GottaPlay privacy policy

Publisher and privacy contact

Publisher: GottaPlay. For privacy questions or requests, email office@gottaplay.net. For product support, email office@gottaplay.net. Include the name of the game or app so we can identify the relevant service.

We use information to provide game functionality, save progress, operate online features where available, respond to support requests and maintain service security. Advertising data and privacy choices apply only to products with advertising, as described below. GottaPlay does not sell its player data. External providers process information under their own policies and the settings applicable to the product.

We use secure transport for online game requests and restrict access through authenticated service access. No service can guarantee absolute security. Keep your device and saved sessions secure and do not share authentication tokens.

Covered products

• Garden Blocks — Android, package com.gottaplay.gardenblocks: local puzzles and garden designs, optional advertising and a one-time Premium purchase.
• Paper Escape: Origami Puzzles — Android, package com.gottaplay.paperescape: local puzzles, advertising and an optional one-time Premium purchase.
• War of Words — Android app, package com.gottaplay.warofwords: local progress, age-aware online features, optional game analytics and optional rewarded advertising.
• Gotta Xonix — Android, package com.gottaplay.xonix: local campaign progress, optional public rankings, advertising and a full-campaign purchase.
• 4 Kids: Connect the Dots — Android, package com.gottaplay.connectthedots.
• 4 Kids: Maze (also named 4 Kids: Maze Puzzle) — Android, package com.gottaplay.maze.puzzle.
• 4 Kids: Shape It — Android, package com.gottaplay.shapeit.puzzle.
• Mastermind, Morris and Flappy — browser games with local progress and preferences.
• GottaPlay Video Editor — processing of selected videos on your device.
• The GottaPlay website — hosting, security, external resources and support contacts.

For any additional GottaPlay game or app linking to this policy, the general sections apply and its product-specific information will be listed here when it is released. Consult the entry for your product to see which data, online services and advertising features apply.

Website, browser games and video editor

Browser games and local files

Browser games may store progress, scores and preferences on your device using browser storage. You can remove these using your browser’s site-data controls. The video editor processes the files you select on your device; the editor does not upload those video files to GottaPlay.

Website requests and external resources

When you visit, Cloudflare, our hosting provider receives technical request information such as your IP address, requested URL, browser details and request time. Opening social links takes you to the relevant platform, where its own privacy policy applies.

Optional website analytics

GottaPlay uses Google Analytics 4 only after a visitor accepts analytics cookies. Before acceptance, this website does not load the Google Analytics tag or send analytics measurements. Rejecting analytics does not restrict games or tools. Open Cookie settings on any page to change your choice. We store the choice and its date in your browser for up to 180 days.

After acceptance, Google processes technical and usage information such as page visits, browser and device information, cookie identifiers and request information. Our page-view configuration omits URL query strings and fragments and disables Google signals and advertising personalization. After consent, we also measure clicks from this website to the Google Play pages for Paper Escape and War of Words. We use a fixed set of public channel, campaign and creative codes to understand which promotional links brought visitors. These codes do not identify individual visitors. Our Google Play links include these public campaign codes, even when website analytics is declined, without setting analytics cookies or sending a website analytics event. Google processes visits to its store under its own privacy policy. A store click does not confirm an installation or identify a player's later game activity. Selected video files, game nicknames and saved game records are not submitted by our analytics integration. See Google’s privacy policy and how Google uses data from partner sites. Retention of Analytics data depends on the property settings; contact us for privacy requests.

Rejecting analytics after acceptance disables tracking on this site, removes accessible Google Analytics cookies and reloads the page to unload the tag. It does not erase information already processed by Google. This version does not load Google AdSense advertising scripts. Browser storage used for game functionality is separate from optional analytics.

Email and retention

If you email us, we receive the address and information you send and use them to handle your inquiry. Do not send passwords or sensitive documents. Hosting-log, email and backup retention depend on provider settings; fixed retention periods have not yet been finalized. Contact us to request access, correction or deletion of information we hold about you. Depending on your location, additional privacy rights may apply, including the right to complain to a data-protection authority.

Hosting and security

Cloudflare serves this website and processes technical request information to deliver content and protect the service. Its security features may run browser checks. See Cloudflare’s privacy policy. This infrastructure processing is separate from game advertising and browser-game storage.

Garden Blocks — Android

Local game data

Garden Blocks stores level progress, unlocked decorations, garden layouts and object sizes, hint stock, interface, audio and haptics preferences, privacy choices and purchase entitlement proofs on your device. There is no GottaPlay player account, online leaderboard or remote crash-reporting service. Starting with version 1.0.2, optional gameplay analytics has a separate consent choice described below. The campaign and garden editor work offline. Clear the app's storage or uninstall it to remove local data, subject to Android device-backup settings. This does not cancel or refund a Google Play purchase.

Optional services and advertising

You can continue without optional services. The game does not initialize Google Mobile Ads or request ads until you accept optional advertising in the game's privacy screen. You can change that choice in Settings. When enabled, Google's User Messaging Platform checks consent requirements before an ad request. This release requests non-personalized ads, applies Google's under-age-of-consent setting and limits ad content to Google's G rating. These settings do not mean that advertising involves no data processing.

Google AdMob and its SDK may process IP addresses (including approximate location), device and app information, identifiers where permitted, ad interactions and diagnostic information for ad delivery, measurement, fraud prevention and service operation. Personalized advertising is not requested by this integration. See Google's privacy policy and Google's partner-sites information. Third-party retention and deletion are governed by Google's settings and policies.

Free players may see an interstitial after ten completed games, at a break between games. A voluntary rewarded ad grants five hints only after the SDK confirms completion. Unavailable or unfinished ads grant no reward. Premium removes advertising. Withdrawing the optional-services choice stops future ad requests; it does not erase information Google already processed.

Purchases and sharing

Google Play Billing handles the optional one-time Premium purchase. Google processes payment and purchase information under its policies; GottaPlay does not receive card details. The game validates signed purchase records and stores entitlement information locally so purchases can be restored. Purchase records remain subject to Google Play's retention and refund rules.

Sharing creates a garden image locally and opens Android's share sheet. Nothing is uploaded automatically to GottaPlay. Only the image and accompanying public game link are passed to the destination you choose; that service then handles the shared content under its own policy. Privacy and support requests can be sent to office@gottaplay.net.

Optional Garden Blocks analytics: version 1.0.2 and later

Analytics is off until you separately choose Allow analytics and confirm that you are 13 or older. The age confirmation is stored locally and is not sent in analytics events. Continuing without analytics does not limit gameplay, rewards or purchases. Advertising permission is a separate choice.

With permission, the game sends launches, sessions, time spent in gameplay, pauses and ads, and level starts and outcomes. A randomly generated installation identifier links this activity within Garden Blocks; it is not a Google account or advertising identifier. The server estimates the country of the network connection when activity is received. This estimate can differ from the place of offline play or when using a VPN. Our analytics event store does not retain full IP addresses, GPS coordinates, names, email addresses, purchase receipts or advertising IDs.

Cloudflare handles encrypted analytics requests and supplies the approximate network country. Supabase stores the analytics data. Detailed events and linkable report contributions are retained for up to 90 days from receipt. Irreversible anonymous monthly reports may be retained longer. Infrastructure logs and provider backups are governed separately by the providers' configurations; the 90-day event limit is not a promise about all infrastructure copies.

In Settings, open Help improve Garden Blocks and choose Turn off and delete data. This stops new collection, clears queued events and requests server deletion for that installation. An offline request is saved and retried when connectivity returns; completion is not immediate while offline. Re-enabling collection requires completion of deletion and a new explicit choice. Withdrawing analytics preserves your local progress and purchases. Clearing app storage or uninstalling the app alone does not submit a server deletion request. For help, contact office@gottaplay.net and name Garden Blocks.

War of Words — Android

This section describes War of Words version 0.1.25 and later. Older preview builds may not include all age and deletion controls. The Android game is available on Google Play.

Age groups and offline play

The intended audience is ages 13 and older; this is separate from the store content rating. Before online play or advertising, the new version asks players to select one of three age groups: under 13, 13–17, or 18+, without a preselected answer. Only the selected group is stored on the device, not a birth date or identity document. This is a self-declaration, not identity verification. The age group is not included in game leaderboard requests.

Players under 13, and players whose age has not been set, have Campaign, Endless mode, local records and offline practice. The game does not request an online player session, load public rankings, upload their results, or start advertising through the game’s ad flow. After an Endless defeat their run ends: there are no rewarded or free continues. Offline practice records are saved locally. Age selection does not erase previously submitted online data; contact us to request deletion of such data.

Players aged 13 or older may use online modes. Starting with version 0.1.30, only players who select the 18+ age group can request rewarded ads and receive up to three Endless continues per run. Players aged 13–17 keep online modes but have no ads or continues after defeat. Unknown-age and under-13 players also have no ads or continues. Each adult continue requires a completed ad and a confirmed SDK reward. No available or permitted ad means no continue. Adult ad requests use a maximum content rating of PG and follow Google's privacy choices. Earlier age-aware releases allowed ads for ages 13–17 with conservative under-age-of-consent settings and a G content rating. Ad availability is not guaranteed.

Information used by the game

What other players can see

Online rankings display nicknames and game results. Choose a nickname that does not reveal your real name or contact details. The leaderboard does not display your authentication credentials or internal player identifier. Reading online rankings also involves a request to the online service.

Service providers and sharing

Supabase provides authentication and database infrastructure for online play. The current project is configured in the Frankfurt region. Service operation and support may involve processing in other countries under the provider’s arrangements. See Supabase’s privacy policy. Website hosting and email providers process connection data or messages as needed to operate those services. GottaPlay does not sell the game’s player data.

Optional War of Words analytics

Starting with version 0.1.29, game analytics is a separate, optional choice. It stays off until you select Allow analytics. The first-choice screen also offers Continue without analytics; refusing does not restrict gameplay or rewards. Your decision is remembered, and you can change it in Settings. Unknown-age players and children under 13 cannot enable this service. The locally stored age group is not sent in analytics events.

With consent, GottaPlay receives app launches, foreground sessions, active play time and pauses, level and round outcomes, coin changes, rewarded-ad outcomes and bounded technical error codes. Events include the game version, platform, event times and a random identifier scoped to this game installation. This identifier is pseudonymous, not anonymous, and is separate from your online player account. Offline events may wait in a bounded local queue and be delivered after reconnection.

Analytics event payloads do not contain entered words, nicknames, online account identifiers, full IP addresses, GPS coordinates or advertising identifiers. The ingress server estimates the country from the network request. Cloudflare processes the network connection, including its IP address, to deliver and secure the service; excluding the address from an event does not exclude all infrastructure processing. Supabase stores the analytics data. These providers process information needed for their services; see Cloudflare’s privacy policy and Supabase’s privacy policy and its customer data-processing addendum.

Detailed analytics events and linkable report contributions are retained for up to 90 days from receipt. Minimal duplicate-prevention records are retained for 97 days from first receipt. Installation registration is retired after 90 days without an accepted collection or renewal request. Minimal revocation/status records, including identifiers and verification hashes needed to reject late requests and confirm deletion, remain for 97 days after deletion acceptance or registration retirement. These control records are separate from gameplay events and are not used for advertising. Only summaries approved as irreversibly anonymous may be retained permanently; they contain no installation identifiers and cannot be linked back to an individual player.

In Settings, Withdraw and delete stops new collection immediately, clears local analytics collection data and requests deletion of that installation’s detailed analytics data and correction of linkable report contributions from the active service. The game confirms completion only after the server confirms it. If offline, the deletion request waits for a connection and the game shows its pending status. Anonymous summaries cannot be deleted per player because they no longer identify a player. A new affirmative choice is required to restart collection. Withdrawing analytics preserves local progress and does not delete your separate online player profile.

Provider logs and recovery copies are separate from active-database deletion confirmation. Supabase API/database logs on our current Free plan have a one-day retention period. Cloudflare Workers Logs, traces and Issues are currently disabled. These settings do not mean that all provider security records are absent or have the same retention period.

We do not have scheduled project backups or point-in-time recovery enabled on our current Supabase plan, and GottaPlay does not maintain personal analytics database exports or off-site backup copies. This does not establish that infrastructure providers have no internal recovery copies. Provider security and recovery records follow their applicable service arrangements. If a recovery copy is restored, it must remain isolated from collection and reporting until retained withdrawals and expiry rules have been applied; previously deleted player information must not be silently republished.

Analytics permission does not grant advertising permission. Rewarded ads use Google’s separate privacy flow described below. A general privacy-policy acknowledgement does not enable either optional service.

Optional rewarded ads

The Android game integrates Google AdMob through the Google Mobile Ads SDK. In Endless mode, you may choose to view an ad after defeat for a rewarded continue, up to three times per run. A confirmed reward restores health while preserving the run and accumulated score. You may finish the run instead; the game does not require you to watch an ad to submit a completed result. There are no in-app purchases.

Development and production: development APKs use Google test ads. The Google Play release uses the publisher’s advertising unit. In the age-aware version, the game starts the advertising SDK only when an eligible player requests an ad. Test ads still connect to Google; test mode does not mean that no data is processed.

Google documents that its advertising SDK handles network addresses (which can indicate approximate location), device and account-related identifiers, interactions with the app or ads, and performance diagnostics. Google uses this information for ad delivery, measurement and fraud prevention, and encrypts it in transit. The exact processing depends on SDK settings and available identifiers. See Google’s SDK data disclosure, Google’s privacy policy and how Google uses information from partner apps.

Advertising privacy choices

You can decline the rewarded-ad offer and finish your run. Android settings let you reset or delete your advertising ID where supported. Google handles advertising data under its policies; deleting a GottaPlay game profile does not itself delete data held by Google.

The game uses Google’s User Messaging Platform before requesting rewarded ads. Google determines the required regional consent or notice flow. If the required advertising permission cannot be established, the game does not request an ad. Privacy messages are configured for supported European and US regions. In builds where Google requires a privacy-options entry point, an Ad privacy option is available in the game settings. This website does not collect consent on behalf of the Android app.

This website and cookies

The supplied War of Words pages use locally hosted images and fonts. Their application code does not display ads. Trailer players load from YouTube only after you press Play, using the youtube-nocookie.com embed. Playback sends technical request information to YouTube and is subject to the Google privacy policy. Optional website analytics follows the consent controls described above; the choice is saved in browser storage. Cloudflare provides hosting and security processing as described in the website section. Animations respect your device’s reduced-motion setting. Opening an external link takes you to that provider’s service and privacy practices. Hosting infrastructure may keep technical access logs.

Storage and deletion

Local game data stays on the device until it is cleared or the app is removed, subject to any device backup or restore settings. Clearing local data does not delete online results and can remove the session that identifies your online profile.

The online service has no scheduled automatic expiry for player profiles, submitted results or daily attempt records. They remain until the player deletes the online profile in the app or GottaPlay handles a verified deletion request. In-app deletion removes the authentication profile and associated Daily Challenge and Endless records from the active service. Provider backups, technical logs and support correspondence are handled separately; any applicable retention exception will be explained when a request is handled.

Your choices and requests

You can play Campaign and Daily Challenge practice offline, choose a non-identifying nickname, and decide whether to submit an Endless result. For access, correction or deletion requests, see Delete my data. Depending on your location, you may have additional rights such as restriction, objection, portability or a complaint to your data-protection authority.

Security

Online game requests use HTTPS and authenticated service access. No service can guarantee absolute security. Do not share your saved session files or authentication tokens. Access to a device may allow access to locally stored progress and session information.

Children and age suitability

The intended audience is ages 13 and older. The content rating varies by country and is shown on the Google Play listing. The age-aware version restricts under-13 and unknown-age players to offline features as described above. Age eligibility and the store content rating are separate; observe the rating applicable in your region. If you believe a child has provided personal information, contact GottaPlay through the privacy contact below.

Paper Escape: Origami Puzzles — Android

This section covers Paper Escape, Android package com.gottaplay.paperescape. The intended audience is ages 13 and older, separate from the store content rating. The game does not ask for a birth date, collect an age group. Optional analytics asks you to confirm that you are 13 or older; this is not identity verification.

Local puzzles and progress

All 70 puzzles in seven worlds are available through normal progression without a purchase. Progress, best move counts, stars, the animal collection, starter hints, sound and vibration settings, reduced-motion preferences and advertising-frequency counters are stored on your device. Core puzzles work offline. The game has no GottaPlay account or public ranking. Version 1.0.0 has no separate analytics SDK. Starting with version 1.0.2, optional analytics can send puzzle outcomes as described below.

Optional Paper Escape analytics — version 1.0.2 and later

On the first launch, a privacy screen explains local progress, optional analytics, optional advertising and Google Play purchases. Analytics and optional ads remain off until a deliberate choice. After confirming I am 13 or older, Accept all enables analytics and requests Google's advertising privacy checks. Accept partially — choose options offers separate analytics and advertising controls; Continue without optional data keeps both off. Refusal does not restrict puzzles, local progress, undo, restart or Premium. Rewarded ad hints require optional ads. Google UMP remains the authority for advertising permission; our button does not manufacture Google's consent. Players under 13 must leave analytics off. Saved choices do not need to be repeated at every launch and can be changed in Settings → Privacy.

With consent, events measure app launches, foreground sessions, active play time, pauses, time in fullscreen ads and puzzle starts, completions and failures. Events include the game version, platform, event times, level code and a random identifier scoped to this installation. This identifier is pseudonymous, not anonymous. There is no online player account. Offline events may wait in a bounded local queue.

Analytics does not contain your name, purchase receipts, advertising identifiers, birth date, full IP address or precise location. Cloudflare estimates country from the network request and receives the connection IP to deliver and secure the service. Supabase stores the analytics records. These providers may process technical connection information. See Cloudflare's privacy policy, Supabase's privacy policy and the customer data-processing addendum.

Detailed analytics events and linkable report contributions are retained for up to 90 days from receipt. Minimal duplicate-prevention records are retained for 97 days from first receipt. Installation registration is retired after 90 days without an accepted collection or renewal request. Minimal revocation/status records, including identifiers and verification hashes needed to reject late requests and confirm deletion, remain for 97 days after deletion acceptance or registration retirement. These control records are separate from gameplay events and are not used for advertising. Only summaries approved as irreversibly anonymous may be retained permanently; they contain no installation identifiers and cannot be linked back to an individual player.

In Settings → Privacy, clear Allow gameplay analytics and press Save my choices. This stops new collection immediately, clears local analytics collection data and requests deletion of that installation’s detailed analytics data and correction of linkable report contributions from the active service. The game confirms completion only after the server confirms it. If offline, the deletion request waits for a connection and the game shows its pending status. Anonymous summaries cannot be deleted per player because they no longer identify a player. A new affirmative choice is required to restart collection. Withdrawing analytics preserves local progress and does not delete your separate Google Play purchases.

Provider logs and recovery copies are separate from active-database deletion confirmation. Supabase API/database logs on our current Free plan have a one-day retention period. Cloudflare Workers Logs, traces and Issues are currently disabled. These settings do not mean that all provider security records are absent or have the same retention period.

We do not have scheduled project backups or point-in-time recovery enabled on our current Supabase plan, and GottaPlay does not maintain personal analytics database exports or off-site backup copies. This does not establish that infrastructure providers have no internal recovery copies. Provider security and recovery records follow their applicable service arrangements. If a recovery copy is restored, it must remain isolated from collection and reporting until retained withdrawals and expiry rules have been applied; previously deleted player information must not be silently republished.

Advertising and privacy choices

The free version integrates Google AdMob through the Google Mobile Ads SDK and Google's User Messaging Platform (UMP). You may choose a rewarded ad for five next-move hints after using the starter hints. The hints are granted only when Google confirms that the ad earned its reward. An unavailable or incomplete ad does not grant a reward; Undo and Restart remain free.

Automatic ads may appear at natural transitions after level results, never during a puzzle move. None appear during the first ten completed levels. Later, an automatic ad requires at least five newly completed levels and five minutes of active play since the preceding ad or rewarded-ad delay. No advertising banner covers the board. Ad availability depends on the network, Google's services and applicable privacy settings. Missing ads do not prevent core play.

For this release, all ad requests use G-rated, non-personalized advertising and conservative under-age-of-consent treatment because the 13+ audience includes minors and the game does not collect an age group. These restrictions do not mean that Google processes no information. The SDK may process IP addresses indicating approximate location, available device/account-related identifiers, app and ad interactions, and performance diagnostics for advertising, measurement and fraud prevention. Google documents encrypted transport for this processing. See Google's SDK disclosure, Google's privacy policy and Google's partner-app data explanation.

When optional ads are enabled, the game updates UMP privacy information each session and checks whether Google permits an ad before initializing the advertising SDK or requesting advertising. Google's regional privacy or consent form is shown when required in connection with an advertising request; it is not a mandatory acceptance of this privacy policy before playing. Where UMP requires an entry point, the game's privacy settings let you open Google's privacy-options form again. Under-age treatment may change the forms available. This website does not collect consent for the Android app.

Android settings let you reset or delete your advertising ID where supported. Google handles its advertising records under its policies. Changing privacy choices or buying Premium does not erase information already processed by Google. Development builds use test ad units; test ads still contact Google and do not mean that no data is processed.

One-time Premium purchase

Optional Premium removes both automatic and voluntary ads, provides unlimited next-move hints, and adds cosmetic animal finishes and an exit effect. Google Play displays the localized price and handles payment and account information; GottaPlay does not receive payment-card details. The game verifies signed purchase-status records locally and stores them in private device storage to recognize confirmed ownership. It queries and acknowledges purchases through Google Play; purchase receipts are not uploaded to a GottaPlay backend. Purchases can be restored with the same Google Play account. Pending purchases do not activate Premium. Clearing app data or uninstalling the game does not cancel, refund or erase a Google Play purchase.

Retention, deletion and support

Local records remain until you clear the app's storage or uninstall it, subject to device backup and restore settings. Clearing local records removes puzzle progress and preferences; it does not erase data held by Google. Google determines retention for its advertising, payment and account records under its policies and applicable controls. Paper Escape has no GottaPlay online player profile to delete.

For privacy or support requests, email office@gottaplay.net and name Paper Escape. If you contact us, we use the address and information you provide to handle your request. Do not send passwords, purchase tokens or unnecessary personal information. Support-correspondence retention and deletion follow the general sections of this policy.

Gotta Xonix — Android

This section covers the new Android application, package com.gottaplay.xonix, version 1.1.1 and later. It is intended for ages 13 and older. The intended audience is separate from the store content rating. The game does not collect a birth date. Version 1.1.5 asks for a local 13+ confirmation before analytics.

Optional Xonix analytics — version 1.1.5 and later

The first-launch privacy screen explains local progress, optional gameplay analytics and optional advertising. Both optional purposes remain off until a deliberate choice. After confirming I am at least 13 years old, Accept all enables analytics and requests Google's advertising privacy checks. Accept partially offers separate choices; Continue without optional data keeps both off. Refusal does not restrict Campaign, Daily, Endless, local progress or Premium. Purchases and the voluntary online leaderboard remain separate services. Players under 13 must leave analytics off. Choices can be changed in Settings > More > Privacy and choices.

With consent, analytics measures launches, foreground sessions, gameplay time, pauses, fullscreen ad time and Campaign, Daily and Endless starts, completions and failures. Events contain version, platform, times, registered content codes and a random installation-scoped identifier. The identifier is pseudonymous, not anonymous. Offline events can wait in a bounded local queue. Analytics is separate from the nickname, profile and submitted scores used by the optional leaderboard; it does not include those profile identifiers, purchase receipts, birth date, advertising identifiers, GPS or a full IP address.

Cloudflare estimates country from the network connection and receives the connection IP to deliver and secure the service. Supabase stores analytics records. These providers can process technical connection information under their service arrangements. See Cloudflare's privacy policy and Supabase's privacy policy.

Detailed events and linkable report contributions are retained for up to 90 days from receipt. Minimal duplicate-prevention records last 97 days from first receipt. Registration is retired after 90 days without an accepted collection or renewal request. Minimal revocation/status records remain for 97 days after deletion acceptance or registration retirement to reject late requests and confirm deletion. These control records are separate from gameplay and are not used for advertising. Only irreversibly anonymous summaries, containing no installation identifiers, can remain permanently.

Open Settings > More > Privacy and choices, clear Optional gameplay analytics and press Save choices. New collection stops immediately, local collection data is cleared and the installation's detailed analytics and linkable report contributions are deleted from the active service. The game confirms completion only after the server confirms it. Offline requests wait for a connection with a pending status. Anonymous summaries cannot be deleted per player because they no longer identify one. Restarting collection requires a new affirmative choice. Withdrawal preserves local progress, purchases and the separate online profile. To delete the profile and submitted scores, use the separate Delete online profile control described below. Provider logs and recovery copies remain separate from active-service deletion confirmation.

Local play and optional online results

Campaign progress, medals, local records, language, sound, vibration and display preferences are stored on your device. Campaign and Endless gameplay can be played offline. Daily uses a challenge determined by the current UTC date. You may replay Daily and decide after each run whether to submit the result; a lower score can also appear in the public rankings. Unsubmitted results remain local.

Online profiles and rankings use Supabase authentication and database services. An anonymous session uses a randomly assigned player identifier; no email or password registration is required. Session credentials are saved on the device to authenticate requests. Reading rankings also contacts this service. When you set a nickname or submit a result, the service receives that nickname, the game and mode identifiers, run identifier, score, wave and submission time. Daily entries are associated with the UTC challenge date. Connection providers may process your IP address and technical request information to operate and secure the service.

Public rankings

Other players can see nicknames, scores, waves and positions. Choose a nickname that does not reveal your real name or contact information. Rankings do not display authentication credentials or the internal player identifier. Supabase provides the shared game backend; see Supabase's privacy policy.

One-time full campaign purchase

The first three campaign worlds are free. A one-time Full campaign + No ads purchase unlocks access to all seven worlds and removes advertising in Campaign, Endless and Daily. Normal campaign progression still applies. Google Play handles payment and account information; GottaPlay does not receive card details. The game stores signed purchase-verification records locally to recognize the entitlement and checks ownership through Google Play. Purchases can be restored with the same Google Play account. Clearing local data does not cancel or refund a purchase. A private review access code can unlock all levels without payment; the code is verified on the device and is not sent to the game backend.

Advertising and privacy settings

The free version integrates Google AdMob. A full-screen ad may appear at a natural transition after ten completed rounds; each Endless wave counts as one round. Ads do not appear during active gameplay. Ad availability depends on Google and the applicable privacy settings. Development builds use Google test ads, which still contact Google.

For this release, all ad requests use G-rated, non-personalized advertising and conservative under-age-of-consent treatment because the 13+ audience includes minors and the game does not collect an age group. These restrictions do not mean that Google processes no information. The Google Mobile Ads SDK may process network addresses indicating approximate location, technical device and app information, available identifiers, app or ad interactions, and diagnostics for advertising, measurement and fraud prevention. Requests use encrypted transport. See Google Mobile Ads data disclosures and Google's privacy policy.

The game updates Google's User Messaging Platform consent information before initializing advertising. If a required consent flow cannot be completed, the game does not request ads. Regional messages and their availability depend on Google's requirements and the under-age treatment. Settings > More includes Ad privacy to open the Google form when available. Android provides controls for advertising identifiers where supported. Removing a Xonix profile does not itself delete information held by Google. The game has no separate GottaPlay analytics service before version 1.1.5. Starting with 1.1.5, advertising starts only after the optional advertising choice, followed by Google privacy checks as described above.

Retention and deletion

Local information remains until cleared or the application is removed, subject to device backup and restore settings. Clearing local storage does not delete submitted results and may remove the session identifying your online profile. The online service has no scheduled automatic expiry for Xonix profiles or results. In Settings > More, use Delete online profile to remove this game's nickname, profile and submitted results from the active service. Deletion is scoped to Xonix; the shared authentication identity can remain for other GottaPlay games. Provider logs and backups are handled separately.

For access, correction or deletion requests outside the app, email office@gottaplay.net with the game name. We may need enough information to identify the data and verify the request. Do not send passwords, session tokens, purchase tokens or private saved-session files. Support correspondence, provider logs and backups follow their configurations; fixed retention periods for those categories have not yet been finalized. Any applicable retention exception will be explained when a request is handled. For concerns about information supplied by a child, contact the same privacy address.

4 Kids games

This section covers 4 Kids: Connect the Dots, 4 Kids: Maze and 4 Kids: Shape It. These games are intended for children. They have no player accounts, sign-in, online rankings or separate game analytics service. Advertising and purchases involve Google services as described below; these games are not services that operate entirely without external data processing.

Advertising and children's privacy

The free versions show Google AdMob ads. Ad requests are configured for child-directed treatment and users under the age of consent, with G-rated, non-personalized advertising. These settings restrict advertising; they do not mean that Google processes no information. Google's advertising SDK may process an IP address, technical device and app information, ad interactions and diagnostics to deliver and measure ads, maintain its services and prevent fraud. The exact information depends on SDK settings and available identifiers. See Google Mobile Ads data disclosures, Google's child-directed treatment information and Google's privacy policy.

Optional purchase to remove ads

Each of these three games offers an in-app purchase to remove advertising. Google Play Billing handles the purchase and payment information. GottaPlay does not receive your card details. The game receives purchase-status information needed to recognize the ad-removal entitlement. Removing ads stops advertising in the game; it does not delete information already processed by Google. Google handles purchase and account records under its own policies. Clearing local storage or uninstalling a game does not cancel or refund a Google Play purchase.

4 Kids: Connect the Dots

Android package: com.gottaplay.connectthedots. Solved pictures, stars and preferences for music, sound, voice and vibration are saved locally. GottaPlay does not operate a server receiving this game progress. Parents can erase progress through the parents' area. Purchases and external links are behind an adult check. The free game shows occasional full-screen ads between pictures; playing, hints and voice features do not require watching an ad. The one-time Remove ads purchase can be restored through Google Play.

4 Kids: Maze

Also named 4 Kids: Maze Puzzle; Android package: com.gottaplay.maze.puzzle. The game is designed for children aged 6–12. Progress, language, sound settings and purchase-verification records are stored locally. On first launch, the device language selects a supported language, which can be changed in Settings. GottaPlay does not operate a server receiving maze progress. Ads appear between play attempts, not during a maze. A parental gate protects purchases and external links. A one-time purchase removes ads and can be restored using the same Google Play account.

4 Kids: Shape It

Android package: com.gottaplay.shapeit.puzzle. Shape It saves puzzle progress, unfinished puzzles, language and sound preferences, advertising-frequency counters and signed purchase-verification records on your device. GottaPlay does not operate a server receiving puzzle progress. The game includes 50 illustrations in three difficulties, for 150 puzzles. The first 10 levels of each difficulty are free. A one-time full-game purchase unlocks the remaining 120 puzzles and removes all advertising; it can be restored through the same Google Play account. Purchases, restoring purchases and external links are protected by a parental gate. Child-directed, G-rated, non-personalized AdMob advertising may appear at natural transitions after puzzles, as described above; playing and hints do not require watching an ad. The app removes advertising-ID and AdServices permissions. It has no player sign-in, accounts, online rankings or separate analytics service.

Parents' choices, retention and deletion

Parents can remove local game data using Android's app-storage controls or by uninstalling the app, subject to device backup and restore settings. Locally saved data remains until cleared or removed. To manage information held by Google, use Google's privacy controls; Google determines retention for its advertising, payment and account records. For purchases or refunds, use Google Play support. These games do not have a GottaPlay online player profile to delete.

Support and privacy requests should be sent by a parent or guardian to office@gottaplay.net, with the game name. Please do not include unnecessary personal information about a child. If you send an email, we use the address and information supplied to handle the request. You may request deletion of support correspondence; provider backups and any applicable retention exceptions are handled separately.

Access, correction and deletion

Contact office@gottaplay.net for privacy requests and include the product name. We may request enough information to identify the relevant data and verify that the request is yours. Do not send passwords, session tokens or unnecessary sensitive documents.

For War of Words, use the in-app online-profile deletion option or follow the external data-deletion instructions. Clearing app storage alone does not delete online records. For browser games, use your browser’s site-data controls to remove local progress and preferences. The video editor does not upload your selected videos to GottaPlay.

Retention depends on the product and data category. Local progress remains until cleared or removed, subject to device backup settings. War of Words online records remain until deletion as described above. Hosting logs, support correspondence and provider backups follow their configurations; fixed retention periods for those categories have not yet been finalized. Any applicable retention exception will be explained when a request is handled.

Depending on your location, you may have rights to access, correction, deletion, restriction, objection or portability and to complain to a data-protection authority. Where processing relies on consent, you may withdraw it through the applicable privacy controls; withdrawal does not affect earlier lawful processing.