Ostatnia aktualizacja: 28 October 2026

Privacy Policy

This policy explains what data Innovate Media (“we”, “us”) collects when you use our mobile games (Block Puzzle, Wayfill, Ball Sort, Equatra and Durak, the “Games”) and the website innovate-media.com, why we collect it, who we share it with and what choices you have.

We are an independent studio based in Israel. Contact for privacy matters: [email protected].

1. Summary

We do not ask for your name, email address, contacts, photos or precise location.
The Games show ads. Ads are served by AppLovin MAX and its partner networks; personalized ads are shown only where you have agreed to it (EU/UK consent form, Apple App Tracking Transparency).
We collect anonymous gameplay statistics and crash reports to fix bugs and balance the Games.
Wayfill keeps your puzzle progress on our server under a random player ID, with no sign-in required; you can delete it from the game’s Settings.
Durak online mode needs an account (guest, Google or Apple). You can delete it at any time from the app or at innovate-media.com/delete-account.
Virtual coins have no real-world value and cannot be cashed out.

2. Data we collect

Data	Where it comes from	Why	Who receives it	How long
Install identifier — a random ID created when the Game is installed	the Game	analytics, support, fraud prevention	our server; Firebase	13 months after last activity
Device information — model, operating system version, app version, language, country (from device locale or IP address), screen size	the Game / our server	compatibility, localization, ads	Firebase; AppLovin MAX and enabled ad networks	13 months
Advertising identifier (Google Advertising ID / Apple IDFA) — only where you allow it	ad SDKs	personalized ads, frequency capping, ad fraud prevention	AppLovin MAX and enabled ad networks (see §5)	according to each network’s policy
Gameplay events — levels started/completed, matches played, ads shown, boosters used, purchases made	the Game	product analytics, game balance, economy, fraud	our server; Firebase Analytics	13 months raw; aggregated statistics indefinitely
Crash logs — stack traces, device state at the time of a crash	Firebase Crashlytics	stability	Firebase	90 days
Purchase receipts and order IDs	Google Play / App Store via the Game	granting what you bought, refunds, support, fraud	our server; Google; Apple	7 years (tax and accounting law)
Wayfill progress — random player ID, solved puzzles with times and stars, Daily streak, settings	the Game	cloud save, the Daily’s average time and ranking, verifying solves	our server	until you delete it from the game’s Settings; 13 months after last activity otherwise
Durak account — sign-in provider’s subject ID (Google / Apple), nickname, avatar choice, country, friends list, coin balance, match history, rating	you / the sign-in provider	running the online game	our server	until you delete the account; anonymized 30 days after a deletion request
Push notification token	Firebase Cloud Messaging / Apple	invites from friends, optional reminders	Firebase; Apple	until you log out or uninstall
Support emails	you	answering your request	our mailbox	2 years
IP address	server logs	security, abuse prevention, country detection	our server (behind Cloudflare)	30 days

We do not collect: your real name or email address (Google / Apple sign-in gives us only a pseudonymous ID unless you choose to share more), contacts, precise location, photos, microphone, or free-text chat (Durak chat uses predefined phrases and emoji only).

3. Why we process data (legal bases)

Where the GDPR or UK GDPR applies, we rely on:

Performance of a contract — providing the Games, accounts, purchases, multiplayer.
Legitimate interests — analytics to improve the Games, security, fraud prevention, non-personalized advertising that funds the free Games.
Consent — personalized advertising, and the advertising identifier where the law requires consent. You can withdraw consent at any time in the Game’s Settings → Privacy options.
Legal obligation — keeping purchase records.

4. Advertising

The Games are free and supported by ads: banners, interstitial ads between levels or matches, and rewarded videos that you choose to watch for a bonus. Ads are mediated by AppLovin MAX. Depending on your region and choices, ad networks may receive your advertising identifier, IP address, device information and coarse location (country/region) to select and measure ads.

EU / EEA / UK / Switzerland: on first launch you see a consent form (Google User Messaging Platform / AppLovin CMP). You can decline personalized ads and still play; you will see non-personalized ads instead.
iOS: we ask for permission under App Tracking Transparency. If you decline, no cross-app tracking identifier is shared.
US state laws (CCPA/CPRA and similar): you can opt out of the “sale”/“sharing” of personal information for targeted advertising in Settings → Privacy options. We do not knowingly sell data of users under 16.
Remove Ads purchase removes banners and interstitials; rewarded videos remain available by your choice.

5. Third parties

We share data only with providers needed to run the Games:

Google Firebase (Analytics, Crashlytics, Remote Config, Cloud Messaging, Authentication) — Google LLC. Privacy
AppLovin MAX (ad mediation) and the AppLovin network — AppLovin Corp. Privacy
Google AdMob — Google LLC. Privacy
Further ad networks may be enabled over time: Meta Audience Network, Unity Ads, Mintegral, Liftoff, Moloco, InMobi, Digital Turbine. The current list is always shown in the consent form and in Settings → Privacy options → Partners.
Google Play Billing / Apple StoreKit — payments are handled by the stores; we never see your card details.
Google Sign-In / Sign in with Apple — optional account providers for Durak.
Hetzner Online GmbH (Germany) — hosting of our server and database; Cloudflare, Inc. — DNS, DDoS protection and cookieless website analytics.

Each provider processes data under its own privacy policy and, where applicable, a data-processing agreement with us.

6. International transfers

We are located in Israel, which the European Commission recognises as providing adequate data protection. Our servers are in Germany (EU). Some providers (Google, AppLovin, Cloudflare) process data in the United States under Standard Contractual Clauses or the EU–US Data Privacy Framework.

7. Children

The Games are intended for players aged 13 and over (16 and over for personalized ads where the law sets that age). We do not knowingly collect personal data from children under 13. If you believe a child has provided data to us, contact [email protected] and we will delete it. The Games do not contain real-money gambling.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with a supervisory authority (in Israel: the Privacy Protection Authority; in the EU: your national data-protection authority).

Delete your Wayfill progress: in the app, Settings → Delete my account and data.
Delete your Durak account and data: in the app, Settings → Account → Delete account, or follow the steps at innovate-media.com/delete-account.
Change ad consent: Settings → Privacy options in any Game.
Reset your advertising identifier: in your device’s system settings.
Anything else: email [email protected]. We reply within 30 days.

9. Security

Data in transit is encrypted (TLS). Our server accepts only validated events and authenticated requests, access to production systems is limited to the studio’s founders, and backups are encrypted. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.

10. Changes

We will post changes on this page and update the “Last updated” date. For material changes we will also show a notice in the Games.

11. Contact

Innovate Media, Israel · [email protected] · [email protected]

Wiążąca jest wersja angielska; tłumaczenia podajemy dla wygody.