Cargo Jam Privacy Policy

This policy explains what information Cargo Jam collects, why we collect it and the choices you have. Cargo Jam is made by Tuval Studio ("we", "us").

Summary

• You can play without creating an account. The game creates an anonymous player ID to save your progress.
• We use your information to run the game, save and sync your progress, verify purchases, send notifications you allow, fix crashes and understand how the game is played.
• The game shows ads. In the EU, UK and Switzerland you decide whether ads are personalised. On iPhone and iPad, ads are only personalised if you allow tracking.
• We don't sell your personal data.
• You can delete your account and cloud data at any time, in Settings or on our account deletion page.

Who is responsible for your data

Tuval Studio, Istanbul, Türkiye, is the controller of the personal data described in this policy. You can reach us at [email protected].

Information we collect

Information the game creates

• Player account: a random player ID, when it was created and when you last played, your platform (iOS or Android), app version, language, country and time zone.
• Game progress: levels, stars, coins and other in-game items, your settings, earlier copies of your save (so we can recover progress if two devices disagree) and an identifier the game generates for your device.
• Purchases: the product, transaction ID, platform and status, which we use to verify and restore purchases. Payments are handled by Apple or Google; we never see your card details.
• Notifications: if you allow notifications, a push token and your notification preferences.
• Support messages: what you send us, with your player ID, app version and device model, and your email address if you contact us by email.

Information from linked accounts

If you link Sign in with Apple or your Google account to protect your progress, we receive a unique account identifier and, depending on your choice, your email address. Apple lets you hide your email behind a relay address. We never receive your password.

Analytics and crash reports

We use Google Firebase Analytics to understand how the game is played, for example which levels are started and finished, which boosters are used, and which ads and purchases are viewed or completed. This comes with device and app information and an app instance ID. We use Firebase Crashlytics to receive crash reports with technical details about the crash and your device. We use this information to improve the game, not to identify you.

Advertising

Cargo Jam shows rewarded ads, which you choose to watch for a reward, and ads between levels, which you can remove with a purchase. Ads are delivered through AppLovin MAX and partner networks including Google AdMob, Meta Audience Network, Unity Ads, Mintegral and ironSource. These partners may collect your device's advertising identifier, IP address, device information and how you interact with ads, to show and measure ads and to prevent fraud.

• iPhone and iPad: we ask for permission to track (App Tracking Transparency). If you decline, your advertising identifier isn't shared, ads aren't personalised, and nothing in the game is limited.
• EU, EEA, UK and Switzerland: we ask for your consent with Google's consent form before personalised ads or analytics are used. You can change your choice at any time in Settings → Ad privacy preferences.
• Android: you can reset or delete your advertising ID in your device settings.

Photos

If you choose to save a share image, the game asks for permission to add it to your photo library. We don't read or upload your photos.

Why we use information

• To provide the game: saving and syncing progress, verifying purchases and answering support requests. Legal basis: performing our contract with you.
• To show personalised ads and run analytics in the EU, UK and Switzerland: legal basis: your consent, which you can withdraw at any time.
• To show non-personalised ads, fix crashes, keep the game secure and prevent fraud and cheating: legal basis: our legitimate interest in running a stable free-to-play game.
• To send notifications: legal basis: the permission you give on your device.
• To keep purchase records: legal basis: our legal obligations, such as tax rules.

Who we share information with

We share information only with service providers that help us run the game, under agreements that limit how they can use it:

• Supabase: database and sign-in, with servers in Frankfurt, Germany
• Google Firebase: analytics, crash reports and push notifications
• AppLovin and the advertising partners listed above
• Apple and Google: app distribution, purchases and sign-in

We may also disclose information when the law requires it, or to protect our rights and the safety of players. We don't sell personal data.

International transfers

Our database is in the European Union. Some providers, such as Google, AppLovin and advertising networks, may process data in other countries, including the United States. Where required, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses and, for players in Türkiye, the transfer conditions of the Turkish Personal Data Protection Law (KVKK).

How long we keep information

We keep your player account and saves for as long as you have an account. When you delete your account, we delete your profile, cloud saves, save history, notification settings and linked support messages. We keep purchase records only for as long as tax and accounting laws require. Analytics data is kept for up to 14 months and crash reports for up to 90 days.

Your choices

• Turn notifications on or off in Settings → Notifications or in your device settings.
• Change your ad privacy choices in Settings → Ad privacy preferences (EU, UK and Switzerland) or your device's tracking settings.
• Reset your progress in Settings → Reset progress.
• Delete your account and cloud data in Settings → Delete account, or on our account deletion page.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its use, to receive a copy in a portable format, and to withdraw consent. To use these rights, write to [email protected] and include your player ID from Settings. We reply within 30 days. You can also complain to your local data protection authority. Players in Türkiye can read our KVKK disclosure (in Turkish).

Children

Cargo Jam is not directed at children under 13, and we don't knowingly collect their personal data. If you believe a child has given us personal data, contact us and we'll delete it.

Security

Data is encrypted in transit, access to our database is restricted, and secret keys are never shipped inside the app. No system is perfectly secure, but we work hard to protect your information.

Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes, we'll also let you know in the game.

Contact

Tuval Studio, Istanbul, Türkiye · [email protected]