Privacy Policy - Tiny Woods

The short version

No account and no sign in. Your progress, statistics and settings are stored in a database on your device.
The game runs no usage analytics or tracking SDK. It only reports technical crashes through Firebase Crashlytics. The tinywoods.pebnox.app website uses Cloudflare Web Analytics for aggregate page view and performance statistics without cookies, localStorage or user profiling.
Purchases are processed by Apple. RevenueCat verifies the receipt so the game knows whether Premium is active.
The free version shows ads from Google AdMob. In the EEA, the United Kingdom and Switzerland you are asked for consent before the first ad.
Buying Remove Ads or Premium switches the ads off, and with them the advertising related data collection.

Who is responsible

Tiny Woods is developed and published by an independent developer based in Poland. Under the General Data Protection Regulation (GDPR) that developer is the controller of the personal data described on this page.

Questions, requests and complaints go to [email protected]. Every privacy message gets an answer, usually within a few working days and always within one month, as the GDPR requires.

What stays on your device

The heart of the game never leaves your device. A local database and the system preferences store keep:

solved puzzles and unlocked chapters
leaves, companions and other in game rewards
daily puzzle results and your streak
time and hint statistics
settings such as sound, haptics, reminder time and theme

None of it is sent to us. When iCloud is available on the device, Tiny Woods writes a copy into your own private iCloud container under your Apple Account, so a new device can offer to bring your progress back. The copy stays inside Apple's service and we cannot read it.

Deleting the app removes the local data from the device. An iCloud copy is removed in iOS Settings, under your name, iCloud, Manage Account Storage.

Purchases, Premium and subscriptions

Payments run through Apple's In-App Purchase system. We never see your card number, your billing address or your Apple Account name.

To know which purchases are active, the app uses RevenueCat as a technical processor acting on our instructions. RevenueCat receives a randomly generated app user identifier that is not linked to your name, the App Store receipt, the product bought and basic device and country data. It returns only one answer to the app: whether Premium and ad free are active.

Legal basis: performance of the contract you enter into when you buy, Article 6(1)(b) GDPR.

Ads in the free version

A rewarded ad can be watched voluntarily in exchange for extra hints, and an interstitial appears occasionally between puzzles, never during one. Ads are served by Google AdMob.

For that purpose Google may process advertising identifiers, your IP address and the approximate location derived from it, device and app information, and data about the ads shown, clicked and measured. For this processing Google acts as an independent controller.

Personalised ads are shown only where you have agreed to them.
On iOS the App Tracking Transparency prompt comes first. If you decline, the app requests non-personalised ads from Google.
In the EEA, the United Kingdom and Switzerland a consent screen from Google's User Messaging Platform appears before the first ad.
You can change or withdraw your choice at any time in the game under Settings, Ad consent, and in iOS Settings, Privacy and Security, Tracking.

Legal basis: your consent, Article 6(1)(a) GDPR, which you may withdraw at any time with effect for the future. Without consent the game still shows ads, but non-personalised ones.

Crash reports

When Tiny Woods crashes, the next launch sends a crash report to Firebase Crashlytics, a Google service, so the fault can be found and fixed. The report contains:

the stack trace, that is the place in the code where the game failed
the device model, iOS version and app version
free memory and disk space, and whether the app was in the foreground
a random installation identifier that Crashlytics creates itself; it is not the advertising identifier and is not used for ads

No name, email address, location or gameplay content is included. Reports go out only from the App Store version, never from development builds, and Google keeps them for 90 days. Details: firebase.google.com/support/privacy.

Website analytics

The tinywoods.pebnox.app website uses Cloudflare Web Analytics to understand which language versions and pages are visited and how quickly they load. It records aggregate information such as the page path, country, device type, browser, operating system and performance timings. Cloudflare states that this service does not collect or use visitors' personal data and does not use cookies, localStorage or fingerprinting for usage metrics.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in improving the website and making its language versions useful. The analytics token is the same for every language, while page paths such as /en and /pl keep the results distinguishable.

Legal bases at a glance

Playing and storing progress on the device: the data never reaches us.
Purchases and restoring purchases: Article 6(1)(b) GDPR, performance of a contract.
Personalised ads: Article 6(1)(a) GDPR, consent.
Non-personalised ads, fraud prevention and security of the advertising system: Article 6(1)(f) GDPR, our legitimate interest in financing a free game and keeping it safe.
Answering your support email: Article 6(1)(b) and Article 6(1)(f) GDPR.
Crash reports: Article 6(1)(f) GDPR, our legitimate interest in keeping the game working.
Aggregate website analytics: Article 6(1)(f) GDPR, our legitimate interest in improving the website and its performance.

Transfers outside the European Economic Area

Apple, Google, RevenueCat and Cloudflare may process data on servers in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where applicable, on the EU-US Data Privacy Framework. The safeguards can be requested from the providers or from us.

How long data is kept

Data on the device: until you delete it in the game or remove the app.
Purchase records at Apple and RevenueCat: as long as contract, accounting and tax law require.
Advertising data at Google: according to Google's own retention periods.
Crash reports at Google: 90 days.
Website analytics at Cloudflare: unsampled beacon data for 7 days; older data is retained in aggregated, sampled form according to Cloudflare's service rules.
Support emails: up to 24 months after the case is closed.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time.

Because there is no account, we usually cannot identify you on our side. Most of the data is under your own control: in the game, in iOS Settings and in your Apple Account. For anything held by our processors write to [email protected] and include what helps us find the record, for example the App Store receipt or the transaction identifier.

You may also lodge a complaint with a supervisory authority, for example the President of the Personal Data Protection Office in Poland (UODO), or the authority of the country where you live.

Children

Tiny Woods is family friendly, but it is not directed at children under 13 and we do not knowingly process their personal data. If a child plays, Remove Ads or Premium switches off the advertising and the data collection that comes with it.

Notifications, sharing and reviews

Daily reminders are scheduled locally on the device. No notification server is involved and no token reaches us.
The share button hands your text and image to the iOS share sheet, where you decide what happens next.
The rating prompt is Apple's own system dialog. We never learn whether or how you rated.

Changes to this policy

When the game changes, this page changes with it. The date at the top always shows the current version, and material changes are announced in the app before they take effect.

Contact

Privacy questions, data requests and everything else: [email protected]. The support page answers the most common questions about the game itself.

What Tiny Woods knows about you, and what it never asks for.