In short
Bloom & Bubble has no accounts and no servers of its own. Your progress stays on your phone. The only data that leaves the app goes to the ad services that show optional rewarded ads, and to Apple or Google when you buy something.
Who is responsible
The controller for the app Bloom & Bubble (the "App") and the website nyptic.net is:
- Name
- Paul Grenz, trading as Nyptic (Einzelunternehmen)
- Address
- Hermann-Löns-Straße 14, 48324 Sendenhorst, Germany
- ny@nyptic.net
On your device
Your game progress, statistics, chosen world and bubble style, sound settings and your privacy choice are saved only on your device. They are never sent to us. Uninstalling the App deletes them.
We do not ask for your name, email address, phone number, contacts, photos or precise location.
Advertising
The App shows rewarded video ads only when you choose to watch one. The ads are delivered through Unity LevelPlay (ironSource), which works with the ad networks Unity Ads and Google AdMob. When an ad is requested or shown, these services may receive:
- Advertising identifiers: the IDFA on iOS (only if you allow tracking) or the Google Advertising ID on Android, plus app-specific vendor identifiers
- Your IP address and the coarse location derived from it (country or city)
- Device and app information: model, operating system, language, screen, connection type, app version
- Ad interactions: which ads were shown, watched or tapped
- Diagnostic data about ad loading and crashes
They use it to deliver and measure ads, limit how often you see the same ad, prevent fraud, and, only with your consent, to personalise ads. The legal basis is your consent for personalised ads (Art. 6(1)(a) GDPR) and our legitimate interest in funding a free game with non-personalised ads (Art. 6(1)(f) GDPR).
Your choices
When you first open the App, you are asked whether you agree to personalised ads. On iOS, Apple's tracking prompt appears first. If you decline, you can still watch rewarded ads, but they are not personalised, and in the United States we send a "do not sell or share" signal to the ad services.
You can change your choice at any time in the App under Settings, Privacy settings. You can also limit ad tracking on the device itself:
- iOS: Settings, Privacy & Security, Tracking
- Android: Settings, Google, Ads, Delete or reset advertising ID
Purchases
The App offers one optional in-app purchase that unlocks all worlds and bubble styles and removes ads. Payment is handled entirely by the Apple App Store or Google Play using Unity IAP. We only receive a confirmation that the purchase is valid, so the App can unlock the content. We never see your name, payment card or store account details.
This website
nyptic.net is hosted on Firebase Hosting by Google. When you visit, the server processes your IP address, the time, the requested page and your browser's user agent to deliver the page and protect it from abuse. Google may keep these logs for a short period. The legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
This website sets no cookies, uses no analytics or tracking, and loads its fonts from this site, not from a third party.
Partners and transfers
These services process data under their own privacy policies:
- Unity LevelPlay (ironSource): is.com/privacy-policy
- Unity Ads and Unity IAP: unity.com privacy policy
- Google AdMob: policies.google.com/privacy and how Google uses data from partner apps
- Firebase Hosting: firebase.google.com/support/privacy
- Apple App Store and Google Play, for downloads and purchases, under Apple's and Google's privacy policies
Some of these companies are based in the United States. Transfers there rely on the EU-U.S. Data Privacy Framework where the company is certified, and otherwise on the European Commission's Standard Contractual Clauses.
Children
The App is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided personal data through the App, contact us and we will help remove it.
Your rights
Under the GDPR you have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw your consent at any time with effect for the future. Because we store no personal data ourselves, requests about ad data are best sent to the ad services listed above; we are happy to help with that.
You also have the right to complain to a data protection authority. Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Changes and contact
If the App or this website starts using data differently, this page will be updated and the date at the top will change. Questions about privacy: ny@nyptic.net.