This policy explains what information Tired Monkey's games collect, why, who receives it, and the choices you have. It applies to our mobile games Orbit, Prism, Loop Blast, Merge Blast, Hex Stack and Pocket Pantheon on the Apple App Store and Google Play (together, the "games"), and to this website.

1. Who we are

The games are published by Tired Monkey v/Patrick Jakobsen Jahn ("Tired Monkey", "we", "us"), a sole proprietorship registered in Denmark, Njalsgade 33, 1. th, 2300 København S, Denmark. For the purposes of data protection law we are the controller of the personal data described in this policy, except where a partner named below acts as an independent controller.

Contact: support@tired-monkey.com

2. The short version

• The games have no accounts. We never ask for your name, email address, phone number, contacts, photos or precise location.
• Your progress, coins, streak, scores and settings are saved on your device, not on our servers.
• The games are free and paid for by ads. Our ad partners use device identifiers and similar data to show ads, measure them and prevent fraud. Where the law requires it, we ask for your consent first, and on iPhone we ask before any app tracking.
• Purchases are handled by Apple or Google. We never see your card or payment details.
• We use analytics to learn how the games are played (for example, which levels are too hard) so we can improve them.
• We do not sell your personal data for money. Some US state laws treat personalised advertising as "selling" or "sharing" data; see US state privacy rights.

3. Data that stays on your device

Each game keeps a save file in the app's own storage on your device. It contains your game progress: runs played, best and recent scores, coin balance and coin history, daily streak, Daily Drop results, level stars, a game in progress (so you can resume it), whether you finished the tutorial, and your sound and vibration settings. It also remembers which purchases you own so ads stay off after you buy Remove Ads.

This save file is not sent to us. It is deleted when you delete the game. Your device's own backup (for example iCloud Backup or Android backup), if you have it switched on, may include it; that backup is handled by Apple or Google under their terms, not by us.

When you tap Share after a game, your device's share sheet opens with a short text about your score. Nothing is shared unless you choose an app to share with, and we do not receive what you share.

4. Data collected when you play

4.1 Advertising

The games show ads: optional reward videos you choose to watch (for example to continue a game or double your coins), and full-screen ads between games, which you can switch off by buying Remove Ads. Ads are delivered by Google AdMob and AppLovin MAX. AppLovin MAX is a mediation platform: it may request ads from other ad networks on our behalf (listed in section 7).

When an ad is requested or shown, these SDKs collect and receive:

• device identifiers: the advertising identifier (Apple IDFA, only if you allow tracking; Google Advertising ID on Android), identifiers for this app on your device (such as Apple's IDFV or Google's App Set ID), and SDK-generated IDs;
• your IP address and an approximate location derived from it (country, region or city, never GPS);
• device and app information: device model, operating system and version, language, time zone, screen size, network type and carrier, app name and version;
• ad interactions: which ads were requested, shown, watched to the end or tapped;
• diagnostics about ad loading and performance, including crashes inside the ad SDK.

This is used to choose and show ads, cap how often you see the same ad, measure ad performance, pay us for ads, and detect fraud and invalid traffic. If you consent (or, outside regions that require consent, unless you opt out), the advertising identifier and ad interactions may also be used to personalise ads based on your activity across apps and websites. Without that consent, you still see ads, but they are non-personalised or contextual and use only limited data. We record the estimated revenue of each ad shown, together with the placement and network.

4.2 In-app purchases

You can buy Remove Ads, a Starter Pack and coin packs. Payment is processed entirely by Apple (App Store) or Google (Google Play); we never receive your name, card details or billing address.

We use RevenueCat to validate purchases and keep track of what you own, so that features like Remove Ads work and can be restored. RevenueCat receives: a random, anonymous app user ID it creates for your install; the store receipt or transaction details (product, price, currency, store country, purchase date, transaction ID); device and app information (operating system, app version, language); and your IP address.

4.3 Analytics

We use Google Analytics for Firebase to understand how the games are played, and Firebase Remote Config to adjust game settings remotely, including testing different settings with groups of players. In the EEA, the UK and Switzerland, analytics only runs after you consent to it in the consent message (see section 5).

Firebase receives:

• gameplay events: games started, resumed and finished, scores, moves, lines or crystals cleared, levels and stars, Daily Drop results, tutorial steps, power-ups and boosters used, coin balance, settings changed, and taps on Share;
• ad and purchase events: which ad placements were offered and their outcome, estimated ad revenue, and which products were bought or restored (not payment details);
• an analytics ID for your install, device model, operating system, app version, language, approximate location (country/region, derived from your IP address) and session information (first open, session start and length).

We use this to fix bugs, balance difficulty, design better levels, decide how often ads appear, and measure how the games are doing. We look at it in aggregate; we do not use it to find out who you are.

4.4 When you contact us

If you email us, we receive your email address, what you write, and anything you choose to attach (such as a screenshot or your device model). We use it only to answer you and to keep a record of the conversation.

4.5 This website

This website has no cookies, analytics or ads. Our hosting provider, Cloudflare, processes your IP address and standard request information (such as browser type) in server logs to deliver the pages and keep the site secure.

5. Consent and your choices

Consent in the EEA, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, the games show a consent message (provided through Google's User Messaging Platform, which follows the IAB Transparency & Consent Framework) the first time you open them. It lets you accept or refuse personalised ads, analytics and the other purposes listed, per purpose and per partner. If you refuse, you still see ads, but they are not personalised, and no analytics data is collected.

You can change your choice at any time from Settings → Privacy choices in each game.

App Tracking Transparency (iPhone and iPad)

On iOS, the games ask for your permission before we or our ad partners access your device's advertising identifier (IDFA) or otherwise track you across apps and websites owned by other companies. If you choose "Ask App Not to Track", the IDFA is not available to us or our partners and ads are not personalised based on tracking. You can change this at any time in Settings → Privacy & Security → Tracking on your device.

Android advertising ID

On Android you can reset or delete your advertising ID, or opt out of ads personalisation, in your device settings (usually Settings → Privacy → Ads or Settings → Google → Ads).

US state privacy rights

If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia or Utah), you can ask to know, access, correct or delete personal data, and you can opt out of the "sale" or "sharing" of personal data and of targeted advertising. We do not sell personal data for money, but letting ad partners use device identifiers for personalised ads may count as "selling" or "sharing" under these laws. To opt out, use Settings → Privacy choices in the game (where shown), choose "Ask App Not to Track" (iOS) or delete your advertising ID (Android), or email us. We do not discriminate against you for using these rights.

6. Legal bases (EEA, UK and Switzerland)

7. Who receives data

We share data only with these partners and only for the purposes above:

• Google (AdMob, Google User Messaging Platform, Firebase): advertising, consent, analytics and remote configuration. Privacy policy · How Google uses information from apps that use its services
• AppLovin (AppLovin MAX): ad mediation and advertising. Privacy policy
• Other ad networks that AppLovin MAX requests ads from on our behalf. We list each one here, with a link to its privacy policy, when we enable it.
• RevenueCat: purchase validation and entitlement tracking. Privacy policy
• Apple and Google Play: app distribution and payments, under their own privacy policies.
• Cloudflare and Google (Gmail): hosting this website, and forwarding and storing support email.

RevenueCat, Google for Firebase, and our hosting and email providers process data on our behalf as processors. Ad networks may act as independent controllers for some uses, such as improving their own ad services and preventing fraud, under their own privacy policies.

We may also disclose data if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of the games, in which case this policy continues to apply to data transferred.

8. International transfers

Our partners process data in the United States and other countries that may not have the same data protection laws as yours. Where data from the EEA, UK or Switzerland is transferred, it is protected by the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the partner is certified, or by the European Commission's Standard Contractual Clauses (and the UK addendum).

9. How long data is kept

• Save data on your device: until you delete the game or reset it.
• Analytics data: 14 months at event level, after which it is deleted or kept only in aggregate.
• Purchase records (RevenueCat): as long as needed to provide and restore your purchases, and as long as tax and accounting law requires.
• Ad data: according to each ad partner's own retention policy.
• Support emails: up to 2 years after the conversation ends.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy of it (portability), and withdraw consent at any time (this does not affect what was done before). You also have the right to complain to a data protection authority, in particular in the country where you live or work. Our lead authority is the Danish Data Protection Agency (Datatilsynet).

To use a right, email support@tired-monkey.com and tell us which game and which platform (iPhone/iPad or Android). Because the games have no accounts, we hold no name or email address for you, so we may ask for details that let us find your data. We answer within one month.

You can delete everything stored on your device yourself by deleting the game. See also how to delete your data.

11. Children

The games are not directed at children. They are made for a general audience of players aged 13 and over, and we do not knowingly collect personal data from children under 13 (or under the age of digital consent where you live, which is up to 16 in the EEA). If you believe a child has given us personal data, contact us and we will delete it.

12. Security

Data sent by the games to our partners travels over encrypted connections (HTTPS). We limit who can access our partner dashboards, protect those accounts with strong authentication, and choose partners that follow recognised security practices. No method of transmission or storage is completely secure, but we work to protect your data.

13. Changes to this policy

We may update this policy, for example when we add a game or change a partner. We will change the date at the top and, for significant changes, tell you in the games or on this website before they take effect.

14. Contact us

Tired Monkey v/Patrick Jakobsen Jahn
Njalsgade 33, 1. th, 2300 København S, Denmark
Email: support@tired-monkey.com