PRISMA · YOUR INFORMATION
Prisma Privacy Policy
Last updated 05 Oct 2026
About this policy
Prisma is a mobile puzzle game for Android and iOS from JES Game Studios, operated by JK Eignarhaldsfélag ehf. in Iceland. This policy covers the game, its optional account and cloud saves, email sign-in, and advertising. For privacy questions or requests, contact contact@jesgamestudios.com. The studio website has a separate privacy policy.
Playing on your device
You can play as a guest without providing an email address. Prisma stores your game progress on your device: unlocked levels, stars, attempts, lives and refill times, hammer balance, daily reward state, and an unfinished game. Sound and haptic preferences are also saved. Guest and signed-in profiles are kept separately. Device storage may be included in backups managed by your operating system.
Guest play does not create a Prisma cloud account. Advertising services may still process information as described below; guest mode does not switch off those services.
Optional accounts and cloud saves
If you choose to sign in, we process your email address, a Firebase account identifier, and verification information to create and secure your account. Sign-in uses a six-digit email code rather than a password. The email address and code message are sent through Resend, our email delivery provider. An account is created after a code has been verified.
Cloud Firestore stores your game save under your account identifier so you can restore progress on another device. This includes the game progress and preferences listed above, plus a save revision and timestamp. We use this information to provide the account and cloud-save features you request. You can continue playing locally if a connection is temporarily unavailable.
Your optional nickname
If you choose a nickname, we store the display name, a normalised name key and your account identifier in Firestore profile and name-reservation records. This keeps names unique and lets the nickname follow your account between devices. The current build does not provide a public high-score list. Nickname records remain while the account exists and are removed as part of account deletion.
Keeping sign-in secure
Prisma uses Firebase Authentication, Cloud Functions and App Check to authenticate requests and protect the service. App Check uses Android Play Integrity or Apple DeviceCheck in production. These providers process technical information and integrity attestations needed to check that requests come from a legitimate app or device.
The code service stores a keyed hash of the email address, a hashed code, challenge and expiry information, and verification attempt counts. A code expires after ten minutes and can be used once. The service also stores keyed hashes derived from the requesting IP address and email for rate limits. These are security records, not public player profiles. Security and abuse prevention are based on our legitimate interests in protecting players and our services.
Code and rate-limit records are marked for cleanup after 24 hours. Actual removal depends on the configured database cleanup service. Expired codes stop working independently of cleanup. Infrastructure providers may also retain technical and security logs under their own retention rules.
Advertising and privacy choices
Prisma supports Google AdMob rewarded videos and interstitial ads between completed levels. Rewarded videos are optional and can refill lives or provide extra moves. Interstitial ads may appear at a break after a level is completed; these are separate from the rewarded-video choice. They are paced by completed levels and a minimum interval, rather than appearing during an active puzzle. Depending on your region and applicable requirements, the app presents Google's consent message before requesting ads. Where required, you can reopen the consent controls using Advertising privacy choices in the game's settings. You can decline optional consent and change available choices later.
After ads are permitted, the advertising SDK can initialise and prepare an ad before you choose to watch a video. It may process IP addresses, approximate location inferred from an IP address, advertising or other device identifiers, ad views and interactions, and diagnostic or performance information. Google uses this information for advertising, measurement, and fraud prevention under its policies. Available personalisation and tracking options depend on consent, your device settings, and applicable law. Device settings may also allow you to restrict tracking or reset or remove an advertising identifier.
Prisma does not include a separate Firebase Analytics or Crashlytics integration in the build covered by this notice. That does not exclude the advertising SDK's measurement and diagnostic processing. We do not sell account information. The studio does not receive a list of your personal advertising interests.
Service providers and transfers
Google/Firebase provides account, cloud database, server function and app-integrity services; Google AdMob provides advertising and consent services; Resend delivers verification emails. Apple and Google provide platform integrity and device services. Authorised studio personnel may access information needed for support, security, and account administration. We may disclose information when required by law or to protect legal rights.
Providers may process information outside Iceland or the European Economic Area. For example, Firebase Authentication operates in the United States. Applicable safeguards, including providers' contractual transfer protections where required, govern those transfers. Provider policies are linked below.
How long information is kept
Local saves remain until you remove the relevant app data or uninstall the game; operating-system backup copies are controlled by your device and backup settings. Cloud saves and account information are kept while your account exists, unless removal is needed for security or a valid legal obligation. Account deletion removes your active Prisma player save, nickname profile and name reservation, and Firebase account. Providers may retain limited security logs and backup copies under their policies after deletion.
Email delivery records are subject to the email provider's retention practices. If you contact the studio through its website, the website policy governs that enquiry: website messages are normally removed after 90 days, and private website backups may retain copies for up to 30 days. Copies sent to our email provider follow that provider's retention rules.
Delete your account or request help
In Prisma, open the Account screen, choose Delete account, request a fresh confirmation code, and confirm with the code sent to your email. The game requires recent verification before deleting the Firebase account, its cloud save and nickname records. The separate guest adventure is not deleted by cloud-account deletion. Uninstalling the game alone does not delete your cloud account.
If you cannot use the app, use the account-deletion page linked below or contact contact@jesgamestudios.com with the subject Prisma account deletion and the email address used for your account. We verify ownership before acting. Never send a verification code or password in a support message. This website accepts a deletion request; it does not directly sign in to or delete your Firebase account.
Your privacy rights
Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your personal information, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact contact@jesgamestudios.com; we may need to verify your identity and will respond within applicable legal time limits. You may complain to a data protection authority, including Persónuvernd in Iceland.
Children and guardians
Parents or guardians who believe a child has provided personal information to Prisma should contact contact@jesgamestudios.com so we can investigate and remove it where required. Do not provide another person's email address when signing in. Age and parental-consent requirements under applicable law and the app stores must be respected.
Changes
We will update this policy when Prisma's data handling changes. The date shown on this page identifies its latest revision. Material changes will be communicated through the game or other appropriate channels when required.
Talk to the studio.
For Prisma privacy questions or account-deletion requests, contact JES Game Studios.