1 The label on Google Play
Google Play shows CrewPlay as collecting no data and sharing no data. This page explains why that is true, including the three places where it takes a closer look.
Every app on Google Play declares what data it collects and shares, and Google shows the answer as the app’s Data safety label. Google’s definitions are strict:
- Collected means the app sends data off your device, to its developer or to anybody else, including through code from other companies inside the app.
- Shared means data the app collected is passed on to a third party.
Under those definitions, our declaration for CrewPlay is:
Three things deserve a closer look, and each is explained in full in section 9: the Daily Challenge word request, which reveals your IP address to a word service; Google Play purchases, which Google itself handles; and Crew Link, which moves game data directly between phones in the same room.
2 Follow the data
Pick a kind of data to see where it goes. Mostly the answer is “nowhere”: it stays on your phone.
Names & characters
Saved on your phone. In a Crew Link match they are shown on the other players’ phones, and a room’s host name is visible to anybody on the same Wi-Fi with CrewPlay open. If Android backup is on, they are included in your own Google backup. They never reach us or any advertiser.
Scores, stats & coins
Saved on your phone, and in your own Android backup if you use one. During a Crew Link match the scores appear on everybody’s screen, and afterwards each phone keeps its own copy of the result. Nobody else ever sees them.
Purchases
You pay Google Play, which handles the whole payment. The app checks Google’s signed receipt on your phone and remembers what you own. Google then shares limited order details with us, such as the order number, product, price, date and country, for our accounts and for refunds. Your card or bank details never reach the app or us.
The Daily Challenge
The app asks a free word service for one word. The request carries nothing about you, but the service can see your IP address, as any website can. Offline, a built-in word is used and nothing leaves your phone.
Crew Link moves
Your taps travel over your own Wi-Fi straight to the host’s phone, and the game state travels back to every phone in the room. Nothing goes to the internet, and the traffic is not encrypted, so play on a network you trust.
Advertising ID & location
Never read. CrewPlay is built without the permission to read your advertising ID, and it never asks for location. The Nearby devices permission that Crew Link uses is declared never for location.
Emails to us
Only if you write to us, from your own email app. We use what you send to help you, keep it no longer than 24 months after our last reply, and never pass it to advertisers.
Crash statistics
CrewPlay sends no crash reports. Google Play collects crash and performance statistics for every app, from phones whose owners share diagnostics with Google, and shows us only aggregated, de-identified results.
3 Every type of data
Google’s full list of data types, one by one. Filter to see what stays on your phone, what leaves it, and what CrewPlay never touches.
| Data type | Collected? | What actually happens |
|---|---|---|
| Location, approximate or precise | No | Never read. No location permission is asked for. |
| Name | No | Player nicknames you type are kept on your phone, and shown on the other phones in a Crew Link room you join. |
| Email address | No | The app never asks for it. If you email us, we receive it from your email app, outside CrewPlay. |
| User IDs | No | A random player ID per player, created on your phone. Shared only with phones in a Crew Link room you join, to keep rematches and rivalries together. |
| Address, phone number, race and ethnicity, beliefs, sexual orientation, other personal info | No | Never asked for, never read. |
| Payment info, credit score, other financial info | No | Google Play takes the payment; the app and we never see card or bank details. |
| Purchase history | No | Your purchase record is kept on your phone. Google Play separately shares limited order details with us for accounts and refunds. |
| Health and fitness | No | Never read. |
| Emails, SMS and in-app messages | No | CrewPlay has no chat or messaging of any kind. |
| Photos and videos | No | Never read. A shared score card is a picture the app draws itself. |
| Audio: voice, sound recordings, music | No | The microphone is never used. CrewPlay only plays its own sounds. |
| Files and documents | No | Never read. Export stats creates a new file that you choose where to send. |
| Calendar and contacts | No | Never read. |
| App interactions and other actions | No | Scores, stats and match history stay on your phone. In Crew Link, your moves go to the phones in the room. |
| In-app search history, installed apps | No | Never read. |
| Other user-generated content | No | Only the player names you type, kept on your phone. |
| Web browsing history | No | Never read. Links open in your own browser. |
| Crash logs, diagnostics, performance data | No | The app sends none. Google Play collects its own statistics from phones that share diagnostics with Google. |
| Device or other IDs | No | The advertising ID cannot be read, and no device identifier is used or sent. |
4 What uses a network
Every game plays offline. Only buying, updating, the Daily Challenge word and Crew Link ever use a connection.
| Feature | Connects to | What travels | Encrypted |
|---|---|---|---|
| Buying and restoring | Google Play, through the Play Store app | Your purchase, handled by Google | Yes |
| Checking for updates | Google Play, through the Play Store app | Whether a newer version exists | Yes |
| Daily Challenge | random-word-api.herokuapp.com | A request for one word; your IP address is visible to it | Yes |
| Crew Link | Other phones on your Wi-Fi, never the internet | Names, player IDs, moves and game state | No, local only |
| Links in Settings | Your browser or email app | Whatever you do there | Yes |
| Every game, the Shop’s coins, stats, settings | Nothing | Nothing | — |
5 Permissions
One permission is ever asked for, Nearby devices for Crew Link. Everything else is granted automatically by Android, or declared by a library and never used.
Nearby devices
NEARBY_WIFI_DEVICESFinding other phones on the local Wi-Fi for Crew Link. Declared never for location, and asked for only when you use Crew Link.
Internet
INTERNETGoogle Play, the Daily Challenge word, and Crew Link’s connections on your local network.
Network state
ACCESS_NETWORK_STATEKnowing whether you are online, so the app can say so instead of failing.
Wi-Fi state
ACCESS_WIFI_STATECrew Link reads the phone’s own Wi-Fi address to find the room. Used on the phone only.
Change network state
CHANGE_NETWORK_STATEKeeps Crew Link on the Wi-Fi network when mobile data is also switched on.
Vibration
VIBRATEThe little buzz when you press a button. Switch it off in Settings → Sound.
Keep awake
WAKE_LOCKKeeps the screen on during a Crew Link match; also used by Android’s background job system.
Google Play billing
com.android.vending.BILLINGBuying through Google Play.
Private broadcasts
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSIONA safety lock Android adds so that only CrewPlay can send messages to its own parts.
Notifications
POST_NOTIFICATIONSDeclared by a messaging library that is switched off. CrewPlay never asks for it and sends no notifications.
Push messages
c2dm.permission.RECEIVEDeclared by the same messaging library. Nothing is set up to send CrewPlay a message.
Install referrer
BIND_GET_INSTALL_REFERRER_SERVICEDeclared by a Google measurement library that is switched off.
Foreground service
FOREGROUND_SERVICEDeclared by Android’s background job library. CrewPlay runs no foreground service.
Advertising ID
AD_IDTaken out of the app while it has no ads, so it cannot read your advertising ID at all.
Privacy Sandbox advertising
ACCESS_ADSERVICES_AD_ID, _ATTRIBUTION, _TOPICSAndroid’s newer advertising permissions, also taken out.
6 Security practices
HTTPS for everything online, Android’s private storage for everything on your phone, and nothing for anybody to break into on a server.
- Encrypted in transit: every internet connection CrewPlay makes uses HTTPS. Crew Link’s traffic never leaves your local network and is not encrypted; it carries game information only.
- Stored privately: CrewPlay’s data lives in Android’s private app storage, which other apps cannot read on a normal phone.
- No servers: there is no CrewPlay account database to leak.
- Purchases verified: only a genuine, paid Google Play purchase unlocks anything.
- Untrusted input checked: everything arriving over Crew Link is validated before use.
Read more on our Security & Disclosure page.
7 Deleting your data
There is no account to delete. Everything lives on your phone, so you can remove it yourself in seconds.
- Reset CrewPlay: Settings → Your data → Reset everything clears players, coins, stats and settings on this phone. Purchases stay with your Google Account.
- Or clear its storage: Android Settings → Apps → CrewPlay → Storage → Clear storage.
- Or uninstall: removing CrewPlay removes everything it stored.
- Android backups: if your phone backs up apps, delete old backups in your phone’s backup settings or in the Backups section of Google Drive.
- Anything we hold: email us and we will delete your emails with us, and any order information we are not legally required to keep.
Because CrewPlay has no accounts, Google Play does not need an account-deletion page for it.
8 What’s inside the app
Every library in CrewPlay that could touch data, and whether it is switched on.
| Library | What it does | Status |
|---|---|---|
| Google Play Billing | Purchases and restoring them | On Google handles the payment |
| Google Play in-app updates | Asking Play whether a newer version exists | On Through the Play Store app |
| Google Mobile Ads and User Messaging Platform | Advertising and ad-consent forms | Off Never started; advertising ID permission removed |
| Firebase (Core, Analytics, Messaging, Installations) | Analytics and push messages | Off Not set up; analytics deactivated in the build |
Dart http | The Daily Challenge word request | On HTTPS only |
| Connectivity and network info | Online or offline; the phone’s own Wi-Fi addresses for Crew Link | On Used on the phone only |
| Permission handler | Asking for Nearby devices | On Only for Crew Link |
| Share and link launcher | The share sheet, and opening links | On Only when you tap |
| Wakelock | Keeping the screen on in Crew Link | On |
| Hive, SQLite, preferences | Saving your crew, scores and settings | On On your phone only |
| Flame, audio, animation, fonts | The games, their sounds and the look | On Fonts are bundled, never downloaded |
9 How we answered Google Play
Our answers to Google Play’s questions, and the reasoning behind the ones that need it.
No Does the app collect or share any of the required user data types?
No. Nothing CrewPlay does sends user data to us or to a third party. Three features take a closer look:
- The Daily Challenge word. The request carries no user data. Like every internet request it reveals an IP address to the word service, which we never receive, store or use. Google asks developers to declare IP addresses according to how they are used, for example if an app uses them to work out location; CrewPlay does not use them at all.
- Google Play purchases. The payment is collected by Google Play’s billing system, not by the app. Google’s guidance says payment information collected directly by such a service does not need declaring. The purchase record is checked only on your phone.
- Crew Link. Game data travels only between the players’ own phones on their own local network, when they choose to play together. It never reaches us or any third-party service; each player sees exactly what they would see round one shared phone.
N/A Is all of the user data collected by the app encrypted in transit?
Google only asks this when data is collected. For completeness: every internet connection CrewPlay makes uses HTTPS. Crew Link’s local traffic is not encrypted and carries game information only.
N/A Can users ask for their data to be deleted?
Also only asked when data is collected. You can delete everything yourself in seconds (section 7), and ask us to delete anything we hold.
No Does the app use the advertising ID?
No. The AD_ID permission is removed from the app while it has no advertising, so the ID cannot be read.
N/A Does the app need an account-deletion link?
No. CrewPlay has no accounts to create or delete.
Not yet Has the app had an independent security review?
Not yet. Our own security review and its fixes are summarised on our Security & Disclosure page.
10 When this page changes
We update this page, and our Google Play label, before any version that changes the answers ships.
This page was checked against CrewPlay version 1.0.0 on 22 September 2026. If a future version would collect or share anything, including if advertising or analytics are ever introduced, we will update this page, our Privacy Policy and our Google Play declaration before that version is released.
Version history
| Version | Date | What changed |
|---|---|---|
| 1.0 | 22 Sep 2026 | First version. |