Jellymatics privacy policy

Scope

This notice covers Jellymatics for iPhone and iPad, version 1.1, and enquiries about the game. The controller is Ismail Günay; my public business address and email are shown above. Visiting this website is also covered by the general website privacy notice in the footer.

Your progress: on your device and in your iCloud

Jellymatics requires no account. Scores, coins, unlocked and selected skins, rounds, achievements, jokers, daily bonus and daily round, and solving times by task type are stored on your device, as are sound, music and haptic preferences. Up to and including build 3, solving times adapted time rewards to your pace. From build 4, each level has fixed tasks and par times; no new solving-time profiles are stored. Existing values from older versions remain in your save but no longer affect gameplay. If you are signed in to iCloud on the device, the app also keeps this progress (without the sound, music and haptic preferences) in your own iCloud account through Apple’s iCloud key-value storage, so it is available again after reinstalling and on your other devices. Apple processes this copy in your iCloud account under Apple’s privacy policy; I have no access to it. The app does not transmit game records to me or a developer-operated analytics service. There is no game server and no Firebase Analytics.

This provides the game, progression and fixed levels you request and lets you restore your progress. Where personal data is involved, the basis is Article 6(1)(b) GDPR; necessary device storage and access rely on section 25(2), no. 2 TDDDG. Settings → Privacy & info → “Delete progress” removes the progress on the device and replaces the iCloud copy with an empty one. You can turn off iCloud sync for Jellymatics in iOS Settings; deleting the app makes iOS remove the local data, while the iCloud copy remains until you delete it in the game. An ad-free purchase made through Apple is kept and can be restored. Apple backups may contain copies, which you manage in device and backup settings.

Age question at first launch

On first launch, Jellymatics asks for your year of birth. It remains in a local file in a directory excluded from device backups. The year is not synchronized through iCloud or sent to me or Google. It survives a progress reset and is removed when the app is deleted. Existing backups of older versions are not retroactively changed.

The app uses the younger age group whenever there is uncertainty. When the age is unclear, it does not load ads, start the Google ads SDK or offer the ad-free purchase; existing purchases can still be restored. Under 18, the app shows only non-personalized ads: every request is marked for Google as a child's request, ads are limited to rating G, and neither Google consent nor Apple tracking prompts appear. The ad-free purchase is also offered under 18 and is meant there only with a parent's permission; Apple's Ask to Buy and Screen Time give parents control. The age is self-declared, not verified by a parent or identity document. The following advertising sections state what applies from 18 and what applies under 18.

When Apple reports an additional legal age requirement for your account, the app also uses Apple’s Declared Age Range interface to learn whether you are under 13, 13 to 17, or at least 18. Apple shows its own dialog for this. The app asks only when Apple reports that such a legal requirement applies to your account. The younger of the two answers counts; an unconfirmed adult answer does not count as adult, and without Apple's answer (for example when sharing is declined) no ads are loaded. Apple’s answer is kept in memory for the current session only, is not stored and is not sent to me or Google. This serves legal obligations (Article 6(1)(c) GDPR or the applicable US state laws).

Google advertising

Jellymatics uses Google AdMob for banners and optional rewarded videos. Video offers are labelled as ads before you tap them and state the reward you receive. You can play without watching these videos. The one-time ad-free purchase removes banners and video offers.

The Google Mobile Ads SDK may process your IP address and approximate region derived from it, device and app information, technical identifiers, ads viewed, ad interactions and performance data. These support ad delivery and measurement, from 18 and with your consent also ad personalization, as well as security, troubleshooting and fraud prevention. Google also acts as an independent controller. Its advertising data terms name Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the end controller for European personal data.

Personalization requires an adult age group, Apple tracking authorization and explicit Google consent for device storage, profiling and personalized selection. Google applies further requirements. Without these choices, personalization stays off. If you decline in consent regions including the EEA, UK and Switzerland, the app shows only limited ads from Google: non-personalized and without the advertising identifier (IDFA). Programmatic limited ads are turned on in the AdMob account; for these Google may use cookies or local storage on your device, according to Google only to detect invalid traffic (fraud and abuse). Under 18 the same applies everywhere: ads are never personalized, carry no advertising identifier and are marked for Google as a child's request; in the EEA, the UK and Switzerland these are limited ads. Elsewhere ads always stay non-personalized; UMP may allow them without an EU dialog. Whenever ads are not personalized, the app also signals Google’s restricted data processing for US state privacy laws. Publisher First-Party ID and the optional SDK crash reporter are off; content is limited to rating T (Teen) from 18 and to rating G under 18. The app does not itself read the IDFA or send developer-assigned user IDs or game progress to Google. No additional mediation SDKs are embedded. In the EEA, the UK and Switzerland, Google has added, besides itself, its own list of “commonly used ad partners” (currently about 200 ad technology providers, updated by Google as needed). These providers may deliver ads through Google’s auction and receive data such as IP address, device and app information, identifiers and ad interactions, for consent-based purposes only with your consent. The full list with each provider’s purposes and legal bases is available in Google’s privacy dialog under “List of partners” or “Manage options”, where you can also reject individual providers or object to legitimate interest. Outside these regions, Google selects the bidding providers in its auction itself; ads there remain non-personalized.

Your advertising choices

From 18, Google User Messaging Platform (UMP) manages privacy choices. The current status is requested at app launch; where required, a dialog offers acceptance, refusal and individual choices. This involves technical connection and device information and your choice. Your decision is stored so it can be respected without asking again at every launch. Under 18, the app requests the status with the note that you are under the age of consent; Google then shows no dialog and does not ask for consent.

Advertising and ad measurement that require consent rely on your consent under Article 6(1)(a) GDPR; consent-based device storage and access rely on section 25(1) TDDDG. Necessary management and application of your decision fulfil privacy obligations under Article 6(1)(c) GDPR, with necessary local storage under section 25(2), no. 2 TDDDG. The dialog explains Google’s purposes, legal bases and disclosures. Legitimate-interest controls are not enabled by default.

Where UMP requires privacy options, you can change your choice or withdraw consent for the future under Settings → Privacy & info → Ad privacy settings. This entry remains available after an ad-free purchase. Withdrawal does not affect the lawfulness of earlier processing. Consent and watching rewarded videos are voluntary.

The app requests ads only when UMP permits it following your choice. After a refusal and under 18, Google processes for limited or non-personalized ads only the request data needed for delivery, billing and abuse prevention, such as IP address and device and app information, without profiling. Google may also source such ads from other providers through its auction; according to Google, no personal data is collected, shared or used for personalization in the process. The basis is my legitimate interest in financing the free app with non-personalized advertising (Article 6(1)(f) GDPR); I rely on section 25(2) no. 2 of the German TDDDG for the storage used to detect fraud and abuse. The ad-free purchase removes ads entirely. Refusal does not stop necessary processing of your privacy decision. Deleting the app neither withdraws consent nor deletes information already held by Google.

Apple’s tracking prompt (App Tracking Transparency), from 18

From 18, Apple’s tracking prompt appears only if you agreed in Google’s dialog to device storage, profiling and personalized ads, the choice is undetermined and the system permits it – after Google’s privacy message and before ads, or after a later consent in the privacy options. If you refuse there, no tracking prompt appears; outside the EEA, the UK and Switzerland it does not appear. Under 18 and after an ad-free purchase, this flow is not started. Google privacy management remains available to adults after an ad-free purchase.

With tracking authorization, Google may use the IDFA for advertising and measurement. Personalization also requires the explicit Google choices described above. With denied or restricted tracking, Google receives no authorized IDFA and the app disables personalization. Previously loaded ads are discarded when a change to tracking authorization is detected. The game remains playable without tracking.

You can change this at any time, with effect for the future, in iOS Settings under Privacy & Security → Tracking.

Apple and the ad-free purchase

Apple handles downloads, payments and refunds. Jellymatics checks Apple-verified purchase entitlements to enable and restore ad-free access and apply revocations. The app receives technical product and transaction information, but no card number or bank details. It has no developer-operated receipt server. This fulfils the purchase under Article 6(1)(b) GDPR. Under 18, the purchase is meant only with a parent's permission.

Restore purchases is available in Settings, directly below Ad-free. Deleting the app does not delete the purchase or Apple’s purchase history. The app may occasionally ask for a rating through Apple’s system dialog; Apple processes ratings and reviews. Apple processes data under its own terms and may provide me with financial reports, aggregate usage statistics and, depending on your system settings, crash diagnostics. Where these contain personal data, I use them for legal record-keeping under Article 6(1)(c) GDPR and troubleshooting under Article 6(1)(f) GDPR, with a legitimate interest in a reliable game.

Email support

If you contact me, I process your sender address, message and voluntary attachments to handle your enquiry. The basis is Article 6(1)(b) GDPR for contractual enquiries, otherwise Article 6(1)(f) GDPR with a legitimate interest in responding. My mailbox is Gmail from Google Ireland Limited; delivery also involves the relevant email providers. Please do not send passwords or payment information.

I delete support messages once the enquiry is resolved and they are no longer needed. Statutory record-keeping and the necessary establishment or defence of legal claims may require longer retention.

Retention and processing outside the EU

Local game records and my support messages follow the deletion criteria above. Google and Apple determine retention of their own data by purpose, legal obligations and their privacy notices. Deleting the app does not erase that data. For example, security and billing purposes can require longer retention at Google; the linked retention notice explains the criteria.

Google, Apple and the ad partners on Google’s partner list may process information outside the European Economic Area, particularly in the USA. Google’s privacy dialog names each ad partner; their transfer safeguards are set out in their own privacy notices. Google describes transfer safeguards including the EU-U.S. Data Privacy Framework for covered certified recipients and standard contractual clauses for other covered transfers. The provider notices linked below explain their respective safeguards. The app does not promise EU-only storage.

Your rights and questions

You are welcome to contact me directly with questions. Subject to legal requirements, you have rights of access, rectification, erasure, restriction and portability under Articles 15–20 GDPR. You can delete your progress on the device and in iCloud in the app under Settings → Privacy & info → “Delete progress”; deleting the app removes the data on the device. I run no server of my own and have no access to this data.

You may object to processing based on legitimate interests on grounds relating to your particular situation under Article 21 GDPR. Such processing stops unless overriding compelling grounds or necessary legal claims justify continuing it. You may withdraw consent for future processing.

You may complain to a supervisory authority independently of contacting me, particularly where you live, work or suspect an infringement, under Article 77 GDPR. Jellymatics makes no automated decisions with legal or similarly significant effects.

Notice for users in the United States

Jellymatics does not sell personal information for money. In the US, ads stay non-personalized, the app does not ask for tracking permission, and it signals Google’s restricted data processing so that data is not used for cross-context behavioral advertising. Google may still process the data listed under “Google advertising” for delivery, measurement, security and fraud prevention.

For people the app treats as under 18, including under 13, Jellymatics shows only non-personalized ads that are marked for Google as a child’s request and limited to rating G; when the age is unclear, the app loads no ads and does not start the Google ads SDK. You can send privacy requests, such as access or deletion requests under your state’s law, to me by email; as I run no server of my own, I hold no game data about you apart from support messages. Whether a given state privacy law applies to this sole proprietor depends on thresholds; these notices apply regardless.

Audience and changes

Jellymatics is for a general audience and is not specifically designed for children. The app asks once for the year of birth (see above) to protect minors. This notice will be updated when services or data processing change; the date above identifies the revision.

Related information