Privacy Policy
This policy explains what information Tiny Finds (the "game") and the services it uses collect, why, and the choices you have. The game is published by Seyfettin Yıldırım, a sole proprietor in Türkiye, under the name Concave Giraffe ("we", "us"). We are the data controller. Questions: [email protected].
The short version
- There are no accounts. We never ask for your name, email address, phone number, location or contacts.
- Your progress is saved on your device. We don't upload it.
- With your consent where the law asks for it, the game sends gameplay statistics and crash reports, and our ad partners may show personalised ads. You can turn statistics and crash reports off at any time in Settings.
- The game reads no files, photos, camera, microphone or precise location.
1. Information you give us
If you write to us (for example with the game's Contact support button), we receive your email address, your message and anything you attach. The support email starts with your app version, device model and operating system version, so we can help faster; you can delete them before sending. We use this only to answer you and keep it for up to 24 months after the conversation ends.
2. Information that stays on your device
The game saves your progress on your device: levels and scores, coins, gems, lives and hints, settings, what you have bought or subscribed to (including the store's transaction numbers), and the timing of rewards and reminders. We don't upload it. Your device's own backup (Android Backup, iCloud) may include it, depending on your device settings. Uninstalling the game deletes it.
Reminders are local notifications, scheduled on your device; you can turn them off in your device settings.
3. Information the game collects automatically
Gameplay statistics (analytics)
To understand how the game is played and improve it, the game sends events to Google Firebase Analytics and GameAnalytics: levels started and completed, scores, stars, time spent, hints, coins and gems earned or spent, ads watched and their result, purchases (product, price, currency and transaction number), and whether notifications were allowed. These services also receive technical information: device model, operating system, app version, language, the IDs they create for this installation (such as Firebase's app instance ID), an approximate location such as your country (derived from your IP address), and, where you allow ad storage, your device's advertising ID. We don't send your name or any free text.
Crash reports
If the game crashes, Firebase Crashlytics receives the crash details (where in the code it happened), the device model, operating system, app version, free memory and storage, and an ID for this installation. Crash reporting follows your analytics choice. Crashlytics keeps crash reports for 90 days.
Advertising
The game shows ads: optional rewarded videos, and ads between levels (not if you have bought Remove Ads or VIP). Unity LevelPlay chooses an ad network for each ad; today these are Unity Ads and Google AdMob. They receive your device's advertising ID (unless you have reset or turned it off), your IP address, device and app information, and how you interact with ads; Unity Ads says it may also receive information about purchases made in the game. They use it to show ads, measure them, prevent fraud and, if you allow it, personalise them. Ad networks may also use your device's privacy-preserving advertising features, such as Android's Topics. If you don't allow personalised ads, you may still see ads that aren't based on your activity.
Services the game needs to work
These run whatever your consent choices are, because the game needs them, and they receive only technical information:
- Firebase App Check confirms requests come from the genuine game on a genuine device, using Google Play Integrity or Apple App Attest and DeviceCheck.
- Our server time service (Firebase Cloud Functions) tells the game the date and time, so daily rewards can't be unlocked by changing the device clock. The game sends no data with this request; the service receives the technical request data every connection carries (such as your IP address) and an App Check token. We store nothing from it; Google Cloud keeps its request logs, which include the IP address, for 30 days for security and troubleshooting.
- Firebase Remote Config lets us adjust game settings (such as reward amounts or how often ads appear) without an update. It receives an installation ID, app version, language, country and time zone.
- The consent form (Google's User Messaging Platform) receives device information and your IP address to know which privacy rules apply where you are, and stores your choices on your device.
- The app store (Google Play or the App Store) handles purchases, subscriptions, refunds and the rating prompt. We never receive your payment details. The game checks each purchase receipt on your device.
- Unity IAP connects the game to the store's purchases. It sends Unity the purchase details, diagnostics and crash data, device identifiers and an approximate location, which Unity uses to run the service; Unity's disclosure also lists an email address, processed only in passing and not kept.
4. Your choices
In the European Economic Area, the United Kingdom and Switzerland, the game asks for your consent when you first open it. Without it, no analytics or crash reports are sent, and ads aren't personalised. You can change your choices at any time in Settings > Your data > Privacy options.
In US states with privacy laws (such as California), sharing your information with ad networks for personalised ads can count as a "sale" or "sharing". You can opt out in Settings > Your data > Privacy options when the game shows it.
Elsewhere, analytics and crash reporting are on until you turn them off, and ads may be personalised.
Everywhere, you can:
- turn off gameplay statistics and crash reports with Settings > Share usage data. While it is off, the game sends none, whatever your other choices;
- reset or delete your advertising ID, or limit ad tracking, in your device settings (Android: Settings > Privacy > Ads; iOS: Settings > Privacy & Security > Tracking);
- have the data the game has sent deleted: Settings > Your data > Delete my data (see Delete your data);
- write to us at any time.
5. Why we use your information (legal bases)
- To provide the game and your purchases (performance of a contract): saving progress, delivering what you buy, server time, Remote Config.
- Security and fraud prevention (legitimate interests): App Check and purchase checks.
- Analytics, crash reports and personalised ads: your consent where the law requires it, otherwise our legitimate interest in understanding and funding a free game, which you can object to with Share usage data and your device's ad settings.
- Non-personalised ads (legitimate interests): ads keep the game free.
- Answering you (legitimate interests): support emails.
6. Who receives information
We don't sell your information for money. It is shared only with the service providers below, who process it to provide their services and under their own privacy policies:
- Google Firebase (Google LLC): analytics, crash reporting (Crashlytics), remote configuration, App Check and our server time service. Firebase privacy
- GameAnalytics: gameplay analytics. GameAnalytics privacy policy
- Unity LevelPlay (Unity Technologies): ad mediation, which picks the ad network for each ad. Unity's privacy policy for players
- Unity Ads (Unity Technologies): advertising. Unity's privacy policy for players
- Unity IAP (Unity Technologies): connects in-game purchases to Google Play and the App Store. Unity's privacy policy for players
- Google AdMob (Google LLC): advertising, and the consent form (User Messaging Platform). How Google uses information from apps
- Google Play and the Apple App Store: downloads, payments, subscriptions and the rating prompt. Google privacy policy, Apple privacy policy
We may also disclose information if the law requires it, to protect our rights or users, or as part of a sale or merger of our business, in which case this policy continues to apply.
7. International transfers
Our providers may process information outside your country, including in the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.
8. How long information is kept
- Analytics: up to 14 months at Firebase; GameAnalytics under its own policy.
- Crash reports: 90 days.
- Server time request logs: 30 days at Google Cloud.
- Support emails: up to 24 months after the conversation ends.
- Information on your device: until you uninstall the game.
9. Children
The game is meant for players aged 13 and over and isn't directed at children under 13. We don't knowingly collect information from children under 13. If you believe a child has used the game and you want their information deleted, contact us.
10. Your rights
Depending on where you live, you may have the right to access, correct or delete your information, to object to or restrict its use, to withdraw consent, to data portability, and to complain to a data protection authority. California residents also have the right to know what we collect, to delete it and to opt out of its sale or sharing, without being treated differently for using these rights. Players in Türkiye have the rights in Article 11 of the Personal Data Protection Law (KVKK).
To use them, email [email protected]. The game has no accounts, so to find the statistics your device sent we need the IDs they were sent under: the game's Settings > Your data > Delete my data writes that email for you, IDs included. The steps, and what is deleted and what stays, are on Delete your data. Deleting the game removes everything stored on your device, and resetting your advertising ID breaks the link between your device and earlier ad data.
11. Security
Information travels encrypted (HTTPS) to our providers, and our server only answers the genuine game. No method of transmission or storage is completely secure, but we keep what we collect to the minimum.
12. Changes
If we change this policy, we will update the date above and, for important changes, tell you in the game.
13. Contact
Seyfettin Yıldırım
[email protected]