ExoLab Blast — Privacy Policy

Published by Kestrel Publishing · Last updated 8 October 2026 · Applies to the ExoLab Blast mobile game for Android and iOS (com.kestrelpublishing.exolab)

The short version

1. Who we are

ExoLab Blast is published by Kestrel Publishing (“we”, “us”), United Kingdom. For the purposes of UK and EU data protection law, we are the data controller for the limited processing described in this policy.

Contact for privacy enquiries: info@kestrelpublishing.co.uk

2. What this policy covers

This policy covers the ExoLab Blast game app on Android and iOS. You can also open it from inside the game, under Settings → Privacy policy. It does not cover the app stores themselves: Google Play and the Apple App Store each collect their own information when you download an app, under their own policies.

3. Information stored on your device

ExoLab Blast saves a small amount of information locally so the game remembers your progress between sessions. It is not sent to us, and we cannot access it. If you use your phone's own backup (iCloud on iPhone, or Google backup on Android), that backup may include this information. Backups are held by Apple or Google under your account and their terms; we cannot access them either.

WhatWhy
Credits, Research XP and Lab Level for each of the three Labs, which Labs are open, and how many runs you have completed in each Your progress in the game
Your harbour research order: which Lab it is for, how many Samples it has received, and your last delivery receipt So an order you have accepted keeps its progress
Your best runs in each Lab Kept as a personal record of your runs
Which guides, explanations and the opening campus tour you have already seen So each one is shown once, not every time
Your Promenade Café loyalty card: how many coffees you have ordered, the last one and when, and how many free drinks you have claimed For the loyalty card on the island
Your settings: sound, music, haptics, reduced motion, larger menu text, view controls and world lighting So the game starts the way you left it
A backup copy of your progress, kept only when an update changes how progress is saved So a faulty update could be undone without losing your progress

Google's consent software also records your answer to the ad personalisation question on your device, so that you are not asked again every time you open the game.

The game has no reset option. Uninstalling the app removes everything above from your device, although a copy may remain in your phone's backup until that backup is replaced or deleted. On Android you can also clear it by going to Settings → Apps → ExoLab Blast → Storage and choosing Clear storage. The exact path varies by device.

The island's Automatic world lighting follows the clock on your device. It does not use your location.

4. Information collected for advertising

ExoLab Blast is free and is funded by advertising. Ads are served by Google AdMob, and the game has one ad placement: a full-screen ad between runs. When an ad is requested, Google and its ad technology partners may collect and process:

On iPhone

ExoLab Blast never shows Apple's App Tracking Transparency prompt, because it never asks for permission to track you. As a result, the Identifier for Advertisers (IDFA) is not available to the game or to Google, and ads on iPhone are not personalised using it. Apple's SKAdNetwork may be used to measure whether an ad led to an app being installed. Apple designed that measurement not to identify you.

We do not receive any of this information in a form that identifies you. All we see is aggregate reporting: how many ads were shown and what they earned.

Google's handling of this data is governed by the Google Privacy Policy and by How Google uses information from sites or apps that use our services. Google publishes a current list of its ad technology providers here.

Permissions the app requests, and why

ExoLab Blast asks for no permission that shows you a prompt. On Android, the app declares the following:

PermissionReason
Internet / network stateTo fetch ads. The game itself works offline.
VibrateFor the game's haptic feedback, which you can switch off in Settings.
Advertising IDUsed by AdMob to limit repeat ads and, with your consent, to personalise them.
Privacy Sandbox (ad ID, attribution, topics)Android's newer, more private advertising APIs, used by the Google Mobile Ads SDK.
Wake lock / foreground serviceRequested by the Google Mobile Ads SDK so an ad is not interrupted while it is shown.

5. What we do not do

6. Our legal bases (UK and EU GDPR)

ProcessingLegal basis
Personalised advertising Consent, collected through the consent prompt shown when you first open the game, and withdrawable at any time.
Non-personalised advertising, and preventing ad fraud Legitimate interests: funding a free game and protecting against fraudulent or invalid ad activity.
Progress and settings held on your device No processing by us. The data is not sent to us.

7. Your choices

Ad personalisation

Where the law requires it, such as in the UK, the EEA and Switzerland, ExoLab Blast shows a consent prompt, provided by Google's User Messaging Platform, before requesting any ad. You can reopen it and change your answer at any time from Settings → Ad privacy choices inside the game. That row appears only in regions where a choice applies. A changed answer applies from the next ad request onwards.

On Android

Open Settings → Privacy → Ads (on some devices Settings → Google → Ads) to delete or reset your advertising ID, or to opt out of ad personalisation entirely.

On iOS

Nothing needs changing. ExoLab Blast never asks to track you, so it does not appear in Settings → Privacy & Security → Tracking.

None of these choices affects the game. Every Lab and feature works the same either way; declining only makes the ads you see less relevant.

8. Your rights

If you are in the UK or the EEA, you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time.

There is an important practical limit. ExoLab Blast holds no account and no identifier of its own, so we usually have no way to find data relating to a particular person, and no way to check that a request comes from the person it concerns. In most cases the fastest route is to exercise your rights directly with Google, which holds the advertising data. See the Google Privacy Policy linked above. We will help where we can; contact us at the address in section 1.

You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA it is the authority for your country of residence.

If you live in the United States

Some US states, including California, give you rights over personal information collected about you, including the right to know what is collected, to ask for it to be deleted, and to opt out of its “sale” or “sharing” and of targeted advertising. Section 4 lists what Google's advertising software collects, and section 3 explains that nothing else leaves your device.

To opt out of personalised advertising, use Settings → Ad privacy choices in the game where it is shown, or your device's own settings: on Android, delete your advertising ID or opt out of ad personalisation as described in section 7; on iPhone, the game never has access to the advertising identifier. Because we hold no data that identifies you, requests to know or delete are best made to Google; we will help where we can at the address in section 1. We do not treat you differently for using any of these rights.

9. Children

ExoLab Blast is a general-audience game. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information through this app, please contact us and we will act on it.

10. Retention

Progress and settings stay on your device until you uninstall the app or clear its storage, and in any phone backup until that backup is replaced or deleted. Google keeps advertising data according to its own published retention practices. We hold no personal data ourselves, only aggregate revenue reports.

11. International transfers

Google operates globally, so advertising data may be processed outside the UK and the EEA, including in the United States. Those transfers are made under the safeguards described in Google's privacy documentation, such as the European Commission's standard contractual clauses.

12. Changes to this policy

If we change what the app collects, we will update this page and change the date at the top. Material changes affecting how your data is used will be reflected in the app's consent prompt as well as here.

13. Contact

Questions about this policy, or about privacy in ExoLab Blast, can be sent to info@kestrelpublishing.co.uk. Support and information for the game are at www.kestrelpublishing.co.uk/exolab.html.