Privacy Policy
Last updated 28 October 2026
The short version. You can play Fizzle Wizards without giving us any personal information. We keep your game progress on our server so it isn't lost. If you choose to sign in, we also keep your email address, only to send you sign-in codes. We don't sell your data, we don't show ads yet, and we don't use tracking or analytics tools.
This policy explains what Fizzle Wizards ("we", "us") collects when you play at play.fizzlewizards.com or visit fizzlewizards.com, why, and the choices you have. Fizzle Wizards is run from Australia, and we handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Questions or requests: support@fizzlewizards.com.
What we collect
| What | Why |
|---|---|
| A random player id and a sign-in token | Created the first time you play, so your progress can be saved. They don't identify you as a person. |
| Your game save: coins, XP and level, items you own and wear, wins, losses and rank, the theme you chose, and daily rewards claimed | To run the game and keep your progress. |
| A history of your coin changes: how many coins, what for (a duel, the daily gift, a shop purchase and so on) and when | To answer support questions, fix mistakes, and make sure rewards are only paid once. |
| Messages you send through Contact support in Settings, with your player id and the category you chose, and any notes or reply we write | To answer you. If you linked an email, we reply there. We keep them while they are useful and delete them when you delete your account. |
| The wizard name and region you choose (optional) | Shown to other players in online duels and on the leaderboard. Please don't use your real full name. |
| Online duels: who played, the spells cast, emotes sent and the result | To run online matches fairly (the server decides each round) and to update ranks and rewards. |
| Your email address, only if you sign in | To email you a 6-digit sign-in code, and to link your progress to you on any device. We don't send marketing email. |
| Your IP address, when you ask for a sign-in code | To stop abuse (too many codes from one place). We store a scrambled (hashed) version, not the address itself, and only to count recent requests. |
| Standard server logs: your IP address, the time, the page or request, and your browser type | Recorded by our hosting provider when you use the site or game. Used to keep the service secure and working and to fix faults, and not to identify you. |
We don't collect your real name, age, location, contacts, photos or payment details.
Cookies and your device
We don't use cookies, advertising identifiers or analytics. The game uses your browser's local storage to remember your player id and token, a copy of your save so the game opens instantly, and settings such as text size. You can remove it by clearing this site's data in your browser. If you play as a guest and haven't signed in, that also means you can't get back to that progress.
Services we use
- Microsoft Azure hosts the game and stores saves (in Azure SQL Database and Azure Storage). Data is stored in Microsoft's Australia East region.
- Azure Communication Services (Microsoft) sends the sign-in code emails.
- Google Fonts provides the pixel fonts used by the game and this website. Your browser downloads them from Google, which means Google sees your IP address. See Google's privacy policy.
These providers process data for us under their own security and privacy commitments. We don't sell or rent your information to anyone, and we don't "share" it for advertising.
Overseas. Your save is stored in Australia. Google Fonts is served from Google's global network, and our email and hosting providers may handle sign-in emails and technical logs in other countries, including the United States and Singapore. We only use providers that have their own security and privacy commitments, and we send them only what they need to do the job.
Advertising
We don't show ads yet. We plan to add optional "watch an ad for coins" rewards using Google's ad services. Before we do, we'll update this page to explain what Google collects, and players in regions that require it (such as the UK and EU) will be asked for consent first.
Creators
Some players are invited to be creators and can design new items on the Create page. Their drawings, colours and chosen names are stored with their player id and are only seen by the people who run the game until an item is approved. Creators cannot message anyone. If a creator chooses, an approved item can show "Designed by" and the nickname they typed for that purpose; we never show an email address or account details. A creator's designs and nickname are deleted with their account.
How long we keep it
- Your save, coin history and duel records are kept while your account exists, so your progress isn't lost.
- Sign-in codes expire after 10 minutes. Request counters for abuse protection are kept for about an hour.
- If you ask us to delete your data, we delete your save, coin history, email address, leaderboard entry and the records of your online duels. We keep a note that the deletion happened (the date, your old player id and totals such as coins and level, but no name or email), so we can show we did it.
Your choices and rights
- Change your wizard name and region at any time in the game.
- Get a copy of your data, ask us to correct it, or ask us to delete it (you can also delete your account yourself in the game's Profile): email support@fizzlewizards.com. Include your wizard name, or the email you sign in with, so we can find your save. We may ask you to confirm the request from that email address. We'll reply within 30 days, and usually much sooner.
- If you're unhappy with how we handle your data, please contact us first and we'll respond within 30 days. If you're not satisfied, you can complain to your local privacy regulator: in Australia, the Office of the Australian Information Commissioner (OAIC); in the UK, the ICO; in the EU, your national data protection authority.
If you live in the UK or EU (GDPR), you can also ask us to restrict or stop processing your data, to give you your data in a portable format, and to withdraw consent where we rely on it. We process your data because it's needed to provide the game you asked to play (contract), and for our legitimate interest in keeping the game fair, secure and free of abuse. We don't make decisions about you by automated means that have legal or similarly significant effects. If you live in a US state with a privacy law (such as California), you can ask to know, correct or delete your data; we don't sell it or use it for targeted advertising, and we won't treat you worse for asking.
Children
Fizzle Wizards is a casual game that can be played as a guest without giving personal information; guests only get a random player id (see above). Signing in with an email address is for players aged 13 or over, or younger players with a parent's or guardian's permission. We don't knowingly collect personal information, such as an email address, from children under 13 without that permission. If you think a child has given us their email without permission, contact us and we'll delete it. Please don't use a real name or personal details as a wizard name.
Security
The game only talks to our server over an encrypted connection (HTTPS). Sign-in tokens are signed so they can't be forged, and only the people who run the game can see stored data, through a sign-in-protected admin tool that records every change they make.
If something goes wrong
If there is a data breach that is likely to cause serious harm, we'll tell the people affected and the OAIC as the Notifiable Data Breaches scheme requires (and regulators elsewhere, such as under GDPR), and explain what happened and what to do.
Changes to this policy
We'll update this page when what we collect changes (for example, when ads are added) and change the date at the top. For significant changes, we'll also let players know in the game.