Privacy Policy

1. Who we are

The Service is operated by Project Team For You, which is the data controller responsible for your information. You can reach us, including our privacy officer, at projectteamforyou@gmail.com.

2. Information we collect

There is no sign-up or login. When you open the game for the first time, the app creates a random device identifier (a UUID) and stores it on your device. Our server then issues an anonymous player ID and an automatically generated nickname. You may change your nickname at any time; it is shown on the daily challenge leaderboard.

We do not ask for, and do not want, sensitive information, precise location, contacts, photos or payment card details.

3. How we use information and our legal bases

• Providing the game — keeping your progress, syncing your cloud save and restoring it on reinstall (performance of a contract).
• Daily challenge and leaderboard — recording scores and displaying your nickname (performance of a contract).
• Improving the game — analysing aggregated gameplay events to balance level difficulty and fix bugs (legitimate interests).
• Security — preventing cheating, abuse and fraud, and rate limiting requests (legitimate interests).
• Advertising — showing ads that fund the free game; personalised ads only where you have consented (consent, or legitimate interests for non-personalised ads where permitted).
• Legal obligations — responding to lawful requests and keeping records required by law.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you.

4. Advertising

The Android app uses Google AdMob, and the web version may use Google AdSense for Games / H5 Games Ads placements. Google may use your device’s advertising ID (Android) or cookies and similar technologies (web) to deliver ads, measure performance, limit repetition and prevent fraud.

• Consent: If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent using Google’s User Messaging Platform (UMP) before personalised ads are shown. You can change your choice at any time from the game’s Settings (Privacy options).
• Non-personalised ads: If you do not consent, or if you indicate that you are under the applicable minimum age, only non-personalised ads are requested.
• Opting out: On Android you can reset or delete your advertising ID, or opt out of ads personalisation, under Settings → Google → Ads (or Settings → Privacy → Ads). On the web you can manage cookies in your browser and visit adssettings.google.com.

Learn how Google uses information from sites and apps that use its services at policies.google.com/technologies/partner-sites.

5. In-app purchases

The optional “Remove Ads” purchase is processed entirely by Google Play. We receive only a purchase token and the status of the transaction to unlock the feature. We never receive or store your payment card details. Google’s handling of payment data is governed by the Google Payments Privacy Notice.

6. Sharing and service providers

We do not sell your personal information and we do not share it with third parties for their own marketing. We use the following service providers (processors), which process data only on our instructions:

We may also disclose information if required by law, to protect the rights and safety of our players or others, or in connection with a merger, acquisition or sale of assets, in which case this Policy will continue to apply.

7. International data transfers

We are based in the Republic of Korea, and our servers and service providers are located mainly in the United States. Your information may therefore be transferred to and processed in countries whose data protection laws differ from those of your country. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and our providers’ data processing terms. Details of transfers under Korean law are listed in section 12.

8. How long we keep information

• Player data (player ID, hashed device identifier, nickname, cloud save, leaderboard entries): until you delete your data or your player record is deleted.
• Gameplay events: up to 24 months, after which they are deleted or kept only in aggregated form that no longer identifies you.
• IP addresses: used transiently for security and rate limiting and not stored long term.
• Crash and diagnostic logs: only as long as needed to investigate the problem, normally no more than 90 days.

We may keep information longer if the law requires it.

9. Deleting your data

• In the game: open Settings → Delete my data. Your player record, cloud save, nickname and leaderboard entries are erased from our servers immediately, and the local identifier on your device is reset.
• By email: write to projectteamforyou@gmail.com and include your player ID (shown in Settings) if possible. We will complete the deletion within 30 days.

Uninstalling the app alone does not delete server data. More information: https://pixelpopflow.pages.dev/legal/delete-account.html. Advertising data held by Google is managed through your Google or device settings.

10. Your rights (EEA, UK and Switzerland)

Under the GDPR and similar laws you have the right to access your data, to have it rectified or erased, to restrict its processing, to receive it in a portable format (portability), and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local supervisory authority.

To exercise these rights, email projectteamforyou@gmail.com. Because we do not know your name, we may ask for your player ID to verify the request. We respond within one month.

11. California and other US states

Under the CCPA/CPRA and similar state laws, you have the right to know what personal information we collect, to access and delete it, to correct it, and not to be discriminated against for exercising these rights.

• We do not sell personal information for money. Disclosure of the advertising ID to Google for personalised ads may be treated as “sharing” for cross-context behavioural advertising. Do Not Sell or Share My Personal Information: you can opt out by declining personalised ads in the game’s privacy options, turning off ads personalisation on your device, or enabling Global Privacy Control in your browser, which we honour.
• We do not use or disclose sensitive personal information.
• Requests can be sent to projectteamforyou@gmail.com; you may use an authorised agent.

12. Republic of Korea (PIPA)

For users in Korea, the full disclosures required by the Personal Information Protection Act are set out in the Korean version of this Policy. In summary: we entrust processing to Cloudflare, Inc. (USA), Railway Corporation (USA) and Google LLC (USA); data is transferred to them over encrypted networks as you use the Service, for the purposes and retention periods described above. You may refuse the transfer by not using the Service or by deleting your data. Our privacy officer can be reached at projectteamforyou@gmail.com.

13. Japan (APPI)

We handle personal information in accordance with the Act on the Protection of Personal Information. Personal data is provided to the service providers in the USA listed in section 6, which take measures equivalent to those required by the APPI. You may request disclosure, correction, suspension of use or deletion of your retained personal data by contacting projectteamforyou@gmail.com.

14. Brazil (LGPD)

Under the Lei Geral de Proteção de Dados, you may request confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing, and revocation of consent. You may also file a complaint with the ANPD. Our contact for data protection matters (encarregado) is projectteamforyou@gmail.com.

15. Children

Pixel Pop Flow is intended for a general audience and is not directed to children under 13 (under 16 in the EEA, or the higher minimum age in your country, such as 14 in Korea). We do not knowingly collect personal information from children below these ages. If a player indicates that they are under the applicable age, only non-personalised ads are served. If we learn that we have collected personal information from a child without the required consent, we will delete it. Parents or guardians can contact us at projectteamforyou@gmail.com.

16. Security

We use encrypted connections (HTTPS/TLS), store device identifiers only in hashed form, restrict access to our database to authorised staff, and apply rate limiting and abuse detection. No system is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

17. Local storage and cookies

The game stores your random device identifier, settings and a local copy of your progress on your device (app storage or browser localStorage). This is necessary for the game to work. On the web, Google’s ad services may set cookies as described in section 4. Clearing browser data or app storage removes the local data but not your server data.

18. Changes to this Policy

We may update this Policy from time to time. We will post the new version on this page with a new effective date and, for material changes, notify you in the game before they take effect.

19. Contact us

Project Team For You — Privacy officer
Email: projectteamforyou@gmail.com
Web: pixelpopflow.pages.dev

If this Policy is translated, the translation is provided for your convenience; in case of inconsistency, the English version prevails, except for the Korean version for users in Korea or where local law requires otherwise.