Privacy Policy for Jarbake

Jarbake is made by Shon Pazarker, an individual, working under the name Equival, based in Israel ("we", "us"). We are the controller of your personal data. Equival is a working name, not a registered company.

• Contact for anything privacy-related: [email protected], telephone +972 53-430-9006
• Postal address: Yotveta 2/29, Holon 5850003, Israel
• We have no data protection officer (no legal duty to appoint one for this game).

We do not collect your contacts, photos, precise location, health data, or advertising identifier, and we do not use your account ID, email or name inside usage statistics or crash reports. Statistics and crash data (Google Firebase Analytics, Crashlytics, Remote Config) are tied to a random analytics ID, not to your account (Firebase Authentication and Firestore), by us, and are kept separate from it. We cannot see how Google handles IDs internally, so this describes what we do.

Providing an account is optional. If you do not give us the data needed for sign-in, you can still play as a guest. Allowing statistics and crash reports is optional and never required to play.

Automated decisions. We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not profile you.

Reminders and the rating request

If you turn reminders on (the game asks only after you have won a few levels, and the system asks you again), the game schedules at most two kinds of reminder on your phone itself: a comeback nudge after a day away and a heads-up about Winter Lights. The schedule is made and kept on the device. We send no message from a server, and we do not receive your answer to the permission question. The game may also show the Apple or Google system rating dialog after a winning streak. That dialog is run by Apple or Google; we do not see your rating or whether you gave one, and they handle it under their own policies. We can switch both off for everyone through the public settings file above.

• Google (Google Ireland Limited and Google LLC) as our processor, for Firebase Authentication and Cloud Firestore (sign-in, your account ID and the email, name and profile photo link if the provider returns them, saved progress), for Firebase Installations (the installation ID described in section 3), and, only if you allow, for Firebase Analytics, BigQuery (where we store exported statistics), Crashlytics and Remote Config. Google may only use it to provide those services to us. Account data and statistics/crash data are separate sets and we do not link them.

• Cloudflare, Inc. as our processor, for two tasks. (1) Hosting the public settings file the game reads at start; it sees your IP address like any web host (section 3). (2) Deleting accounts: for every account deletion, whether you start it or the app runs it for a child, a Cloudflare Worker that we run at api.jarbake.equival.io receives one request (POST /v1/account/delete). It carries your Firebase sign-in token (it holds your account ID, your sign-in provider and your email if there is one) in the request header and, when there is one, Apple's one-time authorization code in the request body. The Worker checks the token, deletes your cloud save documents and your Firebase Auth user through a Google service account kept as a Worker secret, and, when it has the code, revokes the link with Apple. The request carries no age and no reason, and the server does not record why an account is deleted, so the age answer never leaves your phone. The Worker keeps neither token nor code. It limits how often one account can call it, keyed to your verified account ID inside Cloudflare's rate limiter. It writes only a request number, the route and the result to its log, never a token, code, account ID or IP address.

• Apple and Google, as account providers, when you choose to sign in with them. They have their own privacy policies and are separate controllers for your Apple or Google account. When you use Sign in with Google, Google's sign-in software in the game may collect the data its own privacy manifest declares, under Google's privacy policy. We request only the default email and profile scopes and never store a phone number.

• Authorities or courts, if the law requires it.

We do not sell your personal data, do not share it for advertising, and do not share it with data brokers.

We are in Israel. The game is not offered in the EU, EEA, UK or Switzerland. The steps below are the onward processing by our providers.

• Saved progress: stored in Google Cloud Firestore in Europe (multi-region "eur3": Belgium and the Netherlands, with a witness copy in Finland). Google may copy it within those countries for backup and reliability, and Google staff outside Europe may be able to access it for support.
• Accounts: Firebase Authentication runs only from Google data centres in the United States, so your account record (ID, email, name, sign-in details and sign-in IP logs) is processed in the United States even though your saved progress is stored in Europe.
• Installation ID, statistics and crash data: processed by Google and can be processed in any country where Google operates, including the United States. Google does not let us choose a location for these.
• Cloudflare, Inc. is a US company; access from outside Europe is possible.

Our providers act for us under their data processing terms: Google's Cloud Data Processing Addendum and Firebase Data Processing and Security Terms, and Cloudflare's Data Processing Addendum. They use sub-processors, listed at firebase.google.com/terms/subprocessors, cloud.google.com/terms/subprocessors and cloudflare.com/gdpr/subprocessors. Transfers to the United States rely on those terms, which include standard contractual clauses. You can ask for a copy of the safeguards we use by writing to [email protected].

If you decline statistics, nothing is collected. If you turn statistics off later, collection stops; data already collected is kept until its period ends unless you ask us to delete it (section 8).

In the game: Settings > Account > Delete account. You are shown what is deleted: your account, your levels and stars, your boosters, and your settings and stats on this phone. For a signed-in account, the game first asks you to confirm your sign-in on the phone (for Sign in with Apple this yields Apple's one-time code), then sends one request to our server (POST /v1/account/delete) with your sign-in token and, when there is one, that code. The server deletes your saved progress documents in Cloud Firestore and your Firebase Authentication account, and for Sign in with Apple revokes the link with Apple. Every account deletion uses this same request, including the one the app runs for a child (section 9), and the request carries no age and no reason: the server does not record why an account is deleted. Backups are erased within 180 days. Deletion needs an internet connection; if it is interrupted, the game finishes it the next time it starts. As part of deleting, the game turns off statistics and crash reports, asks Google to delete the Firebase installation ID, and resets the analytics ID before it removes its record of your choices, so the next launch asks again and collects nothing before your answer. A guest has no account on our servers; deleting the guest data removes it from the device, except the age answer, which stays until you uninstall the app (section 6). If you reinstall as a guest, progress cannot be restored.

Past statistics. Statistics and crash data are not tied to your account, so deleting your account does not by itself delete them. We cannot find that data by name. Before the game resets the analytics ID (when you withdraw consent or delete your account) it shows you the ID with a Copy button, with the line "Send this ID to [email protected] to erase past statistics". If you send us that ID we ask Google to delete the data for it and do so within one month. Otherwise it is deleted automatically after the periods in section 6. Once the ID is reset we can no longer find your data.

Contact [email protected]. We answer within one month.

• Every player: access to what we hold about you, correction, deletion, objection (including to anything we do under our legitimate interests, section 3), withdrawing consent at any time (Settings > Privacy, as easy as giving it), and complaining to the data-protection authority where you live.
• Israel (Privacy Protection Law, as amended by Amendment 13): you may inspect the data we hold about you, ask us to correct it (and to delete it where the law allows), and complain to the Privacy Protection Authority. You are not legally required to give us data to play.
• California and other US states: to know what we collect, delete it, and correct it. We do not sell or share personal information for cross-context advertising. We do not discriminate for using your rights. See also section 9.
• Statistics and crash data: we cannot find your data by name. To exercise a right over it, send the "analytics ID" shown in Settings > Privacy (copy it before you reset it); you can also tap "Reset" to start a new analytics ID so future data is detached from past data. We then act within one month.

Jarbake is made for a general audience. It is not directed to children under 13 and we do not knowingly collect personal information from them, except the technical request data described below.

Age check. On an iPhone that supports Apple's Declared Age Range, the game asks Apple once for your age range. If you or your parent shares it, only a coarse group is used. It stays on your phone: we never receive it, send it, log it, or put it in statistics. In places where the law requires Apple to share an age category with apps (for example Texas, Utah and Louisiana), we use it only to switch off the features below and never share it with anyone.

If the answer is under 13: Sign in with Apple and Sign in with Google are not offered, so no account or cloud save is created and nothing is sent to our account service or to any Google service, except deleting an account created before the age answer. Usage statistics, crash reports and server game settings are off and are not offered. You can still play as a guest; your progress stays on the device. If a phone had been signed in before the answer came, the game first shows you the note "Because of the age setting on this device, your account is being removed. Your progress stays on this phone." and, if you used Sign in with Apple, an optional button, "Also remove the Apple link" (it opens Apple's sheet and lets the server remove the link). The note shows before the deletion runs, so your sign-in token is still valid for that. Then the game deletes the account: your cloud save and your account at Google, through the same single account-deletion request to our server that every deletion uses, which carries no age and no reason. You keep playing as a guest. The deletion never waits for the Apple button. If you skip it, remove the link yourself in Settings > [your name] > Sign-In & Security > Sign in with Apple. If that deletion cannot finish at once (for example you are offline), the game signs the account out on the device, keeps a pending deletion, and refuses another sign-in until it is done.

If the answer is 13 to 15: we do not ask for your consent to statistics or crash reports, and both stay off. This is a protective default: in many countries a person under 16 cannot give that consent themselves, so we use 16 everywhere rather than keep a list. The game plays the same. You may sign in if you wish: that is a service you ask for.

If the answer is 16 or over, or we do not know your age: on Android, older iPhones, or if you decline Apple's question, the game cannot tell your age and treats you as 16 or over, so it asks the privacy question. Parents of younger children should use their phone's own parental controls.

What we still receive from every player, including a child: when the game starts it asks our website for the public settings file. Our hosting provider, Cloudflare, sees the IP address of that request. An IP address is a "persistent identifier" under US children's privacy law (COPPA). We use it only to deliver the file and keep the service working and secure ("support for the internal operations" of the service). We do not use it to contact anyone, build a profile or show ads, and we do not store it ourselves. Cloudflare may keep request logs for its own security and network purposes under its own terms and retention, which we do not control.

Parents. If you think a child gave us personal information, write to [email protected], +972 53-430-9006, Yotveta 2/29, Holon 5850003, Israel. We will review it, delete it and stop any further collection. You can ask to review or delete anything we hold about your child.

How long we keep children's information. If an account was created before the age answer, its data is deleted through our server as soon as the app learns the answer. It is gone from Google's backups within 180 days. Until the deletion is confirmed it is kept only so the deletion can finish, and the app retries on every launch. The request to our server is the same single account-deletion request every deletion uses, which carries no age and no reason; the server does not record why an account is deleted, and the age answer still never leaves your phone. After that we keep none on our servers for a player the age answer marks under 13. Request logs at our hosting provider are kept under Cloudflare's terms (section 3). We do not keep anything longer than needed to deliver the file.

Changes. If we add ads, purchases or new kinds of data, we will update this policy, and where state app-store laws require it we will tell Apple so a parent can be asked again before a child keeps using the app.

US state app-store laws (Texas, Utah, Louisiana)

Jarbake is available in Texas, Utah and Louisiana. Where those states' app-store laws apply, Apple gives apps an age category. We set the app's age rating and use the category only to enforce age restrictions, comply with the law and apply safety defaults (switching off features as above). We never share it with anyone, and we do not enforce our terms against a minor whose parent has not consented through the store. Free apps with no purchases are covered by these laws.

Data travels over encrypted connections and is encrypted at rest by our providers (Google Firebase and Google Cloud, and Cloudflare). No system is perfectly secure. If a breach puts your rights at risk we will notify you and the authorities as the law requires.

We will change this policy when the game changes. If we add a new use of data (for example ads or purchases), we will update this page, change the date at the top and ask for your consent again where the law needs it.

Shon Pazarker, trading as Equival, Yotveta 2/29, Holon 5850003, Israel. Email: [email protected]. Telephone: +972 53-430-9006.