Privacy policy

The short version

• There are no accounts. None of our three games asks for your name, email address, phone number or precise location.
• Your progress stays on your phone and in your own iCloud (or, on Android, your Google backup). We can't see it.
• All three games are free because they show ads from Google AdMob. Where the law requires it, Google's consent form asks you first, and on iPhone, Apple's tracking prompt decides whether ads can use your advertising identifier.
• We use Google's Firebase to see how the games are played and to catch crashes, and AppsFlyer to see which of our own ads bring players in.
• You can change your choices at any time, and ask us to delete your data: see Anagrow, Quizmo and Anaverse.

Who we are

Anagrow, Quizmo and Anaverse are made by Sausage Studios, a small independent games studio in London, in the United Kingdom. Sausage Studios is the trading name of Patrick Wakefield, who is responsible for your information under this policy: the "controller", in data protection law. "We" and "us" mean Patrick Wakefield, trading as Sausage Studios. The way to reach us, for anything in this policy, is by email at contact@sausagestudios.com.

This policy has a part for each game, because each one handles things a little differently, and shared parts that apply to all three: children, legal bases, international transfers, your rights, changes and contact.

None of our games uses servers of our own. Everything that leaves your phone goes to the services named below, over encrypted connections.

Anagrow is our word puzzle for iPhone, coming soon to Android, with a Daily ladder, Unlimited and Sunset. This part describes Anagrow 2.0 and later (Anagrow on Android covers what's different there).

What stays on your phone

Your puzzles, results, streak, stats, hints and settings are kept in Anagrow's own storage on your iPhone, with whether you've bought Remove ads and, to time your reminders, when you've started the Daily over the last month. There's nothing to sign up for, and we have no server holding a copy. Like other app data, this is included in your iPhone's own backup (to iCloud or to a computer), and Anagrow also keeps a copy of your progress in your own iCloud (see Progress backup). Deleting Anagrow deletes what's on the phone.

What's collected, by whom and why

Service	What it receives	Why
Google's consent form (User Messaging Platform)	Your IP address, to tell whether a form is needed where you are, and your answers, which it stores on your phone	To ask for your consent and remember it
Google AdMob	Your IP address (giving a general location), device and app information, the ads you see and tap, ad performance and diagnostics, the identifier for vendors (IDFV), and your advertising identifier (IDFA) only if you allow tracking	To show banners, full-screen ads and the videos you choose to watch, keep them free of fraud, and personalise them only as you allow (Ads and tracking)
Google Analytics for Firebase	How the game is played (see below), the ads shown and what each earned, purchases, an app instance ID, device model, operating system and app version, a general location worked out from your IP address, the IDFV, and your advertising identifier (IDFA) only if you allow tracking	To understand and improve the game
Firebase Crashlytics	Crash details, device and operating system information, and a Crashlytics installation ID	To find and fix crashes
Firebase Remote Config, A/B Testing and Installations	A Firebase installation ID, the app and operating system versions, and your language, country and time zone	To fetch the game's settings, and to try out changes
AppsFlyer	Installs and launches, three game milestones, purchases, ad revenue, device and network details, your IP address (general location), AppsFlyer's own ID, Firebase's app instance ID (unless, in Google's form, you declined it or ad measurement, or didn't allow AppsFlyer), the IDFV, and your IDFA only if you allow tracking (and, where Google's form applies, allowed ad measurement and AppsFlyer there)	To measure which of our own ads bring players in, and to spot fraud (AppsFlyer)
Apple	Your purchase (Apple takes the payment), your progress backup in your own iCloud, the reminders iOS shows if you turn them on, and your iPhone's own backup	Payment, restoring Remove ads, backup and reminders. Apple doesn't give us your name or Apple Account
Us, by email	Your email address and what you write, if you email us	To reply and help

Ads and tracking

Anagrow is free because it shows ads from Google AdMob: a banner on Home, the puzzle screen and the end screens; a full-screen ad when you start a game of Unlimited or Sunset (never in the Daily); and optional videos you can choose to watch for more guesses, more Rule outs, a Reveal or a streak repair. Anagrow uses AdMob only, with no other ad networks. Remove ads takes away the banners and full-screen ads.

The privacy step when you first open Anagrow

Where the law requires it, such as in the UK and the EEA, Google's consent form appears when you first open Anagrow, just after a short card ("A small favour") explaining that ads keep Anagrow free. The form asks whether information may be stored on and read from your phone, whether ads may be personalised and measured, and lists the companies involved. Ads are personalised only if you agree there, and Anagrow follows your answers for its own analytics and for AppsFlyer too. AppsFlyer is in the form's list of companies: if you don't allow it there, Anagrow gives AppsFlyer neither your advertising identifier nor Firebase's app instance ID.

Then iOS asks whether Anagrow may track you across other companies' apps and websites. Anagrow's request says: "Anagrow is free to play. Allowing tracking helps show you relevant ads and supports the game." Anagrow asks only when your answer would be used: if you decline personalised ads and ad measurement in Google's form, it doesn't ask (and asks at a later launch only if that changes). Allow it or not: the game is exactly the same either way.

Where Google's form doesn't apply, there's no form: you'll see the card and then Apple's prompt, and analytics and ads start as this policy describes.

What tracking means here

If you allow tracking, Google AdMob can use your iPhone's advertising identifier (IDFA) to personalise ads, AppsFlyer can use it to match your install with an ad for Anagrow you tapped in another app or on a website, and Google Analytics for Firebase receives it with your analytics. Where Google's consent form applies, AdMob and Firebase use it only as your answers there allow. If you don't allow tracking, none of them receives it.

Where Google's consent form applies, ads are personalised only if you agree there. If Google doesn't get your advertising identifier, the ads are chosen with less information, such as the game you're playing and your general location.

We don't give Google's ads your puzzle results or your streak to choose ads with. Our analytics are linked to AdMob, so the ads shown and what each earned appear in both. AppsFlyer receives only the three milestones below.

Measuring our own ads: AppsFlyer

When we advertise Anagrow, AppsFlyer tells us which campaign, if any, led to an install, and what those players are worth to the game, so we can spend sensibly. It receives:

• the install, and each time you open Anagrow;
• three milestones: finishing the first Daily that Anagrow coaches you through, solving your first Daily, and solving your first Unlimited ladder;
• purchases (the product, its price and currency) and the revenue from each ad shown;
• device and network details (such as model, operating system version, language, network type, launch time and battery level), which it also uses to spot fraud;
• your IP address, giving a general location;
• identifiers: AppsFlyer's own ID; Firebase's app instance ID unless, in Google's form, you declined storing information on your phone or ad measurement, or didn't allow AppsFlyer (so we can join the two records); the IDFV; and your advertising identifier only if you allow tracking and, where Google's form applies, allowed ad measurement and AppsFlyer there;
• the choices you made in Google's consent form, which it reads from your phone.

If we advertise Anagrow through an ad network, AppsFlyer may tell that network which installs, milestones and purchases came from its ads, so it can measure the campaign.

AppsFlyer starts only after the privacy step (after Apple's prompt too, when Anagrow asks it), and doesn't start at all while Google's form can't tell whether consent is needed (for example, on a first launch with no connection). Apple's own privacy-preserving ad attribution (SKAdNetwork) can also tell ad networks, and AppsFlyer for us, that an ad led to an install, without identifying you; for Apple's own App Store ads, Apple's attribution token does the same.

Analytics, crash reports and settings

Anagrow uses Google Analytics for Firebase to understand roughly how the game is played. Along with Firebase's own events (first open, sessions and app updates), it records events such as:

• each finished game: the mode, whether you solved it, the guesses used and the words solved;
• the offers of extra guesses, and the videos you chose to watch for more guesses, hints or a streak repair;
• each ad shown and what it earned, through the link between AdMob and Firebase;
• your first launch: the card, Google's form and your answer to Apple's tracking prompt, and how far you got through the coaching in your first Daily, and whether you solved it;
• Remove ads: when you look at it, start a purchase, buy or restore it, with the price and currency;
• your answers about reminders, and when you share a result.

It also keeps a few details with your analytics: your Spelling choice, and which settings you have for the Daily's full-screen ad and the Remove ads price (so we can compare versions when we test one). On iPhone, it also receives your advertising identifier (IDFA) if you allow tracking (where Google's form applies, only as your answers there allow); on Android, it doesn't receive the advertising ID. We don't set a user ID.

Analytics starts only once you've been through Google's consent form, or where no form is needed. Firebase follows the choices you made there, purpose by purpose: if you decline storing information on your phone, it keeps no identifier on your phone and receives only limited signals without one.

Firebase Crashlytics sends a report if Anagrow crashes or hits an error, from the first time you open it, because it's needed to keep the game working. Crash reports are never used for advertising.

After the consent step, at most every 12 hours, Anagrow fetches its settings with Firebase Remote Config, such as the number of guesses, how often full-screen ads can appear, the Remove ads price and when reminders come. We may try different settings with different groups of players and compare them in analytics (Firebase A/B Testing).

Purchases

Remove ads is a one-off purchase through the App Store. If you're new to Anagrow, it's offered at a lower welcome price for your first 72 hours.

Apple takes the payment. We never see your name, Apple Account or payment details. Anagrow asks Apple only whether your Apple Account owns Remove ads: quietly when it opens, so it comes back on a reinstall or a new iPhone, and a refund is respected. Restore purchase in the menu asks again.

We record each new purchase (with the price and currency) in Firebase and AppsFlyer, as above. Apple gives us sales reports, which don't tell us who you are. Whether you've bought Remove ads isn't part of your progress backup: it comes back from the App Store.

Progress backup (iCloud)

If you're signed in to iCloud, Anagrow keeps a copy of your progress in iCloud key-value storage, in your own iCloud account: your Daily results by date, streak and stats, today's Daily as far as you've got (with its hints), your streak repairs, your Unlimited and Sunset stats and the ladders you've seen, your Spelling and Sound effects choices, and how far you've got with the tips and tours. It lets your progress come back after a reinstall or on a new iPhone, and stay in step across your iPhones.

Apple stores it, and only devices signed in to your Apple Account can read it. Sausage Studios can't see it or reach it. Your purchase, privacy choices, reminder setting and any Unlimited or Sunset game in progress aren't in it. Apple's iCloud terms and privacy policy apply.

Reminders, sharing and ratings

Reminders are off until you turn them on, in the menu or in Stats, or when Anagrow offers them after your first Daily; iOS asks your permission first. Anagrow schedules them on your iPhone itself, by its own clock: at 9am at first, then a little before the time you usually start the Daily, which it works out on the phone. Nothing is sent from a server. Analytics records only your answers to Anagrow's offer and to the permission.

Sharing uses your iPhone's share sheet, so you choose where it goes. It shares your result as text and coloured squares, not the letters you guessed, and a streak milestone can share a picture of your streak. Analytics notes only that you shared.

Ratings: Anagrow may ask Apple to show its rating prompt, for example at a 7-day streak, and Rate Anagrow in the menu opens the App Store. Apple handles both, and Anagrow doesn't learn what you did.

Anagrow on Android

Anagrow is coming to Android through Google Play. There it's the same game, and it handles your information as this part describes, except:

• The advertising ID: there's no tracking prompt on Android. Your phone has an advertising ID, provided by Google Play services, which apps can use unless you delete it. In Anagrow, Google AdMob uses it to show and personalise ads, measure them and prevent fraud, and AppsFlyer uses it to match your install with an ad for Anagrow and to spot fraud; where Google's form applies, only as your answers there allow, and AppsFlyer not at all if you don't allow it there. Firebase doesn't receive it from Anagrow. Android also gives apps an app set ID, which AdMob and Firebase use for analytics and to prevent fraud. You can reset or delete your advertising ID in your phone's Settings > Privacy > Ads.
• The Install Referrer: AppsFlyer also receives the Google Play Install Referrer, Google Play's note of how you reached Anagrow's page in the Play Store (for example, from one of our ads), which it uses to attribute your install.
• Purchases: Remove ads is bought through Google Play, which takes the payment; Google, not Sausage Studios, handles your payment details. When Anagrow opens, it asks Google Play which Anagrow purchases the Google account signed in to Google Play owns, so Remove ads comes back on a reinstall or a new phone; Restore purchase in the menu asks again.
• Progress backup: instead of iCloud, Anagrow keeps the same copy of your progress in one file that your phone's backup to Google holds, if your phone's backup is on. Android encrypts it with your screen lock, if you have one (Android 9 and later), and we can't see it or reach it. It comes back when you reinstall Anagrow or set up a new phone. You manage it in your phone's backup settings and your Google Account.
• Reminders, sharing and ratings: reminders are Android notifications (Android 13 and later asks your permission first), sharing uses Android's share sheet, and the rating prompt is Google Play's.
• Deleting: uninstall Anagrow (touch and hold its icon, then Uninstall) to remove everything it kept on the phone. Its backup copy stays in your phone's backup until it's removed there.

Changing your choices

• In Anagrow: open the menu (top left), then Privacy options, or find it at the bottom of Stats. It appears where Google's consent form applies, and opens the form again so you can change your answers.
• Tracking: iOS Settings > Privacy & Security > Tracking. Turn Anagrow off, or turn off Allow Apps to Request to Track.
• Everywhere: you can limit ad personalisation in iOS Settings > Privacy & Security > Apple Advertising, and manage Google's ad information at myadcenter.google.com.
• Remove ads turns off the banners and full-screen ads. It doesn't change your consent, analytics or AppsFlyer choices, and the optional videos are still there if you want them.

New answers apply to analytics straight away, and to ads and AppsFlyer the next time they ask (they read your stored answers themselves). Changing your mind doesn't affect what was collected before.

Deleting your Anagrow data

Delete Anagrow from your iPhone (touch and hold its icon, then Remove App > Delete App) to remove everything it kept on the phone. Nothing more is sent after that. Older iPhone backups keep their copy until you delete those backups, and Anagrow's copy in your own iCloud stays, so your progress can come back if you reinstall. We can't reach that copy ourselves; email us and we'll help.

To ask us to delete the information Anagrow has sent about you, email contact@sausagestudios.com with the subject "Delete my Anagrow data". Anagrow doesn't give you a support ID or any other ID we could use to find your analytics, and it never sends anything that identifies you by name, so we usually can't single out your data in Google Analytics (or our copy of it), Crashlytics or AppsFlyer. We'll do what we can and tell you what we found. This is how long each service keeps it:

• Google Analytics for Firebase: 2 months for the events themselves, and 14 months for what it keeps about each player and for key events (each player's clock starts again when they play again). Overall reports, which don't identify anyone, are kept longer.
• Our BigQuery copy of the analytics: 426 days (about 14 months). Each day's copy is deleted automatically 426 days after it's made.
• Crash reports (Crashlytics): 90 days, then Google starts deleting them.
• AppsFlyer: no more than 24 months for what it receives about your installation, under AppsFlyer's own policy, and up to 25 months for its overall reports, which don't identify anyone.

The services Anagrow uses

• Google AdMob and Google User Messaging Platform (ads and the consent form): Google Privacy Policy and How Google uses information from sites or apps that use its services.
• Google Firebase (Analytics, Crashlytics, Remote Config, A/B Testing and Installations) and Google BigQuery (our copy of the analytics): Privacy and security in Firebase and the Google Privacy Policy.
• AppsFlyer (measuring our ads): AppsFlyer Services Privacy Policy, which also explains how to contact AppsFlyer about your information.
• Apple (the App Store, purchases, iCloud, App Tracking Transparency, notifications and backups): Apple Privacy Policy.
• Google Play and Android (on Android: purchases through Google Play, the Install Referrer, the rating sheet, Google Play services' advertising ID and app set ID, your phone's backup and notifications): Google Privacy Policy.

Quizmo is our trivia game, with quizzes, flags, country outlines and logos. This part covers Quizmo on iPhone (from the App Store) and on Android (from Google Play). It's the same game, and it handles your information in the same way on both. Where they differ, this part says On iPhone or On Android.

No accounts

There's nothing to sign up for. Quizmo never asks for your name, email address, phone number, contacts or precise location, never looks at your photos, and doesn't use your microphone or camera. (On iPhone, from Quizmo 1.1.0, if you choose Save Image when sharing a picture, iOS asks whether Quizmo may add it to your photos.) We don't give you a user ID in any of the services below: they know your phone only by random identifiers, not by who you are.

What's collected, by whom and why

Service	What it receives	Why
Google's consent form (User Messaging Platform)	Your IP address, to tell whether a form is needed where you are, and your answers, which it stores on your phone	To ask for your consent and remember it
Google AdMob	Your IP address (giving a general location), device and app information, app launches, the ads you see and tap, ad performance and diagnostics, and identifiers. On iPhone: the identifier for vendors (IDFV), and your advertising identifier (IDFA) only if you allow tracking. On Android: your phone's advertising ID (unless you've deleted it) and the app set ID	To show ads and keep them free of fraud, and to personalise them only as you allow (Advertising and tracking)
Google Analytics for Firebase	How the game is played, purchases, ads shown, your region in Quizmo, an app instance ID, device model, operating system and app version, and a general location worked out from your IP address. On iPhone: the IDFV, and your advertising identifier (IDFA) only if you allow tracking. On Android: your advertising ID (unless you've deleted it) and the app set ID	To understand and improve the game (Analytics)
Google BigQuery	A copy of the Google Analytics events above, kept in Google Cloud's London region	To look at questions and our advertising in more detail
Firebase Crashlytics	Crash details, app sessions, device and operating system information, and a Crashlytics installation ID	To find and fix crashes
Firebase Remote Config, A/B Testing and Installations	A Firebase installation ID, the app and operating system versions, and your language, country and time zone	To fetch the game's settings and corrections to questions, and to try out changes
AppsFlyer	Installs and launches, five game milestones, purchases, ad revenue, device and network details, your IP address (general location), AppsFlyer's own ID, and Firebase's app instance ID (unless you declined it). On iPhone: the IDFV, and your IDFA only if you allow tracking. On Android: your advertising ID (unless you've deleted it) and the Google Play Install Referrer	To measure which of our own ads bring players in, and to spot fraud (AppsFlyer)
Apple (on iPhone)	Your purchase (Apple takes the payment), your progress backup in your own iCloud, and the reminders iOS shows	Payment, backup and reminders. Apple doesn't give us your name or Apple Account
Google Play and Android (on Android)	Your purchase (Google Play takes the payment), Quizmo's check of which of its purchases your Google account owns, your progress and settings backup in your own Google account if your phone's backup is on, the rating sheet, and the reminders Android shows	Payment, restoring Remove ads, backup, ratings and reminders. Google handles your payment details, and we never see them
Us, by email	Your email address and what you write, if you email us	To reply and help

What stays on your phone

Your answers and scores, streaks, medals and achievements, the flags, outlines and logos you've named, your difficulty and other settings, your region, your answers to the privacy step and whether you've bought Remove ads are kept in Quizmo's own storage on your phone. Pass and play happens on one phone and doesn't record players' names. The answers you type in World and Logos are checked on your phone and never sent. Deleting Quizmo deletes all of this from the phone (your iCloud or Google backup copy stays: see Progress backup).

Apart from Google's consent form itself, nothing goes to Google's ads and analytics services or to AppsFlyer until you've been through the privacy step when you first open Quizmo. (Quizmo does ask the App Store or Google Play which of its purchases you own: see Purchases.)

Advertising and tracking

Quizmo is free because it shows ads from Google AdMob: banners, full-screen ads after some rounds and when you complete a level in World or Logos, and optional rewarded ads you can choose to watch for More letters or Reveal in World and Logos. Quizmo asks Google only for ads it rates T (Teen) or below. Quizmo uses AdMob only, with no other ad networks.

The privacy step when you first open Quizmo

Google's consent form appears where the law requires it, such as the UK, the EEA and Switzerland. It asks whether information may be stored on and read from your phone, whether ads may be personalised and measured, and lists the companies involved. Quizmo follows your answers for its own analytics and for AppsFlyer too.

On iPhone: a short card, "Ads keep Quizmo free", and Apple's tracking prompt, which says: "This makes the ads you see more relevant and helps us measure how well our ads work." Allow it or not: the game is exactly the same either way. From Quizmo 1.1.0 the card comes first, before Google's form; in Quizmo 1.0 it comes after the form. If you've already bought Remove ads, neither the card nor the prompt appears. If you decline personalised ads and ad measurement in Google's form, Apple's prompt doesn't appear (and Quizmo asks at a later launch only if that changes).

On Android: there's no tracking prompt, because Android doesn't have one. Once you've answered Google's form, or where it isn't needed, the privacy step is done.

Where Google's form doesn't apply, there's no form: analytics and ads start as this policy describes. On iPhone, Apple's prompt still decides about your advertising identifier.

What tracking means here

On iPhone: if you allow tracking, Google AdMob can use your iPhone's advertising identifier (IDFA) to personalise ads, AppsFlyer can use it to match your install with an ad for Quizmo you tapped in another app or on a website, and Google Analytics for Firebase receives it with your analytics. Where Google's consent form applies, AdMob and Firebase use it only as your answers there allow, and AppsFlyer reads your answers too. If you don't allow tracking, none of them receives it.

On Android: your phone has an advertising ID, provided by Google Play services, which apps can use unless you delete it. In Quizmo, Google AdMob uses it to show and personalise ads, measure them and prevent fraud; AppsFlyer uses it to match your install with an ad for Quizmo, and to spot fraud; and Google Analytics for Firebase receives it with your analytics. Where Google's consent form applies, AdMob and Firebase use it only as your answers there allow, and AppsFlyer reads your answers too. You can reset it (apps then see a new one) or delete it (apps then receive only zeros in its place) in Android's settings: see Changing your choices.

Android also gives apps an app set ID, from Google Play services, which AdMob and Firebase use for analytics and to prevent fraud. It's shared only by apps from the same developer on your phone. Google resets it when the last of those apps is removed from the phone, when none of them has used it for 13 months, or when the phone is reset.

Where Google's consent form applies, ads are personalised only if you agree there. If Google doesn't get your advertising identifier (on iPhone, because you didn't allow tracking; on Android, because you deleted it), the ads are chosen with less information, such as the game you're playing and your general location.

Measuring our own ads: AppsFlyer

When we advertise Quizmo, AppsFlyer tells us which campaign, if any, led to an install, and what those players are worth to the game, so we can spend sensibly. It receives:

• the install, and each time you open Quizmo;
• five milestones: finishing the privacy step (on iPhone, with your answer to Apple's prompt), finishing or skipping the tour, each finished round (its mode, difficulty, length and score), your first finished round on your own (the same details), and your second day of play;
• purchases (the product, its price and currency) and the revenue from each ad shown;
• device and network details (such as model, operating system version, language, network type, launch time and battery level), which it also uses to spot fraud;
• your IP address, giving a general location;
• identifiers: AppsFlyer's own ID; Firebase's app instance ID unless you declined storing information on your phone in Google's form (so we can join the two records); on iPhone, the IDFV, and your advertising identifier only if you allow tracking; on Android, your advertising ID unless you've deleted it;
• on Android, the Google Play Install Referrer: Google Play's note of how you reached Quizmo's page in the Play Store (for example, from one of our ads), which AppsFlyer uses to attribute your install;
• the choices you made in Google's consent form, which it reads from your phone.

AppsFlyer's answer (whether you came from one of our ads, and if so which network, campaign and ad set) is added to our Firebase analytics, unless you declined storing information on your phone in Google's form. If we advertise Quizmo through an ad network, AppsFlyer may tell that network which installs, milestones and purchases came from its ads, so it can measure the campaign.

AppsFlyer starts only after the privacy step (on iPhone, once Apple's prompt has been asked), and doesn't start at all while Google's form can't tell whether consent is needed (for example, on a first launch with no connection). On iPhone, Apple's own privacy-preserving ad attribution (SKAdNetwork) can also tell ad networks, and AppsFlyer for us, that an ad led to an install, without identifying you; for Apple's own App Store ads, Apple's attribution token does the same.

Changing your choices

• In Quizmo: open Settings (the gear at the top of the Quiz, World, Logos or Profile tab), then Privacy choices (Privacy in Quizmo 1.0). Where Google's form applies, it opens again so you can change your answers. Elsewhere, on iPhone it opens Quizmo's page in iOS Settings, where you'll find Allow Tracking once Quizmo has asked; on Android it opens this privacy policy.
• On iPhone: iOS Settings > Privacy & Security > Tracking. Turn Quizmo off, or turn off Allow Apps to Request to Track.
• On Android: open your phone's Settings, then Privacy > Ads (on some phones, Security & privacy > Other privacy settings > Ads). There you can reset your advertising ID, or delete it so that no app can use it.
• Remove ads turns off every ad. Quizmo stops asking for ads, and from the next launch doesn't start Google's ads software at all (Google's consent form still appears where it applies, because it covers analytics too). It doesn't change your analytics or AppsFlyer choices.

New answers apply to analytics straight away, and to ads and AppsFlyer the next time they ask (they read your stored answers themselves). Changing your mind doesn't affect what was collected before.

Analytics, crash reports and game settings

Google Analytics for Firebase

We record how Quizmo is played so we can make it better: to find questions that are too hard, too easy or wrong, to balance the ads, and to see what players enjoy. This covers:

• rounds started and finished: the mode, difficulty, length and score, and the game settings in force;
• each answer: which question, whether it was right, the option you picked, how long you took, any hint used and its place in the round;
• flags, outlines and logos named, levels started and completed, hints and rewarded ads taken, and finished games and their cards (viewed or shared);
• medals and achievements earned, the tour, screens viewed, home cards tapped and your answer to the suggestion to try Easy+;
• questions you report (the question and the reason you picked);
• on iPhone, whether you saw the "Ads keep Quizmo free" card and your answer to Apple's tracking prompt; on both, your answers to the reminders offer and permission and to "Enjoying Quizmo?", and whether a reminder opened the app;
• purchases (full or welcome price, with the price and currency), attempts to buy Remove ads and restores, whether the store's products loaded, and the offer to remove ads after an ad;
• a few details kept with your analytics: whether you have Ad-free, your usual difficulty, your answer to Apple's tracking prompt (on iPhone), what Google's form allows for ads, and the week you first opened Quizmo;
• your region in Quizmo and your Logos set (Your region);
• whether you came from one of our ad campaigns (from AppsFlyer);
• ads shown and what each earned, through the link between AdMob and Firebase.

Firebase adds an app instance ID (random, for this installation), sessions, device model, operating system and app version, and a general location (country, region and city) worked out from your IP address. We don't set a user ID.

On iPhone: Firebase also receives the IDFV, and your advertising identifier (IDFA) if you allow tracking (where Google's form applies, only as your answers there allow).

On Android: Firebase also receives your phone's advertising ID (unless you've deleted it, and where Google's form applies, only as your answers there allow) and the app set ID. It can also note when Quizmo is removed from a phone.

Analytics starts once you've been through the privacy step. If you decline storing information on your phone in Google's form, Firebase keeps no identifier on your phone and receives only limited signals without one, which Google can use for overall, modelled reports. If we advertise Quizmo through Google Ads, Google may use these analytics (such as installs, finished rounds and purchases) to measure those ads, within the choices you made in Google's form.

We keep a copy of these analytics events in Google BigQuery, in Google Cloud's London region, to look at questions and our advertising in more detail. Each day's copy is deleted automatically after 426 days (about 14 months).

Crash reports: Firebase Crashlytics

If Quizmo crashes, a report is sent: what went wrong (the stack trace), the state of the app, the last few analytics events, device and operating system details, and a Crashlytics installation ID. Crashlytics also notes app sessions, so crash rates can be worked out, and keeps a line of log each time the store's products load. From Quizmo 1.1.0, and on Android, it also gets a short error report if reminders can't start.

Crash reports are sent once you've been through the privacy step, whatever you chose there, because they're needed to keep the game working. They're never used for advertising. A crash from before the privacy step is deleted, not sent.

Game settings: Firebase Remote Config and A/B Testing

After the privacy step, at launch (at most every 12 hours), Quizmo fetches its settings, such as how often ads appear, what each difficulty is made of, and corrections to questions. The request includes a Firebase installation ID, the app and operating system versions, and your language, country and time zone. We may try different settings with different groups of players and compare them in analytics (Firebase A/B Testing).

Purchases

Remove ads is a one-off purchase: through the App Store on iPhone, and through Google Play on Android. For the first 48 hours after you first open Quizmo, it's offered at a lower welcome price.

On iPhone: Apple takes the payment. We never see your name, Apple Account or payment details. Quizmo asks Apple only whether your Apple Account owns Remove ads: quietly when it opens and when you come back to it, so Ad-free comes back on a reinstall or a new iPhone, and a refund is respected.

On Android: Google Play takes the payment, and Google, not Sausage Studios, handles your payment details. When Quizmo opens, it asks Google Play which Quizmo purchases the Google account signed in to Google Play owns, so Ad-free comes back on a reinstall or a new phone; Settings > Restore purchases asks again.

We record each new purchase (full or welcome price, with the price and currency) in Firebase and AppsFlyer, as above. Apple and Google give us sales reports, which don't tell us who you are. Whether you've bought Remove ads isn't part of your progress backup: it comes back from the App Store or Google Play.

Progress backup (iCloud and Google)

On iPhone: iCloud

If you're signed in to iCloud, Quizmo keeps a copy of your progress in iCloud key-value storage, in your own iCloud account: the questions you've seen and got right, the flags, outlines and logos you've named, your medals, achievements, streak, round counts and best scores, your usual difficulty, when you first opened Quizmo, and a few "already shown" markers (such as the tour). It lets your progress come back after a reinstall or on a new iPhone, and stay in step across your iPhones.

Apple stores it, and only devices signed in to your Apple Account can read it. Sausage Studios can't see it or reach it. Your purchase, privacy choices, reminders and haptics aren't in it, nor your region unless you picked it yourself in Settings > Region. Apple's iCloud terms and privacy policy apply.

On Android: your phone's backup to Google

Quizmo keeps a copy of your progress (the same things as the iCloud copy above, including a region you picked in Settings > Region) and of your Haptics and Reminders settings, with a random number that tells a restored phone from the one that made the copy, in files that Android includes in your phone's backup to your Google account, if your phone's backup is on. Your purchase, your answers to the privacy step and anything else specific to that phone aren't in it.

• Where it's kept: Google stores it in your Google Drive, in a private folder for Quizmo. It can't be read by you, by other apps or by Sausage Studios. On Android 9 or later, with a screen lock (PIN, pattern or password), it's end-to-end encrypted with your screen lock.
• When: Android backs up roughly once a day, when your phone is idle, charging and on Wi-Fi. It keeps only the latest copy.
• Coming back: when you reinstall Quizmo, or set up a new phone from your backup, Android puts the files back. Quizmo merges your progress with what's on the phone and takes your Haptics and Reminders settings once (Reminders come back on only where Android lets Quizmo send them without asking again).
• Turning it off or deleting it: in your phone's Settings, under Google > Backup or System > Backup (the names vary between phones). This applies to your whole phone's backup, not only to Quizmo. Google's terms and privacy policy apply to your backup.

Reminders

Reminders are off until you turn them on, in Settings > Reminders or when Quizmo offers them once you have a 2-day streak. Your phone asks for your permission first: iOS on iPhone, and Android on Android 13 or later. Quizmo schedules them on your phone itself, by its own clock and time zone. Nothing is sent from a server, and what they say stays on the phone. Analytics records only your answers to Quizmo's offer and to the permission, and when a reminder opens Quizmo.

Your region

Quizmo picks regional questions and Logos levels for where you are: UK, US, Australia & New Zealand, or Rest of world. When you first open it, it reads the country of your App Store account (on iPhone) or your Play Store country (on Android), or if that isn't available, your phone's region setting. This happens on your phone, and Quizmo doesn't send the country anywhere. It records the region it settled on (not the country) and your Logos set in analytics, so we can see how regional questions do. You can change it at any time in Settings > Region.

Sharing, ratings and emails

Sharing (a round's score, Share my stats, or a finished game's card) uses your phone's share sheet, so you choose where it goes. Analytics notes only that a finished game's card was shared.

Ratings: if you tell "Enjoying Quizmo?" that you are, Quizmo asks Apple (on iPhone) or Google Play (on Android) to show its rating prompt. Apple or Google handles that, and Quizmo doesn't learn what you did.

Emails: if you email us, from our support page or from Send feedback in Quizmo (which opens your own mail app), we receive your email address and what you write, and use them only to reply and help.

How long Quizmo's data is kept

• On your phone: until you delete Quizmo.
• Your iCloud backup (iPhone): in your iCloud account, until it's removed (Delete your data). We can't see it.
• Your Google backup (Android): in your phone's backup in your Google account, until it's removed. We can't see it. Google says it erases a phone's backed-up data (other than photos and videos) if the phone isn't used for 57 days, or if you turn backup off.
• Google Analytics for Firebase: 14 months (each player's clock starts again when they play again). Overall reports, which don't identify anyone, are kept longer.
• Our BigQuery copy of the analytics: 426 days (about 14 months). Each day's copy is deleted automatically 426 days after it's made.
• Crash reports (Crashlytics): 90 days, then Google starts deleting them.
• AppsFlyer: no more than 24 months for what it receives about your installation, under AppsFlyer's own policy, and up to 25 months for its overall reports, which don't identify anyone.
• Google AdMob, the consent form, Remote Config, A/B Testing and Installations: as each service describes in its privacy information (The services Quizmo uses).
• Emails: for as long as we need them to deal with what you wrote, then deleted.

Delete your data

You can ask us to delete the information Quizmo has sent about you at any time, whether or not you still have the app. There are no accounts, so we find your information by the support ID Quizmo gives you.

How to ask

In Quizmo, open Settings (the gear at the top of the Quiz, World, Logos or Profile tab), then About Quizmo, then Copy my support ID. Quizmo copies a short code that starts QZ1-. It holds the two random identifiers that Google Analytics and AppsFlyer file your information under (your Firebase app instance ID and your AppsFlyer ID), and nothing else: not your name, not your phone's advertising identifier. On iPhone, this is in Quizmo 1.1.0 and later.

Email contact@sausagestudios.com with the subject "Delete my Quizmo data", and paste the code into it. If Quizmo says there's no support ID, it hasn't sent anything we could find you by, so there's nothing for us to find; you can still write to us.

If you no longer have Quizmo, or your version doesn't have Copy my support ID, email us anyway. On Android, include your phone's advertising ID (Android shows it on the Ads page in its settings), which lets us ask AppsFlyer to find your information. Without an identifier we may not be able to find your information; if so, we'll tell you, and it's deleted anyway when its time is up (How long it's kept).

What we delete, and how long it takes

• Google Analytics for Firebase: we ask Google to delete every event and detail it holds for your installation of Quizmo. Google removes it from our reports within 72 hours, and from its servers at its next deletion run, which happens about every two months.
• Our own copy of the analytics: we delete your rows from it ourselves when we make the request.
• AppsFlyer: we ask AppsFlyer to erase what it holds for your installation. It does so within 10 days.

We do this within a few days of your email, and we'll write to tell you it's done, within one month at the latest.

What isn't deleted

• Overall reports that don't identify anyone (counts and totals across all players), which stay in Google Analytics.
• Crash reports: the support ID can't find them, but they hold no name or contact details, and Google deletes them after 90 days.
• Your purchase: Apple or Google keeps the record of your payment, under its own privacy policy, and Remove ads stays with your Apple Account or Google account.
• Google's advertising information: Google decides what it keeps for ads, under its own privacy policy; you can manage it at myadcenter.google.com, and by resetting or deleting your advertising ID.

What's on your phone and in your own backup

• On your iPhone: delete Quizmo (touch and hold its icon, then Remove App > Delete App). That removes everything it kept on the phone, and nothing more is sent to anyone.
• On your Android phone: uninstall Quizmo (touch and hold its icon, then Uninstall, or go to Settings > Apps > Quizmo > Uninstall). That removes everything it kept on the phone. Firebase may note that Quizmo was removed, and after that nothing more is sent.
• Your iCloud copy (iPhone): it holds only game progress, and it stays in your iCloud after you delete Quizmo, so your progress comes back if you reinstall. We can't reach it ourselves; you can remove it in iOS Settings > [your name] > iCloud > Manage Storage, or email us and we'll help.
• Your Google backup copy (Android): it holds only game progress and your Haptics and Reminders settings, and it stays in your phone's backup after you uninstall Quizmo. We can't reach it ourselves. You manage it in your phone's backup settings and your Google Account; that affects your whole phone's backup, not only Quizmo.
• Stopping it from now on: decline in Settings > Privacy choices (Privacy in Quizmo 1.0; where Google's form applies), turn off tracking in iOS Settings, delete your advertising ID in Android's settings, or delete Quizmo.

The services Quizmo uses

• Google AdMob and Google User Messaging Platform (ads and the consent form): Google Privacy Policy and How Google uses information from sites or apps that use its services.
• Google Firebase (Analytics, Crashlytics, Remote Config, A/B Testing and Installations) and Google BigQuery (our copy of the analytics): Privacy and security in Firebase and the Google Privacy Policy.
• AppsFlyer (measuring our ads): AppsFlyer Services Privacy Policy, which also explains how to contact AppsFlyer about your information.
• Apple (on iPhone: the App Store, purchases, iCloud, App Tracking Transparency and notifications): Apple Privacy Policy.
• Google Play and Android (on Android: Google Play, purchases through Google Play, the Install Referrer, the rating sheet, Google Play services' advertising ID and app set ID, your phone's backup and notifications): Google Privacy Policy.

We share your information only with these services, for the purposes described here, or where the law requires it.

Anaverse is our word game, with levels, planets, coins and hints. This part covers Anaverse on iPhone, from the App Store, and on Android, from Google Play; where Android differs, Anaverse on Android says how. (See the Anaverse page.)

No accounts

There's nothing to sign up for. Anaverse never asks for your name, email address, phone number, contacts, photos or precise location, and it doesn't use your microphone or camera. We don't set a user ID in Firebase Analytics, and the services below know your phone only by random identifiers, not by your name.

What's collected, by whom and why

Service	What it receives	Why
Google's consent form (User Messaging Platform)	Your IP address, to tell whether a form is needed where you are, and your answers, which it stores on your phone	To ask for your consent and remember it
Google AdMob	Your IP address (giving a general location), device and app information, the ads you see and tap, ad performance and diagnostics, the identifier for vendors (IDFV), and your advertising identifier (IDFA) only if you allow tracking. Nothing about how you play goes to AdMob	To show ads, measure them and keep them free of fraud, and to personalise them only as you allow (Ads and tracking)
Google Analytics for Firebase	How the game is played, purchases, the ads shown and what each earned, the first-launch steps and your answer to Apple's tracking prompt, an app instance ID, the IDFV, sessions, device model, operating system and app version, your country and region worked out from your IP address, and your advertising identifier (IDFA) only if you allow tracking	To understand and improve the game (Analytics)
Firebase Crashlytics	Crash and error details, the state of the app, device and operating system information, and a Crashlytics installation ID; no advertising identifiers. Collected from the first launch, before any choice	To find and fix crashes and other errors, and so keep the game working
Firebase Remote Config, A/B Testing and Installations	A Firebase installation ID, the app and operating system versions, and your language, country and time zone	To fetch the game's settings, such as coin amounts, hint prices, offers and when ads and help appear, and to try out changes
AppsFlyer	Installs and launches, purchases, ad revenue, device and network details, your IP address (general location), AppsFlyer's own ID, the IDFV and your answers in Google's consent form. Firebase's app instance ID and your IDFA only as your choices allow, and Apple's privacy-preserving ad attribution	To measure which of our own ads bring players in, and to spot fraud (AppsFlyer)
Apple	Your purchases (Apple takes the payment), your progress backup in your own iCloud, and Anaverse's requests for its products and the purchases your Apple Account owns	Payment, delivering purchases, restoring Remove ads and backing up your progress. Apple doesn't give us your name, Apple Account or payment details
Google Play (Android)	Your purchases (Google takes the payment), Anaverse's requests for its products and the purchases your Google account owns, and your progress backup in your phone's own backup to Google	Payment, delivering purchases, restoring Remove ads and backing up your progress (Anaverse on Android). Google doesn't give us your name, Google account or payment details
Us, by email	Your email address and what you write, if you email us	To reply and help

What stays on your phone

Anaverse keeps your progress in its own storage on your phone: the levels and bonus levels you've played, the level in progress, your coins and hints, words found and rank, your stats, the daily chest, quests and coin vault, the planets you've finished and the tips you've seen. It also keeps your Music, Sound effects and Vibration settings.

It keeps a record of the coin purchases already delivered, by Apple's transaction ID, so none arrives twice, and whether you own Remove ads. Google's consent form stores your answers on your phone. A random ID for each installation keeps two phones' coin counts apart.

No server of ours holds your progress. Deleting Anaverse removes all this from the phone; your copy in your own iCloud stays (see Progress backup).

Ads and tracking

Anaverse is free because it shows ads from Google AdMob. It uses AdMob only, with no other ad networks.

Once you've played a few levels, a banner sits at the bottom of the screen, and full-screen ad breaks come between some levels, never straight after a video. You can also choose to watch reward videos: to double your coins at the end of a level or at a checkpoint chest, for coins in the Shop (these two while you're low on coins), for extra daily chests, for a fourth daily quest or a quest swap, and for help when you're stuck.

Remove ads turns off the banner and the ad breaks. The reward videos stay, and stay optional.

The privacy step when you first open Anaverse

Before your first level, Google's consent form appears where the law requires it, such as the UK, the EEA and Switzerland. It asks whether information may be stored on and read from your phone, whether ads may be personalised and measured, and lists the companies involved, AppsFlyer among them. Anaverse follows your answers for its own analytics and for AppsFlyer too.

Then Apple's tracking prompt asks whether Anaverse may track you across other companies' apps and websites, but only when your answer would be used: if you declined personalised ads and ad measurement in Google's form, Anaverse doesn't ask (and asks at a later launch only if that changes). Allow it or not: the game is exactly the same either way.

Where Google's form doesn't apply, there's no form: analytics and ads start as this policy describes, and Apple's prompt still decides about your advertising identifier.

Firebase Analytics collects nothing until you've been through this step. AppsFlyer starts only after it (after Apple's prompt too, when Anaverse asks it), and doesn't start at all while Google's form can't tell whether consent is needed (for example, on a first launch with no connection). Crash reports are the exception: see Crash reports.

What tracking means here

If you allow tracking, Google AdMob can use your iPhone's advertising identifier (IDFA) to personalise and measure ads, AppsFlyer can use it to match your install with an ad for Anaverse you tapped in another app or on a website, and Google Analytics for Firebase receives it with your analytics. Where Google's form applies, your answers there limit these too. If you don't allow tracking, none of them receives it.

Where Google's consent form applies, ads are personalised only if you agree there. If Google doesn't get your advertising identifier, the ads are chosen with less information, such as the game you're playing and your general location.

Measuring our own ads: AppsFlyer

When we advertise Anaverse, AppsFlyer tells us which campaigns bring players in and what those players are worth to the game, through purchases and ads, so we can spend sensibly. It receives:

• the install, and each time you open Anaverse;
• purchases: the product, its price and currency;
• the revenue from each ad shown;
• device and network details (such as model, operating system version, language, network type, launch time and battery level), which it also uses to spot fraud;
• your IP address, giving a general location;
• AppsFlyer's own ID and the IDFV;
• Firebase's app instance ID (a random ID for your installation), so we can join the two records, unless you declined storing information on your phone or ad measurement in Google's form, or didn't allow AppsFlyer there;
• your advertising identifier only if you allow tracking and, where Google's form applies, allowed ad measurement and AppsFlyer there;
• the choices you made in Google's consent form, which it reads from your phone.

If you decline ad measurement or AppsFlyer in Google's form, AppsFlyer still counts the install and your visits, but with no advertising identifier and no Firebase ID. If we advertise Anaverse through an ad network, AppsFlyer may tell that network which installs and purchases came from its ads, so it can measure the campaign.

Apple's own privacy-preserving ad attribution (SKAdNetwork and AdAttributionKit) can also tell ad networks, and AppsFlyer for us, that an ad led to an install, without identifying you; for Apple's own App Store ads, Apple's attribution token does the same.

Changing your choices

• In Anaverse: open Settings (the gear at the top of Home), then Privacy choices. It's there where Google's consent form applies, and opens the form again so you can change your answers.
• Tracking (iPhone): iOS Settings > Privacy & Security > Tracking. Turn Anaverse off, or turn off Allow Apps to Request to Track.
• The advertising ID (Android): reset or delete it in your phone's Settings > Privacy > Ads (on some phones, Settings > Google > Ads).
• Everywhere: you can limit ad personalisation on iPhone in iOS Settings > Privacy & Security > Apple Advertising, and manage Google's ad information at myadcenter.google.com.
• Remove ads turns off the banner and the ad breaks. It doesn't change your consent, analytics or AppsFlyer choices, and the optional videos are still there if you want them.

Firebase follows your new answers, and AppsFlyer reads them from your phone the next time it starts. Changing your mind doesn't undo what was collected before: see Delete your data if you'd like help with that.

Analytics, crash reports and game settings

Google Analytics for Firebase

We use Google Analytics for Firebase to understand how Anaverse is played and to make it better. It records:

• levels started and completed;
• hints used, which hint and how it was paid for, and when there weren't enough coins for one;
• the rewards from videos, the ad breaks, and each ad shown with what it earned;
• the daily chest, quests collected, unlocked and swapped, new ranks and planets finished;
• taps on the Shop's coin packs, the coin vault and Remove ads, the welcome offer being shown, and free coins claimed;
• purchases, with the product, price and currency (Firebase also measures App Store purchases itself);
• your progress coming back from the backup;
• the first-launch steps and your answer to Apple's tracking prompt;
• whether you were asked if you're enjoying Anaverse, your answer, and whether you chose to email us (see Rating Anaverse).

Firebase adds an app instance ID (random, for this installation), the IDFV on iPhone, sessions, device model, operating system and app version, and a general location (country and region) worked out from your IP address. We don't set a user ID. On iPhone, Firebase receives your advertising identifier (IDFA) only if you allow tracking; on Android, it doesn't receive your advertising ID.

Analytics starts once you've been through the privacy step. If you decline storing information on your phone in Google's form, Firebase keeps no identifier on your phone and receives only limited signals without one.

Crash reports: Firebase Crashlytics

If Anaverse crashes or hits an error, a report is sent: what went wrong (the stack trace), the state of the app, device and operating system details, and a Crashlytics installation ID.

Crash reports are collected from the first time you open Anaverse, before you make any choice in Google's form or Apple's prompt, so that a crash on the very first screens can be found and fixed: they're how we keep the game working. They carry no advertising identifier (no IDFA, and nothing from AdMob or AppsFlyer) and are never used for advertising. Analytics stays off until you've made your choice.

Game settings: Firebase Remote Config and A/B Testing

After the privacy step, at most every 12 hours, Anaverse fetches its settings with Firebase Remote Config, such as coin amounts, hint prices, offers, and when ads and help appear. The request includes a Firebase installation ID, the app and operating system versions, and your language, country and time zone. We may try different settings with different groups of players and compare them in analytics (Firebase A/B Testing).

Purchases

Coin packs, the welcome offer, opening the coin vault and Remove ads are bought through the App Store. Apple takes the payment. We never see your name, Apple Account or payment details.

When Anaverse opens, and when you come back to it, it asks the App Store for its products and which purchases your Apple Account owns, so an unfinished purchase is delivered and Remove ads comes back on a reinstall or a new iPhone. Settings > Restore purchases asks again.

We record each new purchase (with the price and currency) in Firebase and AppsFlyer, as above. Apple gives us sales reports, which don't tell us who you are. Coins you buy become part of your progress and its iCloud copy; Remove ads isn't in the backup, because it comes back from the App Store.

Rating Anaverse

After you've finished your first planet, and at most twice more later, Anaverse may ask whether you're enjoying it, never in the middle of a level. If you say yes, on iPhone Apple's own rating sheet appears (Apple handles your rating), and on Android, Anaverse's page in the Play Store opens. If you say not really, Anaverse offers to open a new email to us in your mail app; nothing is sent unless you send it. Either answer ends the questions. We record in Firebase that the question was shown and how you answered, nothing more.

Progress backup (iCloud)

If you're signed in to iCloud, Anaverse keeps a copy of your progress in iCloud key-value storage, in your own iCloud account. It brings your progress back after a reinstall or on a new iPhone, and keeps your iPhones in step.

The copy holds the levels and bonus levels you've played, the level in progress, your coins and hints, words found and rank, your stats, the daily chest, quests and coin vault, planets finished, tips seen, your Music, Sound effects and Vibration settings, the record of coin purchases already delivered, and the random IDs that keep each phone's coin count apart. Remove ads and your consent answers aren't in it.

Apple stores it, and only devices signed in to your Apple Account can read it. Sausage Studios can't see it or reach it. Apple's iCloud terms and privacy policy apply.

Anaverse on Android

On Android, from Google Play, Anaverse is the same game, and it handles your information as this part describes, except:

• The privacy step: there's no tracking prompt on Android. Google's consent form appears before your first level where the law requires it, as on iPhone, and Anaverse follows your answers in the same way; elsewhere there's no form.
• The advertising ID: your phone has an advertising ID, provided by Google Play services, which apps can use unless you delete it. In Anaverse, Google AdMob uses it to show and personalise ads, measure them and prevent fraud, and AppsFlyer uses it to match your install with an ad for Anaverse and to spot fraud; where Google's form applies, only as your answers there allow, and AppsFlyer not at all if you decline ad measurement or AppsFlyer there. Firebase doesn't receive it from Anaverse. Android also gives apps an app set ID, which AdMob and Firebase use for analytics and to prevent fraud; on iPhone the IDFV plays that part. You can reset or delete your advertising ID in your phone's Settings > Privacy > Ads (on some phones, Settings > Google > Ads).
• The Install Referrer: AppsFlyer also receives the Google Play Install Referrer, Google Play's note of how you reached Anaverse's page in the Play Store (for example, from one of our ads), which it uses to attribute your install.
• Purchases: coin packs, the welcome offer, opening the coin vault and Remove ads are bought through Google Play, which takes the payment; Google, not Sausage Studios, handles your payment details. When Anaverse opens, and when you come back to it, it asks Google Play for its products and which Anaverse purchases the Google account signed in to Google Play owns, so an unfinished purchase is delivered and Remove ads comes back on a reinstall or a new phone; Settings > Restore purchases asks again. We record each new purchase in Firebase and AppsFlyer, as on iPhone, and Firebase also measures Google Play purchases itself.
• Progress backup: instead of iCloud, Anaverse keeps the same copy of your progress in one file that your phone's backup to Google holds, if your phone's backup is on. Android encrypts it with your screen lock, if you have one (Android 9 and later), and we can't see it or reach it. It comes back when you reinstall Anaverse or set up a new phone. Remove ads and your consent answers aren't in it. You manage it in your phone's backup settings and your Google Account.
• Deleting: uninstall Anaverse (touch and hold its icon, then Uninstall) to remove everything it kept on the phone; nothing more is sent. Its backup copy stays in your phone's backup until it's removed there, and Google Play keeps the record of your purchases under Google's privacy policy.

How long Anaverse's data is kept

• On your phone: until you delete Anaverse.
• Your iCloud copy: in your own iCloud account until it's removed. It stays after you delete Anaverse, so your progress can come back if you reinstall. We can't see it.
• Your Android backup copy: in your phone's backup to Google until it's removed there. We can't see it.
• Google Analytics for Firebase: up to 14 months. Overall reports, which don't identify anyone, are kept longer.
• Crash reports (Crashlytics): 90 days.
• AppsFlyer, Google AdMob, the consent form, Remote Config, A/B Testing and Installations: as each service describes in its privacy information (The services Anaverse uses).
• Emails: for as long as we need them to deal with what you wrote, then deleted.

Delete your data

You can email contact@sausagestudios.com with the subject "Delete my Anaverse data", whether or not you still have the app.

Anaverse has no support ID to copy. Your analytics, crash reports and AppsFlyer records are filed under random identifiers, not your name or email address, so we usually can't single out your data. Write to us anyway and we'll do what we can; if we can't find your information, we'll tell you, and it's deleted anyway when its time is up (How long it's kept).

• On your iPhone: delete Anaverse (touch and hold its icon, then Remove App > Delete App). That removes everything it kept on the phone, and nothing more is sent.
• On Android: uninstall Anaverse (touch and hold its icon, then Uninstall). That removes everything it kept on the phone, and nothing more is sent. Its copy in your phone's backup to Google stays until it's removed there.
• Your iCloud copy: it holds only game progress, and it stays in your iCloud after you delete Anaverse, so your progress comes back if you reinstall. We can't reach it ourselves; email us and we'll help.
• Your purchases: Apple (or, on Android, Google Play) keeps the record of your payment under its own privacy policy, and Remove ads stays with your Apple Account (or Google account).
• Google's advertising information: Google decides what it keeps for ads, under its own privacy policy; you can manage it at myadcenter.google.com, and change your choices in Anaverse (Changing your choices).

The services Anaverse uses

• Google AdMob and Google User Messaging Platform (ads and the consent form): Google Privacy Policy and How Google uses information from sites or apps that use its services.
• Google Firebase (Analytics, Crashlytics, Remote Config, A/B Testing and Installations): Privacy and security in Firebase and the Google Privacy Policy.
• AppsFlyer (measuring our ads): AppsFlyer Services Privacy Policy, which also explains how to contact AppsFlyer about your information.
• Apple (the App Store, purchases, iCloud, App Tracking Transparency and ad attribution): Apple Privacy Policy.
• Google Play (purchases, the Install Referrer and, on Android, the advertising ID and your phone's backup to Google): Google Privacy Policy.

We share your information only with these services, for the purposes described here, or where the law requires it.

Children

None of our games is directed at children, and we don't knowingly collect information from children under 13. Anagrow is rated 4+ on the App Store because its content is harmless, but it isn't designed for children. Quizmo is rated 13+ on the App Store (12+ on older versions of iOS) and is for players aged 13 and over on Google Play; its ads are limited to content Google rates T (Teen) or below. Anaverse isn't designed for children. If you think a child under 13 has used one of our games, email us and we'll help remove what we can.

Legal bases (UK GDPR and EU GDPR)

If you're in the UK or the EEA, these are the legal bases we rely on.

What we do	Legal basis
Storing and reading information on your phone for ads and analytics, including your advertising identifier; personalised ads; ad measurement and attribution	Your consent, given in Google's consent form (Article 6(1)(a)). You can withdraw it at any time: Anagrow, Quizmo, Anaverse.
Showing non-personalised or limited ads, and keeping ads and attribution free of fraud	Our legitimate interests (Article 6(1)(f)) in funding free games and keeping them secure. Where Google's form asks about these, we follow your answers.
Limited analytics signals without identifiers, when you've declined	Our legitimate interests in knowing how much the games are played.
Crash reports	Our legitimate interests in keeping the games working.
Game settings, corrections and tests (Remote Config, A/B Testing)	Our legitimate interests in running and improving the games.
Delivering and restoring purchases	Performing our contract with you (Article 6(1)(b)).
Answering your emails	Our legitimate interests in helping you.

Where we rely on legitimate interests, you can object (Your rights).

International transfers

Sausage Studios is in the UK. Google and AppsFlyer may process your information in other countries, including the United States. Where it leaves the UK or the EEA for a country without an adequacy decision, they rely on recognised safeguards, such as the EU-US Data Privacy Framework and its UK Extension (for companies certified under it) or standard contractual clauses with the UK's addendum. Our BigQuery copies of Anagrow's and Quizmo's analytics are kept in London. Apple keeps your iCloud data and iPhone backups, and Google your Android backup, under their own terms.

Your rights

Depending on where you live, including the UK, the EEA and some US states, you may have the right to:

• ask for a copy of your information;
• have it corrected;
• have it deleted (Anagrow, Quizmo, Anaverse);
• restrict or object to how we use it, including anything based on our legitimate interests, and opt out of ads based on tracking;
• get it in a portable form;
• withdraw your consent at any time, without affecting what happened before;
• complain to a data protection authority. In the UK, that's the Information Commissioner's Office (ico.org.uk, 0303 123 1113); in the EEA, the authority where you live. We'd like the chance to help first.

To use any of these rights, email contact@sausagestudios.com. We'll reply within one month.

Changes to this policy

If we change how any of our games handles your information, we'll update this page and the date at the top. If a change is significant, we'll say so at the top of the page and, where the law requires it, ask for your consent again in the game.

Get in touch