Privacy policy

This policy explains what happens with your data when you play Buzzy Jars (the app) and when you visit buzzyjars.app (this website).

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Igor Smith Kazhdan
Konsul-Smidt-Platz-Str. 72
280217 Bremen
Germany
Email: privacy@spam.buzzyjars.app

2. In short

• Buzzy Jars has no account and no sign-in. Your progress stays on your device; we have no server that receives it.
• The app shows ads from Google AdMob. Before any ad is requested, you are asked for your consent where the law requires it (for example in the EU and the UK), and iOS asks whether the app may use your device's advertising identifier.
• Purchases go through Apple. We never see your payment details.
• This website sets no cookies, has no analytics and loads nothing from third parties.

3. The app

3.1 What is stored on your device

So that you can carry on where you left off, the app keeps a file in its own protected storage area on your device. It contains your progress (levels won, honey chamber and chests), coins and lives, your settings, one-time items you bought and the identifiers of recent purchase transactions (so that no purchase is credited twice), the time of the app's first launch, and play statistics such as levels played and won. Levels the app generates itself are stored there too.

This data does not leave your device, and we have no access to it. Storing it is technically necessary to provide the game (Section 25(2) no. 2 TDDDG); insofar as it is personal data, the legal basis is Art. 6(1)(b) GDPR.

If you use iCloud Backup or back up to a computer, the file may be part of that backup; this happens between you and Apple. Deleting the app deletes the file.

3.2 Advertising with Google AdMob

The app shows banner ads and ads you can choose to watch for a reward. They are delivered by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Consent first. On start, the app uses Google's consent tool (User Messaging Platform). Where consent is required, it shows you a consent form, and no ad is requested before you have made a choice. You can change your choice at any time in the app under Settings, "Privacy settings".

Advertising identifier. Whether the app may use your device's advertising identifier (IDFA) is decided by you in Apple's system prompt ("Allow tracking"). You can change this at any time in iOS under Settings, Privacy & Security, Tracking. Without your permission the identifier is not available to the app or to Google.

What Google processes. To deliver an ad, count it and prevent fraud, the Google Mobile Ads SDK in the app sends Google information such as your IP address (from which an approximate location is derived), device model, operating system and language, app information, the ad shown and your interactions with it, and, only with your permission, the advertising identifier. If you consent, Google and the ad partners named in the consent form may use this information to personalise ads and measure them.

Legal basis. Storing and reading information on your device for advertising and personalised ads are based on your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. If you do not consent, Google may still show non-personalised or limited ads, using only the data needed to deliver them and to prevent fraud; this is based on our legitimate interest in funding a free game (Art. 6(1)(f) GDPR).

More information. Google's privacy policy: https://policies.google.com/privacy. How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites.

If you buy "No ads", the banner is gone for good. Reward ads stay available and only play when you tap them.

3.3 In-app purchases

Purchases are handled entirely by Apple through the App Store. Apple processes your Apple Account and payment details under its own responsibility (https://www.apple.com/legal/privacy/). We receive no payment details, no name and no email address. The app only learns which product was bought, together with a transaction identifier, and keeps both on your device to credit the purchase. Apple gives us aggregated sales reports that do not identify you.

3.4 What else Apple shares with us

If you agreed in iOS to share analytics with app developers, Apple provides us with crash reports and aggregated usage statistics. Apple anonymises or aggregates them before we see them.

3.5 What the app does not do

The app has no user account, no analytics service of its own, no push notifications, and no access to your camera, microphone, photos, contacts or precise location.

4. This website

Hosting. The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Requests pass through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which protects the site against attacks and delivers it faster. When you open a page, the server and Cloudflare process your IP address, the time, the page requested, the referring page and your browser's user agent. This is necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days.

No cookies, no tracking. The website sets no cookies, uses no analytics and loads no fonts, scripts or images from third parties.

Email. If you write to us, we use your email address and message only to answer you (Art. 6(1)(b) or (f) GDPR) and delete them when the matter is settled, unless we must keep them by law.

5. Recipients outside the EU

Google and Cloudflare may process data in the USA. Both are certified under the EU-U.S. Data Privacy Framework, on which the transfer is based (Art. 45 GDPR); in addition they use the EU Standard Contractual Clauses.

6. Children

Buzzy Jars is not directed at children under 13. Parents can block in-app purchases with Screen Time and Ask to Buy.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). You can withdraw a consent at any time (Art. 7(3)); for ads, use "Privacy settings" in the app. As we store no personal data about you on a server, we will usually have nothing to disclose or erase; for data processed by Google or Apple, you can also contact them directly.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state where you live.

8. Changes

If the app or this website changes, we update this policy. The current version is always at https://buzzyjars.app/en/privacy/.