Trappy Curd ("the game") is developed by Illés Máté Csaba (egyéni vállalkozó), Hungary. Contact: support@trappycurd.com. This policy explains what the game stores and sends, why, and what you can do about it.
What the game stores on your device
Settings (language, sound, vibration) and local progress (best score, coins, unlocked skins, quests, achievements, boosts) are stored on your device.
Online services
Anonymous account and cloud save (Unity Gaming Services): the game signs you in anonymously and keeps a copy of your progress in Unity Cloud Save so it survives a reinstall or a new phone. This uses an anonymous player ID and technical data such as your IP address, processed by Unity under its own privacy policy. No name, email or contact details are needed to play.
Game server (Unity Cloud Code and Cloud Save): to keep the game fair, your premium currency (gems), the skins you bought, reward claims (daily reward, wheel spins, quests) and your score runs (when a run started and what score it ended with) are kept on our game server, linked to your anonymous player ID. This is how the game stops scores and gems from being invented by modified copies of the game.
Leaderboard: your score and a display name are sent to Unity Leaderboards to show the global ranking. By default the display name is a generated one (for example "Brave_Fox#1234").
Device integrity check: to make sure scores and rewards come from the genuine, unmodified game, the game asks Google Play Integrity (Android) or Apple App Attest (iOS) for a token that proves this. The token is sent to our game server, which checks it with Google or Apple. We keep only the result ("verified until ..."). It does not tell us who you are.
Purchases: processed by Google Play or the Apple App Store. We do not receive your payment details. Our game server receives the purchase receipt (order ID and product) and checks it with the store so the gems or skin you paid for are delivered once.
Ads (optional rewarded videos): provided by Unity LevelPlay (ironSource) and its ad partners. They may process your advertising ID and device information under their own privacy policies. You are asked first whether ads may be personalized and you can still watch ads if you decline. On iOS the system also asks whether the app may track you.
Facebook (optional)
Connecting Facebook is optional; the game is fully playable without it. If you tap Connect in Settings and log in with Facebook:
What we receive from Facebook: your public profile (name and your app-specific Facebook user ID) and, if you allow it, the list of your Facebook friends who also play this game (Facebook never gives us your other friends).
What we do with it: link the Facebook account to your anonymous player so your progress can be restored on a new phone; show only your first name on the leaderboards; and show you and your friends each other's scores on the Friends tab. To let friends find your score, your app-specific Facebook user ID is stored in a publicly readable field of your cloud save. We never post on your behalf and do not receive your password.
One-time bonus: a record that the connect bonus was claimed is kept so it cannot be claimed twice.
iOS: Facebook's full login needs the system "tracking" permission. If you decline, you can still use Facebook's Limited Login (name only: no friends list or cloud-save link).
Before you connect, the Facebook SDK is not started at all, so nothing is sent to Meta. Even after connecting, it is configured not to log app events or collect your advertising ID.
Disconnecting: Settings > Facebook > Disconnect removes the Facebook link and deletes the public Facebook ID field. You can also remove the game in Facebook (Settings > Apps and websites).
Sign in with Apple (optional, iOS)
On iPhone you can instead (or as well) tap Continue with Apple in Settings. Sign in with Apple is optional too.
What we receive from Apple: only an anonymous, app-specific Apple user ID inside a signed token. The game does not ask for your name or email address, so Apple does not share them.
What we do with it: link your Apple ID to your anonymous player so your progress can be restored on a new phone, and record that the one-time connect bonus was claimed (the bonus is paid once, whether you connect Facebook or Apple).
Disconnecting: Settings > Apple > Disconnect removes the link. You can also stop using your Apple ID with the game in iPhone Settings > your name > Sign-In & Security > Sign in with Apple; the game then removes the link the next time it starts.
To run the game you asked for - account, cloud save, leaderboard, purchases, rewards (performance of the service).
To keep the game fair and prevent fraud - server-side checks of scores, rewards and the integrity token (our legitimate interest).
For personalized ads and for Facebook / Sign in with Apple features - only with your consent, which you can withdraw (Settings, or by disconnecting Facebook or Apple).
Children
The game is intended for people aged 13 and over and does not knowingly collect personal data from children under 13 (16 where applicable). Facebook login is only available to people old enough to have a Facebook account.
Your rights
Under the GDPR you may ask us to access, correct or delete data we hold about you, or withdraw consent. You can delete your online account, cloud save, server records (gems, purchases, claims, runs) and Facebook / Apple links yourself at any time in the game (Settings > Delete my data). Otherwise email support@trappycurd.com and include your Support ID, shown at the bottom of the game's Settings screen (tap it to copy). It identifies your account exactly, so we can act on the right data and only on yours. Details: https://trappycurd.com/data-deletion.html. You may also complain to your local data protection authority.
Retention
Cloud-save progress, server records and leaderboard entries are kept while your anonymous account exists. After you delete your account in the game, a leaderboard score may remain without a name or any link to you until removed on request. Purchase records are also kept by Google or Apple under their own rules. Data held by Meta, Unity, Google, Apple and the ad network is kept under their policies.
Changes
We may update this policy; the date above shows the latest version.