8all Privacy Policy

Version 1.0, effective 30 October 2026.

At a glance

8all is a game. You don't need an account and there are no ads.
Your date, time and place of birth, your signs, saved forecasts, the Journal, the streak, achievements and settings stay on your phone and we don't receive them. If you turn statistics on, Firebase receives the events in section 3 (for example which setting you change), never your birth details or signs.
When you open it, the app downloads the new Daily Forecast texts from our site hosted by Google (Firebase Hosting). The files are the same for everyone and the request carries nothing of yours: Google sees your phone's IP address, as for any web page (section 6).
The Daily Forecast texts are AI-generated outside your phone: no data of yours reaches the AI (section 12).
Usage statistics and crash reports (Google Firebase) start only if you say yes and are old enough. You can turn them off at any time.
For purchases we use RevenueCat, which receives an anonymous identifier, some technical data and your purchase history. Apple or Google handle the payments.
We don't sell your data and we don't use it for advertising.

1. Who is the controller

illusionistofcoding, Alessandro Sisto, via peschiera 36, Adria (RO), P.IVA 01690720295. Email: illusionistofcoding@gmail.com.

We have not appointed a data protection officer: an activity like this one doesn't require one.

2. What stays on your phone

Only the app saves this data, on your phone, and we can't see it. We don't send it to anyone: with statistics on, Firebase receives only the events in section 3 (for example which setting you change or the tone of an answer), never your birth details, signs, texts or Journal.

Birth details and signs, if you enter them: your date, time and place of birth, your answers to the questions the calculation needs (for example about a clock change), and your Sun, Moon and rising signs, worked out on the phone or chosen by you.
The place search runs on the phone, in a list of places included in the app: what you type never leaves the phone and is not saved.
Your age for statistics: if we ask for your year of birth, the phone keeps only the result (whether you are old enough or not), not the year.
Saved forecasts: the latest 30 Daily Forecasts you were shown, each with its date, the type of day, the sky events of that day, the title and the text, where the text came from (the app's own texts or the file downloaded for that day) and, if you have them, the signs used to pick it; the list of the app's phrases already shown, with the day you saw them, which keeps them from repeating; a random number, which is used to pick those phrases; and the date of the last vote you gave the day's text, never the vote (section 3).
Downloaded texts: the files with the Daily Forecast texts of the coming days, the same for everyone, in a folder of the app used only for them (on iPhone among the temporary files) (section 6). The app keeps only the days it needs and deletes the others by itself.
The game: the streak and its protections; the Journal, with the date, rarity, title and text of each day, and whether the card was written with your signs (the rarity depends on your sign, and the text can name it); achievements and rewards earned, with the number of Legendary cards that counted for the achievements; and whether the store last recognised you as a PRO subscriber.
Ask the ball: the times of the answers given in the last 4 hours (at most 15), with the time since the phone was switched on and, on Android, how many times it has been switched on, which tell whether the clock was moved; and the order of the deck of answers, so they don't repeat. Nobody knows your question: only you know it.
Settings: shake, haptics, sound, animations, your choice about statistics, the ball, the background and the lucky charm you use, which Shop news you have already seen and a technical setting about the graphics quality that suits the phone. For the «Your Sign» background only the choice is saved, never the sign: the app reads it from your signs and keeps it in memory.
Data from an earlier version: if you had already used 8all, at the first start of this version the app keeps aside a copy of the game and forecast data of the version before. The copy follows the same deletions.
Motion sensors tell the app when you shake the phone and, while you look at a card, move its foil: the app reads them in the moment and doesn't save them.
The cards you share are made on your phone: an image with the date, the title and the text of your forecast, the ball, the background and the lucky charm you use (instead of a reward ball, the default one; instead of the «Your Sign» background, Night), never the rarity; with the image goes the same title and text as plain text, with «8all · play8all.web.app». You send them, with the system share sheet, to whoever you choose; we don't receive a copy. The text can name your signs and, when it comes from the internet, is the same for everyone with your sign: if you share it, someone who compares it can tell your sign. On Android the latest card stays as a file in the app's temporary storage until you make another one, change your signs or reopen the app; on iPhone it is not saved as a file.

Backups.

On Android the app excludes your birth details, signs, saved forecasts, downloaded texts, the game, the Ask the ball record, settings and the card in temporary storage from backups and from transfers to a new phone. The purchase identifier in Google Block Store follows its own rules (section 4).
On iPhone your birth details, signs, saved forecasts, Journal, streak, achievements and the Ask the ball record are in files excluded from iCloud and computer backups, and the downloaded texts are in a folder that iOS never backs up. Settings (including the items you use and your choice about statistics), purchase information and the anonymous identifier that RevenueCat keeps on the phone, and the data that Firebase keeps on the phone, may be included in the backups that Apple manages for you.

Protection. On Android, the screens where you enter or check your birth details and signs, and the one where you type your year of birth, can't be captured. On iPhone they are hidden in the app switcher, but a screenshot is still possible. The other screens can be captured, including the ones that show your signs: the menu, the Daily Forecast, the Journal, the home screen when you use the «Your Sign» background, which draws your Sun sign, and the Shop, where that background's tile shows the drawing and the name of your sign's god.

Permissions. 8all doesn't ask for access to your location, contacts, camera or microphone. On iPhone, only if you choose «Save Image» from the share sheet, iOS asks your permission to add photos: 8all never reads your photos.

Deleting. In Settings › Your signs you can delete your birth details and keep your signs («Keep only my signs»), or delete everything («Delete everything»); if you only have signs, «Delete my signs» leads to «Delete everything».

«Keep only my signs» deletes your birth details and, with them, the saved forecasts of your birthday, the birthday phrases already shown and the «Happy birthday» achievement, which comes back if you enter your date of birth again.
«Delete everything» deletes your birth details and your signs; all saved forecasts, the list of phrases already shown and the date of the last vote, if at least one forecast was written with your signs; the Journal days written with your signs; the two achievements that depend on your rising sign and your date of birth; and the Ask the ball record. What stays until you uninstall the app: the streak, the Journal days written without the zodiac, the other achievements, the rewards you earned and the settings. Uninstalling deletes the data 8all keeps on the phone, except the copies in iPhone backups, the anonymous purchase identifier in Google Block Store on Android (section 4) and, on iPhone, if you ever turned statistics on, the identifier that Firebase may leave in the phone's Keychain.

When. The app asks whether you want to share them; it doesn't ask at first launch. If it doesn't know your age, it first asks for your year of birth (section 8). Until you answer, if you say no, or if you are not old enough, Firebase collects nothing.

What, with Google Analytics for Firebase:

how you use the app: when you ask the ball and whether you shake or tap the button, the tone of the answer (yes, maybe, no), when you open the Daily Forecast (only the fact that you opened it, once a day: no text, sign, rarity or type of day), whether you liked the forecast's text, when you vote on it with the buttons beside «Share» (like, OK or dislike, and the language of the texts, at most once a day: never which text, the sign, the rarity or the type of day; without consent the buttons are not there), when you change a setting (which one, and whether you turn it on or off), how the first-launch offer ends, when you open the Shop or the PRO offer and from where, how a purchase goes (whether it succeeds, you cancel it or it fails, and whether it is PRO or an item, without saying which one or at what price) or a restore, and when the share sheet for the card opens (only the fact that it opened: not the text, nor where you send it);
the data Firebase collects by itself: the first open, sessions, time in the app, app and system updates, the app version, phone brand and model, the operating system, the language, the store you installed the app from (on Android also the Google Play install referrer), and the country and city derived from your IP address, which Google then discards without keeping it;
random identifiers of the app installation.

Firebase doesn't receive the products or prices of your purchases: we don't pass your transactions to Firebase and we don't link Google Play to Firebase.

What, with Firebase Crashlytics: reports about crashes and errors: where in the code the app stopped and with which error, the phone model, the operating system, the app version, some information about the phone at that moment (for example memory and storage, orientation, whether the app was in the foreground, whether the phone is rooted or jailbroken) and random installation identifiers. For a problem with a purchase we send only an error code and the name of the error type.

What never: the advertising identifier (Android and iPhone), the iPhone identifier for vendors (IDFV) for statistics, birth details, signs, the text of answers and forecasts, the cards' rarity, the streak, the Journal, achievements and the items you use. Firebase's advertising settings (ad storage, ad user data, ad personalisation) are always denied.

Why: to understand how the app is used and to fix errors.

Legal basis: your consent (Article 6(1)(a) GDPR), also for accessing information on your phone (Article 122 of the Italian Privacy Code, which implements Article 5(3) of the ePrivacy Directive).

How to withdraw consent: Settings › Privacy › turn off «Stats & crash reports». The app stops collecting, deletes the reports not yet sent, and deletes from the phone the statistics identifier and the queued events; if you later say yes again, it starts with a new identifier. It doesn't delete the installation identifier that Firebase keeps on the phone (section 7). Withdrawing doesn't affect data already sent, which is deleted at the end of the retention period (section 7) and which we can no longer link to your phone.

Who processes them: Google, as our processor: for Crashlytics under the Firebase Data Processing and Security Terms, for Google Analytics under the Google Ads Data Processing Terms. The Google Analytics settings that share data with Google for its own purposes are off, and Google Signals is off.

What it does. RevenueCat, Inc. (United States) handles purchases for us: it checks the stores' receipts, tells the app what you own (PRO, items) and restores purchases.

When. At every launch the app asks RevenueCat what this installation owns. So the app talks to RevenueCat even if you never buy anything.

What it receives:

an anonymous identifier created by RevenueCat, with no name, email or account;
receipts and purchase history: products, prices, currency, dates, renewals, trials, cancellations and refunds;
technical data of each request: phone brand and model, system and app version, language and preferred languages, store country, whether the app is a test build, and the IP address that every internet connection shows to the server. RevenueCat derives your country from the transaction or, if that is missing, from the IP address, which it then doesn't keep;
on iPhone, the identifier for vendors (IDFV), which RevenueCat's SDK sends with every request;
on Android, after the first purchase, the SDK saves the anonymous identifier in Google Block Store, an area of the phone that Google includes in your Google account backup (end-to-end encrypted when the phone allows it): so after a reinstall the app finds the same identifier and your purchases;
on Android, if RevenueCat turns it on from its server, a diagnostic report of its SDK, without the identifier: the requests made with their timings and response codes, the start and outcome of purchases and restores, Google Play's error codes and messages, product identifiers and the Google Play versions.

RevenueCat never receives your birth details, signs, age or name. The app sends it no attributes and no identifier of yours; on iPhone the SDK by itself records only the status of Apple's tracking permission, which 8all never asks for.

Legal basis:

performance of the contract with you (Article 6(1)(b) GDPR) to sell, check and restore purchases;
our legitimate interest (Article 6(1)(f) GDPR) in checking at every launch what you own, so that an item you paid for never disappears, and in keeping purchases working with the diagnostics;
storing the identifier on the phone is strictly necessary for the service (Article 122(1) of the Italian Privacy Code).

Who processes them: RevenueCat, as our processor, under its data processing agreement. RevenueCat stores the data in the United States, on Amazon Web Services, and uses the sub-processors listed in that agreement.

5. Apple and Google

Downloads, payments, billing, refunds and subscription management are handled by Apple (App Store) or Google (Google Play), as independent controllers under their own privacy policies. We never receive your card details.
Apple and Google may give us aggregated statistics and crash reports, depending on your phone's settings (for example «Share with App Developers» on iPhone).

6. The forecast texts, the website and email

The Daily Forecast texts. To have new forecasts, when it opens and when it comes back to the foreground (at most once every 5 minutes) the app downloads from the internet a list signed by us and the files with the texts of the coming days. The files are the same for everyone: they hold the texts of every sign, and the phone picks yours without telling anyone. They are on Firebase Hosting (Google), our processor, at play8all-packs.web.app. As for any web page, Google receives your phone's IP address, the time of the request and some technical data of the connection; the request only says that it comes from 8all, with a header that is the same for everyone. It doesn't carry your birth details, signs, age, language or any identifier, and it uses no cookies. Google keeps the IP addresses for a few months, to protect the service from abuse and to give us usage statistics; we don't receive the request logs. Google may process this data in any country where it has facilities (section 10). Legal basis: our legitimate interest in giving you the texts the app shows you (Article 6(1)(f) GDPR); saving the files on the phone is necessary to show them to you (Article 122(1) of the Italian Privacy Code). Without a connection the app uses the texts it includes.
The website with this policy, the terms and support, play8all.web.app, is a static site also hosted on Firebase Hosting (Google), as our processor. When you visit it, Google records the technical data needed to show it to you, such as your IP address, and keeps them for a few months for the same purposes and under the same rules. The website uses no cookies, no statistics and no third-party fonts or scripts.
Email: we use your address and your message to answer you and handle your request (for a report: to check the text and, if needed, withdraw it), on the basis of our legitimate interest (Article 6(1)(f) GDPR) or of steps you ask for before a contract (point (b)). We keep them for as long as needed to handle your request.
If you report a text: «Report this text», under the forecast, opens your email app with a ready email to us, holding only the date of the forecast and the language of its texts: not your sign, nor the text. You send it, if you want, and you write what is wrong. We use it to check that text and, if needed, withdraw it; for the rest, the email point applies.

7. How long

Data	How long
On your phone (section 2)	Until you delete them or uninstall the app; the exceptions are in section 2, «Deleting». Downloaded texts stay only for the days the app needs
Google Analytics for Firebase events tied to the identifier	14 months
Crashlytics reports and their identifiers	90 days
Firebase installation identifier	At Google until it is deleted: after about 270 days without using the app (a threshold Google may change) or when the app asks for its deletion, which it doesn't do today; after that, at most 180 days
Purchases at RevenueCat	As long as they are needed to recognise and restore your purchases, at most as long as we use RevenueCat; we delete them earlier on request (section 9)
IP addresses at Firebase Hosting, for the forecast texts and for the website	A few months, as Google states (section 6)
Email, text reports included	Section 6

Aggregated reports, which are not about any one person, may be kept longer.

8. Children and teenagers

8all is not designed for children.
Statistics can be turned on only from age 14 in Italy and the United States, and from 16 elsewhere. The country is the one in the phone's settings: the Region on iPhone, the country of the main language on Android.
Below that age statistics stay off and the switch is locked. With «I'd rather not say» they stay off. The app works just the same.
RevenueCat works for everyone, because purchases need it; it never receives your age or birth details.
Minors make purchases only with a parent's permission. The stores have tools to control them, such as Apple's «Ask to Buy» and Google Play's parental controls.
If you are a parent and think your child has sent us personal data, for example by email, write to us and we will delete it.

9. Your rights

You can ask us to access your data, to correct or delete it, to restrict its processing, to receive it in a readable format (portability) and to object to processing based on legitimate interest. You can withdraw your consent to statistics at any time (section 3).
How: write to illusionistofcoding@gmail.com. We answer within one month, the legal time limit (Article 12 GDPR).
How we find your data: we don't know who you are. For purchases, send us the Apple or Google order number (from the store's email receipt). Statistics use a random identifier that we can't link to you: to delete it, turn off the switch (section 3). The IP addresses of the text downloads are kept by Google and we don't receive them, so we can't link them to you.
Complaints: you can contact the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or the authority of the country where you live or work.

10. Transfers outside the European Union

Google and RevenueCat may process data in the United States and in other countries.

Google LLC (Firebase, Hosting included) participates in the EU-U.S. Data Privacy Framework, with the UK and Swiss extensions; where that is not enough, the European Commission's standard contractual clauses apply.
RevenueCat does not participate in the Data Privacy Framework: transfers rely on the European Commission's standard contractual clauses, with the UK addendum and the Swiss amendments.

11. Security

Data that leaves the phone travels encrypted (HTTPS).
We collect as little as possible: statistics events carry only fixed values, never free text.
The app uses downloaded forecast texts only if the list carries our signature.
Your birth details, saved forecasts and the game stay in the app's private storage, excluded from backups (section 2).

12. Automated decisions and AI-generated texts

The Daily Forecast texts are AI-generated: an artificial intelligence model writes them outside your phone, from public data about the sky. The ones that come from the internet are the same for everyone with the same sign, and the phone picks yours; the texts included in the app are AI-generated too. No data of yours reaches the model: not your birth details, your signs, your age or any identifier. The ball's answers come from a deck of phrases written in advance, the same for everyone. We make no automated decisions that have legal or similarly significant effects on you.

13. Changes

We update this policy when the app changes. The version and date are at the top. If something important changes, for example a new provider or a new type of data, we will tell you in the app or on the store page.

14. Contact

illusionistofcoding@gmail.com. Support is at 8all Support.