Privacy Policy for Pastry Pipeline
1. Introduction
This Privacy Policy explains how the mobile game Pastry Pipeline ("the App", "we", "us", or "our") collects, uses, and shares information when you play. Pastry Pipeline is a casual puzzle/arcade game available on Android (Google Play) and iOS (Apple App Store).
We built this policy to be easy to read. It covers what data the App handles, why, and the choices and rights you have. It applies to all players, and it includes specific sections for users in the EU/EEA and UK (GDPR), California (CCPA), and for children (COPPA).
Pastry Pipeline has no user accounts and no login system. You are identified only by a nickname you choose or one the App generates for you (for example, "Guest4821").
If you have questions, contact us at randommobileapp@gmail.com.
2. Information We Collect
a) Player Nickname
- You either type a nickname or the App auto-generates a random one (e.g., "GuestXXXX").
- It is stored locally on your device and uploaded to our cloud database (Supabase, hosted on AWS) together with your score and level.
- Purpose: to display you on a global leaderboard visible to all players.
b) Game Scores and Level
- Your integer score and highest level reached are submitted to the cloud database alongside your nickname.
- The App itself does not store your IP address or any device identifier on the server.
c) Advertising Data (Google AdMob)
- The App shows full-screen (interstitial) ads through the Google AdMob SDK.
- AdMob may collect your Advertising ID (GAID on Android, IDFA on iOS), coarse location derived from your IP address, device model, operating system version, app interaction data, and other signals used for ad targeting and measurement.
- This data is collected and controlled by Google under Google's own privacy policy: https://policies.google.com/privacy.
d) Local Device Storage
- Your nickname is cached locally on your device (in SharedPreferences). This local copy is not synced to any cloud by the operating system.
- The App uses no cookies, no web tracking, and no analytics tools other than AdMob.
What We Do NOT Collect
We do not collect your email, phone number, real name, or government ID; precise GPS location; camera, microphone, or contacts access; payment data; health or biometric data; or any browsing history from outside the App.
3. How We Use Your Information
We use the information described above to:
- Display your nickname, score, and level on the global leaderboard.
- Serve and measure advertisements through AdMob.
- Understand general usage and improve the App's performance and features.
4. Legal Basis for Processing (GDPR)
If you are in the EU, EEA, or UK, we rely on the following lawful bases:
- Nickname, score, and level: Our legitimate interest in offering the leaderboard feature that you actively choose to participate in, or your consent where required.
- Personalized AdMob ads: Your consent, collected through Google's User Messaging Platform (UMP) consent form shown before ads are initialized.
- Non-personalized AdMob ads: Our legitimate interest in supporting the App through advertising.
5. Data Sharing
We share data only as needed to run the App:
- Supabase (cloud database, hosted on AWS): stores leaderboard nicknames, scores, and levels.
- Google AdMob: receives advertising data to serve and measure ads.
We do not sell your personal information to third parties.
6. Data Retention
- Leaderboard nicknames, scores, and levels are currently kept indefinitely, as there is no automated in-app deletion feature.
- Advertising data collected by AdMob is retained according to Google's own retention policies.
You can request deletion of your leaderboard data at any time (see Sections 7 and 14).
7. Your Rights (GDPR)
If you are in the EU, EEA, or UK, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Data portability — receive your data in a portable format.
- Lodge a complaint with your local supervisory authority.
Because the App has no in-app delete function, please email randommobileapp@gmail.com to exercise any of these rights, including erasure. We commit to responding within 30 days.
8. Your Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used and shared.
- Delete the personal information we hold about you.
- Opt out of the sale of your personal information — note that we do not sell your personal information.
- Non-discrimination — we will not treat you differently for exercising your rights.
To make a request, contact randommobileapp@gmail.com.
9. Children's Privacy (COPPA)
Pastry Pipeline is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has submitted data (such as a nickname on the leaderboard), we will delete it upon request. Parents or guardians can contact us at randommobileapp@gmail.com to request deletion.
10. iOS App Tracking Transparency (ATT)
On iOS 14.5 and later, Apple requires apps to ask permission before tracking you across other apps and websites. Before any tracking-based advertising identifier (IDFA) is accessed, the App shows the App Tracking Transparency (ATT) prompt.
- If you allow tracking, AdMob may use your IDFA to show personalized ads.
- If you deny tracking, your IDFA is not accessed and you will see only non-personalized ads.
11. Advertising Choices
You can limit personalized advertising at the device level:
- Android: Open Google Settings → Ads, then reset or delete your Advertising ID and opt out of ad personalization.
- iOS: Open Settings → Privacy & Security → Tracking to manage tracking permissions, or disable personalized ads under Settings → Privacy → Apple Advertising.
In the EU, EEA, and UK, you can also change your ad consent choices through the Google UMP consent form.
12. International Transfers
Your data may be processed and stored outside your country of residence, including on Supabase (AWS) and Google servers, which may be located in the United States or elsewhere. Where data is transferred out of the EU, EEA, or UK, such transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses, where applicable.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the in-app link and revise the "Last Updated" date at the top of this document. Significant changes may be communicated within the App. We encourage you to review this policy periodically.
14. Contact Us
If you have questions or wish to exercise your privacy rights, contact us at:
Email: randommobileapp@gmail.com
We aim to respond to all requests within 30 days.