Sill One · DoD
Privacy policy
Sill One is a game about growing plants on a windowsill. It comes in two forms, and they treat your data differently:
| Where you play | What leaves your device |
|---|---|
The Android app, without an account (Google Play, one.sill.app) | Purchases, which go through Google Play; and, once you ask for an ad, the data Google’s ads software collects (below) |
| The Android app or the web version, with an account | Your email address (and, with Google sign-in, the name on your Google account), and your saved game, held by Supabase so it can follow you to another device (below) |
| The web version, without an account | Nothing, apart from the ordinary request for the page itself |
Sill One has no analytics or tracking of its own, and we do not sell your data. The web version has no adverts. The Android app has one kind: a short video you can choose to watch for Leaf Points. Nothing plays unless you ask.
What stays on your device
Your game is saved in the app’s own storage on your phone, tablet or browser. Without an account it stays there and we cannot see it. With an account, a copy of it is kept on our database so it can follow you (Accounts, below), except the growth album, which stays on the device:
- your sill: every pot, the plant in it, and its history;
- your seed pouch, your Leaf Points, and what you have bought or unlocked;
- your notebook, and your cultivar register, including any names you give to plants you bred;
- the growth album: up to one picture a day of each plant, plus any you take. These pictures are drawn by the game. Sill One never uses your camera;
- your settings, such as notifications, touch feedback, the room and the view;
- how many ads you have watched today, so the game can stop at three, and whether you have ever asked for one;
- if you have an account, your sign-in: the sign-in our account provider gave this device, which is what keeps you signed in until you sign out, and a small note of which account it was and whether you used Google or email. It holds no password. Signing out removes both.
Sill One has no access to your location, contacts, camera, microphone or photos. It reads a file only when you choose one to restore a backup.
Adverts (Android app)
What they are. In the Shop and on the Leaf Points page you can choose to watch a short ad for 3 Leaf Points, up to three times a day. There are no banners, no ads between screens, and no ads over your plant. If you subscribe to Sill One Plus or Plus Away, you are not offered ads at all, and the app asks Google for none.
Who provides them. Google, through its Mobile Ads SDK (AdMob), which is built into the Android app. Google uses the data it collects under its own privacy policy; how it uses data from apps like this one is described at policies.google.com/technologies/partner-sites.
What Google’s ads software collects (Google’s disclosure):
- your device’s IP address, which can be used to estimate its general location;
- your advertising ID and app set ID, identifiers Android provides for advertising and measurement;
- how you interact with ads and the app, such as the app starting, taps, and videos viewed;
- diagnostic information, such as how the app and the ads software perform (launch time, hangs, energy use), along with ordinary technical details of the device and app that any ad request carries.
It is sent encrypted (TLS). Google uses it to show ads, measure them, and prevent fraud and abuse. Nothing is sent to Google for ads until you first tap the offer. From then on, once each time the app starts and you open the Shop, the Leaf Points page or Settings, Google’s consent tool checks with Google whether your region needs a consent message, and what you chose; and the Shop and the Leaf Points page fetch the next ad in advance, so it is ready when you ask.
Your choice, in the UK, the EEA and Switzerland. Before any ad is requested you are asked, in a message from Google’s consent tool, whether Google may use your data for personalised ads. You can say no. You will then get non-personalised or limited ads, which Google does not personalise with your data, or none. To change your answer later: Settings → Data → Privacy choices, which appears wherever Google says you must be able to.
Everywhere. You can delete or reset your advertising ID, or turn off ads personalisation, in your phone’s settings (on most Android phones Settings → Privacy → Ads, or Settings → Google → Ads). Or simply never tap the offer. The game is complete without it.
Why we may do this (UK and EEA). Personalised ads, and storing or reading information on your device for them: your consent. Non-personalised and limited ads, and preventing fraud: our legitimate interest in funding a free game. Google may process this data outside the UK and EEA under its own safeguards.
What else leaves your device
Purchases (Android). Purchases are made through Google Play. Google takes the payment under its own privacy policy; we never see your card details. The app is told on your device what you bought, checks the purchase’s signature there, and records it there. We have no server that receives your purchases. Google gives us order records for accounting, tax and refunds, such as an order number, the item, the price, the date, and the country or region of purchase. A free trial is Google Play’s: Google keeps the record of whether your account has had one.
A backup file, if you make one. Settings → Data → Back up this sill writes one file holding your whole sill. The album is not in it. On Android the share sheet opens and you choose where the file goes, whether that is your files, your cloud storage or a message to yourself. In a browser it downloads. We never receive it.
Android’s own device backup. If you have turned on Android’s backup for your phone, Android may include Sill One’s saved game in the backup Google keeps for you, and a new phone may bring it back. That backup is controlled by your Google account settings, not by us, and we cannot see it.
Links you tap. The credits page links to where each photograph came from (Wikimedia Commons and Poly Haven). A link opens in your browser, and that site’s own privacy policy applies.
The web version. Like any website, the web version’s host keeps ordinary request logs, such as IP address, time and page requested. The page loads nothing from any other site.
Accounts
An account is optional, in the Android app and on the web version. Without one the game works in full and nothing about it leaves your device. With one, your sill follows you: sign in on another phone, tablet or the web version and your plants, seeds and Leaf Points are there.
You can sign in with Google, or with an email address and a password. If you make an account, we hold:
- your email address; with Google sign-in, also the name and profile picture address Google sends with it (the game does not show or use them); with email, your password as a one-way hash. We never see a password;
- when the account was made, when an email address was confirmed, when you last signed in, and the date you asked for deletion, if you did;
- your saved game: the plants in your pots and their history, your seeds, your Leaf Points and a record of each change to them, the rooms, pots, lamp and saucers you own, your cultivar register (including names you give), your notebook, and the plants set aside when two devices disagreed;
- for each device you sync, a random device number, when it last synced, and its clock reading at that moment (so we can tell a wrong clock from a problem with the game);
- the logs our provider keeps of requests to its servers, which include IP addresses.
We do not hold your purchases: subscriptions and anything bought with money stay with Google Play, and each device asks Google Play for them. Growth-album pictures are not uploaded.
Who holds it. Supabase, our database and sign-in provider, acting as our processor, in London. Confirmation and password-reset emails are sent through our email-delivery provider. Google handles Google sign-in under its own privacy policy.
Staying signed in. You stay signed in on a device until you sign out or delete the account. If a phone loses the sign-in without you asking, the Android app tries to bring it back quietly: if you had signed in with Google, it asks Android’s Google sign-in whether the same Google account is still on the phone and, if it is, signs you back in as that account only, with a short “Signed in again” message. Google handles that request under its own privacy policy. If it cannot, the game says you were signed out and you sign in again; your plants are safe on the device. Signing out on purpose forgets it all, and nothing is signed in again afterwards.
Why. To provide the account and the sync you asked for (contract), and to keep them secure (legitimate interests).
How long. Until you delete the account. A deletion you ask for in the game is carried out 7 days later, so it can be undone if you change your mind; then the account and everything above is erased. Limited provider logs and backup copies may remain until their retention periods expire.
Notifications
Notifications are off until you turn them on. They are created and scheduled on your device, and no server sends them. There are at most two a day, and none between 21:00 and 07:00. You can turn them off in Settings → Notifications or in your phone’s settings.
Writing to us
Emailing support@daveonduty.co.uk gives DoD your email address and whatever you send, such as a backup file. We use it to answer you, keep it while it is needed for your request or for our legal obligations, and then delete it. Please do not send passwords or other sensitive information. To ask about, or delete, your correspondence with us, write to the same address.
Your choices and rights
- See and take your data. Everything on the device is in the backup file. An account can download everything the server holds for it: Settings → Account → Download my data.
- Delete it. To remove what is on your device, uninstall the app, or clear the site’s data in your browser. To delete your account and the copy of your game it keeps, use Settings → Account → Delete this account, in the app or on the web: it is erased 7 days later, and until then Keep my account cancels it. You can also email support@daveonduty.co.uk from the account’s address; we carry out an email request within 30 days. More on the account and data deletion page.
- Ads data is held by Google, not by us, so we cannot retrieve or delete it for you. Delete or reset your advertising ID (above), and use Google’s own tools at myadcenter.google.com.
- If you are in the UK or EEA you have the right to access, correct, delete, restrict and port your data, to object, and to withdraw consent at any time. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your local data-protection authority.
Children
Sill One is made for people aged 13 and over, and is not directed at children under 13. We tell Google’s ads service that the app is not child-directed, and limit its ads to those rated for teens (T) or below. We do not knowingly create accounts for children under 13. If you believe a child has made one, contact us and we will delete it.
This website
These pages contain no game accounts, advertising or analytics scripts. Their typefaces are served by Google Fonts, which means Google receives your IP address as part of delivering them. The hosting infrastructure may process your IP address and request information to serve and protect the website. Email links open your email application; nothing is sent until you send the email.
Changes
If this policy changes, we will update the date above and describe the change here.
27 September 2026. The adverts in the Android app are now limited to those rated for teens (T) or below, where they were limited to parental guidance (PG).
28 September 2026. Accounts come to the Android app, with Sign in with Google, and an account now keeps a copy of your game so it can follow you between devices (Accounts). A deletion asked for in the game is carried out 7 days later.
30 September 2026. Sill One 1.3: you now stay signed in, and a Google sign-in a phone loses is quietly taken back as the same account (Accounts). The game keeps a small note on your device for this (What stays on your device); it holds no password. What we hold for an account, and what is sent to Google for adverts, are unchanged.
Also for Sill One: terms of use · support · account and data deletion. Retro Casino 5in1 has its own privacy policy.