Privacy policy
We built our apps to need as little of your data as possible. This page says what we do collect, who else sees it, and how to change your mind.
The short version
- Our games and apps work without an account. We never ask for your name, email address, contacts, photos or precise location.
- Free games show ads. The ad network and our analytics tools receive a device identifier and basic device data. In the EEA, the UK and Switzerland, ads are only personalised if you say yes.
- Purchases go through Apple or Google. We see what you bought, never your card.
- You can stop tracking, change your consent, or ask us to delete what we hold. See Your choices.
Who we are
PebbleSmith is a small software studio based in Switzerland. We publish mobile games and apps on the Apple App Store and Google Play. For anything about your data, write to hello@pebblesmith.com
What we collect, and why
| Data | Where it comes from | Why we use it | Legal basis |
|---|---|---|---|
| Device and app data: model, operating system version, language, country (derived from your IP address), screen size, app version | Your device | Run the app, fix crashes, see which features are used | Contract; legitimate interest; consent for analytics where the law requires it |
| Gameplay events: levels started and finished, scores, session length, features used | The app | Balance difficulty and improve the games | Legitimate interest; consent where the law requires it |
| Crash reports: stack traces and device state at the moment of a crash | Firebase Crashlytics | Find and fix bugs | Legitimate interest |
| Advertising identifier (IDFA on iOS, GAID on Android) and ad interaction data | Your device, via Google AdMob and the ad networks it works with | Show ads, measure them, limit how often you see the same one; personalise ads only with your consent | Consent for personalised ads; legitimate interest for non-personalised ads and frequency capping |
| Purchase records: product bought, time, store transaction identifier | Apple App Store or Google Play | Deliver what you paid for, restore purchases, handle support and refunds | Contract |
| Consent choices: your answers in the consent form and the iOS tracking prompt | The app | Respect your choices and show that we asked | Legal obligation |
| Cloud-saved progress and achievements | Apple Game Center or Google Play Games, only if you sign in there | Restore your progress on a new device | Contract (you choose to sign in) |
We do not collect your name, email address (unless you write to us), phone number, contacts, photos, microphone audio, precise location, or anything you type beyond gameplay.
Who else receives data
- Google AdMob serves the ads, together with the ad networks it works with. Google publishes its privacy policy and the list of ad partners.
- Google Firebase provides analytics, crash reporting and remote configuration. See Privacy and security in Firebase.
- Apple (App Store, Game Center, TestFlight) and Google (Google Play, Play Games Services) handle downloads, purchases and cloud saves under their own policies.
We do not sell personal data and we do not share it with data brokers.
Ads and tracking
- Free games are paid for by ads. Some are rewarded ads: you choose to watch them for an in-game bonus.
- On iOS, the app asks for permission before tracking. If you choose "Ask App Not to Track", ads are not personalised using your identifier.
- In the EEA, the UK and Switzerland, a consent form appears before any ad loads. You decide what to allow and can change it at any time under Settings > Privacy in the app.
- Buying "Remove ads" removes interstitial and banner ads. Rewarded ads stay available because you choose them. Analytics and crash reporting continue.
Children
Our apps are not directed at children under 13, or under the higher age your country sets for digital consent. They are rated 12+ on the App Store. We do not knowingly collect data from children; if you believe a child has used one of our apps, write to us and we will delete the data.
How long we keep data
- Analytics: up to 14 months, then only in aggregated form.
- Crash reports: 90 days.
- Ad data: handled by the ad network under its own policy; we keep only aggregated revenue reports.
- Purchase records: as long as needed to support your purchase and as long as accounting law requires.
- Consent records: until you change them, plus as long as the law requires us to show that we asked.
Where data is processed
Google and Apple process data on servers in the European Union, the United States and elsewhere. Transfers out of Switzerland, the EEA and the UK rely on the EU-US Data Privacy Framework and its Swiss and UK extensions, or on Standard Contractual Clauses.
Your choices and rights
Depending on where you live, you can ask to access, correct, delete, restrict or export your data, object to processing, and withdraw consent at any time. You can also complain to the Swiss Federal Data Protection and Information Commissioner or to your local data protection authority.
To ask, email hello@pebblesmith.com. Because our apps have no accounts, we identify your data by the data ID shown in the app under Settings > Privacy; please include it. We answer within 30 days.
On the device itself: iOS lets you block tracking under Settings > Privacy & Security > Tracking, and Android lets you delete your advertising ID under Settings > Google > Ads.
Security
Data travels encrypted. We hold the minimum, and access to analytics and ad dashboards is limited to the people who run the studio.
Changes to this policy
When this policy changes, we update this page and the date at the top. For meaningful changes, the app tells you at its next launch.
Contact
PebbleSmith, Switzerland. Email hello@pebblesmith.com