Privacy Policy

Draft for review. This is not yet the official privacy policy for the App Store. The native iPhone build, Google AdMob data handling, and consent flows have not been confirmed on a device. This page will be dated and published after that review is approved.

Who publishes Poppy Pots

Michael Nguyen, an individual developer, publishes Poppy Pots. Poppy Pots is the name of the game. This policy covers the Poppy Pots iPhone app and the website at poppypots.app.

Privacy inquiries: support@poppypots.app.

What the game stores on your device

Poppy Pots is a free, single-player puzzle. The current build does not ask you to create an account. It has no Poppy Pots server, no in-app purchases, and no social features. It does not include a Poppy Pots analytics tool or a Poppy Pots crash-reporting tool.

Progress and settings are saved in the app on your device. That includes gardens and benches you have opened, daily and Endless counters, music and sound settings, and in-game items such as petals, Garden Snippers, and Extra Pots.

The game does not ask for your name, email address, photos, contacts, or precise location. Poppy Pots does not keep a copy of this saved game. There is no cloud backup to move to another phone. The saved game lives with the app on the device.

In the current build, “Start the gardens over” in Sound resets Classic and Shuffle progress on that device. Petals, Garden Snippers, Extra Pots, and Endless counters stay.

Optional videos and advertising

You can play and finish every garden without watching a video. The current build is designed to offer optional short videos in exchange for small in-game help: taking back a few picks after a full tray, or receiving one Garden Snippers or one Extra Pot. A video is requested only after you choose to watch one. The current build does not include banner ads or full-screen ads between gardens.

Those videos are provided by Google AdMob (Google LLC) through the Google Mobile Ads SDK and the Google User Messaging Platform. The categories below are what those SDKs declare. They are separate from the progress Poppy Pots stores on your device. Poppy Pots does not receive an advertising profile from Google and does not store this advertising information.

The privacy manifest for the Google Mobile Ads SDK version integrated in this build declares that the SDK may process:

  • device identifiers, including an advertising identifier where tracking is allowed, marked as linked to you and used for tracking
  • coarse location, advertising data such as which ads are shown, and product interactions such as views and taps, marked as linked to you and not used for tracking
  • performance data, crash data, and other diagnostic data, marked as not linked to you

Google’s disclosure guidance for the Mobile Ads SDK also describes an IP address, from which a coarse location can be derived. The guidance page consulted for this draft was written for a later SDK release than the version pinned in this project, so that IP-address description is Google’s published account of the SDK, not a measurement from a Poppy Pots iPhone.

The User Messaging Platform version integrated here declares coarse location, performance data, and product interaction, and marks them as not linked to you, for app functionality. The Google Mobile Ads declarations are the broader set.

These paragraphs describe the SDK vendor’s declarations and the integration as written. They are not a log of data observed from a Poppy Pots iPhone. No ad has been confirmed on a device. Google uses this information under its own policies to deliver and measure ads, limit fraud, and improve its services.

Google describes that use in Google’s Privacy Policy and How Google uses information from sites or apps that use our services.

Consent and privacy choices

The current build is designed to ask Google’s User Messaging Platform for a consent decision before it requests an ad. Where that platform says consent is required and a form is available, the build is designed to show the form. Where the decision does not allow an ad request, the build is designed not to request one. Gameplay does not depend on watching a video.

After that step, the build is designed to ask once, if Apple has not already recorded a choice, whether Poppy Pots may track activity across other companies’ apps and websites. The tracking message in the project says you can refuse and still watch a video. A refusal is designed to allow a video without using the advertising identifier for personalization.

Whether a consent form or a tracking prompt appears has not been confirmed on an iPhone. Published Google consent messages for Poppy Pots have not been confirmed. Until a message is available from Google’s tools, there may be no form to show.

Where Google’s tools say a privacy-options entry is required, Sound is designed to include “Privacy & ad choices.” You can review app tracking on iPhone in Settings, then Privacy & Security, then Tracking. That screen is where you allow or refuse tracking requests. It does not include a control to reset an advertising identifier, and this policy does not ask you to use one.

For advertising information tied to a Google account, use Google’s privacy controls. You can report an ad from the report option on the ad, when that option is shown.

Children

Poppy Pots is not in Apple’s Kids category. In the current build, advertising requests are not tagged as child-directed and are not tagged as made for someone under the age of consent. Ad content is limited to a parental-guidance rating. A final decision on whether the app should be treated as child-directed has not been made. If that decision changes, this policy will change with it. The game does not ask children for a name, email address, or other personal details.

This website

The pages on poppypots.app are static files. They do not include accounts, analytics scripts, or advertising scripts, and they do not set their own tracking cookies.

The site is hosted on Cloudflare Pages. Serving a page can involve ordinary connection data, such as an IP address, the date and time, and the browser type, processed by the host to deliver the site and protect it. Poppy Pots does not use those logs to advertise to you or to build a profile. Static hosting does not mean a request leaves no operational data with the host.

The file at /app-ads.txt is a public text file that lists an authorized advertising seller for the app. Opening it does not run a script in your browser. A request for the file can still appear in the host’s ordinary connection logs, like a request for any other page.

How long information is kept

Saved progress remains on the device until the app is removed or the device clears the app’s storage. Poppy Pots has no server copy of gameplay to delete on request.

Information Google processes is kept under Google’s own rules. Michael Nguyen cannot delete Google’s copies.

Your choices where you live

Depending on where you live, you may have rights to access, correct, delete, or object to personal information. Poppy Pots does not hold an account or a server copy of your play. For information held by Google, use Google’s privacy tools linked above.

Changes

This draft has no effective date. When it is adopted, the date will be shown here. A later change that matters will be noted in the app’s release notes.

Privacy questions

Email support@poppypots.app. Please do not send passwords or the contents of a private message.