PebbleFork Games LLC Privacy Policy

Goblet Rush does not require you to create an account or sign in.

We do not ask for your name, precise GPS location, contacts, photos, videos, microphone recordings, camera data, health information, private messages, or payment card details to play the game.

Most game progress is saved locally on your device. Selected gameplay events may be transmitted to analytics, attribution, advertising, purchase, consent-management, and crash-reporting services as described below.

The current release uses:

• Unity LevelPlay and Unity Ads for rewarded advertising.
• Usercentrics for consent and privacy-choice management.
• PostHog for gameplay and product analytics.
• AppsFlyer for advertising attribution and campaign measurement.
• Firebase Crashlytics for crash reporting.
• RevenueCat and the applicable app store for in-app purchases.
• Apple StoreKit and Google Play services for platform purchase and review features.

PostHog, AppsFlyer, and Firebase Crashlytics are started only after the corresponding Usercentrics consent permits them. On iOS, access to IDFA and tracking across other companies’ apps or websites also depends on Apple’s App Tracking Transparency permission.

Unity LevelPlay and Unity Ads can provide contextual or privacy-limited rewarded ads when personalized advertising is not permitted. Google Analytics for Firebase collection is disabled in the current release.

The current release does not intentionally collect:

• Precise location.
• Contacts or address-book data.
• Photos or videos.
• Voice or other audio recordings.
• Health or fitness information.
• Biometric information.
• Browsing history outside the app.
• Private email or text-message contents.
• Racial or ethnic information, sexual orientation, political opinions, religious beliefs, or similar sensitive characteristics.
• Full payment card or bank-account credentials.

Under Apple’s App Store definition, “tracking” includes linking data collected from Goblet Rush with third-party data for targeted advertising or advertising measurement, or sharing data with a data broker.

When you permit tracking or personalized advertising, the following categories can be used for tracking:

• Device identifiers.
• Purchase history and purchase events.
• Gameplay content.
• Product interactions.
• Advertising data.

These categories can be provided to Unity, AppsFlyer, advertising networks, attribution partners, and campaign partners for advertising delivery, cross-context behavioral advertising, campaign attribution, return-on-ad-spend measurement, and advertising fraud prevention.

On iOS, Goblet Rush requests permission through Apple’s App Tracking Transparency framework before accessing IDFA or engaging in tracking that requires Apple’s permission.

If you deny permission or applicable consent:

• Goblet Rush remains playable.
• IDFA is not available to the app.
• PostHog, AppsFlyer, and Crashlytics remain disabled when their corresponding consent is denied.
• Personalized advertising is limited where required.
• Contextual or privacy-limited rewarded ads may still be available.
• Some non-advertising purchase, platform, consent, security, and local-save processing continues because it is necessary to provide the game.

We use information to:

• Operate the game and maintain local progress.
• Provide rewards, upgrades, virtual currency, and store items.
• Process and restore in-app purchases.
• Deliver rewarded ads.
• Provide contextual or personalized advertising where permitted.
• Measure advertising impressions and campaign performance.
• Attribute installs, gameplay activity, and purchases to campaigns.
• Understand gameplay and feature usage.
• Diagnose crashes, errors, and performance problems.
• Prevent purchase misuse, reward exploitation, and advertising fraud.
• Record and apply privacy choices.
• Respond to support and privacy requests.
• Comply with law and protect our legal rights.

We do not use app data to make decisions that produce legal or similarly significant effects concerning you.

Where the GDPR, UK GDPR, or similar law applies, we rely on the following legal bases:

• Contract performance: Operating requested game features, storing progress, granting rewards, and processing or restoring purchases.
• Consent: PostHog analytics, AppsFlyer attribution, Firebase Crashlytics, personalized advertising, advertising identifiers, and similar processing where consent is required.
• Legitimate interests: Maintaining security, preventing fraud, responding to support requests, operating privacy-limited services, and protecting or defending legal rights, provided those interests are not overridden by your rights.
• Legal obligation: Maintaining required consent records, responding to valid privacy requests, and satisfying tax, accounting, regulatory, or law-enforcement obligations.

Withdrawing consent does not affect processing that was lawful before withdrawal.

We disclose information to the following current services:

• Unity LevelPlay and Unity Ads: Rewarded-ad mediation, delivery, advertising measurement, fraud prevention, and privacy-limited or personalized advertising.
• Usercentrics: Consent collection, consent documentation, geographic consent configuration, and communication of privacy signals.
• PostHog: Gameplay, product-interaction, advertising-event, purchase-event, and app-performance analytics after consent.
• AppsFlyer: Install attribution, campaign measurement, selected gameplay and tutorial events, rewarded-ad events, purchase and revenue attribution, and advertising fraud prevention after consent.
• Firebase Crashlytics: Crash reports, exceptions, diagnostics, and associated game-state context after consent.
• RevenueCat: In-app purchase handling, anonymous customer information, entitlement management, and purchase synchronization.
• Apple and Google: App distribution, payments, refunds, purchase restoration, platform security, and in-app review features.

Providers that act as processors or service providers are required to process information for the contracted services and provide protections required by applicable law. Certain advertising companies and platform providers can act as independent controllers for their own advertising, security, compliance, or platform activities. Their privacy policies govern those independent activities.

Current provider privacy information:

• Unity Game Player and App User Privacy Policy
• Usercentrics Privacy Policy
• AppsFlyer Services Privacy Policy
• Firebase Privacy and Security
• PostHog Privacy Policy
• RevenueCat Privacy Policy
• Google Privacy Policy
• Apple Privacy Policy

We will update this Policy before materially changing the categories of information collected or the purposes for which they are used.

We apply the following retention periods or criteria:

• Local game saves: Remain on the device until you clear the app’s data, delete the save, or uninstall the game. Platform backups may persist according to your Apple or Google backup settings.
• Customer-support messages: Normally retained for up to 24 months after the request is closed, unless a longer period is required for an active dispute, legal obligation, security investigation, or privacy request.
• Crashlytics data: Firebase states that Crashlytics crash traces, associated identifiers, and extracted diagnostic data are retained for 90 days before removal from live and backup systems begins.
• PostHog analytics: Retained while needed to compare game versions, evaluate features, measure advertising and purchase outcomes, and investigate data-quality or fraud issues. We review the continued need for event-level analytics at least annually and delete or de-identify data that is no longer needed.
• AppsFlyer data: User-level retention varies by integration and advertising-partner requirements. AppsFlyer currently states that aggregated reporting data is generally retained for up to 25 months. Certain partners can require shorter periods.
• Advertising data: Retained by Unity and participating advertising partners according to the duration of the advertising relationship, applicable legal obligations, fraud and security needs, and applicable limitation periods.
• Purchase information: Retained while needed to fulfill or restore purchases, maintain entitlements, process refunds, prevent fraud, and meet app-store, tax, accounting, and legal obligations.
• Consent records: Retained while needed to demonstrate and apply your choices and for applicable legal or limitation periods.
• Privacy-request records: Normally retained for 24 months or any longer period required to demonstrate compliance with applicable law.

Deletion can be delayed or restricted where information must be retained for security, fraud prevention, accounting, tax, purchase-entitlement, consent-documentation, dispute-resolution, or other legal purposes.

You can:

• Open the in-app privacy settings to review or change available choices.
• Decline or withdraw consent for individual services where offered.
• Use Apple’s App Tracking Transparency settings.
• Reset or limit advertising identifiers through your device settings.
• Use privacy controls displayed within Unity advertisements.
• Manage purchases through your Apple or Google account.
• Clear local save information by clearing app data or uninstalling the game.
• Stop future app collection by uninstalling the game.
• Contact us to request access, correction, deletion, or another applicable privacy right.

Withdrawing consent affects future processing. It does not automatically delete information already transmitted to a provider.

Goblet Rush has no account system, so there is no in-app account-deletion feature.

This section applies where a U.S. state privacy law grants you the described rights.

During the preceding 12 months—or since Goblet Rush became available if that period is shorter—we have collected the following general categories of personal information:

• Identifiers.
• Commercial information such as purchase history.
• Internet or other electronic activity, including gameplay, app interaction, and advertising activity.
• Approximate geolocation.
• Customer-support communications.
• Diagnostics and technical information.

We have disclosed these categories to service providers for the business purposes described in this Policy.

We do not sell personal information for money.

When a user enables personalized advertising or tracking, we share identifiers, purchase events, gameplay and product-interaction data, advertising data, and approximate location with advertising and attribution partners. California and some other states may define that activity as “sharing,” “sale,” or “targeted advertising,” even though PebbleFork does not receive money in exchange for the information.

We do not knowingly sell or share the personal information of users under 16.

Depending on your state, you may have the right to:

• Know or access personal information.
• Correct inaccurate information.
• Delete personal information.
• Obtain a portable copy.
• Opt out of sale, sharing, or targeted advertising.
• Appeal a decision concerning a privacy request.
• Exercise your rights without unlawful discrimination.

You can opt out through the in-app privacy settings or by emailing contact@pebbleforkgames.com.

A browser-based Global Privacy Control signal does not automatically communicate a preference to a separately installed native mobile app. Use the in-app privacy settings to apply a choice to Goblet Rush. If a supported opt-out preference signal is transmitted to and detected by a PebbleFork website, we will honor it for that browser or device as required by applicable law.

An authorized agent may submit a request by providing signed permission showing that the agent is authorized to act for you. We may ask you to verify your identity or confirm the authorization directly, unless the agent has a legally valid power of attorney.

To appeal a denied request, email contact@pebbleforkgames.com with “Privacy Appeal” in the subject line and identify the original request. We will review and respond as required by applicable law.

If the GDPR, UK GDPR, or similar law applies, you may have rights to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion.
• Restrict processing.
• Object to processing based on legitimate interests.
• Receive certain data in a portable format.
• Withdraw consent.
• Lodge a complaint with the data-protection authority where you live or work or where an alleged violation occurred.

Because Goblet Rush has no user account, we may need an installation identifier, purchase identifier, support correspondence, or other information to locate records held by a service provider.

PebbleFork and its service providers process information in the United States, the European Union, and other countries.

Where legally required, international transfers are supported through an applicable adequacy decision, standard contractual clauses, the UK International Data Transfer Addendum or Agreement, or another legally recognized transfer mechanism provided through the relevant service-provider agreement.

You can contact us for additional information about safeguards applicable to a particular transfer.

Goblet Rush is intended for a general audience aged 13 and older. It is not directed to children under 13.

We do not knowingly collect personal information from children under 13 or knowingly permit personalized advertising or tracking for children under 13.

In locations where a person aged 13 or older cannot independently consent to optional data processing, any required authorization from a parent or legal guardian must be obtained before enabling optional analytics, attribution, crash reporting, or personalized advertising.

If we learn that personal information was collected from a child under 13 contrary to applicable law, we will take reasonable steps to stop the processing and delete the information. A parent or guardian may contact contact@pebbleforkgames.com.

We use reasonable technical and organizational measures designed to protect information, including secure network connections and access restrictions.

Local save and consent information is stored on your device. Information sent to service providers is generally transmitted using HTTPS or TLS.

No security system can guarantee absolute security.

We may update this Privacy Policy when the game, its service providers, or applicable legal requirements change.

If we make a material change, we will update the effective date and provide additional notice where required.

PebbleFork Games LLC

7901 4TH ST N STE 300
ST. PETERSBURG, FL 33702
United States

Email: contact@pebbleforkgames.com