Privacy Policy

Last updated May 19, 2026

Voodoo is a global entertainment company specializing in the development and publication of mobile games and applications. This policy explains why and how Voodoo processes your personal data when you use our apps or play our games (“Apps & Games”). 

For any questions regarding your privacy, please contact our Data Protection Officer (DPO) at dpo@voodoo.io or by mail at Data Protection Officer – Voodoo, 12 Place Dauphine, 75001 - Paris, France. 

1. How do we process your data in our Apps & Games?

When you install and use our Apps & Games, we collect and process information to ensure the performance of our services, improve your experience, and deliver advertisements.

1.1. What information do we collect about you?

In most cases, Voodoo does not collect data that directly identifies you, such as your full name, physical address, or phone number. We primarily process technical identifiers (such as Advertising IDs and IP addresses), gameplay data, and device information.

However, if you choose to log in using Sign in with Apple or Sign in with Google, we receive your email address (or, if you opt for it, a private relay address generated by Apple). This email address is used solely to secure your account and enable cross-device synchronization.

1.2. Why and on what legal bases do we process your data?

The following table explains why we process this data and the legal bases for doing so:

1.3. Who do we share your data with?

To provide our services, we work with service providers and partners that support the operation, improvement, and monetization of our Apps & Games. Where required, we apply contractual, technical, and organizational safeguards to protect your personal data.

Your information is shared with the following categories of recipients:

• Service Providers: We work with technical partners who provide the necessary infrastructure, hosting, and support services required to operate our business.

• Partner Studios: As Voodoo publishes Apps & Games developed by external creators, we share certain data, such as gameplay information, technical logs, and analytics, with these partner studios. This sharing is strictly limited to what is necessary for them to monitor game performance, identify bugs, and improve the overall gaming experience.

• Advertising and Mediation Partners: We collaborate with ad networks and mediation platforms to display advertisements and monetize our Apps & Games. A detailed list of our advertising partners and their respective privacy policies is accessible at any time directly through the "Settings" of our Apps & Games. These partners are responsible for the subsequent processing they carry out as independent controllers.

• Mobile Measurement Partners (MMPs): We work with mobile measurement partners to measure the performance and effectiveness of advertising campaigns conducted by Voodoo on third-party platforms, attribute installs and in-app events to campaigns, detect advertising fraud, and assess return on advertising spend. Depending on the partner and app configuration, we may share advertising identifiers, app-instance identifiers, IP address, app events, campaign attribution data, and revenue prediction data. These partners process data either as our service providers/processors or as independent controllers, depending on their role and the applicable legal framework.

• Reward and Offerwall Partners: When you link a Freecash account, we share your device identifier (IDFA/GAID) with Almedia GmbH (Freecash.com) for reward attribution and fraud prevention. This partner is responsible for the subsequent processing carried out as independent controller. You can learn more about their processing and how to exercise your rights by consulting their Privacy Policy.

• App Stores and Identity Providers (acting as independent controllers): When you make an in-app purchase or sign in with Apple or Google, they act as independent data controllers for the parts of the transaction and authentication flow that they operate, including payment processing, fraud prevention and compliance with their own legal obligations. Voodoo only receives the minimum data necessary to validate the transaction or secure the account (transaction identifiers and receipts for purchases; unique provider identifier, email or private relay address, and authentication tokens for sign-in).

• Legal and Regulatory Authorities: We may share data with legal or regulatory authorities when required to comply with our legal obligations.

1.4. How long do we keep your data?

We retain your personal data only for as long as strictly necessary to fulfill the purposes described in this policy. 

2. Children's Privacy

Our Apps & Games are not designed for or directed at children under the age of 16. If you are under 16, do not use our Apps & Games.

We do not generally ask users to provide their date of birth. Where required by applicable law, including in connection with consent for personalized advertising, we may ask you to confirm that you are over 16 before allowing you to consent to the processing of your personal data for such purposes. We use this confirmation only to determine whether you may provide consent for the relevant processing.

Age ratings assigned by app stores, such as the App Store or Google Play, may reflect content classification criteria set by those platforms. This includes cases where an App or Game is rated as suitable for users under 16. Such ratings do not mean that our Apps & Games are designed for, directed at, or intended for minors.

If you are a parent or guardian and wish to delete your child's data, you can do so directly through the settings of the relevant app, in the same way as any other user. You may also contact our Data Protection Officer at dpo@voodoo.io.

We encourage minors between 16 and 18 to review this policy with a parent or trusted adult before using our Apps & Games.

3. How is your data protected when transferred internationally?

Some of our partners and service providers may be located outside the European Economic Area, the United Kingdom, or Switzerland.

In such cases, any transfer of personal data is carried out in strict compliance with applicable data protection laws. We ensure that such transfers are subject to appropriate safeguards designed to guarantee a level of protection essentially equivalent to that guaranteed within the European Union.

Depending on the specific circumstances, we rely on legal mechanisms such as:

• An adequacy decision adopted by the European Commission;

• Standard contractual clauses or equivalent transfer safeguards approved under applicable data protection laws, including the European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum where applicable, and Swiss-recognized transfer safeguards where applicable;

• Certification under the EU-U.S. Data Privacy Framework, and any applicable UK or Swiss extension where relevant, where the recipient organization is duly certified;

• Other appropriate safeguards or, where strictly necessary, specific derogations provided under applicable data protection laws.

4. What are your rights and how can you exercise them?

For the sake of clarity, we have distinguished the rights applicable depending on your place of residence. However, regardless of your location, we are committed to handling your requests with care.

4.1. Who can you contact regarding your privacy?

For any questions or to exercise a right, you can contact our Data Protection Officer (DPO):

• Email: dpo@voodoo.io

• Mail: Data Protection Officer – Voodoo – 59 rue Jean-Jacques Rousseau, 75001 Paris, France.

4.2. What are your rights in the EEA, the UK, and Switzerland?

If you reside in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the GDPR, UK GDPR, Swiss data protection law, or other applicable local law:

• Right to Access and Data Portability: You can request a copy of your personal data. Where required by applicable law and technically feasible, we will provide it in a structured, commonly used, and machine-readable format.

• Right to Rectification: You have the right to request the correction of inaccurate or incomplete data.

• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your data, unless its retention is required by law or necessary for the establishment, exercise, or defense of legal claims.

• Right to Restriction of Processing: You have the right to request the limitation of the processing of your personal data under specific circumstances provided by law.

• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests at any time, on grounds relating to your particular situation.

• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time through the settings of the relevant App or Game, our Consent Management Platform where available, or by contacting us.

• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Voodoo does not carry out any such decision-making within its Apps & Games.

• Directives Regarding Your Data After Death: Where applicable, including under French law, you may define instructions regarding the retention, deletion, and communication of your personal data after your death.

• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. Our lead authority is the CNIL (France), but you can contact the authority in your country of residence.

4.3. What are your rights in the United States?

This section applies to residents of U.S. states whose privacy laws grant consumer privacy rights. Depending on your state of residence, you may have some or all of the rights described below. We also apply this section to other U.S. states when similar privacy laws become applicable.

• Right to Know, Access, and Portability: You may request confirmation that we process your personal data, access to that data, and information about how we use, disclose, sell, or share it. Where required by applicable law, you may also request a copy of your personal data in a portable and readily usable format.

• Right to Information About Third Parties: You may request information about the categories of third parties with whom we share personal data. Where required by applicable law, you may also request a list of specific third parties to whom we have disclosed your personal data, or, if we do not maintain that information in a consumer-specific format, a list of specific third parties to whom we disclose personal data generally.

• Right to Delete: You may request deletion of personal data you have provided to us or that we have collected about you, subject to legal exceptions.

• Right to Correct: You may request correction of inaccurate personal data, taking into account the nature of the data and the purposes of the processing.

• Right to Opt Out of Sale or Sharing: We do not sell your personal data in exchange for money. However, disclosing identifiers and device information to advertising partners to provide personalized advertising may be considered a "sale", "sharing", or "targeted advertising" under certain U.S. state privacy laws. You can opt out through the settings of our Apps & Games, our Consent Management Platform where available, and your iOS or Android device advertising settings.

• Right to Opt Out of Targeted Advertising and Certain Profiling: You may opt out of the processing of your personal data for targeted advertising. In states whose privacy laws recognize this right, you may also opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. Voodoo does not use profiling to make decisions that produce legal or similarly significant effects about you, such as decisions about financial services, housing, insurance, education, employment, criminal justice, or access to basic necessities.

• Opt-Out Preference Signals: Where required by applicable law, we honor recognized opt-out preference signals, such as Global Privacy Control (GPC), for the browser, device, or interaction through which the signal is received. Because our Apps & Games are native mobile applications, in-app advertising preferences are primarily managed through the Apps & Games settings, our Consent Management Platform where available, and your iOS or Android device advertising settings.

• Right to Limit the Use of Sensitive Personal Information (California): We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit under California law. If this changes, we will provide the required notice and controls.

• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time through the settings of our Apps & Games, our Consent Management Platform where available, or, where applicable, your device settings.

• Right to Non-Discrimination: We will not discriminate or retaliate against you for exercising your privacy rights.

• Authorized Agent: In certain states, you may designate an authorized agent to submit requests on your behalf. We may need to verify the agent's identity and authority, and we may also ask you to confirm the request directly where permitted by law.

• Right to Appeal: If we deny your request, you may appeal our decision by replying to our response or by contacting us at dpo@voodoo.io with "Privacy Appeal" in the subject line. We will review your appeal and respond within the timeframe required by applicable law. If your appeal is denied, we will provide information on how to contact the relevant state Attorney General where required.

• "Shine the Light" (California Civil Code § 1798.83): California residents may request once per year, free of charge, information about the categories of personal information, if any, that we disclosed to third parties for those third parties' direct marketing purposes during the preceding calendar year. Voodoo does not share personal information with third parties for their separate direct marketing purposes by phone, email, or postal mail.

4.4. How to manage your preferences?

You can exercise many privacy choices directly through:

• Our Apps & Games Settings: Open the settings of the relevant App or Game to manage your consent preferences through our Consent Management Platform, opt out of personalized advertising, or request a copy or deletion of your data.

• Your Device Settings (iOS/Android): You can manage advertising-related choices through your iOS App Tracking Transparency settings and Apple advertising settings, or through your Android advertising ID and ad personalization controls. Depending on your operating system version, you may also be able to reset or delete your advertising identifier.

You can also contact our DPO at dpo@voodoo.io for any request that cannot be completed directly from the App or Game settings.