Privacy Policy

Last updated: 26 September 2026

This policy explains how the CardMoji app for iOS ("the App"), made by Hasan Burak Dümer ("we"), handles data. CardMoji is a free-to-play memory card game with optional ads and an optional one-time "Remove Ads" purchase.

The short version

No accounts. We never ask for your name, email, phone number or any other contact details.
Your game save stays on your device. Levels, stars, streaks and settings are stored locally and are not uploaded to any server of ours. We do not run our own servers.
No user-generated content. There is no chat, no sharing and no content you create that leaves the device.
The App uses the third-party services below for ads (Google AdMob), analytics and crash reports (Google Firebase Analytics and Firebase Crashlytics) and purchases (RevenueCat). They collect the data described below under their own privacy policies.

Third-party services and the data they collect

Google AdMob (ads, including rewarded videos) — collects device identifiers (the advertising identifier, IDFA, only if you allow tracking; the identifier for vendors, IDFV), advertising data (ads shown and tapped), product interaction, performance and crash data, and your IP address, from which an approximate (coarse) location is estimated. If you allow tracking, AdMob may use this data to show personalised ads and to measure ads across other companies' apps and websites. Google Privacy Policy · How Google uses data from apps that use its services.

Google Firebase Analytics — collects an app-instance identifier, product-interaction events (for example levels started and completed, stars earned, streaks, whether an ad was watched, and in-app purchase events), device and OS information, and a coarse location derived from your IP address. We use it to understand how the game is played and to improve it. We do not use it for ad personalisation. Firebase Privacy and Security.

Google Firebase Crashlytics — when the App crashes or hits an error, collects a crash report (stack trace), device model, OS version, app state and an installation identifier. It is used only to find and fix bugs. Firebase Privacy and Security.

RevenueCat — processes the "Remove Ads" one-time purchase and restores it on your devices. It receives your purchase history (the App Store transaction for Remove Ads) and an anonymous app user ID. Payment itself is handled by Apple; we never see your card details. RevenueCat Privacy Policy.

Summary of data types

Identifiers (device ID) — IDFA (only with your permission), IDFV, Firebase app-instance and Crashlytics installation IDs. Used for third-party advertising, analytics and app functionality. Linked to your device and used for tracking (by AdMob, only if you allow tracking).
Usage data — advertising data and product interaction. Used for third-party advertising and analytics. Linked to your device; used for tracking by AdMob if you allow tracking.
Diagnostics — performance data (linked; used for tracking by AdMob if you allow tracking), crash data and other diagnostic data (not linked to you, not used for tracking). Used for app functionality and analytics.
Coarse location — estimated from IP address, never from Location Services. Used for analytics and third-party advertising. Not used for tracking. The App does not request or collect precise location.
Purchase history — the Remove Ads purchase. Used for app functionality and analytics. Not used for tracking.

We do not collect contact info, health, financial info, precise location, contacts, photos, browsing or search history, or any sensitive information.

Your choices: tracking and ad consent

App Tracking Transparency (ATT). The App asks for your permission before any tracking. If you choose "Ask App Not to Track", the advertising identifier is not shared and ads are not personalised using data from other companies. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
Consent (Google UMP). Where required by law (for example in the EEA, the UK and Switzerland, and certain US states), the App shows Google's consent form before ads are personalised. To change your choice later, delete and reinstall the App (the consent form is shown again) or email us and we will help.
Remove Ads. Buying Remove Ads switches off the between-level ads.
Uninstall. Deleting the App stops all collection and deletes your local game save.

Data retention and deletion

We do not hold any account or personal profile about you. Data collected by the services above is retained under their own policies (for example, Firebase Analytics data is kept for a limited retention period and Crashlytics reports for 90 days). To ask us to request deletion of analytics data associated with your device, email burakdumer22@hotmail.com.

Children

CardMoji is rated 4+ and is a general-audience game; it is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information, contact burakdumer22@hotmail.com and we will take the necessary steps.

Security

Data sent to the third-party services above is transmitted over encrypted connections (HTTPS).

Changes

We may update this policy from time to time. Changes are posted on this page with a new "last updated" date.

Contact

Questions about privacy? Email burakdumer22@hotmail.com.