PACK IT! Privacy Policy
In short: you can play PACK IT! without giving us your name or email. The game keeps your progress, makes an anonymous account so your progress can be saved online, and sends anonymous play statistics and crash reports that help us make the game better. We do not sell your data and we do not show you targeted ads. You can switch the play statistics off, and you can delete your account at any time in the game.
1. Who is responsible
The controller responsible for your data under the EU General Data Protection Regulation (GDPR) is:
Hasan Gökay Yaranoglu – HGY Design
Lindenstraße 8
61231 Bad Nauheim, Germany
Email: hello@hgydesign.com
2. What we collect, and why
Your game progress
Your trips, coins, stars and settings are saved on your phone. A copy is also saved online in your account (see below), so your progress is not lost and can be moved to a new phone. Legal basis: providing the game you asked for (Art. 6(1)(b) GDPR).
Your account
When you first open the game we create an anonymous account for you. It is a random identifier; it contains no name, email or phone number.
If you choose to connect Apple, Google or Facebook (in Settings), we receive from that service the identifier of your account there and, depending on what you allow, your email address and name. We use them only to sign you in and to keep your progress safe. Legal basis: Art. 6(1)(b) GDPR.
Play statistics
To improve the puzzles and balance the levels, the game sends anonymous statistics about how each trip went: which trip, how long it took, the number of moves, retries and hints, the app version and the kind of device (for example "iOS"). These are linked to a random install identifier, not to your name or account. You can switch them off at any time in Settings → Share play data. Legal basis: our legitimate interest in improving the game (Art. 6(1)(f) GDPR); you can object at any time by switching them off.
Crash reports
If the game crashes, it sends a short report: the error message and technical trace, the screen it happened on, the app version and the operating system version. Crash reports contain no identifier of you or your device. Legal basis: our legitimate interest in a game that works (Art. 6(1)(f) GDPR).
Protection against bots
Before an account is created, an invisible check by Cloudflare Turnstile confirms that a real device is opening the game, so that accounts cannot be mass-created by bots. Nothing is shown to you. Turnstile processes technical information about your device and connection as described in the Cloudflare Turnstile Privacy Addendum. Legal basis: our legitimate interest in security (Art. 6(1)(f) GDPR).
Purchases
In-app purchases are handled entirely by Apple (App Store) or Google (Google Play). We never see your payment details; we only learn which item was bought so we can give it to you.
What we do not do
- We do not sell or rent your data.
- We do not show personalised ads and do not track you across other apps or websites.
- We do not use your data to make automated decisions about you.
3. Who processes your data for us
| Service | What for | Where |
|---|---|---|
| Supabase Inc. | Accounts, online saves, play statistics, crash reports | Servers in the EU (Ireland) |
| Cloudflare Inc. | Invisible bot protection (Turnstile) | Global network |
| Expo (650 Industries Inc.) | Delivering game updates to your phone | USA |
| Apple, Google, Meta | Only if you choose to sign in with them | Their own terms apply |
Where data is processed outside the EU, this is based on the EU Commission's adequacy decision for the EU–US Data Privacy Framework or on Standard Contractual Clauses.
4. How long we keep it
- Account and online save: until you delete your account.
- Anonymous accounts never used: deleted automatically after 30 days without a saved game.
- Play statistics and crash reports: at most 24 months.
5. Deleting your data
You can delete your account and everything saved online yourself, at any time:
In the game: Settings → Account → Delete my account, then confirm.
This deletes your account and your online save immediately and for good, including any connection to Apple, Google or Facebook.
You can also email hello@hgydesign.com with the subject "Delete my data". If you signed in with Facebook, you can also remove PACK IT! in your Facebook settings under Apps and Websites. Play statistics cannot be linked to you, so they cannot be picked out and deleted individually; you can stop them in Settings.
6. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable form. To use any of these rights, email hello@hgydesign.com. You also have the right to complain to a data protection supervisory authority.
7. Children
PACK IT! is a puzzle game for a general audience. It asks no one for a name, email or age. We do not knowingly collect personal information from children under 13 (or under 16 in the EU) beyond the anonymous game data described above; signing in with Apple, Google or Facebook is subject to those services' own age rules. If you believe a child has given us personal information, contact us and we will delete it.
8. Changes
If this policy changes, we will update it here and change the date at the top. Important changes will also be shown in the game.
Legal notice (Impressum)
Hasan Gökay Yaranoglu – HGY Design
Lindenstraße 8
61231 Bad Nauheim, Germany
Email: hello@hgydesign.com
Responsible for content under § 18 (2) MStV: Hasan Gökay Yaranoglu, address as above.