This Privacy Policy explains how Nopo Games ("we", "us", "our") collects, uses, shares, and protects information when you use the mobile game Picture Block Jam! (the "Game", "App"), available on Google Play and the Apple App Store.
By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
This policy is designed to comply with:
The EU General Data Protection Regulation (GDPR)
The California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)
The Children's Online Privacy Protection Act (COPPA)
Apple App Store Review Guidelines and App Tracking Transparency (ATT)
Google Play Developer Program Policies (Data safety)
2. Who is responsible for your data (Data Controller)
Nopo Games is the data controller responsible for your personal data in connection with this App. For any privacy-related questions or requests, contact: info@nopogames.com
3. Information we collect
We designed Picture Block Jam! to collect as little personal data as possible. We do not ask you to create an account, and we do not ask for your real name, email, phone number, or address to play the game.
3.1 Information collected automatically
When you use the App, the following categories of data may be collected automatically by the third-party services integrated into the App:
a) Device & technical information
Device model, manufacturer, and operating system version
Device language and region/country settings
Screen resolution and hardware characteristics
Mobile network / connection type (e.g. Wi-Fi vs. cellular)
App version and build number
Time zone
b) Identifiers
Advertising identifier (GAID / Android Advertising ID on Android, IDFA on iOS) — only where permitted (see Section 6 on tracking consent)
Firebase Installation ID / app instance ID (a random identifier used for analytics, not tied to your real identity)
IP address (used for approximate location and fraud/abuse prevention; may be truncated/anonymized by our providers)
c) Gameplay & usage data
Levels and pictures started, completed, failed, retried, and quit
Level progression and difficulty reached
Moves made and time spent on each level
Boosters used (Hammer, Merge, Freeze Timer, and Free Movement)
In-game currency (coins) balance, earnings, and spending
Lives usage, refills, and unlimited-lives periods
Daily spin usage and rewards
In-app store views and purchases (product, price, and whether the item was delivered)
Session start/end, session length, and frequency of play
Screens and buttons interacted with
Ads shown, ad clicks, rewarded-ad completions, and ad revenue events
d) Diagnostics & crash data
Crash logs, stack traces, and exception reports
Performance data (load times, freezes, errors)
Device state at the time of a crash (available memory, OS version, etc.)
3.2 Approximate location
We do not collect precise (GPS) location. Approximate location (e.g. country/region) may be inferred from your IP address by our analytics and advertising partners, primarily to serve region-appropriate content and ads and to comply with local laws.
3.3 In-app purchases
Picture Block Jam! is free to play. The iOS version does not offer in-app purchases; on Android, the game offers optional in-app purchases, such as coin packs and bundles that may include coins, boosters, unlimited lives for a limited time, and removal of forced ads (banner and interstitial ads). All payments are processed entirely by Google Play. We never receive or store your credit card, billing address, or other payment details; we only receive a confirmation of the purchase (product ID and transaction/receipt data) so the item can be delivered in the game.
On Android, you can use Restore Purchases in the game's Settings to restore eligible purchases through your Google Play account.
3.4 Information we do NOT collect
We do not intentionally collect:
Your real name, email address, phone number, or postal address
Payment or financial information (see Section 3.3)
Precise GPS location
Contacts, photos, microphone, or camera data
Health or biometric data
Social media logins
If you contact us by email (for example, at support@nopogames.com), we receive your email address and whatever you choose to include in your message, and we use it only to answer you.
4. How we use your information
We use the information described above for the following purposes:
Purpose
Legal basis (GDPR)
To operate, maintain, and provide the Game
Performance of a contract
To save your progress and in-game state
Performance of a contract
To process and deliver in-app purchases
Performance of a contract
To analyze usage and improve gameplay, difficulty balance, and features
Legitimate interest / Consent
To diagnose crashes and fix bugs (stability)
Legitimate interest
To display advertising, including personalized ads where consented
To prevent fraud, abuse, and cheating (including purchase receipt validation)
Legitimate interest
To comply with legal obligations
Legal obligation
We do not sell your personal data for money.
5. Third-party services we use
The App integrates the following third-party SDKs and services, each of which may collect and process data under its own privacy policy. We encourage you to review them.
5.1 Google Firebase (Analytics & Crashlytics)
Provided by Google LLC. Used to understand how players use the Game (aggregate analytics) and to receive crash/error reports so we can fix problems.
Ads are served through Google AdMob. AdMob may fill an ad request through the mediation partners listed in Sections 5.3 (Android and iOS) and 5.4 (Android only); no other advertising networks are integrated into this game.
5.3 Unity Ads (advertising mediation partner)
Provided by Unity Technologies. Integrated through AdMob mediation to supply banner, interstitial, and rewarded video ads.
Data: advertising identifier (GAID/IDFA, only where permitted), device info, IP address, ad interaction data, approximate location.
Unity Ads applies the same consent and tracking choices described in Section 6.
Provided by Liftoff Mobile, Inc. (formerly Vungle). Integrated through AdMob mediation to supply banner, interstitial, and rewarded video ads in the Android version only; it is not integrated into the iOS version.
Data: advertising identifier (GAID/IDFA, only where permitted), device info, IP address, ad interaction data, approximate location.
Liftoff applies the same consent and tracking choices described in Section 6.
5.5 Google Play / Apple App Store (distribution, purchases & reviews)
App distribution, update delivery, in-app purchase payments, and the optional in-app rating prompt are handled by Google and Apple respectively, under their own privacy policies.
The App is built with the Unity engine and uses Unity In-App Purchasing to communicate with Google Play (Android only; the iOS version has no in-app purchases). Unity may collect limited technical/diagnostic data to operate the runtime.
We are not responsible for the privacy practices of these third parties. This Policy applies only to data collected by the App itself.
6. Advertising & Tracking Consent
6.1 EU / UK Consent (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the App shows Google's consent form (Google User Messaging Platform) when you first open it, asking whether your data may be used for personalized advertising. Google AdMob and its mediation partners serve non-personalized (contextual) ads where valid consent for personalization is not present. We do not use your advertising identifier for personalized advertising without that consent.
You can also control ad personalization at any time from your device's own settings — see Section 6.4.
6.2 Apple App Tracking Transparency (ATT) — iOS
On iOS devices, tracking across apps and websites owned by other companies requires your permission under Apple's App Tracking Transparency framework. The App asks for this permission using Apple's system prompt before any such tracking takes place. If you have not granted that permission, we and our partners will not access your IDFA, and you will only see non-personalized ads.
You can review or change this permission at any time in iOS Settings → Privacy & Security → Tracking.
6.3 Personalized vs. non-personalized ads
With consent: ads may be personalized based on your advertising ID and inferred interests.
Without consent (or if declined): ads will be non-personalized (contextual) — based only on general, non-identifying information such as the app content or coarse region.
Rewarded video ads are always optional: you choose whether to watch one in exchange for an in-game reward (such as extra coins, a booster, a life, or an extra daily spin), and declining costs you nothing but the reward itself.
6.4 Opting out of ad personalization
Android: Settings → Privacy → Ads → "Delete advertising ID", or Settings → Google → Ads → "Opt out of Ads Personalization".
iOS: Settings → Privacy & Security → Tracking, and Settings → Privacy & Security → Apple Advertising.
7. Notifications
The App has a notification toggle in its Settings screen. Turning it on asks your device for notification permission.
On Android 13 and later, and on iOS, no notification can be shown unless you allow it.
Notifications, if shown, are local reminders generated on your device (for example, a reminder to come back and play, or that your lives are full again). Picture Block Jam! does not use push messaging — no notification is sent from our servers, and no data about you is transmitted to create one.
You can turn the toggle off at any time from Settings inside the game, or revoke the permission from your device's system settings.
Declining notifications does not affect your ability to play.
8. Children's Privacy (COPPA & Age Requirements)
Picture Block Jam! is intended for a general audience and is not directed to children under the age of 13 (or the applicable minimum age in your country, e.g. 16 in some EEA states).
We do not knowingly collect personal data from children under 13.
Where required, ads shown to users identified as children will be non-personalized and child-directed-appropriate.
If you are a parent or guardian and believe your child has provided us personal data, please contact info@nopogames.com and we will delete it promptly.
If we learn that we have collected personal data from a child under the applicable age without verified parental consent, we will delete that information as quickly as possible.
9. Data sharing and disclosure
We share information only in these limited circumstances:
With service providers (Google Firebase, Google AdMob, Unity Ads, Liftoff Monetize, Unity Technologies, Google Play, Apple) as described in Section 5, strictly to provide the services above.
For legal reasons: if required by law, court order, or governmental request, or to protect our rights, safety, or property, or that of our users or the public.
Business transfer: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this Policy.
Aggregated / anonymized data: we may share data that can no longer identify you (e.g. statistics) freely.
We do not sell your personal information for monetary value. Under CCPA/CPRA, certain data sharing for personalized advertising may be considered a "sale" or "share"; you may opt out as described in Sections 6 and 11.
10. Data retention
Analytics data is retained by Firebase according to our configured retention settings (typically up to 14 months) and then deleted or anonymized.
Crash logs are retained for up to 90 days.
Advertising identifiers are transient and reset when you reset them at the OS level.
Purchase records (Android only) are kept by Google Play under its own policies; we do not keep a separate copy on our own servers.
Local game data (level and picture progress, coins, boosters, lives, purchased items, daily spin state, and sound/music/haptics/notification settings) is stored on your device and, if you delete the App, is deleted with it.
We retain data only for as long as necessary for the purposes described, or as required by law.
Because your progress is stored only on your device and is never uploaded, we cannot restore it for you if you uninstall the game or switch to a new phone. On Android, eligible purchases can be recovered with Restore Purchases in the game's Settings.
11. Your privacy rights
11.1 GDPR (EEA / UK) rights
If you are in the EEA or UK, you have the right to:
Access the personal data we hold about you
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time (without affecting prior processing)
Lodge a complaint with your local Data Protection Authority
11.2 CCPA / CPRA (California) rights
If you are a California resident, you have the right to:
Know what personal information is collected, used, shared, or sold
Request deletion of your personal information
Opt out of the "sale" or "sharing" of your personal information
Non-discrimination for exercising your rights
11.3 How to exercise your rights
To exercise any of these rights, email info@nopogames.com with your request. We may need to verify your identity. We will respond within the timeframe required by applicable law (generally 30 days under GDPR, 45 days under CCPA).
Because we do not require accounts, we may identify your data only via your device/advertising identifier where you can provide it. The fastest route to deleting everything is to reset your advertising ID at the OS level and uninstall the App, which removes all locally stored data.
12. Data security
We take reasonable technical and organizational measures to protect your information, including:
Encryption of data in transit (HTTPS/TLS)
Reliance on reputable providers (Google, Unity, Liftoff, Apple) with their own security programs
Minimizing the personal data we collect
Operating no server of our own that holds player data
However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
13. International data transfers
Your information may be processed and stored on servers located outside your country of residence, including in the United States, where our service providers operate. These transfers are protected by appropriate safeguards (such as Standard Contractual Clauses) where required by law.
14. Third-party links
The App may contain links to third-party websites or services (e.g. Google Play, the App Store, or advertiser destinations). We are not responsible for the privacy practices of those third parties. Please review their privacy policies.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes may be announced within the App or through the app store listing. Your continued use of the App after changes take effect constitutes acceptance of the revised Policy.
16. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: