Indea Games (“we”, “us”, “our”) is an independent mobile game studio. This privacy policy covers the mobile game Twobble (package name com.indeagames.mergebubble) on Android and iOS. It explains what data is processed when you play, why, and the choices you have. It applies only to this app — our other games have their own policies at indeagames.com/privacy.
Who is responsible. The provider of Twobble is Indea Games. Indea Games decides why and how the analytics data described in section 5 is used (in data protection terms, it is the controller of that data) and is the contact for privacy questions: indeagamesstudio@gmail.com. The advertising and purchase providers described in section 3 collect some data for their own purposes and are responsible for it under their own privacy policies.
You do not need an account to play Twobble. We do not ask for your name, e-mail address, phone number or password, and we do not collect your contacts, photos, files, microphone, camera, precise GPS location, health data or payment card details. Your game progress is stored only on your device. The third-party services built into the game collect some device information directly from your device — such as your advertising ID and IP address — to show and measure ads and to process optional purchases; the advertising companies send us only summary reports, and we do not receive that information ourselves. The game also uses Google Analytics for Firebase to understand how the game is used. Unlike the advertising data, we do receive this analytics data, as pseudonymous event data tied to a random installation ID and not to your name or e-mail address (see section 5). Your saved game itself is not uploaded: analytics events only describe what happened, for example that a level was finished. The game also offers optional rewarded ads, which you choose to watch in return for an in-game reward. Purchase records are different: RevenueCat processes them on our behalf and we can see them in our RevenueCat account (see "Storage and deletion"). Some of it counts as personal data under laws such as the GDPR, and the rest of this policy explains how it is handled.
Progress, coins, gems, boosters, unlocked looks (arena themes and bubble styles), missions, a record of the purchases already credited to the game (so that each purchase is credited only once), settings (music, sound, haptics, reduced motion, notification choice), your best endless score, the number of times you opened the game and the time of day you usually play (used only to pick a reminder time). This is stored on your device and is removed when you uninstall the game. Depending on your device settings, it may also be included in your device or cloud backups (Google or iCloud). Because there is no account, gems, coins and boosters (including ones you bought) are not stored by us and cannot be restored on a new device unless your own device backup restores the game's data; the Restore Purchases button brings back Remove Ads and the Starter Pack ownership only.
The advertising companies listed in the Third-Party SDKs section collect this information directly from your device when you use the game; we receive only summary reports from them. Purchase information is processed for us by RevenueCat, which receives it from the game. Analytics data is collected for us by Google (Firebase), which acts as our service provider (see section 5).
Yodo1 MAS provides ad mediation (it connects the ad networks listed in the Third-Party SDKs section), consent management, and analytics and diagnostics for the ad service. ThinkingData is included in Yodo1 and provides analytics for the ad service. AppHarbr and IronSource AdQuality perform ad quality and security checks. Pangle includes its bundled TikTok Business SDK. HyperBid Tools (part of the TopOn family) is an ad mediation component delivered with the ad service; see https://www.toponad.net/en/privacy-policy. The Open Measurement SDK (an IAB Tech Lab standard, packaged by Appodeal) measures ad viewability; see https://iabtechlab.com/standards/open-measurement-sdk/. Smartdigimkt is an ad component delivered with the ad service (together with the TopOn / AnyThink part of it); see the TopOn and Yodo1 MAS cards in the Third-Party SDKs section.
Which ad networks actually serve ads at a given time is configured in the Yodo1 MAS dashboard and can change. The game does not include a separate crash-reporting SDK; the ad service has its own diagnostics. The ad service also delivers small helper components (for example for ad delivery, networking and fraud checks) that are not listed one by one, and ads are shown in web views, so ad companies may use cookies or similar technologies on your device.
We do not sell your personal information for money, and the advertising companies send us only summary reports. The advertising providers in the Third-Party SDKs section receive advertising identifiers and device information directly from your device and may use them for personalised advertising, which some laws describe as a "sale" or "sharing"; use the choices described under "Tracking, personalised ads and your choices" to opt out. We use Yodo1 MAS as our ad-mediation provider. We send analytics data to Google (Firebase) as our service provider so that it can process it for us as described in section 5; we do not give it to anyone else, and we do not sell it. Each provider in the Third-Party SDKs section handles information under its own privacy policy and the data protection law that applies to it. Some providers are located outside your country and may process data in other countries under their own policies and safeguards.
We may update this policy when the game or its services change. The date at the top shows the latest version. For material changes we will also say so in the app's update notes or in the app, where the law requires it.
Twobble is free to play and is funded by ads (including optional rewarded ads) and optional in-app purchases. Ads are delivered through the Yodo1 MAS mediation platform and purchases through RevenueCat, Google Play and the Apple App Store; analytics events are handled by Google (Firebase). To do this, the app includes the third-party SDKs listed below. Each SDK collects the data shown on its card directly from your device, which means that data is shared with the vendor named on the card, and each vendor processes it under its own privacy policy, linked there. The same disclosures are reflected in the app’s Google Play Data Safety section and Apple App Privacy label. Mediation means Yodo1 passes each ad request on to a number of partner ad networks and serves whichever one fills it, so the data on the Yodo1 card is also received by the network that ultimately shows you the ad. Yodo1 maintains the current list of those partners, and each of them processes data under its own privacy policy; the Yodo1 policy linked below is the authoritative starting point for that list.
Yodo1 Ltd.ad mediation
Data this SDK may collect:
ThinkingData, Inc., on behalf of Yodo1 Ltd.ad and SDK performance measurement for Yodo1 MAS
Data this SDK may collect:
Five Media Marketing Limited (GeoEdge)ad quality and safety monitoring
Data this SDK may collect:
Google LLCadvertising
Data this SDK may collect:
AppLovin Corporationadvertising
Data this SDK may collect:
Meta Platforms, Inc.advertising
Data this SDK may collect:
ByteDance Pte. Ltd.advertising
Data this SDK may collect:
Mintegral International Limitedadvertising
Data this SDK may collect:
Liftoff Mobile, Inc.advertising
Data this SDK may collect:
Unity Technologiesadvertising
Data this SDK may collect:
Unity Technologies (ironSource Ltd.)advertising and ad mediation
Data this SDK may collect:
Digital Turbine, Inc.advertising
Data this SDK may collect:
Moloco, Inc.advertising
Data this SDK may collect:
BidMachine Inc.advertising
Data this SDK may collect:
TopOn Pte. Ltd.ad mediation
Data this SDK may collect:
InMobi Pte. Ltd.advertising
Data this SDK may collect:
BIGO Technology Pte. Ltd.advertising
Data this SDK may collect:
Google LLCanalytics (our service provider)
Data this SDK may collect:
Firebase privacy documentation Google privacy policy
RevenueCat, Inc.in-app purchase validation and restore
Data this SDK may collect:
Ads in Twobble may be personalized (chosen using your advertising ID and inferred interests) or non-personalized (chosen only from context, such as the game you are playing and your approximate region). Where the law requires it — for example under the GDPR — personalized ads are only shown with your consent, and declining consent means you see non-personalized ads instead; the game itself stays fully playable either way.
Your device’s advertising ID is a resettable identifier that ad networks use for frequency capping, fraud prevention, measurement and personalization (with your consent where the law requires it). You are in control of it:
Settings → Privacy → Ads) lets you reset your advertising ID or delete it entirely, which stops personalized ads from using it.
for your permission before the app can access the IDFA; if you decline, the app and its SDKs cannot read the IDFA, and ads are not personalized using your activity in other companies’ apps and websites. You can change your choice at any time under Settings → Privacy & Security → Tracking, and disable Apple’s personalized ads under Settings → Privacy & Security → Apple Advertising.
Twobble uses Google Analytics for Firebase. The game does not include Firebase Crashlytics or Remote Config. Indea Games decides why Analytics is used; Google processes the data for us as our service provider under Google’s Firebase terms, which include data processing and security terms (Google’s own use of some data is described in its documentation: see firebase.google.com/support/privacy and the Google Privacy Policy). The advertising software described in section 3 also has its own analytics for the ad service (ThinkingData in Yodo1 MAS, see its card); that is separate from this section. Basic, aggregated performance data may also be reported by the app stores.
The game's Firebase Analytics configuration disables advertising identifier collection, advertising storage, advertising user data and advertising personalization. We use Analytics for gameplay and reliability measurement. Advertising SDKs have their separate identifiers and consent rules, described above.
To understand how the game is used, to fix balance problems (for example levels that are too hard), to measure how many players come back and how much revenue the game earns, and to improve the game. We do not use this data to make decisions that have legal or similarly significant effects on you.
Analytics: where the law requires consent (European Economic Area, United Kingdom and Switzerland) we use Analytics on the basis of your consent, which we ask for in the consent form; in other places we rely on our legitimate interest in understanding and improving the game, or on what the local law permits.
The data is processed by Google, which operates globally (see section 10). If we enable an export to a Google BigQuery project controlled by Indea Games, we use an EU dataset and analyze installation identifiers without advertising identifiers. Exported data is subject to the retention limit below.
exported copy in BigQuery for longer than that. Aggregated statistics that cannot be tied to an installation (for example the number of players per day) may be kept longer.
Analytics starts only after the consent SDK has determined which consent flow applies and the game's collection rules allow it. The game does not use your device language or locale to assume your location or consent. If consent is refused or becomes unknown, collection is disabled. Development builds do not send gameplay events to the production Firebase project.
applies to you, and change or withdraw your choice. Withdrawing consent does not affect the processing that happened before.
the tracking permission under Settings > Privacy & Security > Tracking). This affects the advertising identifier only; the random installation ID stays until you uninstall the game.
(see section 2, "Storage and deletion", and section 8). In places where the consent form does not appear there is no in-game switch for analytics; the options above and a request to us still apply.
Twobble requests only the permissions it needs to work:
Twobble is intended for players aged 13 and over. It is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them, including through analytics events. The game has no accounts and does not ask for a name, e-mail address or contacts. If you believe a child has provided us personal information, contact us at indeagamesstudio@gmail.com and we will take steps to delete it.
Depending on where you live, you may have legal rights over your personal data, including the following.
If you are in the EU/EEA, the UK or Switzerland (GDPR, UK GDPR or the Swiss data protection law): you have the right to access, rectify, erase and receive a portable copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Our legal bases are your consent (personalized advertising, use of advertising identifiers and analytics where the law requires consent), performance of our contract with you (processing and restoring your in-app purchases), our legitimate interests (non-personalized ads, fraud prevention and analytics where consent is not required) and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.
If you are a California resident (CCPA/CPRA): you have the right to know what personal information is collected about you, to request its deletion, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. Showing personalized ads can, however, count as “sharing” (and in some cases a “sale”) as the CPRA defines those terms broadly; you can opt out by limiting ad tracking on your device (see section 4) or by using the vendor opt-out links in section 3. We will never discriminate against you for exercising these rights.
Because most advertising data described in this policy is collected directly by the SDK vendors in section 3, requests about that data are fastest through the vendor’s own privacy page. For analytics data (section 5), purchase records, or anything else — or if you would like our help — email us at indeagamesstudio@gmail.com and we will respond within the time required by law.
Game data on your device is kept until you delete the game or clear its data. We have no game servers of our own. Purchase records are held for us by RevenueCat and can be deleted on request (see section 2, "Storage and deletion"). Analytics data is kept for up to 14 months (section 5). Advertising and diagnostics data of the ad service is kept by the service providers for the periods stated in their own policies. Data collected by third-party SDKs is retained by those vendors according to their own published retention periods, as described in their privacy policies. The SDK vendors protect data with industry-standard safeguards such as encryption in transit, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The SDK vendors listed in section 3 operate globally, so data they collect may be processed in the United States and other countries outside your own. This includes Google (Firebase), which may process analytics data in the countries where it operates; any export we enable to our own BigQuery project uses an EU dataset. Where data leaves the EU/EEA or UK, the vendors rely on recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (for example the EU–U.S. Data Privacy Framework, where the vendor is certified). Details are in each vendor’s privacy policy.
If we add an SDK, remove one, or change how data is handled, we will update this page and change the effective date at the top; where required, we will also give additional notice. The current version always lives at indeagames.com/privacy/twobble.
Questions, concerns, or a privacy request? Indea Games is responsible for this app. We are a small team and we actually read our email: indeagamesstudio@gmail.com.