Privacy Policy — Bounce Em Balls

Bounce Em Balls is developed and operated by Pocket Ninja AB ("we", "us", "our"), a Swedish limited company.

• Company: Pocket Ninja AB
• Organisation number: 559107-4280
• Address: Sysslomansgatan 8, 112 41 Stockholm, Sweden
• Privacy contact: privacy@pocketninjagames.com

We are the data controller for personal data processed through the Bounce Em Balls iOS app.

• No account, no login, no email — you just play.
• We run no backend and no analytics of our own. All your progress lives only on your device and is deleted when you delete the app.
• The only third party involved during gameplay is Google AdMob, which serves ads. Google's ad SDK also collects usage and diagnostic data to deliver and measure those ads (see 3.3). In the EEA/UK we ask for consent first via Google's UMP form.
• iOS shows you the App Tracking Transparency prompt. If you decline, no IDFA is shared and ads are non-personalised.
• You can buy the one-time "Remove Ads" purchase to disable all advertising. Payment is handled entirely by Apple — we never see your card details.
• We don't sell your data. Ever.

3.1 Data you provide directly

None. Bounce Em Balls has no accounts, no login, no registration, and no email collection. You do not provide us with any personal information to play.

3.2 Data stored locally on your device

The following is stored only on your device using standard iOS storage. It never leaves the device, is never sent to any server operated by us (we don't have any), and is deleted when you delete the app:

• Unlocked levels (out of 150)
• Best score per level
• Sound and music settings
• Your "Remove Ads" entitlement flag

Basis: Performance of contract (GDPR Art. 6(1)(b)).

3.3 Data processed for advertising

Unless you have purchased "Remove Ads", the game shows a bottom banner during gameplay, an interstitial between some levels, and an optional rewarded ad you can choose to watch to continue after a game over. Ads are served by Google AdMob (Google Mobile Ads SDK).

To serve these ads, Google AdMob processes:

• Device identifiers, including Apple's Advertising Identifier (IDFA) only if you allow tracking via the ATT prompt
• IP address, from which Google may infer your approximate region
• Ad interaction and impression data (which ads were shown, tapped, or completed)
• Product interaction data about how the app and its ads are used, which Google uses for analytics
• Crash and performance data about the device and the ad SDK

If you allow tracking, Google can link the identifiers and usage data above with data from other companies' apps and websites to personalise and measure ads. If you don't, this data is not used to track you.

Data is processed by Google LLC in the United States. Legal basis: consent (GDPR Art. 6(1)(a)) in the EEA/UK; legitimate interest (GDPR Art. 6(1)(f)) elsewhere.

App Tracking Transparency (ATT)

The first time you start the game, Google shows a short explanation and iOS then shows Apple's ATT prompt. If you tap "Allow", the IDFA is shared with Google AdMob and the ads shown are personalised. If you tap "Ask App Not to Track", no IDFA is collected and ads are non-personalised, based only on the current session's context. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking, which the "Tracking settings" button in the game's Settings screen opens for you. Legal basis for the IDFA and personalised advertising is consent (GDPR Art. 6(1)(a)).

EEA / UK consent (UMP)

For users in the EEA and UK, the game shows Google's User Messaging Platform (UMP) consent form on first launch, before any ad is requested. You can change or withdraw your choice at any time from "Ad privacy options" in the game's Settings screen (the button is shown where this consent applies).

3.4 Purchases

The game offers one optional non-consumable in-app purchase, "Remove Ads", which permanently disables all advertising. Payment is handled entirely by Apple — we never see or store your card details. Apple provides us only anonymous, aggregated sales reports. Purchases go straight through Apple's StoreKit, using an open-source purchase plugin built into the app that talks only to Apple. We do not use RevenueCat or any other third-party purchase service. Legal basis: performance of contract (GDPR Art. 6(1)(b)) + legal obligation for accounting records (GDPR Art. 6(1)(c), Bokföringslagen).

3.5 What we do NOT collect

• Your name, email address, phone number, or postal address
• Your location — the game never asks for location permission (Google may infer an approximate region from the IP address sent with ad requests, see 3.3)
• Access to your photos, contacts, camera, microphone, or health data
• Analytics of our own — we have no analytics SDK (no Mixpanel, no Firebase, no attribution SDK); the only usage and diagnostic data is what Google's ad SDK collects, described in 3.3
• Push notification tokens — the game does not send push notifications
• Any data on servers of our own — we do not run any backend

Only two third parties are involved in running Bounce Em Balls. Each is bound by its own data-processing terms and, where applicable, Standard Contractual Clauses.

We do not sell your data to data brokers or use it for any purpose other than operating Bounce Em Balls.

Google LLC is based in the United States. When data is transferred outside the EU/EEA in connection with AdMob, the transfer is protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
• The EU-US Data Privacy Framework, under which Google LLC is certified

You can request further information from privacy@pocketninjagames.com.

• Local game data (unlocked levels, best scores, sound settings, Remove Ads flag): stored on your device until you delete the app.
• Advertising data processed by Google AdMob (including the IDFA if you allowed tracking): retained under Google's own retention policy.
• Purchase records: 7 years, as required by the Swedish Bookkeeping Act (Bokföringslagen).

You have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure ("right to be forgotten") — request deletion of your data
• Restriction — limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — for advertising or tracking

Since we run no backend and hold no user records ourselves, most requests can be resolved by deleting the app (which wipes all local data) and by adjusting your ATT choice in iOS Settings. For anything else, email privacy@pocketninjagames.com and we will respond within 30 days.

You also have the right to lodge a complaint with the Swedish Data Protection Authority:

Integritetsskyddsmyndigheten (IMY)
Website: imy.se
Email: imy@imy.se
Phone: +46 (0)8-657 61 00

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to:

• Know what personal information we collect about you.
• Delete personal information we have collected from you.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information.
• Limit the use of sensitive personal information.
• Non-discrimination for exercising your CCPA rights.

We do not sell personal information for money. However, sharing the Apple Advertising Identifier (IDFA) with Google for personalised advertising may qualify as "sharing" under CPRA. You can opt out at any time by declining the App Tracking Transparency prompt, or by turning tracking off in iOS Settings → Privacy & Security → Tracking.

To exercise your CCPA rights, email privacy@pocketninjagames.com with the subject line "CCPA Request".

Bounce Em Balls is rated 4+ and is suitable for all ages. We do not collect any personal data from users beyond what Google AdMob processes to serve advertising, and we do not knowingly collect personal data from children under 13.

If you are a parent setting up a device for a child, iOS Family Sharing automatically restricts tracking (no IDFA) and in-app purchases for child accounts, meaning the game will show only non-personalised ads and "Remove Ads" will require parental approval.

• All data in transit (ad requests, purchase validation) is encrypted using TLS 1.2+
• On-device data is protected by standard iOS sandboxing and device encryption
• We run no servers of our own, so there is no backend database to breach
• We do not store passwords or payment details — Apple handles all payments

We may update this policy from time to time. The "Last updated" date at the top will reflect the change. For significant changes (new third-party providers, new data types, changes to legal bases) we will notify you through the app.

Questions about this policy or about your data? Get in touch:

Pocket Ninja AB
Email: privacy@pocketninjagames.com
Address: Sysslomansgatan 8, 112 41 Stockholm, Sweden

This policy is written in English. In case of any discrepancy with a translated version, the English version prevails.