Sunbough / Privacy

Privacy Policy for Sunbough

1. The short version

• The game is free and paid for by ads. There are no in-app purchases and no accounts. We do not ask for your name, email, phone number, contacts, photos or location.
• To show ads, measure the game and fix crashes, the game uses partner tools that receive device and gameplay data, including the advertising identifier where you allow it.
• The short tutorial you play when you first open the game runs with no ads, analytics, crash reporting or install attribution: the game collects and sends nothing while you play it.
• You choose: when the tutorial ends, before your first puzzle, you are asked about ad personalization where the law requires it (EEA, UK and Switzerland) and, on iPhone, about tracking. If you closed the game before answering, you are asked the next time you open it. Saying no still gives you the full game. No ads are requested and analytics, crash reporting and install attribution do not start until you have answered.
• The game is intended for players aged 13 and up. It does not ask for your age and does not read Apple's age range (section 6).

2. What we collect

We collect no data you type in. The game and its partners collect:

When each partner starts. No partner starts during the first-launch tutorial. Ads, Firebase Analytics and Crashlytics start only after you have answered the consent prompts, and Analytics and Crashlytics only if you allowed them. Firebase Remote Config also runs when you decline analytics (after the tutorial), so that a switch that turns ads off can reach every player; it receives only the "Remote settings request" data above. If you decline after agreeing earlier, the game turns Analytics and Crashlytics off and clears the Analytics data stored on your device.

AppsFlyer (install attribution) starts only after you have answered every consent prompt, and only if you agreed to data use in the consent form where that form applies. It reads the advertising ID only if you allow tracking; if you do not, it starts without that ID. If you later withdraw consent, AppsFlyer stops and is not started again until you consent again.

Local-only data (never sent off the device). These records live only on your device and are not collected, transmitted or shared: your settings (automatic dots, sound, haptics, theme, motion, high-contrast trees), your tutorial progress, your boards in progress with their pencil marks and undo history, your completed puzzles, and your daily streak. Deleting the app deletes all of them. Gameplay events in the table above may say that a puzzle was completed or a hint was used, but the stored records themselves never leave the device.

3. How we use it

• To run the game: remote settings (Firebase Remote Config) and crash fixing (Crashlytics).
• To show ads: there are no ads during the tutorial or your first three puzzles. After that: a labelled banner below the game's tools, which never covers the board; a full-screen ad that can appear only after you finish a puzzle and tap Next, at most once every 90 seconds and never during a puzzle; and an optional rewarded ad you can choose to watch for an extra hint (you see the reward before you choose). Google AdMob uses the data in section 2 to pick and measure ads.
• To measure and improve: retention, playtime, tutorial completion and ad revenue reports. We may test different game settings on groups of players.
• To learn where players come from: AppsFlyer tells us which ad campaign or store listing an install came from and receives the revenue each ad earned, so we can see which sources pay back. It does not receive our gameplay events. On iPhone, Apple's SKAdNetwork reports go to the ad networks and a copy to AppsFlyer.
• Legal bases (EEA/UK): consent for personalized ads, tracking and advertising identifiers; legitimate interests for crash reporting, security, fraud prevention and basic aggregated analytics; legal obligation where the law requires it.

4. Who receives data

We do not sell your personal data for money. Some laws, such as California's, treat sharing data with ad partners for cross-context behavioral advertising as a "sale" or "share". Our ad partner and our measurement partner do receive data, so we treat it as one and let you opt out (section 8).

Our partners process data under their own terms and privacy commitments, which provide protection of user data at least equal to this policy. We also disclose data if the law requires it, or to protect players and the game from fraud.

5. What adapts to you

Nothing else adapts to you. Puzzles, hints and ad frequency follow the same fixed rules for every player:

• Every puzzle has exactly one solution that can be reached by logic.
• A hint explains a step from the current board; it never changes your board.
• Full-screen ads never appear when the app opens, during a puzzle, after a mistake, or when you tap Hint.

6. Children and teens

The game is intended for players aged 13 and up and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the game, contact us and we will delete what we can link to that device.

The game does not ask for your age or birthdate, and this version of the game does not read Apple's age range, so it receives no age information.

7. How long we keep data

8. Your choices and rights

• Report an ad: if you see an ad that is inappropriate or not suitable for your age, use Settings › Report an ad in the game, or email [email protected].
• Everyone: decline personalization when you are asked after the tutorial, or later in the game's Settings › Privacy settings (where the consent form applies). Your iPhone controls tracking and the advertising identifier at any time: Settings › Privacy & Security › Tracking. Deleting the app stops all collection by the game and removes all on-device data, including your stored consent answers. You can also email us.
• EEA, UK and Switzerland (GDPR / UK GDPR): rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent at any time, and the right to complain to your data protection authority.
• California and other US states with privacy laws (CCPA/CPRA and similar): the right to know, delete and correct, and to opt out of the "sale" or "sharing" of personal data for targeted ads. Opt out by declining personalization in the consent form or turning off tracking as above. We do not discriminate against players who use these rights.
• Other countries: where your law gives you rights to access, correct or delete data or to withdraw consent, you can use them the same way.
• How to ask: email [email protected] with the subject "Privacy request". There are no accounts and the game shows you no identifier, so we usually cannot link the data our partners hold for an anonymous device to you as a person. Tell us what you want and we will do what we can. We answer within 30 days, or the period your law sets.

9. Security and international transfers

Data is encrypted in transit (HTTPS). Partners may process data in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses in our partners' terms.

10. Changes

We will update this page and its date when our practices change, and ask for consent again if a change requires it.

11. Contact

reinforce42, [email protected].