What the game knows about you.

Pegboard Seven is a game. It has no accounts, no sign-in, no messaging and no profile. We never ask for your name, your email address or your location, and there is nowhere in the app to type any of them.

This page describes version 1.1, which added advertising, in-app purchases and advertising measurement. What follows is everything the app stores or sends, described plainly.

Who is responsible

The data controller is RockPaperScissors, the trading name of Nurçin Ehlimanoğlu, a sole proprietorship registered in Türkiye, reachable at nehlimanoglu@gmail.com. There is no data protection officer: the business is one person, and that person reads the address above.

What stays on your device

Your progress is saved on the phone itself, using Apple's standard storage (UserDefaults). It never leaves the device and we cannot read it. It holds exactly this:

• which levels you have unlocked, and the stars on each one
• your coin balance, and which purchases you own
• daily-reward streak, weekly event progress and star chests opened
• which chapter briefings and home-screen benches you have already seen
• your settings: sound, music, haptics, reminders, colour shapes, calm motion and language
• a random identifier created on your device, used as described under Measurement

Deleting the app deletes all of it, and MORE › Reset Progress clears progress from inside the game. Purchases you own are held by Apple and come back with SHOP › Restore Purchases.

What the app sends

Analytics — Google Firebase

We record how the game is played so we can tell which levels are unfair and where people stop. These are the events, in full:

Event	What it carries
level_start	level, whether it is a hard level
level_complete	level, stars, moves, screws sent to the tray, coins earned
level_fail, level_quit, level_skipped	level, reason, moves
rescue_offered, rescue_taken	level, reason, coin cost, coin balance
booster_used	which booster, coin cost
daily_claim, event_claim	day or milestone, coins received
ad_shown, interstitial_shown, ad_revenue	ad format, where it was shown, the ad network and what the impression earned
iap_click, iap_purchase, iap_failed, iap_restore	which product, its price tier, whether it went through
att_answered, notify_asked, rating_asked, language_set	the answer or choice, nothing more
exception	a shortened error message, where in the code it happened, level

None of that identifies you. Firebase itself also collects standard technical information we do not choose the contents of — an app-instance identifier, your device model and operating system version, and a coarse country or region worked out from your IP address. The app uses Firebase's variant that has no advertising-identifier support, so Firebase never reads the IDFA. See Firebase privacy.

Crash reports — Firebase Crashlytics

When the game crashes, a report is sent so the fault can be found. It carries the technical state of the crash — the stack trace, your device model and iOS version, how much memory was free — and the little we add on purpose: which level you were on, whether it was a hard level, and your coin balance. There is no name, no address and no account in it, because the game holds none.

Purchases — Apple

Coin packs, the starter pack and the ad-free upgrades are sold through the App Store. Apple handles the payment; we never see your card, your Apple ID or your name. The game receives only a confirmation of which product was bought, and records the event above.

Advertising

Pegboard Seven shows advertisements from version 1.1. They appear in two places and nowhere else: a full-screen ad between levels, and an ad you choose to watch in exchange for something — emptying a jammed tray, extra moves, an extra slot on your next try, skipping a level, doubling a level's coins, or free coins in the shop. There is no banner. Buying either ad-free upgrade stops the full-screen ads; the ads you choose to watch stay available.

The ads are filled by AppLovin MAX, which runs an auction between several ad networks for each slot and shows whichever bids highest. The networks that take part are AppLovin, the AppLovin Exchange, Unity Ads and Google AdMob. Each of them receives the request and, with it, your device's advertising identifier where you have allowed one, along with your approximate location by country, your device model and its operating system version. They use it to choose an ad and to count whether it was seen.

Measurement — AppsFlyer and Meta

Two further SDKs tell us which advertisement brought someone to the game, so we know which campaigns are worth paying for:

• AppsFlyer receives the install and launches, a handful of progress milestones (clearing level 1, 3, 5, 10, 15, 20, 30, 40, 50, 75, 100, 150, 200, 250 and 300), each purchase with its price and currency, and what each ad impression earned. With them goes the random identifier created on your device (so the same phone is not counted twice), and your advertising identifier where you have allowed it.
• Meta's SDK, for advertising we run on Facebook and Instagram, receives the install and launches, App Store purchases (read by the SDK from Apple's purchase record), the same progress milestones and ad impressions. It receives device-level identifiers, not your profile on Facebook or Instagram, and the game does not use Facebook Login.

You are asked first

After your first cleared level, iOS asks whether Pegboard Seven may track you across other companies' apps and websites. If you decline, the advertising identifier is withheld from every SDK above, and ads and measurement work without it. In the EEA and the UK you are additionally shown a consent form, run by Google's User Messaging Platform, before any personalised advertising happens; you can reopen it at any time from MORE › Ad consent.

Reminders

If you allow notifications, the game schedules its own reminders on your phone (one evening note a day at most). They are created on the device; nothing is sent to a server and no push token is collected.

Why we are allowed to do this

Under the GDPR the basis for analytics and crash reports is legitimate interest (Article 6(1)(f)): knowing which levels are unfair and which crashes are real is what makes the game fixable, and it is done with data that identifies nobody.

Advertising and measurement are different. Personalised advertising, and the advertising identifier it runs on, happen only where you have agreed to them — through the iOS tracking prompt, and in the EEA and the UK through the consent form described above. Withhold that and the ads still appear, chosen without anything that follows you between apps. Withdrawing it later is a setting, not a request to us: MORE › Ad consent, or Apple's Settings › Privacy & Security › Tracking.

Purchases are processed to perform the contract you enter when you buy (Article 6(1)(b)).

How long it is kept

Individual analytics events are held for 2 months, and the anonymous identifier a device is counted under for 14 months after its last event; Google deletes both when the period runs out. Crash reports are kept by Crashlytics for around 90 days. Nothing is archived elsewhere, and we never sell or rent any of it. What the ad networks and measurement partners receive is kept under their own retention terms, which we do not set and cannot shorten.

Where it goes

Firebase is run by Google, and AppLovin, Unity, Google, AppsFlyer and Meta are established in the United States; the data leaves Türkiye and the EEA and is processed there and wherever else they operate. Each relies on the European Commission's standard contractual clauses, and on the EU–US Data Privacy Framework where it is certified under it. Their own policies are the authority on what they do with what they receive: Firebase, AppLovin, Unity, Google, AppsFlyer, Meta.

Children

Pegboard Seven is not directed at children under 13, and we do not knowingly collect anything from them. There is no chat and no user-generated content. If you believe a child's data has reached us through this app, write to nehlimanoglu@gmail.com and we will remove what we can.

Your rights

Rights of access, correction, deletion, objection and portability exist under the GDPR, the UK GDPR and Türkiye's KVKK (Law 6698). Because we hold nothing that identifies you by name, there is usually little for us to look up — but write to nehlimanoglu@gmail.com and we will help as far as the data allows, including with requests to the partners named above.

• Stop personalised ads and tracking: decline the iOS prompt, or turn it off later in Settings › Privacy & Security › Tracking; in the EEA and UK, MORE › Ad consent.
• Stop analytics and crash reports: delete the app.
• Delete your progress: MORE › Reset Progress, or delete the app.

You may also complain directly to a supervisory authority — your national authority in the EEA, the ICO in the UK, or the Personal Data Protection Authority (KVKK) in Türkiye — without contacting us first.

If this changes

If a later version sends anything new, this page is updated before that version ships, together with the App Store privacy label. The line below tells you which version you are reading about.

Contact

nehlimanoglu@gmail.com — replies within three working days.

Applies to Pegboard Seven version 1.1. Last updated 25 September 2026.