App privacy policy
Potion Pour: Moonseal
The company behind this policy
The Tale Company Limited (บริษัท เดอะ เทล จำกัด), company number 0105568201225, publishes Potion Pour: Moonseal. We are an independent studio based in Bangkok, Thailand. This notice belongs to Android package alchemy.mauvecrucible.moonseal, release version code 17. It is effective 8 October 2026 and is policy version 1. We prepared it from the signed release, the matching Google Play record and the Data Safety answers reviewed for that release. We use “we” for the company and “you” for the person playing the game or writing to support. The company website has its own notice; this page is the more specific explanation for the installed game. If a later release changes what the game sends, stores or requests, we will update this page with the new release facts.
Apps this policy covers
This page covers one application only: Potion Pour: Moonseal, package alchemy.mauvecrucible.moonseal. The game is listed for players aged 13 and over and has no account, advertising or in-app purchase feature in the reviewed build. A separate company notice covers thetalecompany.com and email contact. Other titles, if added to our catalogue, receive their own pages because a different package can have a different permission set or service relationship. The package string on this page is deliberately exact: it lets a player and a reviewer distinguish this notice from a similarly named application. The page applies to the release identified above, not to an editor scene, prototype or unreleased configuration.
Information we collect
Our reviewed Data Safety answer says that the game does not collect personal data. We do not receive a player profile, contact list, precise location, photo library, advertising identifier or payment details from this release. Progress and preferences can exist inside the app on the device so that a player can continue a session; that local state is not transmitted to us. The release record also says that no user data is shared with another company and that data sent from the app is encrypted in transit. Because the game has no account sign-in, there is no account record for us to match to a person. If you email support, that is a separate voluntary contact: we receive the address, message and any attachment you choose to send. We use those details to answer the message and keep a proportionate support record.
How we use information
We use the information a player chooses to send to support for the narrow purpose of answering the question, diagnosing a reported fault and recording the outcome. We may use a non-identifying technical observation to confirm that a release behaves consistently, but we do not turn gameplay into an advertising profile. We do not sell player information. We do not ask for a password or a payment-card number in order to investigate a puzzle or a crash. If a valid legal request requires a limited disclosure, we assess the request and provide only what the law requires. Access to support correspondence is limited to people who need it to perform support, protect the service or meet a legal obligation. We do not reuse a message for an unrelated marketing purpose. The local save data described in the previous section stays under the player's device controls.
Third-party services and SDKs
The signed Android build contains the Unity engine runtime. Unity's privacy information is available at unity.com/legal/privacy-policy. We inspected the built release rather than assuming that every library available to a Unity project was active in the app. The reviewed inventory does not include an advertising network, analytics package, attribution tool, login provider or crash-reporting SDK. Google Play is the distribution channel; Google may handle store, download, device and account information under Google's own notices. Opening a store or support link takes you to a separate service with separate rules. We will name a later service here if we add one to a release and will align its purpose with the app's store disclosure before distribution.
Data retention and deletion
The game has no account and therefore has no remote account record for us to delete. A player can clear local progress through the game's reset option, clear the app's storage in Android settings or uninstall the app. The reviewed Data Safety answers do not include a remote deletion-request feature. A support email is kept while it is needed to answer the issue, understand a recurring fault, resolve a dispute or meet a legal duty. When that reason ends, we remove or anonymise the message. A backup copy can remain briefly while the normal backup cycle completes, and a security record may need to remain for a limited investigation. If a law requires a narrow record to be retained, we will keep only that record and explain the reason when we respond to a deletion request. We do not retain local game state on our servers.
Children
Potion Pour: Moonseal is intended for people aged 13 and over and is not directed to children under 13. The store note for this release describes a PEGI 3 puzzle game with no violence, gambling or user-generated content; the audience statement on this page remains the controlling age position for our policy. We do not knowingly collect personal data from a child through the game, and the release does not ask a player to create an account. A parent or guardian who believes a child has written to support can contact [email protected]. We will review a credible report, remove information where the law permits and keep only the minimum record needed to document the action. Parents can also use the age rating, family controls and device settings when deciding whether the game is suitable.
Permissions
The inspected build declares two Android permissions. android.permission.VIBRATE enables optional haptic feedback when the game uses it. alchemy.mauvecrucible.moonseal.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION is a package-scoped declaration used by the Android runtime for an internal receiver; it does not give the game access to contacts, a camera or a microphone. We read these names from the signed artifact and describe the player-facing purpose where one exists. A system label can be broader than the small operation that needs it, so a permission is not treated as a licence to collect unrelated information. If a future release adds a sensitive capability, we will explain the reason at the point of use, review the built permission inventory and update this section and the store answers.
Your rights
Thailand's Personal Data Protection Act B.E. 2562 (PDPA) can give you rights to ask whether we process personal data, request access or correction, seek deletion or restriction, object to a processing purpose, withdraw consent where consent was used and complain to a regulator. The available right depends on the facts and any legal exception. For people in the European Economic Area or the United Kingdom, GDPR or UK GDPR rights may also apply to a particular processing activity. Send a request to [email protected] with the game name and “Privacy enquiry” in the subject. We may ask a short verification question so that we do not disclose a message to the wrong person; we will not request an unrelated identity document. We aim to answer within the period required by the applicable law. You may contact the Thai Personal Data Protection Committee at pdpc.or.th or the supervisory authority where you live.
International transfers
Our company is located in Thailand. A support message can pass through an email or hosting provider whose systems are in another country. When that happens, we use a lawful transfer mechanism and security safeguards required by the law that applies to the message. We consider the provider's role, the destination, contractual commitments and the people who can access the record. We do not send local gameplay state to a foreign service because the reviewed app keeps that state on the device. A link to Google Play or Unity can take you to a service with its own international arrangements; those arrangements are described in that provider's notice. We limit an international transfer to the information needed for the support or security task and do not ask you to include unrelated personal information.
Changes to this policy
We will revise this page when the app's data position, audience, permissions, SDK inventory or support process changes. The effective date and version at the top identify the edition a player is reading. This first edition records the facts for version code 17 and was published on 8 October 2026. A material change will be visible on this stable URL before or when the related release is distributed where that timing is required. We may preserve an older copy for legal or release-history reasons, but we will mark it as an earlier edition so it cannot be mistaken for the current notice. A small correction to a link or spelling may be made without changing the policy position; a change to what the game collects or requests will be described rather than hidden in a minor edit.
Contact us
For privacy, rights or technical support, email [email protected]. Please identify Potion Pour: Moonseal, package alchemy.mauvecrucible.moonseal, the version code if known, your device model and a short description of the issue. Do not send passwords, complete device backups, payment-card details or unrelated identity documents. The controller for this notice is The Tale Company Limited (บริษัท เดอะ เทล จำกัด), company number 0105568201225, 75/8 Grand Crystal, Pradit-Manutham Road, Nuanchan, Buengkum, Bangkok 10230, Thailand. A useful support message tells us what you saw, what you expected and whether the problem can be repeated. We may reply from our company address or through a provider acting for us. We will keep the reply focused on the request and will point you to the relevant regulator if that is the most useful next step.