Last updated: 9 October 2026.
For children: you do not need to give us your name, birthday or email to play. Ask a parent or guardian for help with privacy, purchases or support. Never send a password, a photo of yourself or payment details.
Who provides the game?
Spellbrew: Potion Sort is provided by Havoc Forge Games, a trading name of Grey Kraken Ltd, company number 16162098, registered in England and Wales. Our registered office is 2 Bathurst Road, Coventry, United Kingdom, CV6 1HY. Grey Kraken Ltd is responsible for the information it handles to provide and support the game.
For privacy questions and requests, contact havocforgegames@gmail.com. This notice covers the Android game and its test builds. Our website privacy notice covers the website.
Advertising and who sees it
Spellbrew is free to play and funded by advertising and optional purchases. It shows occasional full-screen ads between completed levels, and optional reward videos that play only when you tap a clearly labelled button. There are no banners and no ads when the game opens. Test builds use test ads.
When the game first starts it asks your age group: Under 13, 13–15, 16–17 or 18 or over. No birthday is requested. Advertising is only for players old enough where they live: 13 in the UK, the United States, Belgium, Denmark, Estonia, Finland, Latvia, Malta, Portugal and Sweden; 16 in the rest of the European Economic Area, Switzerland, Canada, Australia, New Zealand, Japan and South Korea; and 18 in every other country. The game works out the country on the device from the SIM card, the mobile network or the language settings, together with Google's own signal for European rules; when it cannot tell, it uses 18. The country is not stored or sent by the game. Players under 13 and players below their country's age get no advertising-service requests and can keep playing.
Progress, settings and age group
The game stores your progress, stars, coins, boosters, unlocked vial styles, trophies, daily gift and wheel days, settings, purchase records and your age group on your device. Gameplay code does not upload these records to a studio server, and there are no player accounts, chat or player uploads. If you use Google Play Games, a copy of your progress is also kept in your Play Games account (see Saved games below); it does not include your age group or your settings.
The saved age group stays on your device, but advertising services receive a related treatment signal: teen protection for 13–15 and 16–17, and Google's unspecified age treatment for adults. Our consent-service requests also indicate that the player is not under the applicable consent age. We therefore do not claim that all age-related information stays on the device.
Local records remain until replaced or removed with the app's storage. Clearing storage or uninstalling may erase progress. If your phone's backup is on, Android may include the game's save in it, and restoring the backup brings it back; this depends on your device settings, and we cannot promise recovery. We cannot remotely read or delete a save held only on your device.
Coins, rewards and purchases
Coins are earned by winning levels, from the daily gift, the lucky wheel and trophies, and can also be bought. Optional purchases (coin packs, a Starter Pack, a Piggy Bank and No Ads) are made through Google Play's billing. Google Play handles your payment; we never receive your card or payment details. The game receives a confirmation of each purchase from Google Play and keeps a record of it on your device so that each purchase is given exactly once. No Ads stops the full-screen ads between levels.
Reward videos give exactly the reward named on their button, such as double coins, five extra moves, a booster, a doubled daily gift or a wheel spin. The game never needs one to continue: everything a video gives can also be reached with coins earned in play. The lucky wheel gives small in-game prizes only; it cannot be bought and nothing from it can be exchanged for money.
Leaderboards (Google Play Games)
If you use Google Play Games on your phone, the Ranks page shows where you stand against other players for the most stars won and the most levels brewed. Play Games signs you in by itself if you already use it, or when you tap Sign in. Only when you are signed in does the game send Google Play Games two numbers after a level is won: your total stars and the number of levels you have brewed. If you set a best before signing in, it is sent once you sign in. Play Games keeps your best. The page also shows other players' Play Games names and scores, and yours to them. Apart from your saved games (below), the game never sends Play Games your coins or your purchases, and it never sends your age group or your settings.
Google Play Games handles your Play Games profile (your gamer name and picture) and the scores. To run the service, it also collects analytics and diagnostics, sent encrypted. This is described in Google's privacy policy. You choose who can see your Play Games activity, and you can delete your Play Games profile, in the Play Games app or your Google Account. The game does not receive your email address or Google Account details, and does not keep your Play Games name. If you do not use Play Games, the game sends it nothing and you can play everything.
Saved games (Google Play Games)
If you are signed in to Google Play Games, the game saves a copy of your progress (the records under Progress, settings and age group, apart from your age group and your settings) to your Play Games account, with Google's Saved Games. It saves after you win a level, after a purchase, when you return to the game, and every few minutes while you play. On another phone signed in to the same account, the game brings it back and joins it with anything you have done there. Google keeps it under its own privacy policy; you can see and delete your saved games in your Google Play Games settings. It never reaches a studio server.
Reminders
If you choose to receive reminders, the game asks Android for permission to show notifications and sets them on your device: for example when your next daily gift is ready. They are not sent from a server, never show while you are playing and never at night. You can turn them off in the game's Settings or in Android's notification settings.
Before your final advertising choice
In an ad-enabled build, choosing an age group that is old enough where you live starts Google's User Messaging Platform to check and present the applicable privacy choices: Google's European form in the EEA, the UK and Switzerland, and Google's US privacy message where it is set up. This connection happens before your final advertising-consent decision. Choosing an age group is not consent to receive ads.
Google's privacy service receives the connection's IP address and technical app/device information needed to provide the message and manage choices, such as app identity, device/operating-system information, language and consent-related settings. Google manages the consent record, including information stored on the device.
We use necessary consent-management information to offer and respect privacy controls, based on our legitimate interests in providing those controls and our legal obligations where applicable. This is separate from consent for optional advertising storage/access and associated advertising processing. We do not treat merely contacting the privacy service as advertising consent.
When advertising is enabled
The game requests ads only after its current Google checks pass. In the EEA, the UK and Switzerland that means your consent in Google's form; if you decline, no ads are requested and you keep playing. Elsewhere, Google's service tells the game whether ads may be requested, and the game also turns on Google's restricted data processing, which limits Google's use of data (for example under US state privacy laws); the game does not sell or share personal information for targeted advertising. We request general-audience content, disable personalised advertising and the publisher first-party identifier, and remove the Android advertising-ID permission. We do not request precise location, microphone, camera or contacts permissions. Google still processes data for non-personalised advertising.
Google's advertising services can receive IP-derived approximate location, app/ad interactions, performance diagnostics and permitted device or app identifiers. These support ad delivery, measurement, service performance and fraud prevention. Age-treatment and consent signals support the applicable protections and choices. In the EEA, the UK and Switzerland we use consent for the optional advertising processing described in the privacy message. Elsewhere, where the law does not require consent for non-personalised advertising, we rely on our legitimate interest in funding a free game with non-personalised, general-audience ads. Google's own handling is explained in its privacy policy and advertising data disclosure.
We do not add a separate gameplay analytics service or a second advertising network. An ad or support link may open a website or Google Play; that destination has its own privacy information.
Changing your choice
Open Settings → Ad privacy choices, when available, to review or change Google's choices. Declining consent prevents ad loading; unavailable or incomplete consent information also leaves ads unavailable. Withdrawing does not erase information already lawfully processed by Google. We cannot delete Google's records through a local reset. No Ads, an optional purchase, stops the full-screen ads between levels.
Support, retention and providers
If you email support, we receive your address, message and files you choose to send. We use them to answer your enquiry and investigate the problem, based on our legitimate interests in support and maintenance, and legal obligations where applicable. Include only the app version, device model, level and what happened. Parents or guardians should handle children's support enquiries. We do not use support email for marketing.
We retain correspondence while needed to resolve the issue, handle related follow-up or meet legal obligations; we do not promise a fixed deletion period. Local-save retention is controlled by device storage. Google determines retention of its service records under its policies; uninstalling does not guarantee their deletion.
Google provides advertising, consent-management, Google Play billing and email services. Information may be processed outside the UK and outside your country; Google's international-transfer information explains its safeguards. We may disclose information where legally required and do not sell support correspondence. Google's advertising SDK uses TLS, and its consent-service connection uses HTTPS. No system can promise absolute security.
Your rights and changes
Depending on the information and the law where you live (for example the UK GDPR, the EU GDPR or US state privacy laws), you can request access, correction, deletion, restriction or portability, withdraw consent, object to processing based on legitimate interests, and opt out of any sale or sharing of personal information (we do not sell or share it). Contact the studio about information held by Grey Kraken Ltd; use Google's privacy information and controls for Google's records. We may need proportionate verification of a request.
You can raise concerns with the UK Information Commissioner's Office or with the data protection authority where you live. We do not make automated decisions about you with legal or similarly significant effects. We update this notice when information handling changes and show the new date. For help, visit support.