Privacy Policy

Last updated: 5 November 2026

This policy explains what information Pinataville ("the game"), a mobile game made by EPİNKO LIMITED ("we"), uses and how.

1. Who is responsible

EPİNKO LIMITED. For any question about this policy or your data: epinkolimited@gmail.com

2. Your account and cloud save (Google Firebase)

When the game first goes online, it signs in to Firebase Authentication with an account made for your phone. To make it, the game sends your phone's Android ID for this game (an identifier Android gives each app on each phone; other apps cannot read it) to our server. The server turns it into the account's name with a one-way hash and does not keep the ID itself. Reinstalling the game on the same phone brings back the same account.

If you are signed in to Google Play Games on your phone, the game also links your Play Games profile to this account (Firebase's Play Games sign-in), and Firebase keeps your Play Games player ID with it. The link is used only to find your cloud save when you install the game on another phone: if your Play Games profile already has a save that has gone further, the game asks whether to bring it back to this phone. The game does not read your Play Games friends or other games. You can play without Play Games; deleting your account removes the link.

With that account, the game keeps a cloud save in Cloud Firestore (Frankfurt, Germany) and on your phone:

• your level progress, stars, sweets, lives and boosters;
• the state of events (such as the daily gift, the tournament and the party pass);
• the name you type in your profile and the avatar you choose;
• a record of delivered purchases (the IDs of recent orders, so that no order is delivered twice);
• when the save last changed;
• your phone's model, Android version, the game's version, the language the game is in, the phone's memory, graphics chip and screen size, so that we can help you when you write to us and find problems that only some phones have. This is not an identifier: it does not tell your phone apart from others of the same model.

Your music, sound and vibration settings and the graphics quality stay on your phone only. Only your account can read or change your cloud save. Your profile name only appears on your own screen, in the game's lists.

Settings show your player number (for example "Player no: B02E 4828"), the start of your account's name. Give it to us if you write to us about your data.

If Android backup is on, the game's save file may also be included in your Google account's backup and in a transfer to a new phone; that is a Google service.

3. Usage statistics and crash reports (Google Firebase)

To understand how the game is played, balance it and fix errors, the game uses Google Analytics for Firebase and Firebase Crashlytics.

• Usage statistics: an app-instance ID; the game's events (a level started or finished and how long it took, sweets earned or spent, boosters used, carrying on after a loss, a purchase delivered); device and app information (device model, operating system, language, app version); the country derived from the IP address.
• Crash reports: when the game crashes or meets an error: the error's details, device model, operating system and app version, an installation ID for crash reports and the time.

We use these only to understand and improve the game. Deleting your account in the game also resets the app-instance ID on your phone.

4. Ads (Google AdMob)

The game is free and shows ads, served by Google's AdMob. To show ads, measure their views and clicks, and prevent fraud and abuse, AdMob may collect:

• the advertising ID (Android advertising ID);
• device and app information (device model, operating system, language, app version);
• the IP address and the approximate location derived from it;
• your interactions with ads (views, clicks).

In the European Economic Area, the United Kingdom and Switzerland, Google's consent form (User Messaging Platform) asks for your consent before any ad is requested. You can change your choice at any time with "Privacy Options" in the game's Settings. Ads in the game are limited to content suitable for everyone (G).

You can reset or delete your advertising ID in your phone's Settings → Google → Ads.

How Google uses this information: Google Privacy Policy and How Google uses information from sites or apps that use its services.

5. Measuring our ad campaigns (AppsFlyer)

We advertise the game on other apps and sites (for example Meta, TikTok and Google). To learn which of these ads bring players to the game and whether those players keep playing, the game uses AppsFlyer, a measurement service run by AppsFlyer Ltd. (Israel; EU representative AppsFlyer Germany GmbH, Berlin). AppsFlyer receives:

• the advertising ID (Android advertising ID) and an ID AppsFlyer makes for this installation;
• the install referrer (which store link or ad led to the installation);
• device and app information (device model, operating system, language, app version), the IP address and the approximate location derived from it;
• a few of the game's events: finishing the tutorial, reaching certain levels, a purchase (product, price and currency) and the revenue of the ads you watch.

AppsFlyer tells the ad network whose ad led to the installation (for example Meta, TikTok or Google) that it did, so that the campaign can be measured and shown to people more likely to enjoy the game. No name, email or cloud save is sent to AppsFlyer.

In the European Economic Area, the United Kingdom and Switzerland, AppsFlyer only starts if you have agreed in Google's consent form to information being stored on your phone and to ad performance being measured; your choices are passed on with every report. If you withdraw this in "Privacy Options", AppsFlyer stops. Elsewhere it runs on our legitimate interest in knowing which ads work. Everywhere, you can reset or delete your advertising ID in your phone's Settings → Google → Ads, and ask AppsFlyer not to measure you through the opt-out described in its policy: AppsFlyer Services Privacy Policy.

6. Purchases (Google Play)

In-game purchases are made with Google Play Billing. Google handles your payment details; we never see them. To deliver what you bought, the game receives the order information from Google Play (product, order ID, purchase state) and keeps the order IDs in your save, so that no order is delivered twice. To stop fraud, the game also sends the purchase receipt to our server, which checks the order with Google Play and keeps a record of it in Cloud Firestore (Frankfurt, Germany): a one-way hash of the order token, the product, the order's state and your account, so that one order cannot be used on several accounts and a refunded order is known. "Restore purchases" asks Google Play for your earlier purchases. Details: Google Play Terms of Service.

7. Game engine (Unity)

The game is made with Unity. To improve the engine, Unity may collect technical information that does not identify you (such as device model, operating system, processor and graphics hardware). Details: Unity's player privacy policy.

8. Rating request

After you have played for a while, the game may open Google Play's in-app review window. That window belongs to Google Play; your rating and review fall under Google Play's terms.

9. What we use information for

• Running the game, keeping your progress and bringing it back after a reinstall or, through Google Play Games, on a new phone: needed to provide the game to you.
• Answering you when you write to us: we may look at your cloud save by your player number and, at your request, correct it (for example deliver a purchase that did not arrive). Each such change is recorded, and the save as it was is kept first: needed to help you, and our legitimate interest in fixing problems.
• Your phone's model and system with the cloud save: our legitimate interest in helping you and in fixing problems that only some phones have.
• Delivering what you bought: needed to fulfil the purchase.
• Usage statistics and crash reports: our legitimate interest in understanding how the game is played, improving it and fixing errors.
• Showing and measuring ads: based on your consent for personalised ads in Europe, and otherwise on our legitimate interest in offering the game for free.
• Measuring our own ad campaigns (AppsFlyer): based on your consent in Europe, and otherwise on our legitimate interest in knowing which ads bring players.
• Checking purchases with Google Play: our legitimate interest in preventing fraud.

We do not sell your personal data.

10. Where information is processed

Your account and cloud save are kept on Google Cloud servers in Frankfurt, Germany. Google (Firebase, AdMob, Google Play, Google Play Games), AppsFlyer and Unity may process information on servers in other countries, including the United States and Israel. They use their own safeguards for such transfers (for example the European Union's standard contractual clauses).

11. How long information is kept

• Your account, its link to your Play Games profile and your cloud save: until you delete your account (see below).
• Copies of your cloud save kept before a support change: as long as the account exists.
• Information on your phone: until you delete the game or your account.
• Crash reports: 90 days. Usage statistics: for the period set in Google Analytics, at most 14 months.
• Our record of each purchase: as long as the account exists; deleting your account removes your account from the records.
• Information collected by Google for ads and purchases, by AppsFlyer and by Unity: for the periods set out in their policies.

12. Deleting your account

In the game, open Settings and tap "Delete account" at the bottom; type the word shown and confirm. Your account and cloud save are deleted at once, together with the link to your Play Games profile and any copies kept for support, and the game starts over on your phone. If you no longer have the game, see Delete your account for how to ask us by email.

13. Your rights

Depending on where you live (for example the GDPR in Europe and the UK, or KVKK in Turkey), you have the right to access your data, ask for it to be corrected or deleted, object to its processing, withdraw consent you have given and complain to a data protection authority.

You can delete your account and cloud save yourself in the game's Settings. For a copy of your cloud save or any other request, write to epinkolimited@gmail.com with your player number. Use "Privacy Options" for ad and measurement consent and your phone's settings for the advertising ID.

14. Children

Pinataville is a game for a general audience and is not specifically aimed at children under 13. We do not knowingly collect personal data from children under 13. If you become aware of such a case, please let us know.

15. Security

The game's connections are encrypted. The database's rules let only your own account read or change your cloud save, and our server keeps no device ID.

16. Changes

If we change this policy, we will publish the new text on this page and update the date above.

17. Contact

EPİNKO LIMITED · epinkolimited@gmail.com