Privacy policy

Last updated: 12 November 2026. Published by Vasa Serafin, individual developer, Australia.

This one policy covers every Android app published by Vasa Serafin on Google Play, and the apps listed here as coming soon. It explains what information the apps handle, why, and the choices you have. A table shows what each app uses.

Summary

• We do not sell your personal information.
• You do not create an account with us to use the apps. The exceptions are Crownpath, which keeps an online game account for you, and the optional classes feature of Atomarium, which keeps a display name and class work.
• What you create in an app stays on your device unless you choose to share it. Coin balances in some games, Crownpath game progress, and Atomarium class work (only if you use classes) are also kept on our server, as explained below.
• Google services inside the apps (ads, analytics, purchases and Play Games) process limited data, as explained below.
• To have your data deleted, email vasa_serafin@hotmail.com.

What each app uses

A tick means the app includes that service. Each service is explained in the sections that follow.

Every app also uses internet access. Apps with ads use the Android advertising ID. Some games use vibration.

Advertising: Google AdMob

Apps marked under Ads show ads from Google AdMob. AdMob uses the Android advertising ID, IP address (used to estimate general location), device information and ad interactions to show and measure ads, limit repeats and prevent fraud. In the EEA, the UK and Switzerland the app asks for your consent with Google's consent form before personalised ads are shown, and you can change your choice later. You can reset or delete your advertising ID, or opt out of ad personalisation, in your Android settings (Settings, Privacy, Ads). See how Google uses information from apps that use its services.

Nurso never shows ads during live monitoring. Crownpath has no ads.

Analytics: Google Firebase Analytics

Apps marked under Analytics use Firebase Analytics to understand how the app is used, for example which screens are opened, session length, app version, device model, operating system and approximate country. It uses an app instance ID and, where allowed, the advertising ID. We do not use this information to identify you. See Firebase privacy information.

Crash reports

Crownpath includes Google Firebase Crashlytics. If the game crashes, a report with technical details (the error trace, device model, operating system version, app version, an installation ID and the time) can be sent so the problem can be fixed. It does not contain what you created in the game. The other apps do not include a crash reporting service of ours. Google Play may share crash details with us if you have chosen to send diagnostics to app developers in your Google settings.

Purchases: Google Play Billing

Apps marked under Purchases offer optional purchases through Google Play Billing: removing ads (a one-time purchase, or a subscription where one is offered) and, in some games, coin packs. Google handles the payment, and we never receive your card or payment details. The app checks with Google Play whether you own a purchase. You can manage or cancel a subscription in the Google Play Store under Payments and subscriptions.

Google Play Games

These games use Google Play Games for achievements: Axefall, Boardnook, Rollpad, Fleecehunt, Plankwright, Stonehand, Forgehearth, Lanternvein, Tanyard, Loomhollow, Needlecroft, Arcwright. If you are signed in to Play Games, Google records your achievements against your Play Games profile under Google's privacy policy. You can manage or delete Play Games data in the Play Games app settings.

Coin balance on our server

These games have coins: Axefall, Boardnook, Puzzlehearth, Rollpad, Fleecehunt, Plankwright, Stonehand, Forgehearth, Lanternvein, Tanyard, Loomhollow, Needlecroft. To keep your coin balance correct, the game sends our server (api.thetooltuckshop.rs) an install ID created by the app, the app name, your coin balance and what you spend, and, when you buy a coin pack, the Google Play purchase token so the purchase can be checked. Like any web server, ours also sees your IP address and keeps standard access logs for security.

Crownpath game account

Crownpath has online features, so it keeps a game account on our server (crownpath.thetooltuckshop.rs). The account holds an account identifier linked to your Google Play account, an install ID, the username you choose, your saved game progress, your scores on the ranking boards, and your moves, trades and coin spending in online play. Your username and scores can be seen by other players. For play with someone nearby, the game uses the Bluetooth, Wi-Fi and nearby devices permissions to find and connect to the other phone. If you sign in on the Crownpath website to see your stats, the site sets two cookies: one for the few minutes while you approve the sign-in in the app, and one that keeps you signed in for up to 14 days. They are used only for that sign-in, never for tracking or ads, and you can sign out in the browser or sign out all browsers in the app. Crownpath is not released yet.

Atomarium classes

Atomarium works fully without classes: your learning progress, achievements, certificates and settings stay on your device. Classes are an optional feature for a teacher and their students. If you choose “this device” mode, classes, questions and marks are stored only on your phone and nothing about them is sent to our server. If you use online classes, the app talks to our game server (crownpath.thetooltuckshop.rs) under the application tag “atomarium”. It is a separate store from the games and does not touch game accounts or coins.

What is stored. A display name you type (a name only: email addresses, and numbers that look like phone numbers, are refused), whether you are a teacher or a student, and an install ID created by the app that links your phone to that account. Other people never see your install ID. For a teacher: the classes, a short invite code per class, the class skill list, the questions and tests the teacher writes (including any drawing the teacher adds to a question), the due dates, and the marks and comments the teacher gives. For a student: the classes joined and the answers submitted to each test, including drawings, the automatic score, and the teacher’s marks and comments. Like any web server, ours also sees your IP address and keeps standard access logs for security.

Joining a class. A student joins by typing the invite code, opening the join link, or scanning the class QR code with the camera. The camera is used only on the phone to read the code; no picture or video is saved or sent. The camera permission is asked only when you tap the scan button, and typing the code works without it.

Who can see what. The teacher of a class can see the names of its students and each student’s submitted work and marks. A student can see only their own work, marks and comments, and the class name and teacher name; students never see each other or each other’s work. Students receive the questions of a test without the answer keys. There is no chat or free messaging: the only free text is a student’s answers and a teacher’s comments. We do not use this data for advertising or analytics, and class screens show no advertising.

How long it is kept. Nothing expires on its own today. Class data is kept until the teacher deletes the class (which deletes its tests, submissions and memberships), a student leaves the class (which deletes that student’s submissions in it), or the person deletes their account. Teachers and students can do the last two inside the app: the delete-my-class-data button on the Class screen deletes the account, the classes it teaches, its memberships and its submissions. You can also email vasa_serafin@hotmail.com with the subject “Data deletion request” and the app name.

Your learning model. Atomarium builds a private picture of what you know and how you like to learn (how strong each topic is, which explanations help, pace and focus settings, accessibility settings). This learning model stays on your device, in the app’s private storage, and is removed when you uninstall the app or tap “Reset learning data” on the “How I learn” page. When you practise on your own, nothing from it is sent anywhere.

What a class receives. Only for a class you have joined, the app sends, for each topic you have practised, three things: the topic strength band (0 to 4), the number of answers, and the date you last practised it. The app tells you this when you join (“Your teacher sees how strong each topic is”) and sends it when you open the class screen and after a practice session, at most once an hour. It never sends timings, which explanations helped, mistake history, focus settings or accessibility settings. Accommodations such as larger text or calm mode are sent only if you turn on “Share with my teacher”, and only as a short list of names. The teacher sees a class table of topic strength per student; other students never see it.

Teacher tags and the progress view. A teacher can attach short labels (tags, up to 16 characters, for example ‘Group A’) to students in their own class to organise their teaching. Tags are visible only to that teacher, are never shown to students or to anyone else, must not contain health or other sensitive information, and are deleted when the class is deleted, when the student leaves or is removed from the class, or when the student’s or the teacher’s account is deleted. The teacher’s progress view is built only from work the student has already handed in to that class (when it was handed in, whether it was late, and the score); no additional information is collected for it.

Removing it. Leaving a class, the teacher deleting the class, or deleting your class data in the app removes your topic summary from our server immediately. “Reset learning data” clears the model on your device; the next upload to a class you are still in then replaces the stored summary with the empty one.

Children. Students are often under 18. Classes collect a display name only: no email address, phone number, birthday or photo, and no messaging between users. We recommend a first name or nickname, and a teacher should follow the rules of their school or organisation before asking students to use online classes.

Device access by app

An app asks for a permission only when you use the feature that needs it, and you can refuse or remove it in Android settings.

• Atomarium asks for the camera only when you scan a class QR code to join a class. The picture is read on your phone and is not saved or sent.
• Nurso turns one phone into a camera and another into a monitor. The camera phone uses its camera and microphone, and the two phones find and connect to each other over your local Wi-Fi (Wi-Fi Direct), which on some Android versions needs the nearby devices or location permission. Video, audio and control messages travel only between your two phones. They are not sent to our servers and are not stored by us. Only monitor people who know about it or for whom you are a lawful carer.
• Wallsight uses location, Wi-Fi and Bluetooth scanning to measure signal strength as you walk, because Android requires the location permission for Wi-Fi scans. The microphone is optional and is used for sound-based wall hints. The readings and maps are stored on your device.
• Pingwright uses location, Wi-Fi and nearby devices access to read details of the network you are on and find devices on it. The addresses you test are contacted directly from your phone.
• Speedwright measures your connection against a public test server run by Cloudflare, which sees your IP address like any website. It asks for the notification permission and can resume after the phone restarts.
• Lullfield shows a notification while it plays sound in the background.
• QRStitch, Lenswipe and PDF PageStitch work on the files and photos you pick, and save the results to your device. They stay on your phone unless you share them.
• Clipcellar reads what you copy to the clipboard so it can keep your history. The history is encrypted and stored on your device.
• Vaultling can use your fingerprint or face to unlock. This is handled by Android; the app never receives your biometric data. Your vault is encrypted and stored on your device.

Children

The apps are not directed at children under 13, and we do not knowingly collect personal information from children. Nurso is a tool for parents and carers.

Keeping and deleting your data

Data stored on your device is removed when you clear the app's storage or uninstall it. Google keeps analytics data for up to 14 months, crash reports for up to 90 days, and advertising and purchase data under its own policies. We keep no Nurso video or audio. Coin balances and Crownpath accounts are kept on our server until you ask us to delete them.

To ask for your data to be deleted, email vasa_serafin@hotmail.com with the subject "Data deletion request" and the name of the app. For a coin balance or a Crownpath account, include your Crownpath username if you have one, so we can find the record. We will delete the data we can link to your request within 30 days and confirm by email. You can also reset your advertising ID at any time in Android settings. Purchase records are kept by Google Play under Google's own policies.

Your rights

Depending on where you live, you may have the right to access, correct, delete or move your data, or to object to its use. Email us and we will reply within 30 days. California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

Security

Data the apps send to Google services and to our server is encrypted in transit. The Nurso session between your two phones is protected with encryption.

This website

This website does not use cookies, analytics or advertising. The web server keeps standard access logs (such as IP address, time and page requested) for security.

Changes

If this policy changes, the new version will be published on this page with a new date.

Contact

Vasa Serafin, Australia
Email: vasa_serafin@hotmail.com
Website: https://developer.thetooltuckshop.rs

This policy is governed by Australian law, including the Privacy Act 1988 (Cth).