Boxpush Privacy Policy

In short

Boxpush is an offline puzzle game. It asks for no account, collects no name, email or location, and your progress never leaves your phone. The only thing shared with anyone else is an advertising identifier, and only to show ads.

Who is responsible

Sergio Díaz Marcos, Principality of Andorra.
Contact: [email protected]

What stays on your device

Solved levels, best scores, games in progress and your settings are stored in a local database on the phone. They are not sent to any server, mine or anyone else's. Uninstall the app and they go with it.

What is shared, and with whom

Boxpush shows ads through Google AdMob. To serve them, AdMob accesses your device's advertising identifier and technical data such as model, operating system and approximate country. That identifier may be used to show you personalised ads.

AdMob is not the only recipient. To auction each slot, Google shares that identifier and those technical details with the ad buyers on its platform — hundreds of companies. In the European Union, the UK and Switzerland you will see the full list and can accept or refuse it in the consent form shown before the first ad; if you refuse, you will still see ads, but not personalised ones.

Advertising is the only third-party processing the app performs: there is no analytics, no usage tracking and no other integration. You can read how Google uses data from its partners.

In-app purchases are processed by Apple. I never see or receive your payment details — only whether the purchase went through.

Your consent

If you are in the European Economic Area, the United Kingdom or Switzerland, the first time the app is about to show an ad you will see a Google consent form. That is where you decide whether to accept personalised ads.

You can say no. The game works exactly the same and ads still appear, just without personalisation. To change your mind later, on iOS you can withdraw tracking permission under Settings › Privacy & Security › Tracking.

Legal basis

Personalised advertising relies on your consent. Non-personalised advertising and running the game rely on the legitimate interest of sustaining a free app.

Children

Boxpush is not directed at children under 13 and does not knowingly collect their data. If you believe a child in your care has provided data, write to me and I will sort it out.

Your rights

You may request access, rectification, erasure, restriction, portability or object to processing by writing to [email protected].

In practice, since I hold nothing of yours on any server, you can exercise erasure yourself by uninstalling the app. For whatever AdMob has collected, the direct route is Google's own form, because Google holds that data and I do not.

Applicable law

The controller is established in the Principality of Andorra, so Llei 29/2021, qualificada de protecció de dades personals applies. As the app is also offered to users in the European Economic Area, Regulation (EU) 2016/679 (GDPR) applies as well under its Article 3(2).

If you believe I have not handled your rights properly, you may complain to the Andorran Data Protection Agency or to the supervisory authority where you live.

Changes

If this policy changes, the date above will be updated. Changes affecting what is collected will be announced inside the app before they take effect.