SKIP AD: Popup Panic

Privacy Notice

Effective 14 August 2026   ·   Last updated 25 September 2026

The ads, purchases, connected wallet and age-choice features below describe the Android app. The current iOS app (0.3.4) keeps gameplay local and does not include these services. Apple handles iOS downloads and any platform diagnostics under its own privacy settings and privacy policy.

The short version

Request wallet or data deletion

You do not need to connect an account for ordinary play. On Android, connecting a Gacha wallet lets you recover it on another Android device.

Most progress and settings stay on your device. Ducket stores your connected Gacha wallet for recovery.

Players under the age of 18 or whose age is unidentified see a basic experience without in-app purchases, rewarded ads, and Usage & attribution.

Players 18 years old and above see the standard version with optional in-app purchases, rewarded ads, and Usage & attribution. Usage & attribution is an Android-only option.

This website uses Plausible Analytics, which sets no cookies.

Ducket does not sell your information or build advertising profiles about players.

Who we are

SKIP AD: Popup Panic is made and published by Ducket LLC. This notice explains how the SKIP AD app and the website at skip-ad.xyz (together, “SKIP AD”) handle personal information. Ducket determines how the app and website use the information described here; providers may also process information under responsibilities described in their own privacy policies.

Ducket LLC, 1968 S COAST HWY 5468, Laguna Beach CA 92651, United States.

Questions? Email privacy@skip-ad.xyz.

What stays on your device

SKIP AD saves your ordinary game progress, settings, self-declared age-group choice, Android Usage & attribution setting, and limited reward and purchase recovery state on your device. Ducket cannot recover the ordinary local save. If you connect a Gacha wallet, its token balance, Gacha prizes, pull progress and purchase recovery records are also stored by the wallet service described below.

We do not ask for your date of birth or exact age. On Android, players without a readable saved choice can play in the provider-free lane. Before optional services become available, SKIP AD asks whether you are “18 or older” or “Under 18.” This is a self-declared choice, not verified age. It is stored only on your device and is used to select the provider-free lane or determine eligibility for optional adult services. If the choice cannot be saved or read, optional providers remain off.

Clearing the app's storage or uninstalling the app removes the local save. SKIP AD is configured not to include that save in Android cloud backup or device transfer.

What leaves your device

Most of SKIP AD works without sending anything to Ducket. This table summarizes the exceptions, and the sections beneath it provide further detail.

What leaves your device Who receives it Why How long
Product, purchase status or token, entitlement, a pseudonymous RevenueCat App User ID, and technical verification information Google Play, RevenueCat, and Ducket's wallet service on Cloudflare Complete, verify, restore and analyze optional purchases requested by a player who chose “18 or older” While the entitlement is active, plus the period needed for accounting and dispute resolution
Verified Google account identifier, wallet and installation identifiers, sign-in verification information, Gacha balance, pulls and prizes, and purchase recovery records Google for sign-in; Ducket and Cloudflare for the connected wallet; RevenueCat receives the wallet identifier for purchase verification Recover a connected Android wallet, synchronize Gacha across Android devices, and prevent duplicate grants and spending Until you delete the connected wallet or ask us to delete it. Limited records remain to prevent old purchases granting tokens again and to meet legal, security and dispute needs
IP address and general region; device, app, and other identifiers; ad interactions; diagnostics; and privacy choices Google Mobile Ads Deliver and measure an optional rewarded ad requested by a player who chose “18 or older,” prevent fraud, and honor privacy choices Under Google's own retention rules
App version, device model and operating system, locale and time zone, an install identifier, general region, install-referrer or campaign information, session details, Layers’ first-open event, and game events for app opening, game start or end, verified rewards, and verified purchases Layers Measure basic Android game use and identify which campaign led to an install. Only after a player chooses “18 or older” and turns on Usage & attribution Collected only while Usage & attribution is on; existing records remain under Layers’ retention rules
Crash and performance diagnostics collected by the operating system or store Google Play or Apple, according to device and account settings Diagnose crashes and fix problems Under the platform provider's retention rules
Your email address, your message, and anything else you choose to send Ducket Answer support and privacy requests For as long as needed to answer the request, keep a record of the response, meet legal obligations, protect security, or resolve disputes
Page address, referrer, and ordinary web-request information Plausible, Cloudflare Count website visits, and deliver and protect the site Plausible retains aggregate website statistics and does not store raw IP addresses or persistent identifiers. Cloudflare retains request and security data under its own rules

Google Play purchases and recovery

Google Play handles downloads, updates, store accounts, payments, and transactions. For Android purchases, Google Play and RevenueCat process the request. Players who chose “18 or older” can buy the one-time Ad Smasher 2000 upgrade or repeatedly buy Gacha Bundle, which gives 10 gacha tokens per completed purchase. Ducket and RevenueCat receive product and transaction identifiers, purchase status, entitlement information, a pseudonymous RevenueCat App User ID, and technical verification information. RevenueCat also provides purchase-history and revenue analytics. Ducket does not receive full payment-card details.

A connected wallet uses its opaque wallet identifier as the RevenueCat App User ID. Store restoration and wallet recovery preserve eligible purchases and unspent tokens; reinstalling does not reset tokens you have already spent. Google Play may also provide crash and performance reports according to your device and account settings.

Google Privacy Policy · RevenueCat Privacy Policy

Connected Gacha wallet

In Android version 0.3.5, players who chose “18 or older” can connect their Google account to recover a Gacha wallet on another Android device using the same account. Google handles sign-in; SKIP AD does not issue a separate password. Ordinary play and guest Gacha remain available without connecting. Connected Gacha requires an internet connection. This does not link a wallet to the iOS app.

Google provides an account identifier and a signed credential to verify sign-in. That credential can contain a profile name and email address; the service processes it in memory for verification, then discards those claims. We do not retain them in the wallet or send them to RevenueCat. Ducket's service, hosted by Cloudflare, stores the verified identifier, an opaque wallet identifier, installation and session information, Gacha token balance, pulls and prizes, and purchase verification and recovery history. Cloudflare also processes request information to operate and protect the service.

Free and purchased Gacha tokens appear together and work the same way. Purchase records stay separate behind the scenes to handle refunds and prevent a purchase from granting tokens more than once. Clearing a local save or uninstalling the app does not erase the connected wallet.

Rewarded ads and ad choices

After a player chooses “18 or older,” that player may choose to watch a rewarded ad. Google Mobile Ads and Google’s User Messaging Platform (UMP) may process the IP address and general region, device and app information, other device or app identifiers, ad interactions, diagnostics, and privacy choices to deliver and measure the ad, prevent fraud, and honor those choices.

SKIP AD requests non-personalized ads globally and removes Android permissions for the Advertising ID, Topics, and AdServices attribution APIs. Non-personalized ads still involve the processing described above and may use other device or app identifiers. After a player chooses “18 or older,” SKIP AD refreshes Google’s consent information before gameplay. In the European Economic Area, the United Kingdom, or Switzerland, it shows Google’s published European message when Google reports that a form is required, and it initializes Mobile Ads only when Google reports that ads may be requested. The app shows Google’s Privacy choices entry only when Google requires that option.

Google advertising and data

Optional Usage & attribution on Android

Usage & attribution is available on Android only after a player chooses “18 or older.” It remains off by default and starts only if the player turns it on. When enabled, Layers may receive the app version, device model and operating system, locale and time zone, an install identifier, general region derived from the IP address, install-referrer or campaign information, session details, an SDK-generated first-open event, and game events for app opening, game start or end, verified rewards, and verified purchases.

This helps Ducket understand whether the game works and which campaign led to an install. Ducket does not send Layers a player’s name or email address. Turning Usage & attribution off stops future Layers collection after the integration shuts down; it does not automatically delete information Layers already holds. The iOS app does not include Layers.

Layers Privacy Policy

Support and privacy requests

If you contact us, we receive your email address, your message, and anything else you choose to send. If the app shows a Support ID for a purchase problem, include it if you can; that ID may help us locate the relevant purchase record. Do not send your Google or Apple password or full payment-card information.

This website

Cloudflare receives ordinary web-request information, such as your IP address, browser details, and routing data, in order to deliver and protect the site.

We use Plausible Analytics to count visits and see which pages are useful. It receives the page address, the referrer, and ordinary request information. Plausible sets no cookies and stores no persistent cross-site identifier, and it hosts this data in the European Union.

Plausible Data Policy · Cloudflare Privacy Policy

Why we use it

We use the information described above to:

  • deliver downloads, purchases, rewards, purchase restoration, and connected Gacha wallet recovery;
  • deliver an ad requested by a player who chose “18 or older”;
  • remember and honor your privacy choices;
  • measure basic game use when a player who chose “18 or older” turns on Usage & attribution;
  • operate and protect the app and the website, prevent fraud, and fix problems; and
  • answer support and privacy requests.

Ducket does not use information to make automated decisions that produce legal or similarly significant effects about you, or to build cross-app advertising profiles. Providers may carry out the ad-delivery, attribution, fraud-prevention, and aggregate-analytics processing described above.

Where privacy law requires a legal basis, we rely on the following:

  • Contract: to provide the features or purchases you request.
  • Consent: for optional Usage & attribution, and for advertising and device storage where consent is required. Where consent is the basis, you can withdraw it at any time, and doing so does not affect anything we did before you withdrew it.
  • Legitimate interests: to operate and secure the app and the website, prevent fraud, understand basic website use, and answer support requests.
  • Legal obligations: where we must keep or disclose information under applicable law.

Your choices and rights

Everyone

Players who choose “Under 18,” and players with no readable choice, remain in the provider-free lane. Players who choose “18 or older” can:

  • leave Android Usage & attribution off, or turn it off later;
  • revisit Google’s Privacy choices from the app’s Options screen when Google requires that entry;
  • change the saved age-group choice from Options when no game is active; a fresh launch is required before a change affecting provider access takes effect;
  • choose not to watch a rewarded ad, make a purchase, or connect a Gacha wallet; and
  • clear the local save by clearing app storage or uninstalling the app.

Europe, the United Kingdom, and Switzerland

You may ask us to give you access to, correct, delete, restrict, or provide a portable copy of personal information connected to you. You may object to processing based on our legitimate interests, and you may withdraw consent at any time. You may also complain to your local data-protection authority.

United States

Ducket does not sell personal information and does not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not use or disclose sensitive personal information for any purpose that would require us to offer a right to limit. Google Play’s Data safety disclosure uses “shared” as a store-label term for certain SDK transfers; it is a different classification from California’s statutory term “sharing.”

Depending on your state, you may have the right to know what personal information we hold, to obtain a copy of it, to correct it, to delete it, and to opt out of targeted advertising, sale, or profiling. The table above sets out the categories we handle, who receives them, why, and how long they are kept. You may use an authorized agent to submit a request on your behalf; we will ask for proof that they are authorized.

Where applicable state law gives you an appeal right, you may appeal by replying to our decision or by emailing privacy@skip-ad.xyz with “Appeal” in the subject line. We will respond within the time that law requires and explain any further regulator contact available to you.

Making a request

Email privacy@skip-ad.xyz to exercise these rights. We may need enough information to verify the request and locate the relevant record. We aim to respond within 30 days, and within 45 days where US state law sets that period. We will not treat you differently for exercising any of these rights.

Delete your SKIP AD wallet or data

You can request deletion without installing or opening SKIP AD. Email privacy@skip-ad.xyz with “Delete my SKIP AD wallet” in the subject. Tell us that you used Android and whether you want your connected wallet deleted or have another data request. A purchase receipt is not required to start a request. Include a Support ID or store order reference if you already have one.

We will reply to establish which records belong to you and verify your request before deleting them. Do not send passwords, sign-in codes or full payment-card details. We aim to respond within 30 days and will explain any further verification or delay.

When your app includes the option, you can also open Options, choose “Delete connected wallet”, and confirm after the countdown. Deletion permanently removes the cloud token balance, Gacha prizes, pull progress and purchase recovery history. We also request removal of the associated RevenueCat customer record; provider delays can leave cleanup pending.

Local coins and cosmetics stay on your device, and Ad Smasher remains restorable through Google Play. Deletion does not refund purchases or delete your Google account. We cannot remotely delete a save that exists only on your device; clear app storage or uninstall to remove it. Uninstalling alone does not delete a connected wallet.

Limited anti-fraud, deletion-recovery, legal and purchase records can remain as explained under Retention. For data previously sent to Layers, support handles the provider deletion request separately; turning off Usage & attribution does not erase past records.

Players who choose “Under 18”

SKIP AD is designed for people aged 13 and older. The in-app age-group choice is self-declared; SKIP AD does not verify age or ask for a birth date. Players who choose “Under 18,” and players whose choice is missing or unreadable, use the provider-free lane. In-app purchases, rewarded ads, connected wallets, Google’s consent tool, and Usage & attribution remain unavailable, while local gameplay, the Shop, and local Gacha remain available.

Children under 13

SKIP AD is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has sent information to Ducket, email privacy@skip-ad.xyz so we can investigate and delete it where required.

How long we keep information

The local save stays on your device until you clear app storage or uninstall the app.

Deleting a connected wallet removes its cloud balance and recovery history and requests removal of its RevenueCat customer record. Completion may take longer when a provider is unavailable. We permanently retain limited opaque or hashed identifiers to prevent a deleted wallet or previously granted purchase from being restored as new tokens. These do not retain the old token balance or prizes. Security records that let a previously connected device finish cleanup may also remain. A deletion retry record is normally removed after 30 days, or after pending provider cleanup finishes if that takes longer. Store purchase records and records needed for legal, accounting, security or dispute purposes may remain. A later store restoration may create a new purchase-verification record.

The table above gives the retention period for each category that leaves your device. In general, Ducket and its service providers keep purchase, privacy-choice, attribution, security, website-analytics, and support records only as long as needed to provide the feature, meet legal or accounting duties, prevent fraud, resolve disputes, or maintain the service. Provider backups and security logs may persist for a limited further period under their own retention rules.

Where information is processed

The providers listed above may process information in the United States, the European Union, or other countries where they operate.

When Ducket is responsible for a restricted international transfer, we rely on the safeguard that applies under the relevant provider contract, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an applicable Data Privacy Framework certification. Email privacy@skip-ad.xyz for information about the safeguards applicable to a particular transfer.

Security

We use reasonable technical and organizational measures to protect information, including excluding the ordinary Android save from platform backup, protecting wallet sign-in credentials on the device, encrypted connections, and checks against duplicate purchase grants and spending. No method of storage or transmission is completely secure.

Changes

We will update this notice before SKIP AD's data practices materially change, and we will show an in-app notice when a change is material. The dates at the top show the current version. Where a change requires your consent, we will ask for it before the change takes effect.

Contact

Ducket LLC 1968 S COAST HWY 5468,
Laguna Beach CA 92651,
United States.

Revision 2026-09-25-Android-wallet