MixmeleonPrivacy Policy
Mixmeleon is a mobile game for Android and iOS for children and adults. It does not require an account or sign-in. This policy explains what data is processed when you play, why, and who receives it. If the Polish and English versions differ, the Polish version prevails. [confirm with lawyer]
Data controller
The controller of your personal data is [publisher’s full name or company name], [address], [tax ID, if applicable] — the publisher of the game on Google Play and the App Store, trading as Wumiko (“we”).
For any privacy matter, email privacy@wumiko.games [confirm address] or use the Help & contact page. We have not appointed a data protection officer.
What data we process
- Game progress — level number, coins, finished pictures and settings (such as color symbols). Stored only on your phone; it is not sent to our servers. It is removed when you uninstall the game or clear its data.
- Age — on first launch the game asks for your birth year and month. The answer stays on your phone and is never sent anywhere; the game only uses it to choose a mode: child (under 13), teen (13–17) or adult. On Android the game may also read an age signal from Google Play (Age Signals), e.g. that the Google account is supervised by a parent or belongs to a minor — such a signal takes priority over the on-screen answer. Until you answer, the game treats you as a child. Details in Children.
- Ads — the game shows rewarded ads (you choose to watch them, e.g. for an extra cup) and full-screen ads between levels. For adults they are served by Google AdMob and AppLovin MAX and the ad networks they use through mediation (listed below); for children, only by Google AdMob, as described in Children. The ad libraries on your phone collect: your device’s advertising ID (Android Advertising ID; on iOS the IDFA, only if you allow it; never in child mode), publisher-scoped app identifiers (App Set ID, IDFV), IP address (which can reveal approximate location), device model and OS, language, ad impressions and taps, and diagnostic data. They use it to show ads, cap frequency, measure and bill ads and prevent fraud — and, for adults who consent, to tailor ads to their interests. Players under 18 only see non-personalized ads.
- Consent — in the European Economic Area, the UK and Switzerland we ask adults for consent before the first ad through Google’s consent platform (User Messaging Platform, IAB TCF compliant). Your choice is stored on your phone and passed to ad partners. On iOS the system also asks adults whether they allow tracking (App Tracking Transparency). Children and teens never see the consent form or the tracking prompt — their ads are never personalized anyway.
- Analytics — Firebase Analytics (Google) records in-game events such as starting and finishing a level, using a rescue, watching an ad or making a purchase, together with an app instance ID, device model, OS and game version, language and country (derived from IP address). This shows us which levels are too hard and where the game gets stuck. Without your consent, Analytics does not use data for advertising, and for children and teens it never does. In child mode Analytics runs without the advertising ID.
- Remote settings — Firebase Remote Config downloads game settings (e.g. ad frequency, coin prices) using a Firebase installation ID.
- In-app purchases — payments are handled by Google Play and the App Store; we never see your card details. We receive transaction details (product, purchase ID and time, status) to grant what you bought, such as ad removal, and to restore it after reinstalling. In child mode every purchase goes through a parental gate in the game.
- Contacting us — if you email us, we process your email address, the message and anything you attach (e.g. phone model, screenshot).
The game does not request access to your location, contacts, photos, camera or microphone, and does not collect your name or email address.
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Running the game, saving progress, granting and restoring purchases | performance of a contract — Art. 6(1)(b) |
| Personalized ads (adults only), storing and reading information on your device for advertising, advertising signals in Firebase Analytics | consent — Art. 6(1)(a); access to the device — Art. 399 of the Polish Electronic Communications Law |
| Non-personalized ads that keep the game free; ad measurement and fraud prevention | legitimate interests — Art. 6(1)(f) |
| Analytics without advertising, remote settings, fixing bugs | legitimate interests — Art. 6(1)(f) (improving the game) [lawyer to confirm: consent or legitimate interests] |
| Adapting the game to the player’s age: ad and analytics mode, parental gate for purchases | legal obligation — Art. 6(1)(c) together with child-protection rules (incl. Art. 8 GDPR); legitimate interests — Art. 6(1)(f) |
| Answering messages, handling complaints | legitimate interests — Art. 6(1)(f) |
| Keeping purchase records for tax and accounting | legal obligation — Art. 6(1)(c) |
We do not sell personal data for money. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Personalized ad selection is done by ad partners, and only with your consent.
How to change your ad consent
- In the game (adults): [Settings → Ad privacy] reopens Google’s consent form. You can withdraw consent at any time; this does not affect processing before withdrawal.
- Android: Settings → Google → All services → Ads — delete or reset your advertising ID.
- iOS: Settings → Privacy & Security → Tracking — turn off tracking for Mixmeleon.
After withdrawing consent you will still see ads, but they will not be personalized. Players under 18 only see non-personalized ads, whatever the settings.
Recipients
- Google Ireland Ltd. and Google LLC — Firebase Analytics and Remote Config as our processor; Google AdMob, Google’s consent platform and Google Play as independent controllers. Google Privacy Policy, how Google uses data from partner apps.
- AppLovin Corporation — AppLovin MAX ad mediation, for adults only [13–17: decision in MVP]; independent controller. AppLovin Privacy Policy.
- Mediated ad networks — [list the enabled networks, e.g. Meta Audience Network, Unity Ads, ironSource, Mintegral, Pangle — with links to their policies]. Each is an independent controller and receives data only when an ad is served through AppLovin MAX.
- Apple Inc. — App Store and payments on iOS, independent controller.
We disclose data to public authorities only where the law requires it.
Transfers outside the EEA
Google, AppLovin and some ad networks process data in the United States and other countries outside the European Economic Area. Transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework, for participating companies) or the Commission’s Standard Contractual Clauses. Email us for a copy of these safeguards.
How long we keep data
- Game progress and birth year and month: on your phone until you uninstall the game or clear its data.
- Firebase Analytics: event and user data — [2 or 14] months after last activity (a setting in the Google Analytics console).
- Purchase records: as long as tax and accounting laws require (usually 5 years from the end of the year of purchase).
- Correspondence: until the matter is resolved and for one year after, so we can show how it was handled.
- Data held by partners acting as independent controllers (Google, AppLovin, ad networks, Apple): according to their policies.
Your rights
You have the right to access your data (Art. 15 GDPR), rectify it (Art. 16), erase it (Art. 17), restrict processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time.
Because the game has no accounts, we cannot link data to a specific person on our own. To exercise your rights, email us — we will help you find the app instance ID or advertising ID your request relates to. A parent or guardian exercises these rights on a child’s behalf. We reply within one month.
You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in the country where you live or work.
Notice for US residents
Sharing data with ad partners for interest-based advertising may count as a “sale” or “sharing” of personal information under some state laws (e.g. California). You can opt out by turning off personalization in the game’s ad privacy settings, by disabling your phone’s advertising ID, or by emailing us. We never share data of players under 18 for interest-based advertising. We will not treat you differently for exercising these rights.
Children
Mixmeleon is a game for children (from age 6) and adults and takes part in the Google Play Families program. The game has no accounts, no chat and no way for players to contact each other, and it never asks for a name, email address, photos or location.
How the game determines age
On first launch the game shows a neutral age screen: it asks for birth year and month, without hinting at an answer and without defaulting to “adult”. The answer stays on the phone and is not sent to us or to partners. On Android the game also reads the Google Play age signal (Age Signals) where available: if it shows that the account belongs to a minor or is supervised by a parent, the game uses the younger mode even if a different age was entered. Until someone answers, the game runs in child mode.
What runs in each mode
| Mode | Ads | Analytics and purchases |
|---|---|---|
| Child (under 13) | Google AdMob only — a Families self-certified SDK — with child-directed treatment and ad content suitable for everyone. No personalization or remarketing, no advertising ID, no AppLovin MAX or other networks. The game shows no consent form and no tracking (ATT) prompt. | Firebase Analytics with in-game events only, without the advertising ID and without advertising signals. Every purchase behind a parental gate (a task for an adult), no time-limited offers. |
| Teen (13–17) | Non-personalized ads only, tagged as under the age of consent where the law requires, with content suitable for teens. [AppLovin MAX in this mode: with the age-restricted user flag or not at all — decision in MVP] | Firebase Analytics without advertising signals. Purchases approved in Google Play or the App Store. |
| Adult (18+) | Personalized ads only with consent (Google’s consent platform, plus ATT on iOS); without consent — non-personalized. | As described in What data we process. |
In child mode, too, Google’s libraries receive the device’s IP address and the technical data needed to show an ad, measure it, cap its frequency and prevent fraud. This data is not used to build a profile of the child or for interest-based ads.
Laws
GDPR, Art. 8. In Poland a child can consent to online services on their own from age 16 (13 to 16 in other EU countries). We do not ask anyone under 18 for consent to personalized ads, and we never show them such ads. Data needed to run the game is processed on the bases described in Purposes and legal bases.
COPPA (US). We do not collect personal information from children under 13 for behavioral advertising or profiling. Persistent identifiers (such as the installation ID) and IP address are used only to support the game’s internal operations: serving contextual ads, measuring them, security and fixing bugs.
[legal review: child mode vs COPPA, Families policy and the current list of self-certified SDKs]
For parents and guardians
- A child’s purchases require solving an adult task in the game, and the payment is then approved by Google Play or the App Store — where you can require your approval (Google Family Link, Apple’s Ask to Buy in Family Sharing).
- To remove data stored on the phone (progress, age), uninstall the game or clear its data in system settings.
- To ask about your child’s data, change the age mode or request deletion of analytics and ad data, email privacy@wumiko.games. Include the installation ID from the game’s Settings screen [confirm where the game shows it] — it lets us find the data without asking about your child. We reply within one month.
- If you believe your child has sent us data we shouldn’t have (e.g. in an email), let us know and we will delete it.
Do you have to provide data?
You don’t need to provide any data to play. Answering the age screen lets the game pick the right mode; without an answer it treats you as a child. Technical data collected by the ad and analytics libraries is needed for the game to work and to stay free. Consent to personalized ads is optional — the game plays the same without it.
Changes
We publish the current version and its date on this page. We will also tell you about significant changes in the game.