Ruban Pop — Privacy Policy
Effective date: 2026-10-20
This policy explains what information is processed when you play Ruban Pop (the "Game"), an iOS puzzle game published by 9506-6320 QUÉBEC INC., operating the "WhiskerWorks" games ("we", "us"), Québec, Canada. Contact: [email protected]. WhiskerWorks publishes other games; each game has its own privacy policy. The games never share game data with each other; the only thing they can share is the optional WhiskerWorks account described in section 3b.
1. Short version
- No chat, no leaderboard, and an account is optional. We never ask for your name, phone number or location. If you choose to sign in with Apple or Google (Settings > Account & cloud save), your progress is also saved in the cloud so you can get it back on another device.
- Your progress is saved on your device; it is sent to our cloud database only if you sign in.
- One WhiskerWorks account: the same sign-in works in the WhiskerWorks games that offer an account. Each game keeps its own separate cloud save. Deleting your account in Ruban Pop deletes the account and the cloud saves linked to it.
- The Game is free and shows ads, provided by Unity LevelPlay (Unity Ads and ironSource Ads). These partners receive device and ad-interaction data to show, measure and protect ads.
- The advertising identifier (IDFA) is used only if you allow tracking in Apple's App Tracking Transparency prompt.
- Purchases are processed by Apple. We never see your card or your payment details.
- We use Google Analytics for Firebase to understand how the Game is played (game events) and Firebase Remote Config to adjust ad frequency and a few settings without an update (section 6).
- No crash-reporting service, no attribution (MMP) service is enabled in the current version.
2. Information stored on your device
The Game stores locally on your device: your progress (levels solved and their stars, worlds opened, stars, Mercis — the in-game currency —, booster stock, the surprises you found, their normal / shiny / golden version, the album, the shelf, the room and its tasks, the recipients' tastes and friendship, the calendar, the weekly promise, the packages that ripened, your records, purchases owned), the level in progress (the package, the ribbons already gone, the hearts, the chute, the hints you have seen, the windows opened, the side you were looking at, the notebook and your bet) so you can resume it, your settings (sound, music, vibration, language, bigger patterns, reduced animation, tab size), your privacy choices, and a random installation identifier (the "Player ID" shown at the bottom of Settings). If you are not signed in, we do not receive this data. It is deleted when you delete the Game (or with Settings > Reset progress). Depending on your iOS settings it may be included in your own iCloud/device backup, which is governed by Apple.
3. Information we process
We do not operate our own game server. We receive personal data in three cases: (a) when you email support (your email address, your message and anything you choose to include, such as your Player ID or a screenshot), used only to answer you and kept no longer than 24 months; (b) when you sign in (section 3b); (c) analytics events (section 6).
3b. Optional WhiskerWorks account and cloud save (Firebase Authentication + Cloud Firestore, provided by Google)
- What: if you choose Sign in with Apple or Sign in with Google, Firebase Authentication creates an account identifier (Firebase user ID) linked to your Apple or Google sign-in, and may receive the email address that Apple/Google shares (with Apple you can hide it with "Hide My Email") and your sign-in provider. Your Ruban Pop save (progress, stars, Mercis, purchases owned, album, shelf, room, themes, calendar, records, settings — not the level in progress) is stored in Cloud Firestore in a document that only your account can read or write, with the date of the last update, the app version and a summary (total stars, Mercis, levels solved).
- Shared WhiskerWorks account: the account belongs to the WhiskerWorks Firebase project, shared by the WhiskerWorks games that offer an account. If you sign in with the same Apple or Google account in several of these games, they use the same account identifier; each game stores its save in its own separate place and Ruban Pop never reads another game's save.
- Why: to back up your progress and restore it on another device (performance of a contract). Not used for advertising, not shared with ad partners, not used to track you.
- Where / who: Google LLC / Google Ireland (Firebase), cloud save stored in Google Cloud's United States multi-region; https://firebase.google.com/support/privacy
- How long: until you delete your account. Settings > Account & cloud save > Delete account (you will be asked to sign in once more to confirm) deletes, immediately, your Ruban Pop cloud save, the cloud saves of other WhiskerWorks games linked to this account if there are any, and your WhiskerWorks account; Apple sign-in tokens are also revoked. Your progress stays on your device. Signing out stops the sync without deleting anything. You can also ask us to delete your account and cloud saves at [email protected]. Backups held by Google are purged on Google's schedule.
4. Advertising (Unity LevelPlay)
4.1 What is collected and by whom
When an ad is requested or shown, the Unity LevelPlay SDK and the ad networks it mediates collect, directly from your device:
- Device identifiers: the IDFA only if you allowed tracking; the identifier for vendors (IDFV), SDK-generated identifiers and the Game's random Player ID (used as the ad user identifier, for example to deliver rewards).
- Device and connection data: device model, OS version, language, screen size, connection type, IP address (used to infer country / coarse location).
- Ad data: which ads were requested, shown, clicked or rewarded; ad and SDK performance data; impression-level data (ad network, format, placement, country, estimated revenue). The Game may read impression data to manage how often ads appear.
- If you report an ad to a network, the content of your report.
No account information (Firebase user ID, email) is passed to the ad partners. Unity's published disclosures: https://docs.unity.com/en-us/grow/levelplay/platform/legal-resources/apple-privacy-questionnaire and https://docs.unity.com/en-us/ads-ios/4.20.0/privacy/developer-consent/disclosures/apple-privacy-survey
4.2 Why
To display ads (including optional rewarded ads that you choose to watch: double the Mercis of a level, continue after a failure, a few Mercis from the shop, one free undo), to cap how often ads appear (interstitial ads are shown only between two levels, after a victory, never during a level, and never after a failure, a heavy package, the daily gift or the tutorial), to measure ad delivery and earnings, to prevent fraud and — only with your consent where the law requires it — to personalise ads.
4.3 Who receives it
These partners act under their own privacy policies and may be located outside your country (e.g. in the United States), relying on safeguards such as the EU Standard Contractual Clauses as described in their policies.
4.4 Your choices
- Tracking (iOS): if you choose "Ask App Not to Track", the IDFA is not shared. You can change this at any time in iOS Settings > Privacy & Security > Tracking. Refusing never blocks any part of the Game.
- EEA / UK / Switzerland: we ask for your consent before personalised ads. Without consent you still see ads, but they are not personalised.
- US state privacy laws (e.g. California): you can opt out of the "sale" or "sharing" of personal information for targeted advertising.
- You can change these choices at any time in Settings > Privacy choices in the Game (withdrawing consent is as easy as giving it). You can also tap the privacy/info icon shown in many ads.
- Report an ad: use Settings > Report an ad or email [email protected] with a description or screenshot of the ad.
- Remove Ads: the "Remove Ads" purchase (also included in the "Remove Ads + 3,000" bundle) removes interstitial and banner ads; rewarded ads you choose to watch remain available.
5. In-app purchases
Purchases are made through Apple's App Store; Apple processes the payment under its own privacy policy (https://www.apple.com/legal/privacy/). We never receive your name, Apple Account or payment card. The Game receives a transaction record (product, transaction identifier, receipt) to deliver and restore what you bought. The purchase plugin (Unity IAP) may process technical data such as an installation identifier, session identifier, device information and country to operate purchases — see https://docs.unity.com/en-us/iap/privacy-and-consent/overview. Refunds are handled by Apple: https://reportaproblem.apple.com. Virtual items and Mercis have no monetary value and cannot be transferred outside the Game.
6. Analytics and remote settings
- Google Analytics for Firebase (Google): the Game sends game events (for example level started, solved or abandoned with world, level, time, stars, hearts lost, ribbons gone through the chute, hints seen, windows opened, bet placed and result, the surprise found and its version, the recipient it was given to and their reaction, album, shelf, room and task events, calendar, weekly promise, ripening packages, tutorial steps, ad and purchase events, screens and settings used, days since install, whether you pay, whether ads are removed, your ATT answer and your language) plus device and app information (model, OS, language, country derived from IP, app version) and the Firebase app-instance ID. It does not receive your name, your email, your Player ID or the IDFA through the Game. Purpose: understand and improve the Game (legitimate interest / consent where required). Your ads choice is passed to Firebase consent mode (ad storage / ad user data / ad personalisation denied if you declined personalised ads). Event data is kept for up to 14 months (Google Analytics data-retention setting). https://firebase.google.com/support/privacy
- Firebase Remote Config (Google): at launch the Game downloads ad-frequency settings and a few game settings (for example when the tracking prompt may appear); this uses the Firebase installation ID and basic device data. No game data is sent. Levels are never changed remotely: the levels are built into the Game.
- Apple's privacy-preserving SKAdNetwork may tell an advertiser that an install came from an ad, without identifying you.
Analytics and Remote Config requests go to Google's Firebase servers; Google keeps its server logs according to its own retention rules (https://firebase.google.com/support/privacy and https://policies.google.com/privacy).
7. Notifications
If you allow notifications (the Game asks only after you have solved a few levels, never at first launch), it schedules local notifications on your device (for example a reminder when a package has ripened). They are created on the device; no notification token is sent to us, and there is at most one reminder per day. You can turn them off in iOS Settings, or simply decline the in-game card, at any time.
8. Children
The Game is a puzzle for teens and adults. It is not directed to children under 13 and is not in the App Store Kids category. We do not knowingly collect personal information from children under 13 (or under the age of digital consent in your country — 14 in Québec for consent to the processing of personal information, 15 in France, 13–16 elsewhere in the EU). Because the Game may also appeal to younger players:
- we never ask for names, contact details, photos or location to play, the account is optional, and there is no chat and no user-generated content;
- if your device has Screen Time restrictions, they apply to the Game and to any purchases;
- ads are requested with content restrictions intended to keep them suitable for the Game's age rating, and you can report any unsuitable ad;
- if you are a parent and believe your child's personal data has been processed, contact [email protected] and we will help have it deleted.
9. Legal bases (EEA/UK)
- Performance of a contract: running the Game, delivering and restoring purchases, the optional account and cloud save.
- Consent: personalised ads, tracking (ATT), access to device information for advertising where required, notifications.
- Legitimate interests: non-personalised ads to fund a free game, ad frequency control, game analytics and remote settings (Firebase), fraud prevention and security, answering support requests.
10. Your rights
Depending on where you live — for example the Act respecting the protection of personal information in the private sector as amended by Law 25 in Québec, PIPEDA in the rest of Canada, the GDPR in the EEA/UK, the CCPA/CPRA in California — you may have the right to be informed, to access, correct, delete or port your personal data, to object to or restrict processing, to withdraw consent at any time, to opt out of sale/sharing, and not to be discriminated against for using these rights. Game data on your device is deleted with the Game (or with Settings > Reset progress). Your account and cloud saves are deleted in the Game (Settings > Account & cloud save > Delete account) or on request to [email protected]. For data held by ad partners, use the in-game privacy choices, the ad's privacy icon, or the partners' policies above; we will also help if you write to [email protected]. We answer within 30 days. You may complain to your data-protection authority (in Québec: Commission d'accès à l'information, https://www.cai.gouv.qc.ca; in Canada: Office of the Privacy Commissioner, https://www.priv.gc.ca; in France: CNIL, https://www.cnil.fr). Requests are handled by our person in charge of the protection of personal information (section 13).
11. Security, retention and transfers
Data stored by the Game stays on your device, except the cloud save of signed-in players (kept until account deletion, access restricted to the account owner by database security rules, encrypted in transit and at rest by Google). Analytics data is kept as stated in section 6. Support emails are kept as stated in section 3. Data held by ad partners and by Apple is retained according to their policies. Google and our other partners may process data outside Québec and Canada (mainly in the United States); before such transfers we assess that the information receives adequate protection, as Law 25 requires.
12. Changes
We will update this page when the Game's data practices change and change the effective date above. Significant changes will also be announced in the Game.
13. Contact and person in charge
9506-6320 QUÉBEC INC. (WhiskerWorks) — Québec, Canada — [email protected]
Person in charge of the protection of personal information (Québec, Law 25): Mohamed Touihri, [email protected].
Support · Privacy · Confidentialité · Terms · Conditions