The fine print

Privacy Policy

Effective date: October 1, 2026 · Last updated: November 5, 2026

This Privacy Policy explains how Magic Man Labs (“we”, “us”, “our”) collects, uses and shares information when you play any of our games for Android (each a “Game”, together the “Games”). It applies to every Game we publish on Google Play unless that Game’s store listing links to a different policy.

By installing or playing a Game, you agree to the practices described here. If you do not agree, please do not use the Games.

1. Information we collect

Playing offline sends nothing to us. We only receive information when you play online, link a Google account, or choose to send us diagnostic logs. Some Games also show ads, which are served by Google AdMob (see “Ads” below).

Online play data

When you play online, the Game connects to our game server and stores what it needs for online play, such as your account ID, in-game display name, progress, match history and settings. Like any internet connection, this also reveals your IP address to our server.

Google account linking (optional)

If you tap “Link Google account”, the Game signs you in through Google Play Games Services so you can keep your account when you move to a new phone. Google then shares your Play Games player ID, display name and profile picture with us. We never see your Google password, and we don’t see your email address unless you sign in with it, as described for Deduxion below. Google’s handling of your data is covered by the Google Privacy Policy.

Diagnostic logs (optional)

If you choose to send diagnostic logs, for example when reporting a problem, we receive technical information such as your device model, Android version, app version and error details. Logs are never sent automatically.

Deduxion: accounts, AI dialogue and purchases

Deduxion needs an account and an internet connection, because its cases are played on our server.

• Your account. You sign in with Google Play Games, your Google account, or an email address and password, through Google’s Firebase Authentication. We receive an account ID and, for Google or email sign-in, your email address. We never see your password. You also choose a codename, which is shown on leaderboards.
• Your questions. The questions you type to suspects, your searches, notes and accusations are sent to our server, which uses AI models to write the suspects’ replies and judge your moves. To do this they are sent to Google Cloud’s Vertex AI (which runs Anthropic’s Claude models) and to TypeSafe, which process them on our behalf to produce a reply. Don’t type personal information into the game. AI replies can be wrong or surprising, and they are fiction.
• Your progress. We store your saved and finished cases, scores, daily question allowance, question credits and the cases you have unlocked.
• Purchases. Question packs and cases are bought through Google Play Billing. Google handles your payment details, and we never see them. We receive the product, order number and purchase token so we can check the purchase with Google and add what you bought. We also record each rewarded ad you watch, so it pays out once.

Ads (Games that show ads)

Some Games, such as Canopy and Deduxion, show ads served by Google AdMob. When an ad is requested, the Google Mobile Ads SDK in the Game sends Google information such as your device’s advertising ID, your IP address (from which Google can estimate your approximate location), device and app information, how you interact with ads, and crash and performance data. Google uses this to show ads, measure them, and prevent fraud. In the European Economic Area, the UK and Switzerland, the Game asks for your consent through Google’s consent form before ads are personalized, and you can change your choice at any time with “Ad privacy choices” in the Game’s settings. Elsewhere, you can reset or delete your advertising ID, or opt out of personalized ads, in your Android device’s settings. Google’s use of this data is covered by the Google Privacy Policy and How Google uses information from sites or apps that use its services. We do not receive this information ourselves.

What we don’t collect

Apart from the ads described above, our Games do not use analytics or tracking tools. We do not collect your precise location, contacts, photos, files or microphone or camera data.

2. Android permissions

• Internet (INTERNET): used only to play online, link your Google account, send diagnostic logs when you choose to, and load ads in Games that show them. It does not give us access to anything else on your device.
• Advertising ID (AD_ID): in Games that show ads, lets the Google Mobile Ads SDK read your device’s resettable advertising ID to serve and measure ads.

If a specific Game needs any other permission, its Google Play listing will say so and the Game will ask before using it.

3. How we use information

• To run online play and keep your account and progress
• To restore your account on a new phone if you linked a Google account
• To fix problems you report and prevent cheating
• To respond when you contact us for support
• To comply with legal obligations

We do not sell your personal information. Ads in our Games are chosen and served by Google AdMob, as described in section 1.

4. Third-party services

We run our own game server (built on the open-source Nakama server) and use these services to provide the Games:

• Google Play Games Services: Google account linking, only if you choose it
• Google Cloud (Cloud Run): hosts our game server, which stores online play data and any diagnostic logs you send
• Neon: hosts our game server’s database
• Google Firebase Authentication and Cloud Firestore: Deduxion’s sign-in, and the database that stores Deduxion accounts and progress
• Google Cloud Vertex AI, running Anthropic’s Claude models: writes the suspects’ replies in Deduxion
• TypeSafe: judges your questions and moves in Deduxion
• Google Play Billing: in-app purchases
• Google AdMob: serves ads in Games that show them, and runs the consent form where it is required

Google Cloud, Firebase, Neon and TypeSafe process this data on our behalf, only to provide our service.

5. Sharing

We share information only:

• With the hosting and AI providers listed above, which process it on our behalf
• In Games that show ads, the Google Mobile Ads SDK sends the information described under “Ads” directly to Google
• When required by law, or to protect the rights and safety of our players and us
• As part of a merger, acquisition or sale of assets, in which case this policy continues to apply

In online play, your in-game display name may be visible to other players.

6. Data retention

We keep online play data for as long as your account exists. We keep diagnostic logs only as long as we need them to fix the problem they were sent for. When you ask us to delete your data, we delete it within 30 days, except where we must keep it for legal reasons. A record of each purchase and rewarded ad (product, order number and date) is kept for up to 7 years for tax, refund and fraud checks, no longer linked to a profile once the account is deleted.

7. Deleting your data

You can ask us to delete your account and the data associated with it at any time by emailing support@magicmanlabs.com with the subject “Delete my data”, the name of the Game and your in-game display name so we can find your account.

In Deduxion, you can delete your account yourself: on Case Files, tap your initial at the top right, then Delete account. This deletes your sign-in, codename, games, scores, credits and unlocked cases straight away. Without the app, follow the steps at deduxion-api.magicmanlabs.com/delete-account.

If you linked a Google account, you can also disconnect the Game at any time in your Google account settings under Third-party connections.

8. Security

Data sent between the Games and our server is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your information.

9. Children

Our Games are not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

10. Your rights

Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, delete or export your personal information, or to object to how we use it. To exercise these rights, email us at support@magicmanlabs.com. You may also complain to your local data protection authority.

11. International transfers

We are based in the United States. Our service providers may process information in other countries. Where required, we rely on appropriate safeguards for these transfers.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the date at the top. Significant changes will also be announced in the Games or on our website.

13. Contact us

Magic Man Labs
Email: support@magicmanlabs.com