Blocks & Boxes Privacy Policy

Effective date: October 4, 2026 (updated: analytics, crash reports, app integrity and purchase verification)

This Privacy Policy explains how Cozy Island Games ("we", "us" or "our") collects, uses and shares information when you use the Blocks & Boxes mobile game (the "Game"). By using the Game, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

We do not ask you to create an account, and we do not ask for your name, email address or other contact details in the Game.

Information stored on your device. The Game saves your progress and preferences (for example, your current level, best scores, sound settings, remaining free hints and whether you have purchased Remove Ads) locally on your device. This information is not sent to us.

Information collected by our advertising partners. The Game shows ads served by Google AdMob. Google and its partners may automatically collect information from your device, such as:

• device identifiers, including the advertising ID (Android) or the Identifier for Advertisers (iOS), where permitted;
• IP address and approximate location derived from it;
• device and connection information (device model, operating system, language, network type);
• information about the ads you see and interact with, and diagnostic data about ad performance.

Gameplay analytics and crash reports. After you accept our Terms of Service and this Privacy Policy, the Game uses Google Analytics for Firebase and Firebase Crashlytics, services provided by Google, to understand how the Game is played and to find and fix problems. They collect:

• information about how you play, such as levels started, finished or left, the time spent on a level, hints used, tutorial steps completed, Sprint and Chaos results, when ads are shown and whether Remove Ads was purchased;
• crash and error reports, such as the state of the Game when it crashed, the device model, operating system and app version, and diagnostic information about memory and storage;
• identifiers created by Firebase for this installation of the Game (the app instance ID and the Firebase installation ID), and approximate location derived from your IP address.

The Game also uses Firebase Remote Config, which downloads game settings (such as how often ads appear) from Google and uses the Firebase installation ID to do so.

We do not use these services to identify you, and we do not link this information to your name or contact details. Where the law requires your consent for analytics (for example in the EEA and the UK), analytics information is only stored with your consent.

App integrity and purchase verification. To protect the Game and its players against piracy, tampering and fraudulent purchases, the Game uses the Google Play Integrity API. When you open the Game (at most once a day) and when you buy Remove Ads, Google Play gives the Game an encrypted verdict about whether the Game was installed from Google Play, has not been modified and is running on a genuine Android device. The Game sends this verdict, and for a purchase the purchase token issued by Google Play, to our server, which asks Google to decode the verdict and confirm the purchase. Our server does not store verdicts or purchase tokens; it keeps only short operational logs of the result, without identifiers. Our server is hosted by Cloudflare, which processes your IP address to deliver the request.

Notifications. If you allow notifications, the Game schedules a reminder on your device for when you haven't played for a day. It is created and stored on your device only; no information is sent to us. You can turn notifications off at any time in your device settings.

Purchase information. If you buy Remove Ads, the payment is processed by Google Play or the Apple App Store. We do not receive or store your payment card details. We receive a confirmation of the purchase so that we can verify, unlock and restore it.

If you contact us. If you email us, we receive your email address and whatever you include in your message, and use them only to reply and help you.

2. How we use information

Information is used to:

• provide, operate and maintain the Game, including saving your progress;
• show ads, including personalised ads where you have consented or where consent is not required, and measure their performance;
• understand how the Game is played, so we can balance its difficulty and improve it (analytics);
• detect, diagnose and fix crashes and other technical problems;
• process, verify and restore in-app purchases;
• check that the Game was obtained from Google Play and has not been modified, prevent fraud and abuse, and keep the Game secure;
• comply with legal obligations.

3. Legal bases (EEA, UK and Switzerland)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on: your consent for personalised advertising, analytics, and the storage of, or access to, information on your device for those purposes; the performance of a contract to provide the Game and your purchases, including verifying them; and our legitimate interests in operating, securing and improving the Game, including crash reporting and checking that the Game and purchases are genuine. You can withdraw your consent at any time (see section 6).

4. How information is shared

We do not sell your personal information for money. Information is shared with:

• Google AdMob, to serve and measure ads. Google's use of information is described at <https://policies.google.com/technologies/partner-sites>, and its privacy policy is at <https://policies.google.com/privacy>;
• Google Firebase (Google Analytics for Firebase and Firebase Crashlytics), as our service provider for analytics and crash reporting. See <https://firebase.google.com/support/privacy>;
• Google Play, through the Play Integrity API and the Google Play Developer API, to check that the Game is genuine and to verify purchases;
• Cloudflare, which hosts our verification server, as our service provider;
• Google Play and Apple, to process in-app purchases;
• authorities, where required by law or to protect rights, property or safety.

Under some US state privacy laws, sharing information for targeted advertising may be considered a "sale" or "sharing" of personal information. You can opt out as described in section 6.

5. Data retention

Progress and settings stay on your device until you delete the Game or its data. Analytics information is kept for up to 14 months and crash reports for up to 90 days, after which they are deleted. Our verification server does not store verdicts or purchase tokens; its operational logs are kept for a short time by Cloudflare. Our advertising and store partners keep information in accordance with their own privacy policies.

6. Your choices and rights

• Consent and privacy options. Where required, the Game asks for your consent before showing personalised ads and before storing analytics information. You can change your choices at any time in the Game under MENU → PRIVACY OPTIONS.
• Analytics identifiers. Deleting the Game, or clearing its data in your device settings, resets the identifiers Firebase created for it.
• Device settings. You can reset your advertising ID or opt out of personalised ads in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking).
• Remove Ads. Buying Remove Ads turns off banner ads and between-level ads.
• Your rights. Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict its processing, and to opt out of targeted advertising. Because we do not hold account data, most information about you is held by our partners; we will help you exercise your rights where we can. To make a request, contact us at the address below. You may also complain to your local data protection authority.

7. Children's privacy

The Game is intended for players 13 and over and is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us and we will take appropriate steps.

8. Security

We use reasonable measures to protect information. However, no method of transmission or storage is completely secure.

9. International transfers

Our partners may process information in countries other than your own, including the United States. Where required, these transfers are protected by appropriate safeguards, such as Standard Contractual Clauses.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and ask you to review the updated policy in the Game.

11. Contact us

If you have questions about this Privacy Policy, contact us at [email protected].

Cozy Island Games — [email protected] — cozyislandgames.com/blocks-and-boxes