Privacy Policy

Effective 18 October 2026 · Applies to the Blocky Poppy app on Android and iOS

Blocky Poppy ("the app") is a free puzzle game made by an independent developer, tallpinetree ("we", "us", "our"). This policy explains what data the app collects, why, who receives it, how long it is kept, and the choices and rights you have. We collect as little as we can: enough to run the game, keep it stable, improve it, and pay for it with ads.

If you have a question or a request about your data, email blocks@tallpinetree.app.

1. Summary

The app has no accounts. It never asks for your name, email address, phone number, contacts, photos, files or precise location.
Your scores and progress are stored on your device.
The app identifies an installation only by a random Player ID it creates itself (shown in Settings). It is not linked to your identity and resets if you reinstall the app.
Google AdMob shows ads in the app. Where the law requires it, you are asked for consent before ads are personalised, and you can change your choice at any time in Settings → Privacy options.
We do not sell your personal information for money.
Nothing is collected for analytics before you accept the Terms of Use and this policy on first launch.

2. What we collect

Category	What exactly	Source
Gameplay and app activity	Events such as game started or ended, score, level, mode or mini-game played, moves and combos, session starts and length, achievements unlocked, settings changed (sound, music, vibration, reminders), which ads were requested, shown, skipped or rewarded, and purchase events. Each event carries the Player ID, a time stamp, the platform (Android or iOS), OS version and app version.	The app, sent to Google Firebase Analytics
Device and app information	Device model, OS version, app version, language and screen size; Firebase also uses an app instance ID and derives your approximate region (country or city level) from your IP address.	The app and Google Firebase
Crash and diagnostic data	When the app crashes or hits an error: the error and stack trace, device model, OS and app version, free memory and disk, whether the app was in the foreground, and the last gameplay events before the crash (as breadcrumbs). Reports are linked to the Player ID.	Google Firebase Crashlytics
Advertising data	Your device's advertising identifier (Android Advertising ID or Apple IDFA, only if you allow it), IP address, device and network information, the app's consent choices, and how you interact with ads (views, clicks, rewards).	Google AdMob and the ad partners it works with
Purchases	If you buy "Remove Ads": the product, the purchase token or transaction ID and its status (valid, refunded). We never receive your name, card or other payment details; the store handles payment.	Google Play or the Apple App Store
Messages you send us	If you email us: your email address and whatever you write, used only to answer you.	You

The app does not collect precise (GPS) location, contacts, photos, microphone or camera input, health or financial information, or browsing history.

3. How we use it, and our legal bases

We use the data above to:

Run the game: save progress on your device, restore a purchase, remember your settings. Basis: performing our agreement with you (the Terms of Use).
Keep it stable and secure: find and fix crashes and bugs, detect abuse such as automated ad fraud. Basis: our legitimate interest in a working, safe app.
Improve it: understand which levels are too hard or too easy, which features are used, tune difficulty and how often ads appear, and test two versions of a setting against each other (A/B tests). This uses the Player ID only, never your identity. Basis: our legitimate interest in improving the game; you can object at any time (section 8).
Show ads, which pay for the free game, measure them and limit how often they appear. Basis: legitimate interest for non-personalised ads; your consent for personalised ads where the law requires it.
Remind you to play, only if you allow notifications (section 6). Basis: your consent (the system permission).
Comply with law and answer your requests. Basis: legal obligation.

We do not use your data to make decisions that have legal or similarly significant effects on you.

Google, as our service provider, for Firebase Analytics, Firebase Crashlytics and Firebase Remote Config, and, as an independent provider, for AdMob advertising. See How Google uses information from sites or apps that use its services and the Google Privacy Policy.
Ad partners that serve ads through AdMob mediation and bidding receive advertising data under their own policies. Google lists them in the consent form and at AdMob ad technology providers.
Google Play and Apple process purchases under their own terms and privacy policies.
Authorities, if we are legally required to, or to protect our rights or the safety of others.
A successor, if the app is transferred to another developer; this policy would continue to apply to the data, and we would tell you in the app.

We do not sell personal information for money. Showing personalised ads through AdMob may count as "sharing" or "targeted advertising" under some US state laws; you can opt out as described in section 5.

5. Ads, consent and tracking

In the European Economic Area, the UK and Switzerland the app shows Google's consent form before personalised ads; you can accept, reject, or choose per purpose and partner.
In US states with privacy laws, the app shows Google's US-states message, where you can opt out of the sale or sharing of your personal information for targeted ads.
You can change these choices any time in Settings → Privacy options (shown where it applies).
On iOS the app asks for permission to use the advertising identifier (App Tracking Transparency). If you say no, ads are still shown but not personalised with it.
On Android you can delete or reset your advertising ID in your phone's settings (Google → Ads, or Privacy → Ads).
Ads in the app are limited to content suitable for teens.
Buying "Remove Ads" turns off banner and interstitial ads. Optional rewarded ads that you choose to watch (for example for a hint or to continue) stay available.

6. Device permissions

Notifications (asked by the system): for occasional local "come back and play" reminders. They are scheduled on your device; no notification data is sent to us. Turn them off in Settings → Reminders or in your phone's settings.
Internet and network state: to load ads, settings and send events.
Vibration: for haptic feedback; turn it off in Settings → Vibration.
Advertising ID (Android) / tracking (iOS): see section 5.
Billing: to offer the optional "Remove Ads" purchase.

7. How long we keep data

Firebase Analytics: event-level data is kept for 2 months (the shortest setting); aggregated reports without identifiers may be kept longer.
Crashlytics crash reports: 90 days.
AdMob and ad partners: according to their own policies.
Purchase records: as long as the purchase is valid, so it can be restored and refunds handled, and as long as the law requires.
Emails: until your request is resolved, then deleted within 12 months.
Data on your device: until you uninstall the app or clear its data.

8. Your choices and rights

Depending on where you live (for example under the GDPR in the EU/EEA, the UK GDPR, or US state laws such as California's CCPA/CPRA), you may have the right to:

access the data we hold about you, and get a copy;
correct it, or have it deleted;
object to, or restrict, how we use it (including analytics based on legitimate interest);
withdraw consent at any time (Settings → Privacy options), without affecting earlier use;
opt out of the sale or sharing of personal information and of targeted advertising;
not be treated differently for using these rights;
complain to your local data protection authority.

How to make a request: email blocks@tallpinetree.app and include your Player ID (open Settings in the app; long-press the ID to copy it). Because we do not know who you are, the Player ID is how we find your data. We answer within 30 days. Deleting your data asks Google to delete the Firebase Analytics and Crashlytics data linked to that ID.

Without contacting us: uninstalling the app deletes everything stored on your device, and a reinstall starts with a new Player ID. You can also turn off ad personalisation and reset your advertising ID in your phone's settings.

9. Children

Blocky Poppy is a general-audience game that is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has used the app and that we hold their data, email us with the Player ID and we will delete it.

10. International transfers and security

We are based in Nepal. Google's servers may be in other countries, including the United States and the European Union, so your data may be processed outside your country. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses, which Google offers for its services.

All data the app sends travels over encrypted connections (HTTPS). Access to the Firebase and AdMob consoles is limited to the developer and protected by strong passwords. No system is perfectly secure, but we will tell affected users and authorities about a breach when the law requires it.

11. Changes and contact

If this policy changes, the new version is posted on this page with a new effective date. If a change is significant, we will also tell you in the app before it applies.

Data controller: tallpinetree, the developer of Blocky Poppy, Nepal.
Contact: blocks@tallpinetree.app