Wisplight
Wisplight privacy policy
Last updated: 28 October 2026
You can play Wisplight as a guest, without a name, email or phone number. Signing in with Apple or Google is up to you. Your exact position never leaves your phone. There are no ads, and nothing tracks you across other apps.
Who we are
Wisplight is made by Bluedeer IT AB, Olle Edfeldts väg 8, 243 93 Höör, Sweden (company reg. no. 559337-9562, VAT no. SE559337956201). We decide how your data is used, so we are the "controller" under the EU's data protection law (GDPR). Questions: support@wisplight.se.
What we collect, why, and for how long
When you first open the game, it creates an anonymous player account. Everything below is tied to that account, not to you by name. If you sign in with Apple or Google, that account is linked to your Apple ID or Google account so you can get it back on another phone (see "Signing in").
| What | When | Why | How long we keep it |
|---|---|---|---|
| Anonymous player ID, and a random code that stands in for you on leaderboards | First time you open the game | To keep your game between sessions | Until you delete your data |
| The area where you stand (about 150 m) | When you start catching a ghost | To check that you are near the ghost and not travelling too fast | Each catch attempt: deleted automatically within 2 days. Your latest area: until the next attempt replaces it, or you delete your data |
| Catch history: each ghost you caught, the area where it appeared (about 1 km) and when | When you catch a ghost | So a ghost can't be caught twice, for your Spirit Pouch, and for the free charge on your first catch in a new area each day | Until you delete your data |
| Game progress: nickname, Spirit Pouch, score, Halloween Night score, level and experience points, battery, Super Vacuum, items and their timers, game mode, the colour of your vacuum, country | While you play | To run the game. Your country comes from the area of your first catch that scores points, and stays fixed for the season | Until you delete your data |
| Your own nickname, if you type one, and when you last changed it | When you set it | To show it to other players. It is checked against lists of words that aren't allowed, and no two players can have the same one | Until you change it back, it is reset after reports, or you delete your data |
| Items you pick up on the radar: the item and when, and the area where you stand (about 150 m) | When you pick up an item | To check that you are near the item, so each item is picked up once, and for the daily limit | The pickup: deleted automatically within 2 days. Your latest area: until the next pickup or catch replaces it |
| Map files for the region you are in (tens of kilometres across), which the app fetches through our servers | When the radar needs the walk map where you are | To move ghosts to places the public can walk, and to limit how many files one player can fetch a day | We don't record which files you fetch, only how many on the latest day you played: until you delete your data |
| Reports of a nickname: who reported it, the name and when | When you report a name, or someone reports yours | So a person can review rude names or real names, and to reset a name after enough reports | Each report: 90 days. The count of reports on one name: a year after the last report |
| Competitive mode: who caught which ghost first (your leaderboard code and nickname) | When you catch a ghost in competitive mode | So the ghost disappears for other competitive players, and the ones who were after it see who got it | 7 hours |
| Sign-in with Apple or Google, only if you choose it: Apple gives us a random ID for your Apple ID; Google also gives your email address, name and a link to your profile picture | When you sign in | To bring your game back on another phone or after a reinstall. We don't use your email, name or picture for anything else, and never show them | Until you delete your data |
| Your phone's language (one of the game's five) | Each time you open the game | To pick the language of your nickname | Until you delete your data |
| Fair-play signals: whether your phone reported a fake location, how long a catch took, how well you aimed, whether the app could be verified as genuine | When you catch a ghost | To keep the leaderboards fair | Each catch attempt: within 2 days. A fair-play counter and any leaderboard ban: until you delete your data |
| Counters for the daily limits, such as catches that scored today and nickname changes, and the day you last opened the game | While you play | To apply the game's limits, and to delete accounts nobody uses | Until you delete your data |
| Purchases: product, store, transaction number, date, whether it was a test purchase | When you buy something | To give you what you bought, and to restore the Super Vacuum on a new install | 2 years from the purchase, then deleted automatically. If you delete your data first, we remove everything that links the record to your player account |
| Recovery code, only if you make one | When you make one | To bring your game back after a reinstall | Stored only in scrambled (hashed) form. A used code is marked as used and stops working. Kept until you make a new code or delete your data |
| Crash and error reports: phone model, system and app version, what the app was doing, a random ID for this installation of the app | When the app crashes or hits an unexpected error, unless you turn this off in Settings | To find and fix bugs. Reports never carry your player ID | 90 days |
| Server logs: requests to our servers with your IP address. A few also contain your player ID | When the app talks to our servers | Security and fixing problems | 30 days |
If you don't open the game for 12 months, we delete your account and its data automatically, just as "Delete my data" does.
What stays on your phone
- Your exact position. The game works out where ghosts are on your phone. Only the 150 m area is ever sent, and only when you start a catch.
- The camera picture. It shows ghosts around you. It is never recorded or sent to us.
- Photos of your catches. They go only where you save or share them.
- Your settings: sound, vibration, reduced flashing, language.
- Catches made without signal. They wait on your phone until the connection is back.
- Age range from Apple or Google, where we ask for it (see "Children").
- Players you hide from your leaderboards, and whether you chose to play as a guest.
- Your player card picture. It is made on your phone and goes only where you share it.
What we never do
- No ads, no advertising ID, no tracking across other apps or websites.
- No analytics tools such as Firebase Analytics. We use only the game data listed above, to run the game and keep it fair, and count totals from it, such as catches per day.
- No selling or renting of data to anyone.
- No chat and no messages between players. The only thing players can type is a nickname, and it is filtered and can be reported.
The leaderboards and player cards
The top 100 of each leaderboard show a nickname, a level, a score, a country and a random code to every player. The code is not your player ID. Tapping a row shows that player's card: nickname, level, country, how many ghosts they have caught, their Spirit Pouch, game mode and vacuum colour. Normal and competitive mode have separate leaderboards. If your phone reports a fake location three times, your score is hidden from the leaderboards at once, until a person has checked it; if it was a mistake, your score comes back. We also look at the top players each day, and a person may hide a score that looks like cheating. Scores from test purchases are never shown. A hidden player can still play and see their points. Write to us if you think this happened by mistake, and a person will look at it.
Your own nickname, reports and hiding players
You can keep a nickname made for you, or type your own. Never use your real name. Every name is checked against lists of rude words in all five of the game's languages. Any player can report a name they find rude or that looks like a real name; a person at Bluedeer reviews reports. If enough established players report the same name, it goes back to a name made for you, the reported name is blocked for everyone, and you can't type a new one for a week. You can also hide a player: their name then shows as "Hidden player" on your phone only.
Signing in
Signing in is optional. "Continue with Apple" or "Continue with Google" links your player to your Apple ID or Google account, so the same player comes back after a reinstall or on a new phone. Apple shares only a random ID with us, never your name or email. Google shares your email address, name and a link to your profile picture with our account service (Firebase Authentication); we keep them only because the sign-in needs them and never use them for anything else. Signing out leaves your player linked to that account and starts a new guest on the phone. You can still play as a guest and use a recovery code instead.
Map data
The walk map, which moves ghosts to places the public can walk, is made from OpenStreetMap data, © OpenStreetMap contributors, available under the Open Database License (ODbL). The walk map is available under the ODbL too: write to support@wisplight.se for a copy of it, or of how it is made. OpenStreetMap never receives your data: the app gets the map from our servers.
Who helps us run the game
| Company | What they do for us | Where |
|---|---|---|
| Google (Firebase and Google Cloud) | Player accounts, game database, servers and their logs, game settings, crash reports, checking that the app is genuine (App Check). Game settings and crash reports use a random ID for this installation of the app | Game database and servers in Belgium. Accounts, crash reports and logs may also be processed in the USA |
| RevenueCat, Inc. | Handles purchases and restores them. At every app start it receives your player ID, your IP address, your store country and basic phone details such as system and app version; when you buy, your purchases. No advertising IDs | USA |
| Apple and Google (the app stores) | Take your payment; we never see your card details. Help confirm that the app is genuine (App Attest, Play Integrity) | Their own privacy policies apply |
| Apple and Google (sign-in, if you choose it) | Confirm who you are when you continue with Apple or Google | Their own privacy policies apply |
When data goes to the USA, it is protected by the EU–US Data Privacy Framework or the EU's standard contractual clauses. On Android, Wisplight runs on Google Play Services for AR (ARCore), which is provided by Google LLC and governed by the Google Privacy Policy.
Our legal grounds (GDPR)
- To provide the game you asked for (contract): your account, progress, leaderboards, player card, sign-in if you choose it, and purchases.
- Our legitimate interest: fair play, security, keeping nicknames safe (filters and reports), crash reports (you can turn them off) and the unlinked purchase records we keep after deletion.
Children
Wisplight is for players aged 13 and up, and it is not directed at children under 13. We don't ask for names, contact details or photos, so we can't tell who is playing. Google shares an email address, name and profile picture link only if a player chooses to sign in with Google. Nicknames are filtered and can be reported, and the game tells players never to use their real name. In some countries (now the USA and Brazil), the app may ask Apple or Google for your age range. That answer stays on your phone. It is used only to block purchases by a minor whose parent or guardian has not agreed.
Your rights
You can ask to see, correct, export or delete your data. You can also object to how we use it, or ask us to limit it.
- Delete everything right away: Settings → Delete my data.
- Anything else: write to support@wisplight.se. We don't know who you are, so send your recovery code, or the email address of the Google account you signed in with: that is how we find your account. Without either, we can't tell which account is yours.
- Complaints: you can contact Sweden's data protection authority, IMY (imy.se), or the authority where you live.
What "Delete my data" keeps
"Delete my data" removes your account, progress, catch history, leaderboard entry, player card, nickname, the reports you sent or got, recovery code, your sign-in link to Apple or Google and your customer record at RevenueCat at once. If you signed in with Apple, Apple asks you to confirm once more, and we tell Apple to remove Wisplight from your Apple ID. Leaderboards drop you at once, including the final ones after the season ends. A nickname that was blocked after reports stays blocked for everyone, as a word, without any link to you. Four things remain, none of them linked to your player account:
- Purchase records (store, transaction number, product, battery charges, dates of credit and refund), so a purchase is never credited twice and refund fraud can be stopped. Deleted 2 years after the purchase.
- Purchase event markers from RevenueCat (the event's number, type and arrival time), so an event is handled once. Deleted after 90 days.
- Server logs, which can include your IP address and your old player ID. Deleted after 30 days.
- Crash and error reports, which never carry your player ID. Deleted after 90 days.
More on deleting: delete your Wisplight data.
Security
All data is encrypted on its way between your phone and our servers. The app can read only your own player data and the public leaderboards. Only two people at Bluedeer can reach the game's data, each with their own login.
Changes
If we change this policy, we update it here and change the date at the top. If a change matters for how your data is used, we will also tell you in the app.
Contact
Bluedeer IT AB, Olle Edfeldts väg 8, 243 93 Höör, Sweden (559337-9562) · support@wisplight.se