Effective date: October 19, 2026

Planet2x games are created and published by Markku Anttila. Markku Anttila is the data controller for the processing described in this policy.

Contact: support@planet2x.com

Lumen Passage for iOS

Lumen Passage does not require an account or login. It does not display advertising, use data for advertising personalization, sell personal data, or track users across apps or websites owned by other companies.

Analytics

Lumen Passage uses Google Firebase Analytics to understand how the game is used and to improve gameplay, stability, and store flows.

The analytics data may include:

• pseudonymous app-instance and device identifiers

• app launches, sessions, and product interactions

• gameplay events and Path usage

• App Store product, purchase-outcome, and entitlement events

• approximate country or region derived for analytics

• basic app, operating-system, and device information required by the analytics service

Lumen Passage does not request precise GPS location. Analytics data is not used for advertising or cross-company tracking.

The legal basis for this processing is the controller’s legitimate interest in operating, understanding, securing, and improving Lumen Passage.

Purchases

Purchases are processed by Apple through StoreKit and the App Store. Planet2x may process product identifiers, purchase outcomes, and entitlement status for app functionality and analytics. Planet2x does not receive your payment-card details or other payment credentials.

Capture Still and Photos

Capture Still works only when you choose to use it. With your permission, Lumen Passage saves the captured image locally to your Photos library. Planet2x does not upload the image.

Local app data

Lumen Passage stores settings, preferences, and game state locally on your device. This local data remains until it is changed, reset, or removed with the app, as applicable.

Service providers

Google provides Firebase Analytics, Google Analytics, and BigQuery services used for first-party analytics. Apple provides App Store, StoreKit, and Photos services. These providers process data under their own terms and privacy policies and may process data outside your country subject to their applicable safeguards.

Retention

Google Analytics data is retained according to the configured Google Analytics service settings and Google’s applicable policies.

Raw Lumen Passage analytics data exported to Planet2x BigQuery storage is retained for the lifetime of the game, with no automatic table expiration, to support long-term gameplay analysis and product improvement. Requests to exercise your data-protection rights are handled as described below.

Local app data remains on your device as described above.

Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to lodge a complaint with your local data-protection authority.

Because analytics identifiers are pseudonymous and Lumen Passage has no user accounts, Planet2x may need an app or device identifier to locate data associated with a request and may not always be able to connect analytics data to a named person.

To ask a privacy question or exercise your rights, contact:

support@planet2x.com

Lumen Passage for Android

This section describes the Google Play Android version of Lumen Passage, created and published by Markku Anttila under the Planet2x Creative Studio name. Markku Anttila is the data controller. Contact: support@planet2x.com. The game has no Studio account, Studio login or advertising. Core Play and Watch for every Path are free; other Play modes are optional one-time purchases. Ordinary community testing does not require a purchase.

Playing and local data. Gravity-sensor readings and temporary gameplay state stay on your device. Music and Tilt preferences, tutorial progress, the headphone reminder and confirmed ownership are saved privately on the device. Local purchase history is encrypted using Android Keystore and excluded from Android backup. Local review access for Google Play staff is also stored only on the device and does not create a purchase. Clearing storage or uninstalling removes this local data, but does not remove Google Play purchase records. This Android version has no Firebase Analytics or Crashlytics and sends no gameplay analytics or crash reports to Planet2x. It does not request location, contacts, microphone or camera permission.

Purchases and restoration. Google Play handles checkout under its own terms and privacy policy. Planet2x does not receive your payment-card details or Google account password. On startup or resume, and when checking purchases, the app connects to Google Play and the Studio verification service to check availability and ownership. Purchase checks send product identifiers and Google purchase tokens for verification, acknowledgement, restoration and refund handling. Google supplies the purchase status and related transaction information. Protected purchase evidence is retained to recover interrupted processing and reconcile later refunds. Purchase tokens are sensitive evidence; do not send them by email.

Play Integrity. Google Play Integrity processes the app package, version and signing identity, Google Play licensing status, device-integrity information and a request-binding hash to protect the purchase service. Planet2x receives and checks the resulting verdicts. Availability checks can happen even when you have not bought a Path. This configuration does not enable optional app-access-risk, Play Protect verdict or device-recall features. It does not use these checks to track you across apps or websites.

Google Billing diagnostics. The Google Play Billing library automatically sends Google technical diagnostics about billing operations, results, errors and timing. These can include the app and library versions, a randomly generated billing-session identifier, device model, manufacturer, Android build and memory information, network type, configured language and country, time-zone offset and SIM operator codes. This can happen for free users when the app checks the billing connection. These diagnostics help operate and improve billing reliability; they are separate from gameplay analytics. The app has no setting to turn off this SDK diagnostic collection. Google handles its service data under its applicable terms and privacy policy.

Providers, security and international processing. Planet2x uses Google Cloud services for purchase verification, restricted storage and background recovery. The configured regional services and database are in Belgium (europe-west1). Connections use HTTPS; stored purchase tokens are encrypted and the verifier and database have restricted access. The internet-facing tester service requires Play Integrity checks and the game contains no service credentials. Network information, including IP addresses, is processed to serve requests. Google, Forward Email and Gmail / Google Workspace may process information outside your country, including outside the EEA, under their applicable data-protection terms and transfer safeguards, such as standard contractual clauses where applicable. The selected Cloud region does not mean all provider processing occurs only in Belgium. Planet2x does not sell personal data or use purchase evidence for advertising or player profiling.

Retention. Local data remains until you clear it or remove the app. Server purchase evidence has no automatic expiry: it is kept while needed to honour the purchased access and its restoration, reconcile refunds or resolve interrupted processing. We review identified records when handling a privacy request and remove information that is no longer needed, subject to unresolved transactions, legal claims or applicable retention duties. Unacknowledged purchase notifications have 24-hour retention; acknowledged messages are not retained by that subscription. Default platform logs are retained for 30 days and required audit logs for 400 days. The tester service excludes routine automatic request metadata from project request logs. Studio diagnostic messages use fixed categories without raw purchase tokens, full requests or payment details. These periods do not specify Google’s separate Play, Integrity or Billing retention.

Support and privacy requests

For support and privacy requests, email support@planet2x.com. For community test feedback, use android-testing@planet2x.com. Messages are forwarded through Forward Email to Gmail / Google Workspace and used to handle your request. Ordinary support and test-feedback correspondence is deleted no later than 12 months after the matter is closed. Correspondence needed for an unresolved purchase, dispute or applicable legal obligation is kept until that need ends. This is a manual retention practice, not an automatic mailbox deletion setting.

To request access, correction or deletion, email support@planet2x.com with the subject “Lumen Passage Android — privacy request” and describe what you want us to do. No game account is required. For purchase-related requests, provide the Google Play order number, purchase date and Path name, with unrelated receipt details hidden. We may ask for reasonable information to verify the request and locate the record; do not send passwords, full payment-card details or purchase tokens. Requests are handled manually and normally answered within one month; we explain any lawful extension, retained information or inability to identify a record. Deleting Studio-held data does not cancel a Google Play purchase or erase Google’s records. Continued use with an existing purchase may create necessary verification records again. We explain any practical effect on restoration before acting.

Legal bases and your rights. Planet2x processes purchase information to perform the purchase contract and provide purchased access and restoration. Security, fraud prevention, technical service diagnostics and responding to support requests are based on legitimate interests in operating a secure, reliable game and helping users; applicable legal obligations may require limited retention. Subject to applicable law, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may complain to your local data-protection authority or the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi). Credits links open the Planet2x website in your browser, where website and independent provider privacy practices apply.

Other Planet2x games

Big and Little: Magic Journey does not use accounts, analytics, advertising, or cross-app tracking.

Liquid Path processes limited pseudonymous in-game event data to improve gameplay and stability. It does not use this data for advertising or cross-app tracking.

Changes

This policy may be updated when Planet2x games, services, or legal requirements change. The effective date above identifies the current version.