Trail Legend Privacy Policy
Last updated: 12 October 2026
Lire cette politique en français →
Trail Legend is a mobile game published by Creationy. This policy explains what data the app collects, why, who it is shared with, and how you can access or delete it. It applies identically to the Android and iOS versions.
In short. Trail Legend works without an account. You can play without giving an email address. We do not sell any data. You can delete your account and all your data from within the app, in two taps, under Settings then Account.
1. Who is responsible
Creationy, publisher of the Trail Legend app.
Contact: support@creationy.com
2. What data is collected
Without an account, in guest mode
- Pseudonymous game identifier: a pseudonymous identifier, specific to your game.
- Game progress: races completed, medals earned, virtual currencies, gear owned, chosen runner profile, language and unit preferences.
If you link an email address
- Email address and encrypted password, used solely to let you recover your progress on another device.
Technical data
- Crash reporting: when the app crashes, a pseudonymous technical report is sent so that we can fix the problem. The data involved, how long it is kept and how to object are detailed in section 5.
- Device language and region, read locally to select the display language and the units. This information is not transmitted.
Advertising
- Device advertising identifier, used by Google AdMob to serve rewarded videos and measure their delivery. You can reset this identifier at any time in your phone settings.
Purchases
- Purchase confirmation sent by Google Play or the App Store when you buy gems. We never receive your payment details, which are handled exclusively by the relevant platform.
3. Why this data is collected
| Data | Purpose | Legal basis |
|---|---|---|
| Pseudonymous identifier and progress | Run the game and save your advancement | Performance of the service |
| Email address | Recover your progress on another device | Performance of the service |
| Crash reporting | Fix defects in the app | Legitimate interest |
| Advertising identifier | Serve ads and, with your consent, personalise them | Consent |
| Purchase confirmation | Credit the gems you bought | Performance of the contract |
4. Advertising and consent
Trail Legend offers optional video ads, served by Google AdMob, which grant a virtual currency reward. No advertising is forced on you: the game can be played in full without watching a single video.
In the European Economic Area and the United Kingdom, a consent form is shown to you before the first ad. If you decline personalisation, ads are still served but are no longer targeted, and you keep exactly the same rewards. If you were asked for consent, you can change your choice at any time from the app's settings.
On iOS, the system also asks for permission to track across apps. Declining has no effect on the game.
5. Crash reporting
To detect and fix app crashes, we use Firebase Crashlytics, a service provided by Google.
Data collected: a randomly generated Crashlytics installation identifier, the Firebase installation and session identifiers, the technical trace of the error and the time of the crash, the app identifier and version, the operating system version, the device model, and an indicator showing whether the device is rooted. For native crashes, additional technical data is transmitted, then deleted once processed.
The app does not add any account identifier, email address or username to these reports.
Purpose: to detect, group and fix crashes, and to measure the number of devices affected.
Legal basis: our legitimate interest in keeping the app functional and reliable, within the meaning of Article 6(1)(f) of the GDPR. No data is collected before you have gone through the advertising consent screen, whatever your answer. You may object to this collection at any time, within the meaning of Article 21 of the GDPR, by turning off the “Crash reporting” option in the app's Settings.
Retention period: 90 days, after which the data is deleted from Google's systems, including backups.
Transfers outside the European Union: Google acts as a processor on our behalf. Crashlytics runs on Google's global infrastructure, with no option to choose a region, so your data may be processed outside the European Union, in particular in the United States. These transfers are covered by Google's certification under the EU-US Data Privacy Framework and by the standard contractual clauses included in the Firebase Data Processing and Security Terms.
6. Who this data is shared with
We neither sell nor rent any data. The following providers process it on our behalf:
- Google Firebase (authentication, database, remote configuration, crash reporting): privacy policy
- Google AdMob (rewarded advertising): advertising policy
- Google Play and Apple App Store (purchase processing)
These providers may host or process data outside the European Union. Such transfers are covered by the European Commission's standard contractual clauses and, for Google, by its certification under the EU-US Data Privacy Framework.
7. How long it is kept
- Progress and account: for as long as your account exists.
- Crash reporting: 90 days.
- Advertising data: according to Google AdMob's own retention periods, set out in its policy.
8. Your rights
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, object to and port your data.
Immediate deletion from the app: open Settings, then Account, then Delete my account. This permanently erases your account, your progress, your gear and your virtual currencies. It is irreversible and does not entitle you to a refund for purchases already made.
For any other request, write to support@creationy.com. We reply within one month. You may also lodge a complaint with the French data protection authority, cnil.fr, or with the supervisory authority of your country.
9. Children
Trail Legend is not intended for children under 13 and does not knowingly collect data about them. If you are a legal guardian and believe your child has given us data, write to us and we will delete it.
10. Security
Data is transmitted over an encrypted connection and stored on Google Firebase infrastructure. The database access rules ensure that a player can only read and modify their own data.
11. Changes
This policy may change. Any substantial modification will be announced in the app. The date of the latest update appears at the top of this page.