Privacy Policy

1. Who we are

Tumbledown! is made by Mohannad Abdelkarim, an independent game developer based in Egypt ("we", "us"). We are responsible for the app and this website. You can reach us at tumbledown.support@gmail.com.

2. What the app keeps on your iPhone

To remember your game, the app saves a small file in its own storage on your device. It contains:

• your progress: the level you are on, your stars, coins, lives and the life timer, rockets, and the balls, items and cards you have unlocked or seen;
• your Daily Shot results and streak, your festival builds, and your event tokens and prizes;
• your settings (sound, music, vibration, events, ball);
• the dates on which the game last asked iOS to show the App Store rating prompt, so it does not ask too often;
• if you buy something: the App Store transaction numbers already added to your game, whether you bought the Starter Pack, and whether you own No Ads, so that a purchase is never added twice;
• for the ads: how many games you have played since the last ad between levels, how many such ads and No Ads offers you have seen, when the last ad or video ended or the privacy questions were answered (so that ads stay at least two minutes apart, also after you reopen the game), whether the privacy and tracking questions have been shown, the reference numbers of recent video rewards (so that a reward is never given twice), and the details of the last ad shown (its type, the ad network's name, the ad's reference number from Google (its "response ID"), the ad unit and the time), so that Report an Ad can include them (section 9).

The game sends none of this to us, and we cannot see it. Deleting the app deletes it. Your iPhone's own backups (iCloud or a computer) may include it, as they include other app data; Apple handles those backups under its own privacy policy. The advertising partners' code also keeps some data on your device, such as your consent choices and identifiers it uses for ads (section 3).

3. Advertising

Where the ads are. Videos are optional: when you run out of balls you can watch one for +5 balls (or pay coins as before), and when you are out of lives you can watch one for +1 life. You only get the reward after the video. From level 20, an ad sometimes plays between levels (after you leave the result screen), never during a level. There are no banner ads.

When the ad code runs. The partners' code is built into the app. The game starts it the first time you open version 1.1 or later (on a new install, or after updating from 1.0), on the game's main screen after the start screen, before you play a level. Then, in this order: Google's consent code asks Google's servers which privacy questions apply where you are (this shows Google your IP address) and shows them; iOS asks the tracking question (section 4; not if you refused in Google's consent form); and only then, and only if your answers allow ads to be requested, Google's ad code starts and asks for ads. Google's ad code starts Unity's. After that, the game does the same each time you open the app, so that a video is ready when you want one. iOS asks the tracking question only once; if it could not ask yet (for example, because tracking requests were off in your iPhone's Settings), it may ask when you next open the game.

Because it is built in, Google's code also does some work of its own each time the app opens, even before the game starts it and before the privacy questions: it prepares its own storage on your iPhone and it may connect to Google's servers. In our own tests of a new install, it looked up the internet address of a Google server (www.google.com) as the app opened. Like any internet connection, a connection to Google shows Google your IP address. This happens whether or not you ever see an ad, also with No Ads. No code in the app can read your advertising identifier (IDFA) unless you allow tracking: iOS gives it to an app only after you tap Allow.

Our partners. The ads are run through Google AdMob, a service that lets several advertising companies offer an ad for each slot. The partners whose code is in the app are:

• Google (Google LLC, USA, and Google Ireland Limited for Europe): Google AdMob, which runs the ads and the choice of ad for each slot, and Google's consent tools: the consent form for Europe, the UK and Switzerland, and a short explanation before iOS's tracking question. Google Privacy Policy · How Google uses information from sites or apps that use its services
• Unity (Unity Technologies, USA): the Unity Ads network, which offers its ads for our slots through Google AdMob. Unity Game Player and App User Privacy Policy

Through Google AdMob, other advertising companies can also bid to show an ad. In Europe, the UK and Switzerland, Google's consent form lists the companies involved.

What the partners collect. As the partners describe it in their own documentation and policies, their code may collect:

• device identifiers: Apple's advertising identifier (IDFA) only if you allow tracking, Apple's identifier for vendors (IDFV), and identifiers the partners create for your installation of the app;
• your IP address, and the approximate location derived from it (such as country or region), your time zone and language;
• information about your device: model, operating system version, screen size, connection type and carrier, and similar technical details;
• information about the ads: which ads were shown, whether you watched, skipped or tapped them, and the rewards given;
• how the app and the ad code run: app launches and sessions, load times, performance and crash information;
• purchase information: Unity states that its code may collect information about purchases for advertising and analytics;
• your privacy choices (consent, tracking permission).

What they use it for. To choose and show ads, to make sure an ad is not shown too often, to count views, taps and installs and pay us for them, to prevent fraud, to fix and improve their services, to comply with the law and, only if you allow tracking (and, in Europe, the UK and Switzerland, consent), to show you ads based on your activity in other companies' apps and websites. Google also declares that its ad code may use these data for a developer's own advertising (for example, to measure ads that a developer runs for its own app); we do not advertise the game through Google today. The partners use the data under their own privacy policies (linked above), as independent companies.

What we receive. Only totals in the partners' dashboards, such as how many ads were shown per day, country and ad type, and what they earned. We cannot see who you are.

If you installed the game from an ad. If an ad for Tumbledown! led you to install it, Apple's privacy-preserving ad attribution (SKAdNetwork and AdAttributionKit, built into iOS) may tell that ad's network, without identifying you, without the tracking permission and only after a delay, that the ad led to an install, along with a rough measure of play set by the game (how far you got, whether you watched a video for a reward, whether you bought something).

We only work with ad partners whose terms require them to protect the data they receive through the app with the same or equal protection as described in this policy and as Apple's App Store rules require.

4. Your choices

• Tracking (all countries). When you first open the game (version 1.1 or later), on its main screen before you play a level, iOS asks whether Tumbledown! may track your activity across other companies' apps and websites ("Allowing tracking lets us show you ads that are more relevant to you."). Outside Europe, the UK and Switzerland, Google may first show a short explanation of this question. If you tap Ask App Not to Track, the partners cannot use your advertising identifier and may not track you; you still see ads, but they are less personal. Nothing in the game depends on your answer: no reward, nothing locked. To change it later (once iOS has asked): your iPhone's Settings → Privacy & Security → Tracking. Outside Europe, the UK and Switzerland, the game's Settings → Privacy Choices opens your iPhone's Settings app and reminds you of the way there: Privacy & Security → Tracking. If "Allow Apps to Request to Track" is off on your iPhone, the question never appears and the app is treated as not allowed to track. Apple explains this in If an app asks to track your activity.
• Consent in the European Economic Area, the UK and Switzerland. Before the tracking question, Google's consent form asks whether the partners may use your data for personalised ads and the other purposes it lists (it is a consent tool certified under the IAB Transparency and Consent Framework). You can accept (Consent), refuse with one tap (Do not consent), or choose purpose by purpose (Manage options). To change your answer at any time: the game's Settings → Privacy Choices, which shows the form again. If you refuse (Do not consent, or storing and accessing information on your device turned off), the game does not ask iOS's tracking question, and the partners may still show non-personalised or limited ads, as the form describes.
• Inside an ad. Many ads show an "i" or privacy icon. In Google's ads it explains why you see the ad and leads to your ad settings with Google (My Ad Center). In Unity's ads, the Data Privacy icon lets you opt out of some of Unity's personalised ads and see or delete the data Unity holds for this app.
• No Ads. A one-time purchase in the Shop removes the ads between levels for good. Videos for rewards stay optional, so the partners' code keeps running to offer them (section 6).

5. United States: your state privacy rights

Some US state laws (for example in California, Colorado, Connecticut, Virginia and Texas) give you the right to know what personal information is collected about you, to have it deleted or corrected, and to opt out of its "sale" or "sharing" for targeted advertising. We do not sell personal information for money, and the game sends us none. When our ad partners use device identifiers from the app for personalised ads, some of these laws may treat that as "sharing" or a "sale". To opt out:

• do not allow tracking, or turn it off in Settings → Privacy & Security → Tracking (section 4);
• use the privacy icon inside an ad, and the partners' own choices: Google My Ad Center, Google's privacy policy (with its section for US state laws), Unity's privacy policy;
• to ask for access or deletion, use the partners' own tools as their policies describe (for Unity, the Data Privacy icon in its ads, or DPO@unity3d.com), or email us and we will help you reach each of them. We hold no data about you from the game ourselves.

We will never treat you differently in the game for using any of these rights.

6. No Ads and other purchases

• In-app purchases. The Shop sells optional coin packs, a one-time Starter Pack and No Ads through Apple's App Store. Apple takes the payment and handles your Apple Account, payment details, receipts and refunds under its own privacy policy. We do not receive your name, email address, payment details or Apple Account; the game only learns which item was bought and its transaction number, and keeps them on your iPhone (section 2). We have no server.
• No Ads removes the ads between levels. It does not stop the advertising partners' code, because the videos for rewards stay available if you want them. Your tracking and consent choices (section 4) apply either way.
• Restore Purchases (in the Shop and in Settings) asks Apple's App Store which purchases your Apple Account owns, so No Ads comes back on a new iPhone or after reinstalling. Coins are used up in play and cannot be restored.

7. Other Apple features the app uses

• Ratings. A few times a year at most, the game asks iOS to show Apple's standard rating prompt. Apple decides whether it appears. Any rating or review you leave goes to Apple and the App Store.
• Sharing. The Daily Shot's Share button opens the standard iOS share sheet with a short text (for example "Tumbledown Daily #12 ⭐⭐⭐ 9/20 balls"). You choose where it goes; we do not receive it.
• Links. The Privacy Policy and Support buttons in Settings open this website in Safari.
• Apple's own data. Apple processes App Store downloads and, if you chose to share analytics with app developers in your iPhone's settings, may give us anonymous crash reports and aggregated statistics. This is governed by Apple's privacy policy, and we use it only to fix problems.

8. Children

Tumbledown! is a game for a general audience. It is not directed at children under 13 and is not in the App Store's Kids category. We do not knowingly collect personal information from children, and our ad partners say they do not knowingly collect children's data or show children personalised ads through their services. We ask the partners for ads suitable for the game's 9+ rating: Google's "PG" maximum ad content rating (asked for in every ad request too) with dating, sexual, gambling and social casino ads blocked, and Unity's age limit, which blocks ads for apps rated 13+ or higher (casino games included). The app does not tell the partners that it is directed at children, because it is not. On Apple Accounts of people under 18, iOS does not let apps ask to track, so the advertising identifier is not available to the partners. If you are a parent and believe your child's data has reached us or our partners, contact us: we will delete anything we have (we normally have nothing) and help you send a deletion request to each partner.

9. Reporting an ad

If an ad is inappropriate, broken or not suitable for the game's age rating, use the game's Settings → Report an Ad. It opens an email to us in your Mail app, already filled in with the details of the last ad shown (when it was shown, its type, the ad network, Google's reference number for the ad and the ad unit) and your app version, iOS version and iPhone model. Nothing is sent unless you press Send. We use the report only to find and block the ad with the ad partner, and we handle the email as described in section 12.

10. How long data is kept

We keep no data from the game. The data in section 2 stays on your iPhone until you delete the app. The ad partners keep what they collect for the periods set out in their policies (Google, for example, says it anonymises advertising data in its server logs by removing part of the IP address after 9 months: How Google retains data). Emails are covered in section 12.

11. Where data is processed

The ad partners are based in the United States (Google also through Google Ireland Limited for Europe) and process data there and in other countries. They describe how they protect data transferred out of Europe and the UK (for example with the EU Standard Contractual Clauses) in their policies.

12. If you email us

If you write to us (including through Report an Ad), we receive your email address and your message. We use them only to answer you and, for ad reports, to have the ad blocked. We do not share them, except the ad details with the ad partner concerned, and we keep them only as long as needed to help you. You can ask us to delete them at any time.

13. This website

This website has no ads, no cookies, no analytics and no trackers, and loads nothing from other sites. It is hosted on GitHub Pages; GitHub may record technical information such as IP addresses to run and protect its service, as described in GitHub's privacy statement.

14. Your rights

Depending on where you live (for example under the GDPR in Europe and the UK), you may have the right to access, correct or delete your personal data, to object to or restrict its use, to withdraw consent at any time (section 4), and to complain to your data protection authority. Because the game sends us no personal data, we hold nothing about you from the game that we could show, correct, export or delete: your game data is under your control on your device, and the ad partners hold their own data (sections 3 to 5 show how to reach them). For emails you sent us, you can ask us to see or delete them.

15. Changes to this policy

We will post any change on this page and update the date at the top. If a change affects how the app handles your data, we will update the App Store privacy information at the same time and the app will ask for your permission wherever the law or Apple requires it. Version 1.0 of the app had no ads and no advertising code: the advertising sections of this policy apply from version 1.1.

16. Contact

Mohannad Abdelkarim, Egypt
tumbledown.support@gmail.com