Record 001, Chroma Blocks
Privacy policy
In short: Chroma Blocks has no accounts and never asks for your name, email, contacts, photos or location. Your scores, settings and purchases are kept on your device. The optional ads come from Google (AdMob), and the game's analytics, remote settings and crash reports from Google (Firebase); they process some device and usage data as described below.
Who we are
Chroma Blocks is made by riffald, an independent game team ("we", "us"). Questions and requests: support@riffald.com.
What stays on your device
The game saves its progress on your iPhone: best scores, statistics (games played, lines and groups cleared, play time and so on), your settings (sound, haptics, language, colour patterns, theme, crash reports), what you have bought, a game you left in progress, your daily challenge record and how many offline games you have played today. This data is not sent to us. It is included in your device backups as Apple handles them, and deleting the app deletes it.
Purchases
Themes, Premium (unlimited offline play and Continue without an ad) and bundles of them are sold as in-app purchases through Apple. Apple processes the payment; we never see your payment details or Apple ID. The app receives Apple's confirmation of what you bought so it can unlock what you bought, and keeps the product's name on your device. "Restore purchases" asks Apple again.
Ads
The only ad in the game is optional: on the Game Over screen you can watch a video to continue your game once. Ads are served by Google AdMob through the Google Mobile Ads SDK. When an ad is requested or shown, Google collects data from your device to deliver and measure ads, limit how often you see them and prevent fraud:
- device identifiers: the Identifier for Advertisers (IDFA) only if you allow tracking when iOS asks, otherwise identifiers that do not track you across other companies' apps;
- your IP address, used to estimate your general location;
- device information such as model, operating system version and language;
- advertising data and your interactions with ads (which ads were shown, watched or tapped), the ad SDK's performance data and crash logs.
Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), the game first asks for your consent with a message from Google; without consent you still get ads, but they are not personalised. You can change your choice at any time in the game under Settings → Privacy choices. You decide about tracking in the iOS prompt and can change it at any time in Settings → Privacy & Security → Tracking; if you do not allow it, ads are not personalised with the IDFA. See How Google uses information from sites or apps that use its services.
Analytics, settings and crash reports
To understand how the game is played and to improve it, the game sends events to Google Analytics for Firebase, a service of Google: for example that a game started or ended, its score and the level in use, a daily challenge played, a setting changed, a score shared, reaching the day's limit of free offline games, and what you bought with its price. Google Analytics also records app installs and sessions and receives your IP address (used for an approximate country and region, then discarded), an app instance ID, the iOS identifier for vendors (IDFV) and device information. These events contain no name, email or other information that identifies you directly; we do not use Google signals or data sharing with Google's other products. We also use Google Analytics to measure which of our own ads brought players to the game: if you allow tracking when iOS asks, it also receives the Identifier for Advertisers (IDFA), and Google's on-device conversion measurement checks on your device whether you came from one of our ads. We do not use this data to show you personalised ads. Analytics data is kept for 14 months. In the European Economic Area, the United Kingdom and Switzerland, Google's consent message (see Ads) also asks whether analytics may use these identifiers, including for measuring our ads; if you do not agree, Google Analytics receives the events without them and cannot link them to your installation. Before you answer, the game sends nothing to Google Analytics.
If the app crashes, Firebase Crashlytics (Google) sends a crash report: where in the code it happened, the device model, iOS version and app version, and an installation ID. It contains no user ID and nothing you entered or saved; the installation ID is random and we cannot link it to you. Crash reports are kept for 90 days. You can switch them off at any time under Settings → Send crash reports; from the next launch the game sends none.
When it starts, the game asks Firebase Remote Config (Google) for its current settings, for example whether the Continue offer is shown. To choose them, Firebase receives your country, language, time zone and iOS version, the app's identifiers and a Firebase installation ID. If we test a change, you may be placed in a test group; the group is recorded with your analytics data.
See Google's Privacy and Security in Firebase and Privacy Policy. To have the analytics data of your installation deleted, contact us.
Sharing your score
"Share" on the Game Over screen creates an image of your score on your device and opens the iOS share sheet. You choose where it goes; nothing is sent to us.
Game Center
Game Center is optional. If you are signed in to Game Center on your iPhone, the game sends your final scores to Apple's Game Center leaderboards (one for each level and one for the daily challenge) and reports the achievements you earn. Other players may see your Game Center nickname and scores on the leaderboards, depending on your Game Center settings. The game does not read or store your Game Center identity and sends nothing about it to us or to Google. Game Center is Apple's service under Apple's Privacy Policy; you can sign out or change your settings in iOS Settings → Game Center.
Who receives the data, and where
We do not sell your personal data. The only recipients are Apple (purchases and Game Center) and Google. For Firebase (Analytics, Crashlytics, Remote Config) Google processes the data on our behalf, under the Firebase data processing terms. For ads, Google acts as an independent controller under its own Privacy Policy. Google may process data in the United States and other countries; transfers from the European Economic Area, the United Kingdom and Switzerland rely on the EU-U.S. Data Privacy Framework (with its UK and Swiss extensions) and the European Commission's Standard Contractual Clauses.
Legal bases (European Economic Area, United Kingdom, Switzerland)
- Your consent (Art. 6(1)(a) GDPR), given in Google's consent message: personalised ads, and the use of identifiers on your device for ads, for measuring our ad campaigns and for analytics. You can withdraw it at any time under Settings → Privacy choices; this does not affect what happened before.
- Our legitimate interests (Art. 6(1)(f) GDPR) in keeping the game free, working and secure: non-personalised ads and their measurement and fraud prevention, crash reports, remote settings, and analytics events without identifiers. You can object to crash reports at any time with the switch in Settings.
- Performing our agreement with you (Art. 6(1)(b) GDPR): delivering and restoring what you buy, and sending your scores and achievements to Game Center when you are signed in.
We do not make decisions about you based solely on automated processing.
Children
Chroma Blocks is a game for a general audience. It is not directed at children under 13, and we do not knowingly collect personal information from children.
Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, the Turkish Personal Data Protection Law (KVKK) or the CCPA), you may have the right to access, correct or delete personal data, to restrict or object to its processing, to receive it in a portable form and to withdraw your consent at any time. Most of the game's data never leaves your device, and you can delete it by deleting the app, which also resets the identifiers described above. Because the game has no accounts, we may ask you for details that help us find your installation's data. For data held by Google for ads, you can also contact Google using the links above. You also have the right to lodge a complaint with a data protection authority, in particular where you live (in Turkey: the Personal Data Protection Authority, KVKK).
Changes
If this policy changes, we will update this page and the date at the top.