Privacy Policy

1. Who we are

These games are published by Michał Daniel Dobrzański, trading as Oscillator Michał Dobrzański, ul. Św. Wincentego 110/65, 03-291 Warszawa, Poland ("we", "us"). We are the data controller for the processing described here. Contact: dobrzanskioscillator@gmail.com.

2. Which apps this covers

This one policy applies to every game we publish under the Oscillator Games name, because all ten behave identically with respect to data: Dino Jump, Saper, 2048 Merge, Snake Classic, Flappy Wings, Brick Breaker, Memory Match, Color Memory, Sudoku Classic and 15 Puzzle.

3. Data stored on your device only

To work as a game, each app stores a small amount of data locally (Android: app preferences; iOS: user defaults):

• your best score and the results of your last 10 finished rounds (shown in the in-game scores list) — for some games these are move or round counts rather than points;
• your language choice, if you picked one instead of following the system language;
• your advertising-consent choice, recorded by AppLovin's consent SDK.

We never receive this data — it stays on the device and is removed when you uninstall the game. On Android it may be included in your device's standard encrypted backups, which your device settings control.

4. Advertising — the data that does leave your device

The games are free and are funded by full-screen ads shown only after a round ends (never during play), at most every second round and no more than once a minute. Ads are served by AppLovin MAX (AppLovin Corporation, 1100 Page Mill Road, Palo Alto, CA 94304, USA) through the AppLovin SDK embedded in the app. It is the only advertising library in the app.

When an ad is requested, the SDK sends AppLovin information that typically includes:

• your device's advertising identifier (Android Advertising ID, or the iOS IDFA where you have allowed tracking);
• your IP address, and the approximate location AppLovin derives from it;
• device and app information: model, operating-system version, language, screen size, the app's identifier and version;
• ad-interaction data: which ads were shown, whether one was clicked or closed, and how long it was visible.

AppLovin uses this to select and cap ads, to measure them, and to detect invalid traffic and fraud. Where you have consented (or where personalized advertising is lawful without consent), the data may also be used to build an advertising profile and personalize ads across apps and sites. AppLovin acts as an independent controller for that processing under its own terms — see the AppLovin privacy policy.

MAX is a mediation platform: it can auction each ad slot between several advertising networks. In the current release no additional networks are enabled, so ads come from AppLovin's own exchange and AppLovin is the only recipient of the data above. If we add mediated networks later they become recipients of the same categories of data, and we will update this policy and the stores' privacy declarations before that ships.

We ourselves receive only aggregate, non-identifying reporting from AppLovin (impressions, clicks and revenue per game and country). We do not receive your advertising ID, and we cannot identify you from those reports. We do not sell personal data, and we use no attribution service.

Your legal basis and your choices

In the European Economic Area, the United Kingdom and Switzerland, the first launch shows AppLovin's Google-certified consent form (its Consent Management Platform) before any ad loads. The legal basis for personalized advertising and the associated storing of, and access to, information on your device is your consent (Article 6(1)(a) GDPR and the ePrivacy rules). If you decline, the games still work in full and you see non-personalized ads instead. You can change or withdraw your choice at any time through the Privacy options link shown in the game; withdrawal does not affect processing that already happened.

On iOS the system additionally asks, through Apple's App Tracking Transparency prompt, whether the app may track you across other companies' apps and websites. If you decline, the IDFA is not available to the SDK and you get non-personalized ads. You can revisit this in iOS Settings → Privacy & Security → Tracking.

Outside the EEA/UK/Switzerland, personalized advertising is based on our and AppLovin's legitimate interest in funding a free game (Article 6(1)(f) GDPR where it applies). You can still limit it with your device controls: Android's Settings → Privacy → Ads lets you delete or reset the advertising ID, and iOS lets you deny tracking as described above.

5. Usage analytics

Some of our games include Google Firebase Analytics (Google Ireland Limited / Google LLC) so we can see how the games are actually played and improve them. It records a small set of app-interaction events — a round started, a round ended and its score, a new personal best, a difficulty or language chosen, an ad shown or skipped, and the revenue an ad impression earned. Alongside those, Firebase automatically collects a randomly generated app-instance identifier, your device's advertising identifier, and basic technical context: device model, operating-system and app version, and an approximate region Google derives from your IP address.

We use it for exactly two things: understanding which features get used, and understanding how much revenue the ads produce so we can keep the games free. It never records anything you type, and there is nothing to type — the games have no text input, no account and no contacts access. We do not use it to build advertising profiles, and we do not sell or share this data.

Firebase Analytics acts as our processor for this, and Google processes the data under its own terms — see Firebase privacy and Google's Privacy Policy. The legal basis is our legitimate interest in maintaining and improving the games and in measuring the advertising that funds them (Article 6(1)(f) GDPR); for the advertising identifier, the consent you give in the consent form described above also governs this use. You can stop future collection at any time by clearing the app's data or uninstalling the game, and Android lets you reset the underlying identifiers. The current iOS builds contain no analytics SDK; if that changes we will update this policy first.

5a. The remove-ads purchase

Some of our games offer a single optional one-time purchase that permanently removes the between-round ads. If you never buy it, nothing in this section applies to you and no purchase data is processed at all.

Payment itself is taken by Google Play or the App Store under their own privacy policies. We never see or receive your card details, billing address or any other payment information.

To check whether you own the unlock — including after a reinstall or on a second device — we use RevenueCat, Inc. (a US company) as our processor. When you buy or restore, RevenueCat receives the store's purchase receipt and transaction identifiers, a randomly generated app-user identifier it creates for your install, and basic technical context such as device model, platform and app version. It validates the receipt with the store and tells the app whether the ad-free entitlement is active. It does not receive your name, email, payment details or store account name, and we do not use any of it for advertising.

The legal basis is performance of a contract (Article 6(1)(b) GDPR): keeping a purchase you paid for working across your devices is the thing you bought. This data is not covered by the advertising consent form, because it is not advertising and is only processed once you choose to buy or restore. RevenueCat processes it in the United States under the safeguards in its own policy — see RevenueCat's Privacy Policy. Purchase records are kept for as long as the entitlement exists, since deleting them would revoke an unlock you paid for; the stores keep their own transaction records under their retention rules.

6. Permissions the games use

Two permissions come from the game itself; the rest are added automatically by the AppLovin SDK, which is why they appear in the app's permission list on the store page.

The games use no location, camera, microphone, contacts, storage or any other sensitive permission, and they do not read or write your files, contacts or accounts. Some games offer one optional in-app purchase, described in section 5a.

7. International transfers

AppLovin is a US company and processes advertising data outside the European Economic Area, including in the United States. RevenueCat, which validates the remove-ads purchase for the games that offer it, is also a US company and processes that data in the United States. Both rely on the safeguards described in their own privacy policies, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Because we receive only aggregate reporting, we transfer no personal data ourselves.

8. Retention

Data stored on your device stays until you clear the app's data or uninstall it. Advertising data collected by AppLovin is retained under AppLovin's own retention schedule, described in its privacy policy. The aggregate reporting we see contains no personal data and is kept for as long as we run the games.

9. Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time. Because we hold no data that identifies you — the analytics we see is anonymous and aggregated, and we never receive your advertising ID — we normally cannot single out your records (Article 11 GDPR). Requests about advertising data should go to AppLovin through the controls in its privacy policy. We will always help you route a request, and everything held on your device is erased by uninstalling the game. Write to dobrzanskioscillator@gmail.com and we will respond within 30 days.

You may lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office — Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. Residents of other EEA states may complain to their own local authority.

California residents. We do not sell or share personal information for cross-context behavioural advertising within the meaning of the CCPA/CPRA, and we hold no personal information about you to disclose or delete. AppLovin's use of advertising data is governed by its own notice and opt-out controls.

10. Children

The games are simple and suitable for all ages, but they are not directed to children and we do not knowingly collect personal data from children. Because they carry advertising and no age gate, they are published for a general audience rather than as children's apps. If you believe a child has provided data through one of the games, contact us and we will act on it.

11. Changes to this policy

If a future version of any game changes what data it handles, we will update this policy — with a new effective date — before that version ships.

12. Contact

Oscillator Michał Dobrzański
ul. Św. Wincentego 110/65
03-291 Warszawa, Poland
dobrzanskioscillator@gmail.com