Оновлено: 28 October 2026
Privacy Policy
This policy explains what data Innovate Media (“we”, “us”) collects when you use our mobile games (Block Puzzle, Wayfill, Ball Sort, Equatra and Durak, the “Games”) and the website innovate-media.com, why we collect it, who we share it with and what choices you have.
We are an independent studio based in Israel. Contact for privacy matters: [email protected].
1. Summary
- We do not ask for your name, email address, contacts, photos or precise location.
- The Games show ads. Ads are served by AppLovin MAX and its partner networks; personalized ads are shown only where you have agreed to it (EU/UK consent form, Apple App Tracking Transparency).
- We collect anonymous gameplay statistics and crash reports to fix bugs and balance the Games.
- Wayfill keeps your puzzle progress on our server under a random player ID, with no sign-in required; you can delete it from the game’s Settings.
- Durak online mode needs an account (guest, Google or Apple). You can delete it at any time from the app or at innovate-media.com/delete-account.
- Virtual coins have no real-world value and cannot be cashed out.
2. Data we collect
| Data | Where it comes from | Why | Who receives it | How long |
|---|---|---|---|---|
| Install identifier — a random ID created when the Game is installed | the Game | analytics, support, fraud prevention | our server; Firebase | 13 months after last activity |
| Device information — model, operating system version, app version, language, country (from device locale or IP address), screen size | the Game / our server | compatibility, localization, ads | Firebase; AppLovin MAX and enabled ad networks | 13 months |
| Advertising identifier (Google Advertising ID / Apple IDFA) — only where you allow it | ad SDKs | personalized ads, frequency capping, ad fraud prevention | AppLovin MAX and enabled ad networks (see §5) | according to each network’s policy |
| Gameplay events — levels started/completed, matches played, ads shown, boosters used, purchases made | the Game | product analytics, game balance, economy, fraud | our server; Firebase Analytics | 13 months raw; aggregated statistics indefinitely |
| Crash logs — stack traces, device state at the time of a crash | Firebase Crashlytics | stability | Firebase | 90 days |
| Purchase receipts and order IDs | Google Play / App Store via the Game | granting what you bought, refunds, support, fraud | our server; Google; Apple | 7 years (tax and accounting law) |
| Wayfill progress — random player ID, solved puzzles with times and stars, Daily streak, settings | the Game | cloud save, the Daily’s average time and ranking, verifying solves | our server | until you delete it from the game’s Settings; 13 months after last activity otherwise |
| Durak account — sign-in provider’s subject ID (Google / Apple), nickname, avatar choice, country, friends list, coin balance, match history, rating | you / the sign-in provider | running the online game | our server | until you delete the account; anonymized 30 days after a deletion request |
| Push notification token | Firebase Cloud Messaging / Apple | invites from friends, optional reminders | Firebase; Apple | until you log out or uninstall |
| Support emails | you | answering your request | our mailbox | 2 years |
| IP address | server logs | security, abuse prevention, country detection | our server (behind Cloudflare) | 30 days |
We do not collect: your real name or email address (Google / Apple sign-in gives us only a pseudonymous ID unless you choose to share more), contacts, precise location, photos, microphone, or free-text chat (Durak chat uses predefined phrases and emoji only).
3. Why we process data (legal bases)
Where the GDPR or UK GDPR applies, we rely on:
- Performance of a contract — providing the Games, accounts, purchases, multiplayer.
- Legitimate interests — analytics to improve the Games, security, fraud prevention, non-personalized advertising that funds the free Games.
- Consent — personalized advertising, and the advertising identifier where the law requires consent. You can withdraw consent at any time in the Game’s Settings → Privacy options.
- Legal obligation — keeping purchase records.
4. Advertising
The Games are free and supported by ads: banners, interstitial ads between levels or matches, and rewarded videos that you choose to watch for a bonus. Ads are mediated by AppLovin MAX. Depending on your region and choices, ad networks may receive your advertising identifier, IP address, device information and coarse location (country/region) to select and measure ads.
- EU / EEA / UK / Switzerland: on first launch you see a consent form (Google User Messaging Platform / AppLovin CMP). You can decline personalized ads and still play; you will see non-personalized ads instead.
- iOS: we ask for permission under App Tracking Transparency. If you decline, no cross-app tracking identifier is shared.
- US state laws (CCPA/CPRA and similar): you can opt out of the “sale”/“sharing” of personal information for targeted advertising in Settings → Privacy options. We do not knowingly sell data of users under 16.
- Remove Ads purchase removes banners and interstitials; rewarded videos remain available by your choice.
5. Third parties
We share data only with providers needed to run the Games:
- Google Firebase (Analytics, Crashlytics, Remote Config, Cloud Messaging, Authentication) — Google LLC. Privacy
- AppLovin MAX (ad mediation) and the AppLovin network — AppLovin Corp. Privacy
- Google AdMob — Google LLC. Privacy
- Further ad networks may be enabled over time: Meta Audience Network, Unity Ads, Mintegral, Liftoff, Moloco, InMobi, Digital Turbine. The current list is always shown in the consent form and in Settings → Privacy options → Partners.
- Google Play Billing / Apple StoreKit — payments are handled by the stores; we never see your card details.
- Google Sign-In / Sign in with Apple — optional account providers for Durak.
- Hetzner Online GmbH (Germany) — hosting of our server and database; Cloudflare, Inc. — DNS, DDoS protection and cookieless website analytics.
Each provider processes data under its own privacy policy and, where applicable, a data-processing agreement with us.
6. International transfers
We are located in Israel, which the European Commission recognises as providing adequate data protection. Our servers are in Germany (EU). Some providers (Google, AppLovin, Cloudflare) process data in the United States under Standard Contractual Clauses or the EU–US Data Privacy Framework.
7. Children
The Games are intended for players aged 13 and over (16 and over for personalized ads where the law sets that age). We do not knowingly collect personal data from children under 13. If you believe a child has provided data to us, contact [email protected] and we will delete it. The Games do not contain real-money gambling.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with a supervisory authority (in Israel: the Privacy Protection Authority; in the EU: your national data-protection authority).
- Delete your Wayfill progress: in the app, Settings → Delete my account and data.
- Delete your Durak account and data: in the app, Settings → Account → Delete account, or follow the steps at innovate-media.com/delete-account.
- Change ad consent: Settings → Privacy options in any Game.
- Reset your advertising identifier: in your device’s system settings.
- Anything else: email [email protected]. We reply within 30 days.
9. Security
Data in transit is encrypted (TLS). Our server accepts only validated events and authenticated requests, access to production systems is limited to the studio’s founders, and backups are encrypted. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.
10. Changes
We will post changes on this page and update the “Last updated” date. For material changes we will also show a notice in the Games.
11. Contact
Innovate Media, Israel · [email protected] · [email protected]
Юридично обов’язковою є англійська версія; переклади наведено для зручності.