🎮Indea Games All policies

Twobble — Privacy Policy

1.Introduction

Indea Games (“we”, “us”, “our”) is an independent mobile game studio. This privacy policy covers the mobile game Twobble (package name com.indeagames.mergebubble) on Android and iOS. It explains what data is processed when you play, why, and the choices you have. It applies only to this app — our other games have their own policies at indeagames.com/privacy.

2.Data We Collect

You do not need an account to play Twobble. We do not ask for your name, e-mail address, phone number or password, and we do not collect your contacts, photos, files, microphone, camera, precise GPS location, health data or payment card details. Your game progress is stored only on your device. The third-party services built into the game collect some device information directly from your device — such as your advertising ID and IP address — to show and measure ads and to process optional purchases; the advertising companies send us only summary reports, and we do not receive that information ourselves. The game also offers optional rewarded ads, which you choose to watch in return for an in-game reward. Purchase records are different: RevenueCat processes them on our behalf and we can see them in our RevenueCat account (see "Storage and deletion"). Some of it counts as personal data under laws such as the GDPR, and the rest of this policy explains how it is handled.

Information stored on your device

Progress, coins, gems, boosters, unlocked looks (arena themes and bubble styles), missions, a record of the purchases already credited to the game (so that each purchase is credited only once), settings (music, sound, haptics, reduced motion, notification choice), your best endless score, the number of times you opened the game and the time of day you usually play (used only to pick a reminder time). This is stored on your device and is removed when you uninstall the game. Depending on your device settings, it may also be included in your device or cloud backups (Google or iCloud). Because there is no account, gems, coins and boosters (including ones you bought) are not stored by us and cannot be restored on a new device unless your own device backup restores the game's data; the Restore Purchases button brings back Remove Ads and the Starter Pack ownership only.

Information collected by third-party services inside the game

The advertising companies listed in the Third-Party SDKs section collect this information directly from your device when you use the game; we receive only summary reports from them. Purchase information is processed for us by RevenueCat, which receives it from the game.

• Advertising identifier (Google Advertising ID on Android, IDFA on iOS if you allow tracking) and other device identifiers (for example IDFV on iOS) — to show and measure ads, limit repeats and prevent fraud. Collected by the advertising providers.
• IP address and approximate location derived from it, device model, operating system, language, time zone and network type — to deliver ads, measure performance and comply with local rules. Collected by the advertising providers (and, for the purchase service, by RevenueCat as technical request data).
• Ad interactions (impressions, clicks, ad load results) and basic usage data — to measure ads, optimise mediation and for analytics. Collected by Yodo1 MAS and the ad networks it connects.
• Purchase information (purchased product, purchase status, date, anonymous app user ID, store receipt) and technical request data (IP address, device model, operating system and app version, language, store country) — to process your purchases (gem packs, the Starter Pack and Remove Ads), restore the permanent ones (Starter Pack and Remove Ads) and keep the service secure. Collected by RevenueCat (on our behalf), Google Play and the Apple App Store.
• Crash, performance and diagnostic data (for example crash reports, load times, device information and the time of an error) — to keep the services running and fix problems. Collected by Yodo1 MAS and the ad networks; the game itself has no crash-reporting service of its own.
• Your consent choices (European Economic Area and United Kingdom) — to record your choice about personalised ads. Collected by Google User Messaging Platform (part of Yodo1 MAS).

Components delivered with the ad software

Yodo1 MAS provides ad mediation (it connects the ad networks listed in the Third-Party SDKs section), consent management, and analytics and diagnostics for the ad service. ThinkingData is included in Yodo1 and provides analytics for the ad service. AppHarbr and IronSource AdQuality perform ad quality and security checks. Pangle includes its bundled TikTok Business SDK. HyperBid Tools (part of the TopOn family) is an ad mediation component delivered with the ad service; see https://www.toponad.net/en/privacy-policy. The Open Measurement SDK (an IAB Tech Lab standard, packaged by Appodeal) measures ad viewability; see https://iabtechlab.com/standards/open-measurement-sdk/. Smartdigimkt is an ad component delivered with the ad service (together with the TopOn / AnyThink part of it); see the TopOn and Yodo1 MAS cards in the Third-Party SDKs section.

Which ad networks actually serve ads at a given time is configured in the Yodo1 MAS dashboard and can change. The game itself does not include a separate crash-reporting service. The ad service also delivers small helper components (for example for ad delivery, networking and fraud checks) that are not listed one by one, and ads are shown in web views, so ad companies may use cookies or similar technologies on your device.

Tracking, personalised ads and your choices

• Advertising and tracking: ad providers use advertising identifiers and device information to show ads and to measure them. On iOS this is "tracking" as defined by Apple when it links data from different apps and websites.
• iOS (App Tracking Transparency): the game shows the system tracking prompt when it first starts, before ads are set up. Personalised advertising on iOS uses the IDFA only if you allow tracking. If the system asks, you can choose "Ask App Not to Track". You can change this at any time in Settings > Privacy & Security > Tracking.
• Android: you can reset your advertising ID or opt out of ads personalisation in Settings > Privacy > Ads (the path can differ by device), and manage ad topics under the Privacy Sandbox settings of your device.
• European Economic Area and United Kingdom: a consent form (Google User Messaging Platform) lets you accept or refuse personalised ads. Whether it appears is decided by the ad service based on your location; where it applies, it can appear the first time you start the game. You can review or withdraw your choice in the game under Settings > Privacy Choices, which opens the form again (the button appears once the ad service is ready, so it can be missing while you are offline). You can also reset your advertising ID in your device settings.
• Notifications: reminders (your daily gift, your best score, new challenges and an occasional comeback message) are optional on both iOS and Android. When the game offers reminders it first explains them on its own screen and only then asks the system for permission; if you switch them on in Settings, the system asks directly. They are created on your device; nothing is sent from a server. You can turn them off in the game's Settings or in your device settings.
• Reporting an ad: in Settings > Report an ad you can report an inappropriate ad. The privacy policy is also available in the game under Settings > Privacy Policy.
• Ads are not removed by refusing tracking; you will still see ads, but they may be less relevant.
• Buying Remove Ads or the Starter Pack removes full-screen ads, but the ad service still starts, because rewarded ads (which you choose to watch) stay available, so the information described above can still be collected.

Sharing of information

We do not sell your personal information for money, and the advertising companies send us only summary reports. The advertising providers in the Third-Party SDKs section receive advertising identifiers and device information directly from your device and may use them for personalised advertising, which some laws describe as a "sale" or "sharing"; use the choices described under "Tracking, personalised ads and your choices" to opt out. We use Yodo1 MAS as our ad-mediation provider, and each provider in the Third-Party SDKs section handles information under its own privacy policy and the data protection law that applies to it. Some providers are located outside your country and may process data in other countries under their own policies and safeguards.

Storage and deletion

• Game data on your device is kept until you delete the game or clear its data.
• We have no servers of our own for game data. Advertising and diagnostics data is held by the companies in the Third-Party SDKs section for the periods stated in their own policies. Purchase records are held for us by RevenueCat (stored in the United States) and can be deleted on request.
• To ask an advertising provider to delete or access data connected to your device, contact it using the privacy links on its card in the Third-Party SDKs section, or write to us at indeagamesstudio@gmail.com and we will pass the request on where we can. For purchase records, write to us at the same address and include the order number from your Apple or Google receipt so we can find the record; we delete it, or have RevenueCat delete it, unless the law requires us to keep purchase records. Your purchases remain with Apple or Google.
• Copies of your game data in a device backup (Google or iCloud) stay until you delete that backup in your device or account settings.
• On Android you can reset or delete your advertising ID in your device settings; on iOS you control access to it with the tracking permission.

Differences between iOS and Android

• Advertising identifier: on iOS, the IDFA only if you allow tracking, and the IDFV is also used. On Android, the Google Advertising ID (the game declares the AD_ID permission).
• Purchases: Apple App Store (StoreKit) through RevenueCat on iOS; Google Play Billing through RevenueCat on Android.
• Rating prompt: Apple's system prompt on iOS; Google Play In-App Review on Android.
• Notification permission: a system prompt on iOS; a system prompt on Android 13 and later (earlier versions do not ask).
• Tracking prompt: Apple App Tracking Transparency, shown at first launch, on iOS; not applicable on Android.

Updates to this policy

We may update this policy when the game or its services change. The date at the top shows the latest version. For material changes we will also say so in the app's update notes or in the app, where the law requires it.

3.Third-Party SDKs

Twobble is free to play and is funded by ads (including optional rewarded ads) and optional in-app purchases. Ads are delivered through the Yodo1 MAS mediation platform and purchases through RevenueCat, Google Play and the Apple App Store. To do this, the app includes the third-party SDKs listed below. Each SDK collects the data shown on its card directly from your device, which means that data is shared with the vendor named on the card, and each vendor processes it under its own privacy policy, linked there. The same disclosures are reflected in the app’s Google Play Data Safety section and Apple App Privacy label. Mediation means Yodo1 passes each ad request on to a number of partner ad networks and serves whichever one fills it, so the data on the Yodo1 card is also received by the network that ultimately shows you the ad. Yodo1 maintains the current list of those partners, and each of them processes data under its own privacy policy; the Yodo1 policy linked below is the authoritative starting point for that list.

4.Advertising & Advertising ID

Ads in Twobble may be personalized (chosen using your advertising ID and inferred interests) or non-personalized (chosen only from context, such as the game you are playing and your approximate region). Where the law requires it — for example under the GDPR — personalized ads are only shown with your consent, and declining consent means you see non-personalized ads instead; the game itself stays fully playable either way.

Your device’s advertising ID is a resettable identifier that ad networks use for frequency capping, fraud prevention, measurement and personalization (with your consent where the law requires it). You are in control of it:

• Android: Settings → Google → Ads (or Settings → Privacy → Ads) lets you reset your advertising ID or delete it entirely, which stops personalized ads from using it.
• iOS: the App Tracking Transparency (ATT) prompt asks for your permission before the app can access the IDFA; if you decline, the app and its SDKs cannot read the IDFA, and ads are not personalized using your activity in other companies’ apps and websites. You can change your choice at any time under Settings → Privacy & Security → Tracking, and disable Apple’s personalized ads under Settings → Privacy & Security → Apple Advertising.

5.Analytics

We do not add analytics tools of our own to Twobble. The advertising SDK includes ThinkingData (in Yodo1 MAS), which the ad provider uses to measure how its ads and SDK perform; it may process device identifiers and usage events on the provider’s behalf, as described on its card in section 3. Basic, aggregated performance data may also be reported by the app stores.

6.App Permissions

Twobble requests only the permissions it needs to work:

• Internet access: lets the game connect to the online services described in this policy, such as loading ads and verifying purchases.
• Network state: lets the game check whether a connection is available before loading ads or verifying purchases.
• Advertising ID: used by advertising SDKs to serve and measure ads; you can reset or delete it in your device settings.
• In-app billing: enables optional in-app purchases through Google Play or the App Store; payment details are handled by the store, never by us.
• Notifications: lets the game send you optional reminder notifications (for example, when a reward is ready or you have not played for a while); you can decline or disable them at any time.
• Vibration: provides short haptic feedback for big in-game moments (for example large merges and boosters); you can turn it off in Settings.
• Google ad services (topics, attribution, advertising ID): let the advertising SDKs use Android's Privacy Sandbox ad services; you control them in your device's ad settings.
• Wake lock: keeps the screen awake during gameplay and while rewarded ads are playing.
• Foreground service: used by some SDK components to finish short tasks (such as completing an ad or a download) reliably.

7.Children’s Privacy

Twobble is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal information, contact us at indeagamesstudio@gmail.com and we will take steps to delete it.

8.Your Rights

Depending on where you live, you may have legal rights over your personal data, including the following.

If you are in the EU/EEA or UK (GDPR): you have the right to access, rectify, erase and receive a portable copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Our legal bases are your consent (personalized advertising and use of advertising identifiers where the law requires consent), performance of our contract with you (processing and restoring your in-app purchases), our legitimate interests (non-personalized ads and fraud prevention) and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident (CCPA/CPRA): you have the right to know what personal information is collected about you, to request its deletion, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. Showing personalized ads can, however, count as “sharing” (and in some cases a “sale”) as the CPRA defines those terms broadly; you can opt out by limiting ad tracking on your device (see section 4) or by using the vendor opt-out links in section 3. We will never discriminate against you for exercising these rights.

Because most data described in this policy is collected directly by the SDK vendors in section 3, requests about that data are fastest through the vendor’s own privacy page. For anything else — or if you would like our help — email us at indeagamesstudio@gmail.com and we will respond within the time required by law.

9.Data Retention & Security

Game data on your device is kept until you delete the game or clear its data. We have no servers of our own for game data. Purchase records are held for us by RevenueCat and can be deleted on request (see "Storage and deletion" in the Data We Collect section). Advertising and diagnostics data is kept by the service providers for the periods stated in their own policies. Data collected by third-party SDKs is retained by those vendors according to their own published retention periods, as described in their privacy policies. The SDK vendors protect data with industry-standard safeguards such as encryption in transit, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10.International Transfers

The SDK vendors listed in section 3 operate globally, so data they collect may be processed in the United States and other countries outside your own. Where data leaves the EU/EEA or UK, the vendors rely on recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (for example the EU–U.S. Data Privacy Framework, where the vendor is certified). Details are in each vendor’s privacy policy.

11.Changes to This Policy

If we add an SDK, remove one, or change how data is handled, we will update this page and change the effective date at the top; where required, we will also give additional notice. The current version always lives at indeagames.com/privacy/twobble.

12.Contact

Questions, concerns, or a privacy request? We are a small team and we actually read our email: indeagamesstudio@gmail.com.