OverLit Privacy Policy

Effective Date: 2026-06-29
Version: 1.0.24

This Privacy Policy explains how OverLit handles information when you use the iPhone app, visit the OverLit pages on this website, contact support, or interact with ads shown in or for OverLit.

OverLit is provided by Aleksander Jałtuszyk (“Developer”, “we”, “us”, or “our”). Country: Poland. Contact: alekgameshelp2@gmail.com. Telephone: +48 73 2099027. Mailing address: Aleksander Jałtuszyk, Skrytka Pocztowa 59, UP Warszawa 93, 02-800, Warszawa. Support page: https://alekjaltuszyk.xyz/apps/OverLit/support/.

This policy covers the OverLit app and the OverLit pages on alekjaltuszyk.xyz, including:

1. Summary

Quick Data Map

PracticeWhat it means in OverLit
Local gameplay dataScores, settings, progress, unlocks, age-band answer, legal acceptance, ad counters, and Full Version entitlement cache are stored on your device for app functionality.
Google/AdMob adsFree users may receive AdMob ad requests after required privacy and consent steps. Google may process ad identifiers, IP-derived coarse location, ad interactions, diagnostics, performance data, and consent signals.
Firebase/GA4 measurementFirebase Analytics starts disabled and is enabled only after onboarding, age-band answer, and current legal acceptance. OverLit’s custom events are the milestone and purchase-product-ID events listed below; Google/Firebase may also process standard app-instance, session, device, diagnostic, consent, and analytics metadata needed to provide Firebase Analytics.
Apple and StoreKitApple processes App Store downloads, purchases, refunds, restore-purchase checks, device/platform information, and platform diagnostics under Apple’s policies. OverLit stores only the local entitlement cache and limited transaction metadata needed to remember Full Version.
SupportWe receive your email address, message, and any copied progress summary only if you choose to send support or feedback.
Not usedNo OverLit account, custom backend, chat, social feed, multiplayer, cloud sync, precise GPS, contacts, camera, photos, Meta/TikTok SDKs or pixels, customer-list uploads, or custom retargeting system is used in the current app.

2. Data Stored Locally On Your Device

OverLit gameplay is local. The app may store local gameplay/settings data on your device so the game can work normally and remember your choices.

The app may include a Copy Progress option that copies a plain-text summary of local level progress, scores, stars, and related gameplay state to your device clipboard. Copying progress does not send it to us by itself. The data leaves your device only if you choose to paste or share it, such as in a support or feedback email.

This local app data is intended to stay on your device unless you separately choose to send information to support or feedback, unless Google/AdMob or Firebase/GA4 processes ad-related or conversion-measurement data through its SDKs as described below, or unless Apple or another platform provider processes data through its own platform services. Deleting the app may remove local app data from the device, subject to normal iOS backup, restore, and device behavior.

OverLit does not provide public user-generated content, in-app chat, a social feed, multiplayer, or an account system.

3. Information We Do Not Ask For

Some template privacy policies include broad categories that do not match OverLit. In the app, we do not ask you to create an account, choose a password, provide a phone number, mailing address, billing address, payment card, job title, exact date of birth, contact list, camera photo, photo library item, or precise GPS location.

OverLit asks for a local age range during onboarding: 13 to 17 or 18 or older. We use that local answer to choose conservative ad settings for teen players, allow the adult ad profile for players who choose 18 or older, and keep adult-only local Voice of Self house ads away from teen players and users who have not answered the age question. We do not ask for your exact birth date.

If you voluntarily include any of that information in a support email, we may receive it as part of your message, but the app does not require it.

OverLit does not intentionally collect sensitive personal information, such as health, biometric, precise location, financial account, government ID, racial or ethnic origin, religious belief, union membership, sexual orientation, or similar sensitive categories. OverLit does not use sensitive personal information for ad targeting. If you choose to include sensitive information in a support email, we may receive it as part of that message, but you do not need to send it to use the app.

4. Advertising And AdMob

OverLit integrates Google AdMob through the Google Mobile Ads SDK. Builds use configured AdMob app and ad unit IDs for the active app environment. Debug or development builds may use Google demo or test ad IDs, while production builds use the configured live AdMob units unless a local build override is deliberately supplied.

The app also includes Google User Messaging Platform / AdMob privacy messaging for applicable European regulations and U.S. state privacy regulations, an AdMob IDFA explainer for Apple’s App Tracking Transparency flow where available, Firebase Analytics / Google Analytics for Firebase for limited app conversion measurement, and SKAdNetwork attribution support for privacy-preserving app advertising measurement. The current app build may request Apple’s App Tracking Transparency permission so AdMob can use IDFA for more relevant ads and ad measurement when allowed. If you deny ATT or your device does not allow tracking requests, ads may still be requested without IDFA.

To support app-install conversion measurement, the app’s iOS configuration includes SKAdNetwork identifiers for Google and participating buyer/ad network attribution, including identifiers intended to keep future Meta and TikTok campaigns measurable if those campaigns are configured. SKAdNetwork is an Apple attribution system for aggregated install measurement. These Info.plist entries do not install Meta or TikTok SDKs, do not add Meta Pixel or TikTok Pixel to the website, and do not send OverLit gameplay events to Meta or TikTok. The previous app-side manual SKAdNetwork conversion-value reporter has been replaced by Firebase/GA4 app events.

Firebase/GA4 custom events are limited to overlit_onboarding_complete, overlit_first_run_started, overlit_first_run_complete, overlit_level_1_complete, overlit_level_3_complete, overlit_level_5_complete, overlit_level_7_complete, overlit_level_10_complete, overlit_level_20_complete, overlit_level_30_complete, overlit_level_40_complete, overlit_level_50_complete, overlit_level_60_complete, overlit_level_70_complete, overlit_campaign_complete, and overlit_full_version_purchase with the Full Version product ID. We do not send the local age-band answer, exact birth date, support email content, detailed gameplay history, or Apple StoreKit transaction ID in these custom Firebase events. Firebase Analytics collection starts disabled by default in the app configuration. The app enables analytics measurement only after the local app gate is current, which means onboarding is complete, the age question is answered, and the current legal agreement is accepted. Events that happen before analytics measurement is allowed are not queued and replayed later. After Firebase Analytics is enabled, Google/Firebase may also process standard analytics data such as app-instance identifiers, app launches, sessions, app version, device and platform information, approximate region derived from network information, diagnostics or performance-related metadata, consent state, and other standard analytics metadata needed to provide Firebase Analytics and Google Ads conversion measurement. In Firebase/GA4 consent mode, Google ad storage, ad user data, and ad personalization signals remain denied. AdMob personalized ads and IDFA access are handled separately through Google UMP, Apple’s ATT prompt, device settings, Google/AdMob settings, and applicable law. OverLit does not currently use Firebase Authentication, Firestore, Realtime Database, Cloud Messaging, Remote Config, Crashlytics, Performance Monitoring, or a custom Firebase backend.

The app currently uses AdMob for:

OverLit does not show banner ads on the game board cells. Real ad content is not placed on the actual playable grid. Full Version owners should not receive real AdMob banner, interstitial, or rewarded ad requests while the Full Version entitlement is active. If a Full Version owner has a Help the Dev setting enabled, the app may show an in-game thank-you or support message instead of requesting a real ad.

OverLit asks for a local age range before ad preparation. For players who choose 13 to 17, the app configures Google Mobile Ads requests with teen treatment, a maximum ad content rating no higher than Teen, publisher ad personalization disabled, and Google’s publisher first-party ID disabled. For players who choose 18 or older, the app may use unspecified age treatment, leave the SDK max-content cap unset, enable publisher ad personalization, and enable Google’s publisher first-party ID, subject to Google/AdMob settings, UMP consent, Apple’s ATT permission, device settings, and applicable law.

Google’s Mobile Ads SDK may collect, receive, or process information such as:

That data may be used for purposes such as:

Google and its partners process this information under their own policies. You can read more in the Google Privacy Policy and Google’s advertising technologies information.

To support authorized app advertising inventory, this site publishes an app-ads.txt file at https://alekjaltuszyk.xyz/app-ads.txt. It includes the Google publisher record:

google.com, pub-6606108754134100, DIRECT, f08c47fec0942fa0

5. Local Developer House Ads

OverLit may show a local developer house ad in the app context, including when AdMob cannot load an ad or when the local house-ad replacement chance is selected. The current local developer house ads are for PlanKept and, only for players who choose 18 or older, Voice of Self. Voice of Self house ads are not shown to players who choose 13 to 17 or users who have not answered the age-band question.

A house ad is a local in-app panel that promotes the Developer’s own app, app page, App Store page, or related app destination. Full Version suppresses normal automatic house-ad fallback in the ordinary player experience while the entitlement is active, except developer-only preview tools.

Showing a local developer house ad does not by itself send data to a third-party ad network. If you tap a house ad and leave the app, the destination website, App Store, browser, or device platform may process that visit under its own policies.

6. Optional Full Version Purchase

OverLit may offer an optional one-time non-consumable Full Version purchase through Apple’s in-app purchase system. This purchase is processed by Apple through the App Store. We do not operate a custom payment account system and do not receive your payment card details.

When Full Version is active, OverLit stores a local entitlement cache and limited StoreKit transaction metadata on your device so the app can remember the purchase, suppress normal ads, unlock ad-gated themes, and let existing level-skip offers complete without watching an ad. The app may check StoreKit entitlements and may let you restore purchases using Apple’s restoration flow. If the App Store reports that an entitlement is revoked or no longer active, the app may remove the local Full Version access state.

Full Version does not add a separate OverLit account or separate tracking system. The limited Firebase/GA4 Full Version purchase conversion event described above may still be logged with the Full Version product ID for analytics and Google Ads conversion measurement. Full Version does not automatically unlock progression-only rewards, arcade modes, or other non-ad content that still requires normal gameplay.

Full Version purchases, refunds, chargebacks, family sharing availability, and purchase restoration are handled through Apple and the App Store. If Apple reports that a purchase has been refunded, revoked, or is otherwise no longer active, OverLit may update the local entitlement state to match Apple’s entitlement status.

7. External Marketing And Promotion

We may promote OverLit through paid or organic ads on external services such as Instagram, Meta, TikTok, Apple Search Ads, Google, or similar advertising platforms.

If you view, click, share, comment on, save, or otherwise interact with an OverLit ad on one of those services, that service may process information about the interaction under its own terms, privacy policy, and ad settings. For example, Meta/Instagram activity is governed by Meta’s Privacy Policy, and TikTok activity is governed by TikTok’s Privacy Policy.

We do not currently install Meta Pixel, TikTok Pixel, Meta SDK, TikTok SDK, Conversion API, StoreKit purchase analytics SDKs, customer-list uploads, or similar external marketing trackers in OverLit or on the OverLit website pages. The app does include Firebase/GA4 app events for the limited conversion-measurement purposes described in this policy. We also do not currently upload support emails, contact lists, or customer files to ad platforms for OverLit retargeting. If we add those practices later, this policy and the relevant platform disclosures should be updated first.

OverLit may use Google’s User Messaging Platform or AdMob privacy messaging where required. Users in applicable regions may see privacy or consent choices for ads, including European regulations messages and U.S. state privacy regulation messages. When AdMob reports that privacy options are required, OverLit may also make Privacy and cookie settings available from the app settings.

In the current app flow, choosing an age band may cause OverLit to prepare the Google/AdMob privacy flow before gameplay and before the final legal confirmation is completed. This preparation is used to decide whether a consent form, privacy-options form, or ATT explainer should be shown and whether ads may later be requested. It is not the same as requesting a real ad, and it is separate from Firebase Analytics, which remains disabled until the current legal agreement is accepted.

For applicable U.S. state privacy flows, Google’s message may include wording such as “Do Not Sell or Share My Personal Information” or similar opt-out choices. Those choices are intended to send supported opt-out signals for sale, sharing, targeted advertising, or similar personalized-ad uses where required by the relevant law and supported by AdMob.

On iOS, OverLit may show an AdMob IDFA explainer followed by Apple’s App Tracking Transparency prompt. If you allow ATT, AdMob may use IDFA for more relevant ads and ad measurement. If you deny ATT, do not see the prompt, or your device settings prevent tracking requests, ads may still be requested without IDFA. For 13 to 17, OverLit configures Google Mobile Ads with teen treatment, Teen max content rating, publisher ad personalization disabled, and Google’s publisher first-party ID disabled. For 18 or older, OverLit may allow publisher ad personalization and Google’s publisher first-party ID where UMP consent, ATT, AdMob settings, device settings, and law allow it.

If you decline consent, opt out, or use device settings that restrict advertising technologies, ads may still appear as non-personalized, contextual, limited, or otherwise served according to Google/AdMob, Apple, and applicable law. Firebase Analytics collection starts disabled by default and is enabled only after the app-side legal gate is current. In Firebase/GA4 consent mode, Google ad storage, ad user data, and ad personalization signals remain denied; AdMob personalized ads and IDFA access are handled separately through Google UMP, Apple’s ATT prompt, device settings, Google/AdMob settings, and applicable law. If AdMob cannot load, OverLit may show a local PlanKept developer house ad instead, or a local Voice of Self house ad if you chose 18 or older.

You can manage choices through Google/AdMob consent and privacy flows shown in the app where available, including Privacy and cookie settings when AdMob requires that entry point, and through iOS privacy settings such as Apple personalized advertising settings where available. For local OverLit gameplay data, you can change app settings, use in-app reset options where available, or delete the app.

9. App Store Privacy Disclosures

Apple’s App Privacy labels use Apple-defined categories and may require disclosures that are broader or more conservative than a plain-language policy. The current OverLit App Store privacy disclosures are intended to reflect the AdMob, UMP, Firebase/GA4, IDFA-capable, and SKAdNetwork setup described above.

The relevant active AdMob-related categories include:

The current build is IDFA-capable while still using SKAdNetwork for aggregate install attribution. The App Store product-page preview may summarize Google/AdMob SDK disclosures as data used to track you, data linked to you, or data not linked to you depending on Apple’s current categories, the submitted binary, and Google’s current SDK privacy manifests.

Apple and App Store services are governed by Apple’s own policies, including Apple’s Privacy Policy and the Apple standard terms for apps.

10. Support Emails

If you email support or send feedback, we process your email address, message content, and any details you choose to include so we can understand the request and reply. If you use Copy Progress and paste that text into your message, we may receive your level progress, scores, stars, and related local gameplay details. The app itself does not require you to send a support or feedback email.

Support email: alekgameshelp2@gmail.com. Support page: https://alekjaltuszyk.xyz/apps/OverLit/support/.

We do not currently use support emails for marketing newsletters, customer-list uploads, or retargeting audiences for OverLit. If you want us to delete or correct support information you sent, contact us from the same email address when possible so we can verify the request.

11. Website Pages, Cookies, And Local Storage

The OverLit pages on alekjaltuszyk.xyz are mostly static and informational. They provide the app page, support instructions, this privacy policy, and the public app-ads.txt file. We do not currently add a website analytics service or advertising cookies to the OverLit pages, so this policy does not add a cookie banner for those pages.

Website hosting and delivery systems may still process ordinary technical information, such as IP address, browser type, requested URL, request time, and similar security or server metadata needed to deliver the site.

The app uses local on-device storage for gameplay, settings, unlocks, Full Version entitlement state, counters, and legal acceptance state. Google/AdMob and Apple may use identifiers, SDK storage, consent signals, or similar mobile technologies as part of advertising, privacy choices, app distribution, fraud prevention, and measurement. External websites, the App Store, or ad platforms you visit from an ad or link may use their own cookies, pixels, local storage, sessions, or similar technologies under their own policies.

12. Third-Party Services And Sharing

Depending on how you use OverLit, third parties may process information under their own terms:

We do not control those third parties’ privacy practices. Their policies explain how they handle information they collect or receive.

We may share or disclose information when reasonably necessary to operate the app, show and measure ads, provide support, maintain security, prevent fraud or abuse, comply with law, respond to valid legal requests, protect rights and safety, or transfer relevant records in connection with a merger, acquisition, reorganization, asset sale, or similar business transfer.

We do not sell support email lists or account lists to data brokers. Some privacy laws define certain ad SDK disclosures, ad measurement, or cross-context ad uses as a “sale,” “sharing,” or “targeted advertising,” whether or not IDFA is available. Where those laws apply, OverLit uses AdMob privacy messages and available privacy choices to support opt-out or consent choices.

OverLit does not use automated decision-making or profiling that produces legal or similarly significant effects for players. Ad networks may use automated systems to select, personalize, measure, limit, or prevent fraud in ads, subject to your consent, opt-out choices, device settings, and the ad providers’ own policies.

13. Children

OverLit is not directed to children under 13, children under 13 should not use OverLit, and we do not knowingly collect personal information from children under 13. OverLit asks new users to choose either 13 to 17 or 18 or older; the app does not provide an under-13 path. If you believe a child has sent us personal information through support or another channel, contact us so we can review and delete it where appropriate.

14. Data Retention

Local gameplay/settings data may remain on your device until you change it, reset it, delete the app, or clear the relevant local data through normal device or app behavior.

Local Full Version entitlement cache may remain on your device until the app refreshes StoreKit entitlement status, you reset or delete local app data, delete the app, or normal iOS backup, restore, purchase, refund, or device behavior changes it.

Support emails may be kept for as long as reasonably needed to answer the request, maintain support records, resolve disputes, comply with legal obligations, or protect our rights.

Google/AdMob, Firebase/GA4, Apple, and other third-party providers retain data according to their own policies.

15. Security

We use reasonable administrative and technical measures for the parts of OverLit and the OverLit website that we control. No app, website, network, device, or third-party service can be guaranteed to be perfectly secure. If you believe there is a privacy or security issue, contact us using the details below.

16. Privacy Rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or opt-out of certain sales, sharing, targeted advertising, or profiling. You may also have the right not to be discriminated against for exercising privacy rights.

Because OverLit does not have accounts or a custom backend, many gameplay records and the local Full Version entitlement cache are stored locally on your device. You can often control that local data by changing app settings, using in-app reset options where available, restoring purchases, or deleting the app. For purchase or platform data handled by Apple, or data handled by Google/AdMob, Meta/Instagram, TikTok, Google advertising platforms outside the app, or other third parties, use their privacy tools and contact routes.

For users in the EEA, United Kingdom, or Switzerland, Aleksander Jałtuszyk is the controller for personal data that we control directly. Depending on the context, the legal bases for processing may include consent, such as for ad privacy choices where required; performance of a contract, such as operating the app, support, legal acceptance, and local entitlement behavior; legitimate interests, such as security, fraud prevention, service reliability, basic support, app improvement, and local developer house ads; and legal obligation, such as compliance, records, or lawful requests. You may also have the right to lodge a complaint with a supervisory authority, including the Polish Personal Data Protection Office (UODO), the UK Information Commissioner’s Office (ICO), the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your local supervisory authority.

To make a request about information we control directly, contact alekgameshelp2@gmail.com. We may need information to verify the request and may be unable to fulfill requests about data we do not control or cannot reasonably identify.

17. International Processing

We are based in Poland. Third-party providers used for advertising, app distribution, platform services, support email, website hosting, external promotion, or measurement may process information in other countries. Those countries may have privacy laws different from where you live.

Where required for international transfers, we or the relevant providers may rely on adequacy decisions, Standard Contractual Clauses, the UK international data transfer addendum or equivalent UK safeguards, Swiss transfer safeguards, or another lawful transfer mechanism. Third-party providers may describe their own transfer safeguards in their privacy terms and data processing terms. You can contact us for more information about the transfer safeguards that apply to information we control directly.

18. Changes To This Policy

We may update this policy as OverLit changes, including if purchase behavior, advertising providers, consent flows, App Store disclosures, house ad behavior, or app features change. The effective date and version above show when this policy was last updated.

19. Contact

For privacy questions or requests, contact: