Jigsaw Puzzles! privacy policy

This policy covers Jigsaw Puzzles! for iPhone and iPad, called Legpuzzels in the Dutch App Store, from version 2.0. The app is made by M2H B.V. in the Netherlands (“M2H”, “we”). Our general privacy policy covers our other games and websites. Nederlands

You don’t need an account. The app fetches its settings from our game service and, unless you turn it off, sends it use statistics and error reports (see below). Playing together, friends and the Puzzle of the Day boards use our room service. Ads come from Google and Unity, purchases go through Apple and RevenueCat, and leaderboards through Game Center. This page says what each of them gets.

The free version shows ads at natural breaks: a few seconds after you finish a puzzle, when you go back to the menu, and in long puzzles when the frame is done and when half the pieces are placed. There are at least three minutes between two ads (five during a puzzle), and the very first moment after you install or update the app shows none. There are no ads while you play with others. When your help for the day is used up, you can choose to watch a video for more. That video only plays when you ask for it.

The ads come from Google AdMob, which also lets Unity Ads bid to show them. In a grown-up’s profile they may be rated up to Mature. In a kid’s profile they are rated for all ages, marked as meant for children and not personalized, and the app never shows the consent message or the tracking question there.

In the European Economic Area, the United Kingdom and Switzerland, Google’s consent message comes first, and no ad is requested before you’ve answered it. You can change or withdraw your choice at any time in the app’s Settings, under Privacy choices.

To show and count ads, AdMob receives your device’s advertising identifier if you allow it, your approximate location derived from your IP address, and how the ads were shown and used. Google handles that under its own privacy policy. When Unity Ads shows the ad, Unity Technologies gets the same kind of data, plus details of your device such as its model, language, screen size and connection, and handles them under its own privacy policy.

The tracking prompt

iOS asks whether the app may track you. That question is only about ads. Say yes and Google and Unity can use your advertising identifier to show you more relevant ads. Say no and you still get ads, just less personal ones. The game works the same either way, and you can change it later in your iPhone’s Settings, under Privacy & Security, Tracking.

Playing together, friends and Puzzle of the Day

These parts of the app use our room service at tables.m2h.nl. It runs on Cloudflare (Cloudflare, Inc.), which stores the data for us and does nothing else with it.

At a shared table, the other players and the service see your name at that table, your color and hand style, and your moves. A table’s record of moves is kept 30 days so its replay can be watched, then deleted. At a public table you appear under a generated name, such as “Calm Otter”, never your profile name.
Friends. When a grown-up profile first uses a friend feature, the app makes a random player ID for it. The service then keeps your profile card (the name you chose, a generated name, your color, your puzzle numbers, best streak and badges), your friend code, your friends, requests and blocks, and while you sit at a table, which table and picture, so friends can join. Your profile name is shown to your friends, to whoever has your friend code, and to the players at a private table you join.
Puzzle of the Day boards. When you finish a daily puzzle, your time goes to the boards with whether you used help, your generated name, your color and the country from your phone’s language settings. The world and country boards show your generated name; the friends board shows your profile name to your friends. Times are deleted 10 days after their day. The moves of a run are checked to make sure the time is real, and not kept. Finishing a daily puzzle also registers a player quietly, with only the generated name and color, until you use a friend feature.

Kids’ profiles send none of this: at a shared table they appear under a generated name, and their daily times stay on the device.

The service keeps no IP addresses. To stop someone from creating thousands of players, it counts new players per address and day by a scrambled code of the address, and forgets that code the next day.

Deleting it. In the app, open Settings (the gear on Home), then Privacy, then Delete my friend profile. That deletes your player, your card and your friends on the service and takes your daily times off the boards. Removing a profile or turning it into a kid’s profile does the same. A player we haven’t heard from for a year is deleted automatically.

Our game service: settings, use statistics and error reports

When the app starts, it fetches its settings from GDT, our own game service at gdt.m2h.nl, which runs on Google Cloud. That lets us change things like how often ads come or which tables are out without an app update.

Your device’s ID for our games. To tell devices apart, the app sends the ID that iOS gives all apps of one developer on one device (the identifier for vendor). It is the same in all M2H games on your device, it is not the advertising identifier, and it changes when you remove all our apps. With it the service keeps a player record: that ID, a random number of its own, the day you started, the app version, the platform, your language and a scrambled code of your address.
Across our games. Because that ID is the same in every M2H game on your device, we can see which of our games are played on it, show you our other games and see whether that works. We don’t share this with anyone, and no other company’s ads use it.
Use statistics. The app counts what happens in the game, such as puzzles started and finished, help, Puzzle of the Day, playing together, ads shown and the looks picked. These counts go out without your ID and we only keep them as totals, to see where players stop and what to improve.
Error reports. When the app hits an error, it sends the error message, the screen it happened on, the app version and the platform, without your ID. We keep them up to 90 days.
Game Center. If you’re signed in to Game Center, the app can link the player ID Apple gives all M2H games (the team player ID) to your player record, checked with Apple, so your record is found again on a new device.

Turn off Help improve the game in Settings and the app sends no use statistics and no error reports, makes no Game Center link, and fetches its settings without your device’s ID. In a kid’s profile the app sends no use statistics, no error reports and no Game Center link; it still fetches its settings. To have your player record deleted, mail us (below).

Anonymous counts

The app counts a few things per day on your device, such as whether an ad was ready when it was due, whether one was shown, and whether the daily reminder was turned on. Once a day it sends those numbers to our room service, without any ID, name or device information. We only keep the day totals of all players together, for 400 days, to see whether ads load in time and what helps players come back.

The daily reminder

If you turn on the daily reminder, your phone shows a notification when Puzzle of the Day is ready. The reminder is scheduled on your phone itself; no server is involved. You can turn it off in the app’s Settings or in your iPhone’s Settings, under Notifications.

Removing ads

You can buy Remove ads in the app. The purchase itself is between you and the App Store. To check it and restore it, the app uses RevenueCat (RevenueCat, Inc., United States), which receives the purchase history for this app and an anonymous ID it makes for your device. It gets no name and no email address, and we use it for nothing else. The app also sends the App Store’s signed record of the purchase to our game service (below), which checks it with Apple and keeps it with your player record, so we can see which purchases are real. It does not do this with Help improve the game off or in a kid’s profile.

Bought Remove ads in the old version of the app? The app finds that purchase in the App Store and keeps it.

Game Center

Signed in to Game Center? Then finishing a puzzle earns Apple’s achievement for its size, and finishing a Puzzle of the Day sends your points for the week to Apple’s weekly leaderboard. That’s Apple’s own service, under Apple’s privacy policy. We see the leaderboard, not your Apple account. Kids’ profiles send nothing there.

Your photos and saves

Puzzles you make from your own photos, your saved puzzles, players and settings stay on your device. Your own photos are never uploaded; at a shared table only pictures from the app’s library are used. The app asks for the camera only when you take a photo to make a puzzle, and for your photo library only when you save the card of a finished puzzle.

Your device’s own backup, to iCloud or a computer, includes the app’s data, as it does for every app. Deleting the app deletes everything it stored on your device. Your friend profile and daily times on the service stay until you delete them as described above, or until they expire.

Contact us

Contact us in the app’s Settings opens your mail app with a message to [email protected]. It includes the app version, the kind of device and when the last ad was shown, so we can look into what you report. You see the whole message before you send it.

Why we’re allowed to, and where it goes

Personalized ads rest on your consent: Google’s consent message where the law asks for it, and the iOS tracking prompt for your advertising identifier. Playing together, friends and the boards are part of the service you ask for when you use them. The anonymous counts, the game service’s settings, use statistics, error reports and the link between our own games serve our legitimate interest in an app that works, gets better and can point you to our other games; you can turn that off in Settings, under Help improve the game. The Remove ads check rests on the purchase you made. Game Center is between you and Apple.

Google (also for Google Cloud, where our game service runs), Unity, Cloudflare and RevenueCat are based in the United States. Transfers to them are covered by the EU-US Data Privacy Framework or the EU standard contractual clauses.

Children

The app is rated 4+. A kid’s profile gets ads for all ages only, not personalized, with no tracking question and no purchases. Leaving a kid’s profile, and adding or changing players, needs a sum only a grown-up can answer. Kids’ profiles have no friends, no profile name online and no online daily boards. The app has no chat.

Your rights and contact

You can ask us to see, correct or delete personal data we hold about you, and to have your purchase record removed from RevenueCat. Mail [email protected] and we’ll answer within a month. For the ads, Google’s consent settings in the app and Google’s own tools are the quickest route.

If you think we’re handling your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the one in the EU country where you live.

M2H B.V.
The Netherlands
Chamber of Commerce: 66055210