Last updated: 2026-09-27
Decade Drop is made by ToDeX Interactive V.O.F., (Dutch Chamber of Commerce / KvK 42185631). We are the data controller for any personal data processed through Decade Drop, as described in this policy. You can reach us at info@todex-interactive.com.
Your settings, daily-challenge streak and games played while signed out are stored on your device. When you sign in, games you played while signed out are added to your account.
Signing in is optional. If you create an account, you can sign in with: One-time code sent to your email, Sign in with Apple, Sign in with Google. We never ask for or store a password.
What other players can see: Players in an online room with you can see your display name, score and timeline for that game.
Only if you allow it. The first time you open Decade Drop, we ask whether you want to share analytics. Until you choose "Allow", nothing is sent. You can change your choice at any time in the app's Settings.
With your permission, we use PostHog, hosted in the EU, to understand how Decade Drop is used and to find bugs. PostHog receives: the screens you view and actions you take in the app (such as starting or finishing a game), app open/close events, crash and error reports, and basic device information (device model, operating system, app version, language). Events are linked to a random identifier stored on your device; if you're signed in, they are also linked to your account ID (never your email address).
Decade Drop uses Google AdMob to show ads (unless you've bought an ad-free option). To deliver and measure ads, AdMob and its ad-network partners may collect advertising identifiers — the Google Advertising ID on Android and the Identifier for Advertisers (IDFA) on iOS — along with device information (such as device type, operating system, and approximate location derived from your IP address) and ad-interaction data, under Google's own policies. We only receive aggregated reports on ad performance.
In the EEA, the UK, and Switzerland, you are asked for consent before personalised ads are shown; if you decline, you only see non-personalised ads. Decade Drop does not request App Tracking Transparency permission on iOS, so the IDFA is not used. You can change your choice at any time via your device's ad settings.
Purchases are handled by the Apple App Store or Google Play — we never see your payment details. We use RevenueCat to verify purchases and restore them on your devices. RevenueCat receives your purchase receipts and a random app user ID (or your account ID, if you're signed in).
Decade Drop doesn't ask for any device permissions.
Where the GDPR applies, we rely on the following legal bases:
These companies process data for Decade Drop, each only for the purpose listed:
We do not sell or rent your data. Data is only shared with the service providers listed above, with other players as described above, or where we are required to by law.
Our own servers and databases are hosted in the European Union. Some of the service providers listed above process data outside the European Economic Area, including in the United States. Where that happens, transfers are protected by an adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.
We use reasonable technical and organizational measures to protect any data we hold, including encrypted connections (HTTPS) for all traffic between the app and our servers. Only our own team can access stored data, and only when needed for support, abuse reports or security. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Delete your account at any time from your profile in the app. This permanently removes your account, profile, stats, game history, purchases linked to the account and achievements, and disconnects Sign in with Apple. For purchases made without an account, email us.
Decade Drop is not directed at children under 13, and we do not knowingly collect personal information from children under 13. In the EEA, children under 16 need permission from a parent or guardian before giving consent to any consent-based processing, such as personalised ads. If you believe a child has provided us with personal data, please contact us and we will delete it.
Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Users in the UK, California, and other regions may have similar rights under local law. You can exercise these rights for your Decade Drop account by contacting us below, or delete your account directly in the app.
You also have the right to lodge a complaint with a data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this policy? Email us at info@todex-interactive.com, or for app support visit our Support page (support: info@todex-interactive.com).