Privacy Policy: Boop the Blob
The short version
- There is no account. Your game progress is saved on your device only.
- We measure how the game is played with our own analytics, tied to a random install ID that is not linked to your name, email or advertising ID. You can turn this off in Settings → Share anonymous gameplay stats.
- Ads are rewarded only: you choose to watch one for a bonus. Ads are served by Google AdMob and are family-friendly (G-rated) for everyone. They are personalized only if you say yes, and never for players under 15.
- Purchases go through Apple. We never see your payment details.
- We do not sell your data for money. We do not share it for targeted advertising unless you allow personalized ads.
1. Who is responsible for your data
Boop the Blob (the "app") is a Pocket Gremlin game. Pocket Gremlin is the games label of Studio Power-Up LLC, a New York limited liability company (registered with the New York Department of State as "Studio PowerUp LLC"), 157 Post Avenue, Apt 305, Westbury, NY 11590, United States ("we", "us"). We are the data controller for the processing described here.
Contact for anything about your data: Anastase@studio-powerup.com. We have not appointed a data protection officer; we are not required to, and you can write to us directly.
Representative in the European Union: {{EU_REPRESENTATIVE}}.
This policy applies to the iOS app with the bundle identifier com.pocketgremlin.games.boop. If we release an Android version, we will update this policy before it goes live.
2. What we process and why
2.1 Your game save (stays on your device)
Your progress, settings, purchases you have received and your language choice are stored only on your device. We do not run accounts or cloud saves. We cannot see your save, and we cannot recover it if you delete the app or change phones.
2.2 The age question
Before we ask for any consent, the app asks for your year of birth, with no answer pre-selected. The year itself stays on your device. The app keeps a simple yes/no flag saying whether you are under 15, and uses it to switch off ad personalization, tracking prompts and notifications (see section 10). This flag is also attached to our analytics events (section 2.3) so that we can check those protections work.
2.3 Our own gameplay analytics
When you play, the app sends gameplay events to our own database (hosted by Supabase in the European Union, in Paris). Examples of events: a session started, a tutorial step was completed, you reached a level or unlocked an island, a sticker dropped, you asked for a rewarded ad and whether it finished, a purchase was started, completed or cancelled (product name only, never payment details), whether you accepted or refused the ad consent and tracking prompts (the answer only, never your advertising ID), and error reports when something goes wrong.
Each event carries:
- a random install ID created on your device the first time you open the app. It is not your advertising ID (IDFA), not your device's serial number, and it is not linked to your name, email, Apple ID or any other identity. It is shown at the bottom of Settings in the app; tap it to copy it if you contact us. A new one is generated after 13 months;
- a random session ID that changes each time you start playing;
- the app version and build number, the platform (iOS), your device's operating system version and your language/region setting (locale);
- the under-15 flag described above;
- the in-game context of the event (for example your level and island).
Why: to measure our audience (how many people play, which features they use, where they get stuck), to balance the game, and to find and fix crashes and errors. We use these figures only in aggregate, only for ourselves, and we never combine them with other data sources or use them for advertising.
You can switch this off at any time with the Share anonymous gameplay stats switch in Settings. The app then stops sending these events and discards any that were waiting to be sent.
When the app connects to our database, our hosting provider necessarily receives your device's IP address as part of the connection. We do not store it in our analytics tables. Our provider keeps short-lived technical logs (including IP addresses) for security and troubleshooting, for a few days only (see section 6).
2.4 Remote configuration
The app downloads game settings from the same database (for example how many bonus ads are available per day). This download contains no personal data about you; as with any connection, your IP address is seen by our host.
2.5 Game updates (Expo)
When the app starts, it checks the servers of Expo (EAS Update) for a newer version of the game files, so that we can deliver bug fixes without waiting for a full App Store update. To answer that check, Expo receives your IP address, technical information about the app (app and runtime version, platform, the update currently installed) and a random technical identifier created by the update component. That identifier is not our install ID or your advertising ID. We use this only to deliver fixes and to see how many devices have received an update.
2.6 Rewarded ads (Google AdMob)
The app shows rewarded ads only: a video plays only when you tap a â–¶ button to get a bonus. There are no banners and no ads that interrupt play. Ads are served by Google AdMob, and the app asks Google for family-friendly (G-rated) ads for every player.
Consent first. After the tutorial, Google's User Messaging Platform (a certified consent tool under the IAB Transparency & Consent Framework) shows a consent form where the law requires one, for example in the European Economic Area and the UK. "Refuse all" is as easy as "Accept all". Then, for players aged 15 or over, Apple's App Tracking Transparency prompt asks whether the app may use your advertising ID. It appears only if you accepted Google's form, or if you are in a region where that form is not required (such as the United States).
Depending on your choices, Google may collect:
- device identifiers, including the advertising identifier (IDFA) only if you allowed tracking in the Apple prompt;
- your IP address (which can indicate your approximate location, at city or country level);
- ad interaction data (which ad was shown, whether you watched it to the end or tapped it);
- diagnostic data about the ad SDK's performance and crashes;
- your consent choices, stored on your device as a consent string.
What changes with your choice:
- If you accept Google's form (where it is shown) or allow tracking in the Apple prompt, Google may use this data to show you ads based on your interests and to measure them.
- If you refuse Google's form, Google shows only non-personalized or limited ads. If you do not allow tracking, Google cannot use your advertising ID. In both cases Google still processes some technical data (such as your IP address) to deliver the ad, count it, cap how often it repeats and prevent fraud.
- For players under 15, the app asks Google for non-personalized ads only, tags every ad request as coming from a user under the age of consent, and never shows the Apple tracking prompt.
Google processes ad data under its own privacy policy, as an independent controller for some purposes: policies.google.com/privacy and how Google uses data from apps that use its services. Where the consent form is shown, it lists Google and any other ad technology providers involved; you can review and change your choices at any time (section 7).
2.7 In-app purchases (Apple)
Purchases (gem packs, the starter pack, ad-free bonuses and the monthly Goo Pass premium) are processed by Apple through the App Store. Apple handles your payment, billing details and receipts under its own privacy policy. We never receive your name, card details or Apple ID. The app receives a confirmation that a product was paid for, delivers the item on your device, and records a "purchase" analytics event with the product name (section 2.3).
2.8 Notifications
If you agree in the app and then in the iOS permission prompt, the app schedules local notifications on your device (for example "your goo jar is full" or "your daily gift is ready"). They are created and stored on your device: no notification token or data is sent to us. At most 2 per day, never between 22:00 and 09:00 your local time. Players under 15 are not offered notifications at all. You can turn notifications off at any time in iOS Settings.
2.9 When you contact us
If you email us, we use your email address, your message and anything you choose to include (such as your install ID) to answer you and handle your request.
2.10 Information Apple shares with us
If you have chosen in iOS settings to share analytics with app developers, Apple may give us crash reports and aggregated statistics (such as installs or sessions by country). These come from Apple under Apple's privacy policy, and we cannot identify you from them.
2.11 What we do not do
- No account, no login, no contacts, photos, microphone, camera or precise location.
- No sale of personal data for money.
- No sensitive personal information (as defined by US state privacy laws) is collected.
- No automated decisions that have legal or similarly significant effects on you.
3. Legal bases (players in the EEA and UK)
If you play from the European Economic Area or the United Kingdom, the GDPR (or the UK GDPR) applies to our processing, and we rely on these legal bases:
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Running the game, delivering what you bought, restoring eligible purchases | Performance of our contract with you (Art. 6(1)(b)) |
| Audience measurement, game balancing, fixing crashes and errors (section 2.3) | Our legitimate interest in understanding and improving the game (Art. 6(1)(f)). The install ID is stored on your device only for this limited first-party measurement, within what the ePrivacy rules of your country allow without consent. You can switch it off at any time in Settings. |
| Game updates (section 2.5), remote configuration and technical connection logs | Legitimate interest in delivering bug fixes and in running and securing the service (Art. 6(1)(f)) |
| Personalized ads and use of the advertising ID | Your consent (Art. 6(1)(a) and the ePrivacy rules), which you can withdraw at any time |
| Non-personalized or limited rewarded ads, including fraud prevention and counting | Legitimate interest in funding a free game through ads that you choose to watch (Art. 6(1)(f)). Anything that requires your consent under the ePrivacy rules is done only with it. |
| Age question and the protections for younger players | Compliance with legal obligations on minors' consent (Art. 6(1)(c) and Art. 8) and our legitimate interest in protecting younger players |
| Local notifications | Your consent, given through the app and the iOS prompt |
| Answering your emails and requests | Legitimate interest in providing support (Art. 6(1)(f)), or legal obligation when you exercise your rights (Art. 6(1)(c)) |
4. Who receives data
Only the following organizations receive personal data from the app, and only for the purposes above:
- Supabase (Supabase Inc.), our database host, acting as our processor (service provider). Data is stored in the EU (AWS Paris region, eu-west-3).
- Expo (650 Industries, Inc., United States), which delivers game updates (section 2.5), acting as our processor (service provider).
- Google (Google LLC, and Google Ireland Limited for users in the EEA and UK), for AdMob ads and the consent form. Google acts as our processor for some processing and as an independent controller (a third party) for others, as described in Google's terms.
- Apple (Apple Inc., and Apple Distribution International Ltd. in the EEA and UK), which distributes the app, processes purchases and shows the tracking prompt, as an independent controller.
We may also disclose data if required by law or a court order, or to a successor if our business is transferred. We do not sell or rent personal data to anyone for money.
5. International transfers
We are based in the United States. If you play from the EEA or the UK, the data the app sends is collected directly by us under the GDPR or UK GDPR. Our analytics database stays in the EU (Paris); we access it from the United States.
- Supabase: data is stored in the EU. Supabase Inc. is based in the United States, so its staff may access data for support or security; this is covered by the Standard Contractual Clauses in Supabase's data processing agreement.
- Expo: update checks are handled by Expo in the United States, under Expo's data processing terms.
- Google: data may be processed in the United States. Google LLC is certified under the EU–US Data Privacy Framework (and its UK extension), and Google also uses the European Commission's Standard Contractual Clauses.
- Apple: Apple may transfer data to Apple Inc. in the United States under its own safeguards (see Apple's privacy policy).
You can ask us for more information on these safeguards using the contact details below.
6. How long we keep data
| Data | Retention |
|---|---|
| Game save, year of birth, settings, consent choices | On your device until you delete the app or reset your progress |
| Install ID | On your device; replaced with a new random ID after 13 months |
| Analytics events (section 2.3) | 13 months from collection, then automatically deleted |
| Technical connection logs at our host | A few days, then deleted by our host |
| Update check data held by Expo | According to Expo's retention for its service logs |
| Your consent choice for ads | Stored on your device; we ask you again after 13 months at most |
| Emails and requests | Up to 3 years after our last exchange, then deleted |
| Data held by Google and Apple | According to their own policies |
7. Your choices in the app
- Settings → Share anonymous gameplay stats: switch our gameplay analytics off or on.
- Settings → Privacy choices: reopen Google's ad consent form to accept or refuse personalized ads, where it is available in your region.
- iOS Settings → Privacy & Security → Tracking: allow or stop tracking for Boop the Blob at any time. Turning tracking off stops Google from using your advertising ID for personalized ads.
- iOS Settings → Notifications → Boop the Blob: turn notifications off.
- Your install ID is shown at the bottom of Settings. Tap it to copy it, so you can paste it into an email to us.
- Deleting the app removes your save, your install ID and your choices from the device. To also delete analytics already sent to us, email us your install ID before you uninstall.
8. Your rights in the EEA and UK
Under the GDPR and the UK GDPR, you have the right to:
- access the data we hold about you, and get a copy;
- rectify inaccurate data;
- erase your data;
- restrict how we use it;
- object to processing based on our legitimate interest, including analytics;
- data portability: receive the data you gave us in a common machine-readable format;
- withdraw your consent at any time, without affecting what was done before.
Some countries give you extra rights; for example, in France you can give instructions about what happens to your data after your death.
To use these rights, see how to make a request below. If you think we have not respected your rights, you can complain to the data protection authority of the country where you live or work (list: edpb.europa.eu), or in the UK to the Information Commissioner's Office (ico.org.uk).
9. Your rights in the United States
This section is our notice for California residents under the California Consumer Privacy Act as amended by the CPRA ("CCPA"), and for residents of other US states with consumer privacy laws. We give the rights below to every US player, wherever they live.
9.1 What we collect and why
| Category (CCPA) | Examples | Disclosed to |
|---|---|---|
| Identifiers | Random install ID and session ID, IP address, Expo's update identifier, the advertising ID (IDFA) only if you allow tracking | Supabase, Expo, Google, Apple |
| Characteristics of protected classifications | Whether you are under 15 (yes/no only) | Supabase; Google (as an under-age tag on ad requests) |
| Commercial information | Which in-app product you bought (no payment details) | Supabase; Apple processes the payment |
| Internet or other electronic network activity | Gameplay events, ad interactions, error reports, app and OS version, locale | Supabase, Expo, Google |
| Geolocation data (approximate only) | City or country derived from your IP address by Google | |
| Inferences | Interest categories Google may derive for personalized ads, only if you allow them |
We collect this information from you and your device, for the purposes in section 2 (running the game, analytics, updates, ads, purchases, support and security), and keep it for the periods in section 6. We do not collect sensitive personal information.
9.2 Sale and sharing
We do not sell personal information for money. If you allow tracking in the Apple prompt, or accept personalized ads in Google's consent form, Google may use identifiers and ad interaction data to show you ads based on your activity across other apps and websites. California and some other states may treat this as "sharing" for cross-context behavioral advertising, or as a "sale". It happens only after you say yes.
To opt out, turn off tracking in iOS Settings → Privacy & Security → Tracking (or never allow it), and use Settings → Privacy choices in the app where it is available. You can also email us. We do not knowingly sell or share the personal information of anyone under 16 without their affirmative permission, and never for players under 15.
9.3 Your rights
- Know and access the personal information we have collected about you and how we use and disclose it;
- delete it;
- correct inaccurate information;
- opt out of the sale or sharing of personal information and of targeted advertising;
- not be discriminated against for using these rights. The game, bonuses and prices stay the same.
You can use an authorized agent; we may ask for proof that the agent may act for you. If we refuse your request, you can appeal by replying to our answer with "Appeal" in the subject line; we will answer within the time the law requires. If your appeal is denied, you may contact your state attorney general.
How to make a request (everyone)
Email Anastase@studio-powerup.com and include the install ID shown in Settings (tap it to copy it). Because we do not know who you are, that ID is how we find and verify your data; without it we may not be able to act on your request (Article 11 GDPR). We answer within one month for GDPR requests (extendable by two months for complex ones) and within 45 days for US requests (extendable by 45 days); we will tell you if we need more time. For data held by Google or Apple, you can also contact them directly.
10. Children and teens
Boop the Blob is made for a general audience. It is not directed at children under 13, but it is suitable for all ages, so we protect younger players by default:
- A neutral year-of-birth question is asked before any consent request.
- For players under 15: no ad consent form, no Apple tracking prompt, no tracking, non-personalized ads only, every ad request tagged as coming from a user under the age of consent, and no notifications offered.
- Our gameplay analytics (section 2.3) still runs for them unless switched off, with the same limits as for everyone: random install ID only, no identity, no advertising use. It is used only to keep the game working and improve it.
- Purchases require the Apple account holder's approval according to the device's settings. Parents can use Screen Time and Family Sharing "Ask to Buy" to control purchases.
Children under 13 (COPPA). We do not knowingly collect personal information from children under 13 beyond what the US Children's Online Privacy Protection Act allows without parental consent to support the internal operations of the app. If we learn that we have collected personal information from a child under 13 in any other way, we will delete it.
Parents or legal guardians can contact us at Anastase@studio-powerup.com, with the install ID shown in the app's Settings, to have their child's analytics data deleted.
11. Security
Data sent by the app travels over encrypted connections (HTTPS). Access to our database is restricted and protected. The install ID cannot be used to identify you on its own. No system is perfectly secure, but we keep what we collect small so that there is little to lose.
12. This website
This website (studio-powerup.com) sets no cookies and runs no analytics. It is hosted by GitHub Pages (GitHub, Inc., United States), which may record visitors' IP addresses in its server logs for security purposes; see GitHub's privacy statement.
13. Changes to this policy
If we change how the app uses data, we will update this page and the date at the top. If a change needs your consent (for example a new use of your data for advertising), we will ask for it in the app first.
14. Contact
Studio Power-Up LLC (Pocket Gremlin)
157 Post Avenue, Apt 305
Westbury, NY 11590, United States
Anastase@studio-powerup.com