Dengo Labs

Privacy policy for Granny's Puzzle

What data the game uses, why, and what choices you have.

Last updated:

1. The short version

  • There are no accounts. The game never asks for your name, email address, phone number, contacts, photos, location or microphone.
  • Your progress stays on your phone. We don’t receive it.
  • The game is free and paid for by ads. Ads, analytics and remote game settings are provided by Google, which receives some device and usage data (described below).
  • Personalised ads and your advertising ID are used only if you allow it, with your consent where the law requires it.

2. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Deniz Gözcü
Dengo Labs, Einzelunternehmen (sole proprietorship)
Alfred-Jung Straße 12
10369 Berlin
Germany
Email: hello@dengolabs.com

3. What the game does not do

  • No accounts and no sign-in.
  • No access to your contacts, photos, location, camera or microphone.
  • No in-app purchases.

4. Data stored on your device

Your progress (levels, helpers, yarn, knitted items, your daily streak, your settings and your chosen language) is stored only on your device. It isn’t sent to us. If you delete the app, this data is deleted with it, and we can’t restore it.

5. Services from Google in the game

The game uses the following services, all provided by Google. Google processes the data described below on our behalf or, for advertising, partly as an independent controller.

5.1 Google AdMob (ads)

We show ads with the Google Mobile Ads SDK: a banner on the puzzle screen, optional rewarded videos (you choose to watch them for a reward), and occasional full-screen ads between levels.

  • Data: device and app information, IP address, interactions with ads, and your device’s advertising ID (the IDFA on iPhone, the Android advertising ID on Android).
  • Advertising ID on iPhone: used only if you choose “Allow” when Apple’s “Allow tracking?” prompt appears.
  • Advertising ID on Android: you can reset it or delete it at any time in your Android settings (Settings → Privacy → Ads, or Settings → Google → Ads, depending on your device).
  • Personalised ads: where the law requires consent (the EEA, the UK, Switzerland and some US states), personalised ads are shown only if you consent. Without consent, ads are non-personalised: they’re chosen from context, such as the app and your general location. Data such as the IP address is still used to limit how often you see an ad, prevent fraud and measure ads.

More from Google: Google Privacy Policy and How Google uses information from apps that use its services.

In regions where consent is required, Google’s User Messaging Platform shows a consent form. Your choice is stored on your device in the IAB Transparency & Consent Framework format and passed to the ad and analytics services. You can change it at any time in the game under Settings → Privacy choices.

5.3 Google Analytics for Firebase (how the game is played)

We use Google Analytics for Firebase to understand how the game is played, so we can improve it and balance its difficulty.

  • Data: an app-instance ID; device model and operating system version; app version; approximate country or region (derived from the IP address); session information; and gameplay events.
  • Gameplay events describe what happens in the game, for example: a level started or finished, the score and number of mistakes, helpers used, rewards chosen, items knitted, the tutorial finished or skipped, and the language changed.
  • No names or contact details are collected.
  • In the EEA, the UK and Switzerland, Google’s consent mode passes your consent choice to Analytics. Without your consent, Analytics stores less data.

More: Privacy and Security in Firebase.

5.4 Firebase Remote Config (game settings)

The game downloads settings from Google’s servers, for example how many hints a video gives, so we can tune the game without releasing an update. This uses a Firebase installation ID.

6. Apple and Google

The game uses the standard rating prompts of the App Store and Google Play, and on iPhone Apple’s “Allow tracking?” prompt (App Tracking Transparency). Apple’s and Google’s own processing, for example for downloads and their stores, is covered by the Apple Privacy Policy and the Google Privacy Policy.

Purpose Legal basis under the GDPR
Providing the game and its features, including game settings from Remote Config Performance of a contract, Art. 6(1)(b)
Non-personalised ads that fund a free game Legitimate interests, Art. 6(1)(f): financing the game so it can stay free
Personalised ads, tracking with the advertising ID, and analytics in regions that require consent Consent, Art. 6(1)(a)

You can withdraw your consent at any time in the game under Settings → Privacy choices, and on iPhone under iOS Settings → Privacy & Security → Tracking. Withdrawing doesn’t affect processing that happened before.

Where we rely on legitimate interests, you can object (see section 11). You can play without agreeing to tracking or personalised ads. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

8. Recipients and international transfers

Data collected by the services above is received by Google. Google may process it in the USA and other countries outside the EU. Google LLC is certified under the EU-US Data Privacy Framework and also uses the European Commission’s Standard Contractual Clauses.

We don’t sell your data, and we don’t share it with anyone other than the service providers named in this policy.

9. How long data is kept

  • Analytics data: 14 months, after which Google deletes it.
  • Firebase installation ID (used by Remote Config): kept until it is deleted; Firebase then removes it within 180 days.
  • Data on your device: until you delete the app.
  • Emails you send us: as long as needed to answer you, and longer only where the law requires it.

For advertising data, Google’s own retention periods apply; see the Google Privacy Policy.

10. Your choices

  • Ad consent: in the game, Settings → Privacy choices (shown where consent applies).
  • Tracking (iPhone): iOS Settings → Privacy & Security → Tracking.
  • Advertising ID (Android): Android Settings → Privacy → Ads (the exact path depends on your device).
  • Start fresh: deleting the app removes everything stored on your device and the IDs the app created there.

11. Your rights

Under the GDPR

You have the right to:

  • access the personal data we process about you (Art. 15);
  • have it corrected (Art. 16) or deleted (Art. 17);
  • restrict its processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interests (Art. 21);
  • withdraw your consent at any time, without affecting earlier processing (Art. 7(3));
  • complain to a data protection supervisory authority, in particular in the EU country where you live or work, or where you think the infringement took place (Art. 77).

Players in Turkey (KVKK)

If you are in Turkey, the Personal Data Protection Law No. 6698 (KVKK) also applies. Under its Article 11 you can ask us whether your personal data is processed and, if so, for information about it; the purpose of processing and whether it is used for that purpose; to whom it is transferred in Turkey or abroad; to correct incomplete or inaccurate data; to delete or destroy it under the conditions of Article 7; to inform those it was transferred to about a correction or deletion; to object to a result against you that comes solely from automated analysis; and for compensation if you suffer damage from unlawful processing. You can also complain to the Personal Data Protection Board (kvkk.gov.tr).

How to use your rights

Email hello@dengolabs.com. We’ll reply within one month (KVKK: within 30 days).

One honest limit: because there are no accounts, we can’t find a player by name, and we don’t hold your progress at all. For a request about data held by Google’s services, we may ask for your app-instance ID. Deleting the app and resetting your advertising ID also cuts the link between your device and the data collected before.

12. Children

Granny’s Puzzle is a general-audience puzzle game. It is not directed at children under 13, or under the minimum age that applies in your country (for example 16 in parts of the EU). We don’t knowingly collect children’s data. If you’re a parent or guardian and believe your child has provided data, email hello@dengolabs.com and we’ll help.

13. Changes to this policy

We update this policy when the game or the law changes, for example when we add a feature that uses data differently. The date at the top shows the latest version, and we make important changes clearly visible on this page.

14. Contact

Questions about privacy? Email hello@dengolabs.com or write to the address in section 2.