address of game content that failed to load. Crash reports are pseudonymous personal information. You can enable crash reports independently of gameplay analytics.

6. Google Play Games (Android)

On Android, Spot to Play uses Google Play Games Services for leaderboards and achievements. Google may sign you in automatically according to your Play Games settings. Signing in is optional, and the game remains available when you are signed out.

Cloud backup. While signed in, the app tries to authorize backup using only Play Games access. If Google needs your approval or an account selection, the app asks you to enable cloud backup in Settings first. Choose the same Google account you use for Play Games. We do not request Drive, contacts, email or profile access for cloud backup. Google controls the wording of its authorization screen.

Our game server, hosted on Cloudflare Workers with D1 storage, verifies your Play Games player ID with Google. It stores your game progress, completion results, found differences, coin ledger, construction progress, favorites and reward state under that player ID, together with save revision and timestamps. After authorization, progress is synchronized automatically when you play and reconnect; signing in and enabling backup with the same account on another phone restores and merges your progress. Audio, accessibility and privacy choices remain local. Offline changes are kept locally until synchronization succeeds.

When available, the app also sends the existing Privacy support ID from each installation. We link these IDs to the verified player ID to locate data across devices and handle deletion requests; this does not enable optional analytics. Our server uses short-lived sessions and stores hashes of their tokens. It does not retain Google's access or refresh tokens, your Google password or your email address. Cloudflare processes network request details, including your IP address, to deliver and protect the service.

The app also submits your total stars and total score to the corresponding Google leaderboards and unlocks achievements based on your progress. It reads your Play Games display name to show the signed-in profile. Your Play Games name, avatar, scores and achievements may be visible to other players according to your profile settings.

Google stores and processes Play Games information under your Google account and its privacy policy: https://policies.google.com/privacy. You can manage automatic sign-in, profile visibility and deletion of this game's Google-held data through Play Games settings. Cloud saves on our server, local device data and Google-held Play Games data have separate deletion controls. Request deletion of our cloud saves through Settings > Privacy & data > Request data deletion or by contacting us. Android may also back up local app data according to your device backup settings.

7. Support and privacy requests

When you contact us, we receive the contact details you use, the contents of your message and any information or attachments you choose to provide. For a privacy request, this may include the Privacy support ID and Cloud player ID shown in the app and information needed to verify or clarify your request.

We use this information to answer questions, investigate reported problems, handle privacy requests and keep records of the response. Our email provider processes correspondence to deliver and store messages. Please provide only the information needed for your request.

8. Purposes and legal grounds

Where the GDPR applies, we rely on the need to provide the requested game for core functions, including local progress, cloud backup and restoration, and content delivery, and for leaderboards and achievements when you sign in to Play Games. We rely on proportionate legitimate interests to protect the service and prevent abuse, taking your rights into account.

Where the GDPR or UK GDPR applies, gameplay analytics and crash reports rely on your consent, including consent to associated non-essential device storage or access. You can give or withdraw consent separately for each option. Where consent is not legally required, gameplay analytics and crash reports are on by default to serve our legitimate interests in understanding how the game is played, improving it and fixing faults; you can object at any time by turning either off in Settings > Privacy & data. Privacy requests and limited compliance records are handled to meet applicable legal obligations; ordinary support correspondence is used to respond to your request and support the service.

Advertising and associated access to information on your device are described in section 14. Where required, consent is the basis for personalized advertising and non-essential storage or access. Other advertising purposes and any applicable legitimate-interest choices are explained in the advertising privacy form and the relevant provider notices; these are separate from consent for PostHog analytics and crash reports.

For users in Israel, this notice describes the purposes of processing, recipients, voluntary choices and rights under the Protection of Privacy Law. Providing information for optional sharing or contacting support is voluntary. Declining optional sharing leaves gameplay and rewards available; the details you provide in a support request affect our ability to investigate and respond.

9. Adult audience

Spot to Play is intended for adults aged 18 and over. We do not ask players to declare their age.

If you have concerns about information relating to a child, please contact BE106.NET@GMAIL.COM so we can investigate and take appropriate action, including deletion where required.

10. Service providers and international processing

The providers involved in the processing described here are our hosting and content-delivery providers, including Cloudflare for game cloud saves, our email provider for support correspondence, Google for Play Games, AdMob advertising, advertising consent and optional Google Analytics for Firebase on Android, PostHog for optional analytics and crash reports, Microsoft for optional Clarity session recordings and interaction analytics, and Meta Platforms for optional ad measurement on Android. Meta Platforms Ireland Limited is responsible for users in the European Economic Area, the United Kingdom and Switzerland; Meta Platforms, Inc. elsewhere. Advertising partners may also receive information as described in section 14. The advertising privacy form identifies the participating partners and provides information about their purposes and privacy policies.

The app uses PostHog EU Cloud at eu.i.posthog.com. Our staff in Israel may access information for the purposes described in this policy. Provider support teams and subprocessors may process information in other countries, including outside the European Economic Area.

Where international transfers require safeguards, these must meet applicable legal requirements, such as an adequacy decision or approved contractual clauses under the GDPR, and applicable Israeli transfer rules. You can contact us for information about the providers and safeguards relevant to your information.

11. How long information is kept

Local game progress and privacy preferences remain on your device until you clear the app or browser data or remove the app, subject to operating-system backups. Play Games scores, achievements and any progress copies saved by earlier versions remain in your Google account until you delete the game's data through Play Games or Google deletes it under its policies. Local and Play Games data have separate deletion controls.

Optional gameplay analytics may be kept for up to seven years to compare progression, retention and changes to the game over time. Information may be deleted sooner when it is no longer needed, following a valid deletion request or when the service plan has a shorter retention period. Optional crash reports may be kept for up to one year to compare recurring faults across app versions, with earlier deletion under the same conditions.

Google Analytics for Firebase keeps event-level information for up to 14 months; aggregated reports that do not identify an installation may be kept longer.

Meta retains ad-measurement information under its own policies and controls; see https://www.facebook.com/privacy/policy.

PostHog screen recordings are kept for up to 30 days and then deleted automatically, or sooner following a valid deletion request. Clarity playback data is retained for 30 days; labeled or favorited sessions and heatmap/click data are retained for up to 9 months under Microsoft's retention policy: https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention. Information may be deleted sooner following a valid deletion request.

Google and advertising partners retain advertising information under their own retention policies, according to the type of information, its purpose, user controls and legal requirements. The seven-year analytics and one-year crash-report periods above refer to our optional PostHog processing, not to Google's advertising data. Google explains its retention at https://policies.google.com/technologies/retention and advertising practices at https://policies.google.com/technologies/ads. Advertising consent preferences are stored on the device by UMP; clearing app data may remove those local preferences, but does not itself delete information already held by providers.

Service and security logs are kept for the period needed to operate and protect the service and investigate incidents. Support correspondence, privacy requests and consent records are kept for as long as needed to handle the matter, meet applicable legal obligations or resolve a specific dispute. Retention depends on the purpose and relevant provider settings; deletion from provider systems and backups may take additional processing time.

Cloud saves and their linked Privacy support IDs are kept while cloud saving remains in use, until you request deletion or the feature is discontinued. Deletion removes the active save, linked support IDs and sessions. We retain a one-way hash of the player ID to prevent another signed-in device from automatically recreating deleted data. This suppression record remains until you ask us to re-enable cloud saving or the feature is discontinued; it contains no game progress or support IDs. Session tokens expire after one hour, and expired session records are cleared during subsequent authentication. Provider backups may take additional time to expire.

12. Your choices and privacy rights

You can turn gameplay analytics and crash reports on or off in Settings > Privacy & data, whether an option was enabled by your choice or by default. Turning an option off stops future collection for that option; turning gameplay analytics off also stops PostHog and Microsoft Clarity screen recordings, Google Analytics for Firebase and Meta ad measurement. The game remains available. Information already collected is handled under the retention periods above, and you can request its deletion. If the app cannot save a change because of a storage error, it stops optional sharing for the current session and asks you to retry saving for future launches.

For advertising choices, use Settings > Ad privacy choices when available, as explained in section 14. Depending on where you live and whether the relevant law applies, you may also have rights to opt out of targeted advertising or the sale or sharing of personal information, obtain a copy of your information, or appeal a decision about a privacy request. Advertising disclosures to third parties may fall within these legal definitions even when no money is paid for the information itself. Use the applicable advertising privacy controls or contact us to exercise your rights or obtain help. We will not deny ordinary gameplay because you exercise a privacy right.

To request access, correction or deletion, email BE106.NET@GMAIL.COM. If available, include the Privacy support ID shown in Settings > Privacy & data so we can locate records associated with your installation. Each device may have a different ID. For cloud saves, also include the Cloud player ID shown in Settings when available; the deletion draft includes the saved ID automatically. Cloud-save deletion pauses future cloud backup for that player and leaves local progress on your devices in place. We may ask for proportionate information to verify or clarify your request. You manage information held only on your device through the device or browser, and Play Games information through your Google account.

Where the GDPR applies, your rights may include access, rectification, erasure, restriction, portability, objection and withdrawal of consent, subject to applicable conditions and exceptions. Withdrawal leaves the lawfulness of earlier processing unaffected. You can complain to the competent data-protection authority. We respond to GDPR requests within one month and explain any lawful extension within that period.

Israeli law provides rights to inspect personal information and request correction or deletion where information is incorrect, incomplete, unclear or outdated, subject to the law's provisions. You may also contact the Israeli Privacy Protection Authority. We handle requests according to the applicable rules and deadlines.

13. Protecting information

The app uses HTTPS to transmit cloud saves, remote content requests and optional analytics and crash reports. Optional sharing is controlled by your saved choices, and gameplay events are limited to the fields used for the purposes described in this policy.

The security of stored information also depends on the safeguards of the providers and accounts used to process it. Please limit support messages and attachments to the information needed to resolve your request.

14. Advertising and advertising privacy choices

On Android, Spot to Play uses Google AdMob (Google Mobile Ads SDK) to show ads between completed stories and optional rewarded ads for an extra hint. The offered reward is shown before you choose to watch. Paper coins and hints are in-game items with no cash value. A reward is granted when the advertising SDK reports that it was earned; leaving an ad before earning the reward does not grant it. Ads may be unavailable. You can continue playing without choosing a rewarded ad, and declining optional gameplay analytics or PostHog crash reports does not affect eligibility for these rewards.

Information processed for advertising. Google and participating advertising partners receive and process data to deliver ads, personalize them where permitted, measure views and performance, maintain and improve advertising services, and detect fraud and abuse. Depending on your choices, device settings and the ad-serving mode, data can include your IP address and approximate location inferred from it; Android advertising ID, app set ID and other device or, where applicable, account-related identifiers; app and device information; interactions such as app launches, ad views, video views and taps; and diagnostic and performance information such as launch time, crashes or hangs and energy usage. We do not request precise device location for advertising, or supply your game progress, Play Games display name or support correspondence as custom ad targeting data.

Storage and similar technologies. Google and advertising partners may store or access information on your device through SDK storage, mobile identifiers, cookies and similar technologies. Web-based ad content may use cookies, pixels or web beacons to obtain interaction and technical information, including IP addresses. These technologies support ad delivery, measurement, personalization where permitted, and security. The technologies and data used depend on the ad format, device, privacy choices and applicable settings. Non-personalized ads can still involve data processing and device access; they are not necessarily anonymous or free of storage requirements.

Google's use of information. Read How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites. Google's privacy policy is at https://policies.google.com/privacy. The advertising privacy form's partner list identifies the participating providers and their purposes and privacy notices. Google and these providers may process information outside your country, under the safeguards and policies described in section 10 and their own notices. See section 11 for retention and deletion information.

Consent and other privacy choices. We use Google's User Messaging Platform (UMP) to retrieve the privacy form applicable to your region and manage advertising choices. Consent requests send Google your IP address and technical app and request information. UMP stores preferences on your device, and consent signals are communicated to the advertising services so they can apply your choices. The app initializes its ad service and requests ads only when UMP indicates that requests are allowed. Where required, including in the European Economic Area, the United Kingdom and Switzerland, we request consent before using personal information for personalized advertising or storing or accessing information on your device for purposes requiring consent. You can decline consent and manage the available purposes and partner choices. Any legitimate-interest processing and available objections are explained in the form. The ad-serving mode depends on your choices and applicable settings; refusal may lead to non-personalized or limited ads, or no ad being available, while ordinary gameplay remains available.

Changing your choice. Reopen Settings > Ad privacy choices whenever this option is available to change or withdraw consent, manage partners or exercise the opt-out choices presented for your region. Changes apply to subsequent advertising processing and do not undo processing that occurred lawfully before withdrawal. You can reset or delete your advertising ID in Android settings and manage Google's ad personalization controls at https://adssettings.google.com. Device and Google account controls do not replace the choices in the app's consent form. For help, or if a privacy control is unavailable, contact BE106.NET@GMAIL.COM. Requests about information already held by Google or another advertising provider can also be made using that provider's privacy controls and policy.

Separate from optional analytics. Advertising choices do not enable gameplay analytics or optional PostHog crash reports. Those features have separate controls under Settings > Privacy & data. Conversely, turning those features off does not by itself stop AdMob advertising data processing. Google Analytics for Firebase and Meta ad measurement (section 4) are the exceptions: they follow the gameplay analytics choice, not the advertising privacy form. Diagnostics collected by the Google advertising SDK are separate from the optional PostHog crash-report feature. Advertising SDK communications use encrypted connections.

15. Changes to this policy

We will update this policy when the information we process, its purposes or the services involved change. Material changes will be explained before the new processing begins, and we will obtain new consent where required.

The app records the policy version and the time you save or change optional sharing choices. A policy-version change requires you to make those choices again. Google's consent tools manage advertising consent updates separately. The current policy and our contact details are available in the app's Settings.