Toy Club Privacy Policy

This policy explains what information the Toy Club: Sort & Match 3D mobile game ("Toy Club" or "the Game") collects, why, who it is shared with, and the choices you have. The Game is published by Eight Fifteen Labs LLC ("we", "us"). Questions and requests go to privacy@eightfifteenlabs.com.

The short version

• We don't ask for your name, email address, phone number, contacts, photos or location, and there are no accounts: you don't sign up or sign in to play.
• Your progress, coins, boosters, settings and purchases are saved on your device.
• The Game shows ads through Google AdMob. Where the law requires it (for example in the EEA, UK and Switzerland) we ask for your consent first. You can change your choice at any time in Settings → Privacy & Data → Manage Consent.
• On iPhone and iPad we do not track you across other companies' apps and websites unless you allow it in Apple's "Allow tracking" prompt.
• We measure how the Game is played with GameAnalytics and Google Firebase Analytics, and we find crashes with Google Firebase Crashlytics. Where the law requires consent, analytics only start after you agree; everywhere else you can turn analytics off in Manage Consent.
• Reminders and "new levels" alerts are local notifications: they are scheduled on your device, only if you allow notifications, and nothing about them is sent to us.
• In-app purchases are handled by Apple or Google. We never see your card or payment details.
• You can wipe your data on the device and ask us to delete ours with Settings → Privacy & Data → Delete my Data.
• We do not sell your personal information for money.

Who this policy covers

The Game is intended for players aged 13 and over. It is a general-audience game: it is not directed at children under 13, it is not in Apple's Kids Category or Google Play's Families program, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, email privacy@eightfifteenlabs.com and we will delete it. In the EEA and UK, if you are younger than your country's age of digital consent (between 13 and 16, depending on the country), please ask a parent or guardian before agreeing to personalized ads.

You don't have to provide any personal information to play, and agreeing to personalized ads or analytics is optional: if you decline, the Game still works and shows non-personalized ads. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

What we collect and why

Stored only on your device

Your level progress, coins, boosters, lives, collected clubs, Season Pass and event progress, settings, language choice, consent choices, which purchases you own, and the weekly level packs the Game has downloaded are saved in the Game's local storage on your device, and in your device's own backups (iCloud or Android backup) if you use them. We do not receive this data, and the Game has no cloud save of its own. Uninstalling the Game removes it from the device; restoring a device backup can bring it back.

Notifications

The Game can remind you to come back and tell you when new levels are out. These are local notifications: the Game schedules them on your device, and your device shows them. The Game asks your device for permission only after you say yes to its own question, and you can turn them off at any time in Settings → Notifications in the Game or in your device's settings. There is no push server: no notification token or other identifier is sent to us or to anyone else.

Collected automatically when you play

When the Game shows a suggestion for another Eight Fifteen Labs game, it downloads that game's picture from eightfifteenlabs.com, which, like any web request, sends your device's IP address; nothing else about you is sent and nothing is stored about it.

Information you give us

If you email us, we receive your email address and whatever you include in the message. We use it only to answer you and keep a record of the request.

Legal bases (EEA, UK and Switzerland)

• Performance of a contract: running the Game, delivering new levels and settings, and giving you what you buy. These work whatever you choose in Manage Consent, because the Game cannot run or deliver your purchases without them.
• Consent: personalized advertising, gameplay analytics (GameAnalytics) and usage statistics (Firebase Analytics), and storing or reading information on your device for those purposes. You can withdraw consent at any time in Settings → Privacy & Data → Manage Consent.
• Legitimate interests: non-personalized ads that keep the Game free, fraud prevention, security, and crash reporting (Firebase Crashlytics) so the Game keeps working. Crash reporting runs from the moment the Game starts, before you make any consent choice, because a crash on the first screen is the one we most need to see.
• Legal obligation: keeping transaction records.

Who we share information with

We share information only with the service providers listed above, who process it to provide their services to us, and when required by law. Their own policies describe how they handle data:

• Google (AdMob and the User Messaging Platform): https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites
• GameAnalytics: https://gameanalytics.com/privacy
• Google Firebase (Crashlytics and Analytics): https://firebase.google.com/support/privacy
• Unity Technologies (Remote Config, Cloud Content Delivery, In-App Purchasing): https://unity.com/legal/game-player-and-app-user-privacy-policy
• Apple: https://www.apple.com/legal/privacy/
• Google Play: https://policies.google.com/privacy

If Eight Fifteen Labs LLC is ever involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, and this policy will continue to apply to it.

Advertising, analytics and your choices

• Consent (EEA, UK, Switzerland): you are asked the first time it is needed, before any ad is requested or any analytics are sent. To change your choice, open Settings → Privacy & Data → Manage Consent, which shows Google's privacy options.
• Everywhere else: Manage Consent has two switches. Analytics turns GameAnalytics and Firebase Analytics on or off. Personalized Ads off means you still see ads, but they are not based on your interests.
• US state privacy rights: showing personalized ads can count as "sharing" personal information for cross-context behavioral advertising under California law and similar state laws. You can opt out in Settings → Privacy & Data → Manage Consent.
• iPhone and iPad: the Game asks before accessing your IDFA, the first time you choose to watch a rewarded ad. You can change this later in iOS Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in Settings → Google → Ads (the exact path varies by device).
• No Ads: the No Ads purchase turns off the ads shown between levels. Rewarded ads you choose to watch remain available.

How long we keep information

• On-device data: until you uninstall the Game, clear its data or use Delete my Data (copies in your device backups follow your backup settings).
• The installation ID: on your device until you uninstall the Game or use Delete my Data, which replaces it with a new one. Unity's settings service (Remote Config) uses it only to answer each request and does not retain it; Unity's in-app purchase service keeps it in its service logs for 90 days; GameAnalytics and Firebase Analytics keep it with the analytics data it identifies (below).
• Server logs for level downloads: no longer than the provider's routine log retention.
• Crash reports (Firebase Crashlytics): 90 days.
• Usage statistics (Firebase Analytics): up to 2 months, then deleted.
• Gameplay analytics (GameAnalytics): up to 12 months on a rolling basis, then anonymized or deleted; deleted sooner on request (see below).
• Purchase records: as long as tax and accounting law requires.
• Emails with us: up to two years after your last message, unless a longer period is required by law.

Advertising data held by Google is kept under Google's own retention policies.

Your rights

Depending on where you live (including the EEA, UK, Switzerland, California and other US states with privacy laws) you may have the right to:

• know what personal information we hold about you and get a copy;
• correct it;
• delete it;
• receive it in a portable format;
• object to or restrict certain processing, and withdraw consent;
• opt out of the sale or sharing of personal information and of targeted advertising;
• not be treated differently for exercising these rights.

The easiest way to make a deletion request is Settings → Privacy & Data → Delete my Data in the Game. It erases your progress, coins and settings on the device, resets the Game's analytics identifiers, and opens an email to privacy@eightfifteenlabs.com that already contains your installation ID, which is how we find the data linked to your copy of the Game (we don't collect your name or email, so we can't look you up any other way). To ask us without erasing your progress, tap Request Deletion on the same screen instead; your installation ID is also shown there. You can also email us directly; include your installation ID or, for purchases, your store receipt. Other requests (access, correction, portability) go to the same address. The steps are also on our data deletion page.

When we act on a deletion request we ask Unity to delete its in-app purchase records linked to your installation ID, ask GameAnalytics and Google Firebase to delete the analytics data linked to your copy of the Game, and delete our email correspondence with you once the request is closed. Advertising data is held by Google as an independent controller; you can reset or delete your advertising ID (see above) and manage it at https://myadcenter.google.com. Purchase records are held by Apple or Google and are subject to legal retention requirements. We will respond within the time the law requires (usually 30 days in the EEA and UK, 45 days in California). You may use an authorized agent, and we may ask for proof of that authority.

If you are in the EEA, UK or Switzerland you can also complain to your local data protection authority.

International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where information from the EEA, UK or Switzerland is transferred, it is protected by the safeguards our providers use, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

Security

We use service providers with industry-standard security and limit the information the Game collects in the first place. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

If we change this policy we will update the effective date above. If the changes are significant we will also tell you in the Game.

Contact