HavPuzz Privacy Policy

Pulb Group is the developer of HavPuzz and the controller of the personal data processed through it. You can reach us at pulbgroup@gmail.com for every question and request in this policy.

Your level progress, stars, hearts, hints, bones, unlocked dogs, streaks and settings (sound, music, haptics, language, colorblind patterns and similar) are stored on your device. They stay there until you delete the game or its data.

A. Progress and purchase sync (optional). If the game's sync feature is available and in use, your progress and the purchases you own are saved on our server so they can be restored. They are stored under a random install ID that the game creates on your device. No name, email address or account is needed or stored.

B. Gameplay analytics. We run our own first-party analytics. The game sends only a closed, fixed set of gameplay events, such as a session starting or a level being started, won, lost or retried, together with:

• details of the event itself (for example the level number, the time taken and hints used);
• the platform (iOS or Android), the game version and the language setting;
• a random install ID and a random session ID.

These events contain no name, email address, contacts, precise location or advertising ID, and we do not use them to identify you.

C. Purchases. In-app purchases and subscriptions are handled by the Apple App Store or Google Play. To deliver what you bought and to stop fraud, we receive and verify the store's transaction receipt (product, transaction ID, purchase date, and subscription status and renewal or expiry date). We never receive your payment card number, billing address or other payment details.

D. Technical data. When the game connects to our server, the server necessarily sees your IP address. We use it only to deliver the response and to protect the service against abuse, and we do not use it to build a profile of you.

E. Google Analytics for Firebase. We use Google Analytics for Firebase, a Google service, to measure how the game is played (for example sessions, the tutorial, levels started and finished, ads watched, purchases and ad revenue) and how well our advertising works. It uses an app instance ID created by the Firebase SDK, device and app information, the events listed above and an approximate location derived from your IP address. On iOS it uses the advertising identifier only if you allow tracking. We do not send your name, email address or the game's own player ID to Google. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics runs only if you agree in Google's consent message to information being stored on and read from your device, and your choices there also decide whether Google may use the data for advertising.

F. Meta app events. Outside the European Economic Area, the United Kingdom and Switzerland, the game sends a few events to Meta Platforms through the Facebook SDK: the app being installed and opened, finishing the tutorial, reaching certain levels, purchases (product, price and currency) and ad revenue. Meta uses them to measure and improve our ads on Facebook and Instagram. On iOS, Meta receives the advertising identifier only if you allow tracking; on Android, your device's ad settings apply. The game does not use Facebook Login and does not send your name or email address to Meta. In the European Economic Area, the United Kingdom and Switzerland, the game sends nothing to Meta.

G. Notifications. If you turn on notifications, the game registers your device with Firebase Cloud Messaging, a Google service, so that we can send reminders. Our server stores the resulting push token together with your game language, game version and time zone, and uses them only to send notifications at a suitable local time. If you turn notifications off, the token is deleted.

H. Launch waitlist (website). Before the game is available, you can ask at https://pulbgroup.com/havpuzz to get an email when it comes out. We then store your email address, the platform you chose (iPhone or Android), the language of the page, the link you came from (for example a video), your country as reported by our network provider, the version of the consent text and the time. We do not store your IP address. The form uses Cloudflare Turnstile to check that a person, not a bot, is signing up; for this, Cloudflare processes technical information about your browser and device. We use the list only to send one announcement per platform, and we do not share it with anyone else.

I. Signing in with Apple or Google (optional). Under Settings → Account you can sign in with Apple or Google to keep your progress and continue on another phone. Apple or Google then gives us a signed token that confirms your account. We keep only the account identifier it contains (a code unique to our game), not your name or email address, even if the token includes them. With that account we store your game progress (levels, stars, hints, bones, unlocked dogs, tutorial, album choice and a copy of your purchases), the time and device type of the last save, and secret keys for each phone you signed in on. If two saves differ and you choose one, the other is kept for 30 days so that we can restore it if you ask. For Sign in with Apple we also keep, encrypted, a token from Apple that we use only to revoke the game's access when you delete your account.

What the game does not collect: your name, email address or phone number, your contacts, photos, camera or microphone, your precise location, or anything you type. The game has no chat and no user-generated content.

The free version of HavPuzz shows ads through Google AdMob (the Google Mobile Ads SDK). To deliver and measure ads and to prevent ad fraud, Google may collect:

• device identifiers, including the advertising identifier (IDFA on iOS, AAID on Android) where the law and your settings allow it;
• your IP address and the approximate (coarse) location derived from it;
• device and app information, and how you interact with ads (views, taps, video completion).

Personalised ads are shown only with your consent. In the European Economic Area, the United Kingdom and Switzerland, the game shows Google's consent message (Google User Messaging Platform) before any personalised ads. On iOS, the advertising identifier is used only if you allow tracking when iOS asks (App Tracking Transparency). If you do not consent, you may still see non-personalised ads, which are based on context such as the game itself and your approximate location.

Google's use of this data is governed by Google's Privacy Policy (https://policies.google.com/privacy) and explained at https://policies.google.com/technologies/partner-sites.

Buying "Remove Ads" or an active VIP subscription turns off interstitial and banner ads. Rewarded videos stay available if you choose to watch them for a bonus.

• To run the game, save and restore your progress and deliver your purchases (performance of our agreement with you).
• To verify purchases, prevent fraud and keep the records the law requires (agreement, legal obligation and our legitimate interest).
• To understand which levels are too hard or too easy and to fix problems, using analytics without personal data (our legitimate interest).
• To measure how the game is used and how well our ads work with Google Analytics for Firebase and Meta app events (your consent in the European Economic Area, the United Kingdom and Switzerland; elsewhere our legitimate interest; on iOS the advertising identifier only with your permission).
• To send the notifications you turned on (your consent, which you can withdraw in the game settings or your device settings).
• To tell you when the game comes out, if you joined the waitlist (your consent, which you can withdraw at any time by writing to us).
• To show ads that keep the game free (your consent for personalised ads; our legitimate interest for non-personalised ads where the law allows).

We do not sell your personal data, and we do not use it for decisions that have legal or similarly significant effects on you.

• Apple and Google, to process purchases, subscriptions and refunds. Their own privacy policies apply to your store account.
• Apple and Google, if you choose to sign in with them: they confirm your account to us, and when you delete your account, Apple is asked to revoke the game's access.
• Google (AdMob), for advertising as described in section 4.
• Google (Firebase), for analytics and notifications as described in section 3.
• Meta Platforms, for ad measurement outside the European Economic Area, the United Kingdom and Switzerland, as described in section 3.
• Our hosting provider, which runs our server for us and may only process data on our instructions.
• Cloudflare, which protects the waitlist form against bots and carries traffic to our server; on the release day, the email service we use to send the announcement.
• Authorities, only when the law requires it.

Personalised advertising may count as "sharing" under some US state laws. You can opt out as described in section 8.

• Data on your device: until you delete the game or clear its data.
• Synced progress and purchase records: for as long as the game is in use, and until you ask us to delete them. Records may be kept longer only where tax or consumer law requires it.
• Sign-in and cloud save: until you sign out on every phone and delete your account, or ask us to delete it. Saves you did not choose in a conflict: 30 days.
• Analytics events: for a limited period, and no longer than 24 months; after that they are deleted or kept only as anonymous totals.
• Google Analytics for Firebase: 14 months. Push tokens: until you turn notifications off or the token stops working.
• Waitlist email addresses: until the launch announcement has been sent, and at the latest 90 days after the game comes out on Android.
• Server logs: for a short time, for security and troubleshooting.

Apple, Google, AdMob and Meta keep their own records under their own policies.

• Ads: change your ad consent where the game offers it, limit ad tracking or reset your advertising ID in your device settings, or on iOS turn off "Allow Apps to Request to Track".
• Analytics and ad measurement: in the European Economic Area, the United Kingdom and Switzerland, change your choices at any time under Settings → Privacy & ad choices in the game. On iOS, not allowing tracking also stops the advertising identifier being shared with Google and Meta; on Android you can delete or reset your advertising ID in your device settings.
• Notifications: turn them off in the game settings or in your device settings at any time.
• Deletion: deleting the game removes the data stored on your device. To delete the data on our server as well, write to pulbgroup@gmail.com. Tell us your platform and, if you made a purchase, the order or transaction number from your store receipt, so we can find your records. Deleting your data does not cancel a subscription; see the support page for how to cancel.
• Account deletion: in the game, Settings → Account → Delete account removes your sign-in, cloud save, its backups and your device keys from our server at once, and revokes Sign in with Apple. You can also follow the steps at https://pulbgroup.com/havpuzz/delete-account. Progress on your phone stays until you delete the game. Purchase records are kept without your account details only where tax or consumer law requires it.

Depending on where you live, you may have more rights. Under the GDPR and UK GDPR (Europe) and KVKK (Türkiye) you can ask to access, correct or delete your data, receive a copy, object to or restrict its use, and withdraw consent at any time. Under the CCPA/CPRA (California) and similar US state laws you can ask what we collect, ask us to delete it, and opt out of the sale or sharing of personal information; we do not sell it and will not treat you differently for using these rights. Write to pulbgroup@gmail.com and we will answer within 30 days. Because we do not know who you are, we may ask for details (such as a purchase receipt) that show the data is yours. You can also complain to your local data protection authority.

HavPuzz is a general-audience game. It is not directed at children under 13 (or the minimum age set in your country), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, write to us and we will delete it.

Our server and service providers may be located outside your country. When data leaves the EEA, the UK or Türkiye, we rely on the safeguards the law provides, such as standard contractual clauses. Data is sent over encrypted connections, and access to our systems is limited to the people who run the game.

We may update this policy when the game or the law changes. The effective date at the top always shows the current version. If a change significantly affects how your data is used, we will let you know in the game or on this page before it takes effect.

Pulb Group · pulbgroup@gmail.com · https://pulbgroup.com/havpuzz/support