Jolly Dots: World of Adventure · Android and iOS package co.catapultgames.jollydots
Version 1.2 · Effective date: 4 October 2026

1. Who we are and what this covers

Jolly Dots: World of Adventure (the Game) is published by Catapult Games Ltd (we, us, our), a company incorporated in the United Kingdom whose address is Suite 207 Basing House, 46 High Street, Rickmansworth, WD3 1HP, United Kingdom. We are the controller of the personal information described in this policy, and you can reach us at [email protected] or at that address.

This policy covers the Game on Android and iOS, our website at jollydotsgame.com, and our player support channel. It does not cover the app stores, or the websites and apps that adverts or links take you to — those are governed by their own policies.

2. The age question, and what it decides

The very first thing the Game does, before any advertising or analytics service starts, is ask how old you are.

The group, and whether you are under 16, decide how the Game treats you:

For players who state an age under 18, the Game also tells the advertising mediation service described in section 8 that the player has not consented to data collection and sharing for advertising, and sends it a US “do not sell” signal. It asks Google AdMob to treat the player as under the age of consent and to show only adverts rated for a general audience. For players who state an age of 12 or under, the Game also marks the player as a child: the mediation service applies that to the advertising networks it supports, and the Game repeats it in the settings it gives Google AdMob and Unity Ads. Those players still see adverts, but the adverts are general rather than personalised.

Players who state an age under 16 cannot create an account with us or link a sign-in method, and the Game keeps their progress only on their device (section 10.1).

You are asked the age question once. It is asked again only if the Game's stored record is missing or unreadable, or if you reset the app's data.

3. Your privacy choices, and how consent works

3.1 Everything starts switched off

Advertising personalisation and analytics collection are off by default. Nothing is reported between the moment the Game launches and the moment you answer. If you never answer, nothing is reported at all.

3.2 Adults: the consent form

If you state that you are 18 or over, and you are in a region where consent is legally required, the Game shows you a consent form provided by Google's User Messaging Platform, a certified consent management platform. Your choices in that form are what the Game acts on:

• advertising personalisation is enabled only if you agree to both the creation of an advertising profile and the use of that profile to select adverts (IAB TCF purposes 3 and 4);
• analytics collection is enabled only if you agree to the storage of, and access to, information on your device for that purpose (IAB TCF purpose 1).

If the form cannot be shown or cannot be completed — for instance because your connection drops — the Game treats that as a refusal, continues without advertising personalisation or analytics, and asks again next time.

3.3 Changing your mind

If you are eligible for the consent form, the Game shows a Privacy Choices row in Settings that reopens it. Your revised answer is applied immediately and remembered. If you withdraw consent, the advertising and analytics services are told to stop, and adverts become non-personalised. For Android campaign measurement through Kochava, withdrawing either the advertising or analytics permission stops further measurement. This does not erase information already collected, the installation identity kept on your device, or a theme an advert has already chosen for you (section 7.3).

You can also control advertising personalisation at the device level:

• Android: Settings → Privacy (or Google) → Ads, where you can reset or delete your advertising ID.
• iOS: Settings → Privacy & Security → Tracking, where you can allow or withdraw the Game's tracking permission (section 3.4).

Opting out does not remove adverts. It makes them less relevant.

3.4 On iOS: Apple's tracking permission

On iOS, using your advertising identifier for personalised advertising additionally requires Apple's App Tracking Transparency permission. The Game asks for it only if you are 18 or over and eligible for personalised advertising, and only once; players under 18 are never asked. If you do not allow it, or you later switch it off in Settings → Privacy & Security → Tracking, your advertising identifier is not used and you receive non-personalised adverts. Allowing it does not by itself switch personalised advertising on: your answer in the consent form in section 3.2 still applies.

3.5 What is not covered by the consent choice

Four things run regardless of your advertising and analytics choice, and we state that plainly rather than leave it implied:

• Crash reporting (section 13) — it carries no advertising identifier and builds no profile.
• Saved progress (section 10) — it is how the Game works, not marketing.
• Purchases — a purchase you initiate is completed even if you refused analytics.
• The weather lookup (section 11) — a single request that tells the Game roughly where you are so it can draw the right weather. Nothing from it is stored.

4. What information is involved

We have split this by who holds it, because that is what actually matters for your rights.

4.1 Kept only on your device

4.2 Stored on our servers, against your player record

Only players who have told the Game they are 16 or over have a player record, created as section 10.1 describes. For everyone else, none of the information in this table is stored on our servers.

4.3 Collected by the services we embed

These are collected by the providers listed in section 7, on their own infrastructure, subject to your choices in section 3.

4.4 If you contact us

If you email [email protected] we receive your email address, your message and anything you attach, and we keep the correspondence so we can answer you and handle any follow-up.

4.5 What we do not collect

• We do not require you to register or sign in, and we never collect a password. We receive a name and an email address only if you link a sign-in method.
• We do not collect your contacts, photos, camera, microphone or health data.
• We do not use your device's precise location (GPS), and the Game does not ask for location permission.
• The Game has no chat, no user-generated content and no player-to-player messaging.
• Our gameplay analytics event payloads deliberately carry no player identifier, no name, no email address, no advertising identifier, no device identifier, no purchase receipt and no promotional code. Every analytics attribute describing you is a broad band — for example a spend range rather than an amount — specifically so that it cannot single you out.

5. Why we use it, and our legal basis

6. Children and teenagers

The Game is made for a general audience. It is not directed at children, but we know children may play it, so it is built to treat any player who states an age under 18 more protectively — automatically, before any advertising or analytics service is started:

• the consent management platform is never invoked for them — their age answer alone decides the outcome, so there is no way for a child to consent their way into tracking;
• no advertising identifier is used, and personalised advertising is switched off;
• analytics collection is switched off;
• the advertising services are given the signals described in section 2: no consent to data collection for advertising, a US “do not sell” signal, adverts rated for a general audience in Google AdMob, and child-directed treatment for players who state an age of 12 or under;
• the social SDK the Game includes is not started at all for players who state an age under 16, and runs in a limited data use mode for 16- and 17-year-olds;
• the service that opens our campaign and invitation links (section 7.2) is never started.

If you are under 13. The Game collects and uses only what it needs to run for you: your saved progress, which stays on your device, crash reports, the approximate location used to draw the weather, and the technical information needed to show general-audience adverts. None of it is used to profile a child, to personalise advertising, or to contact anyone. We do not ask children for a name, an email address, a photo or any other personal information, and we do not knowingly collect any.

Accounts and linking: 16 and over only. The Game offers a player record on our servers, and linking a Facebook, Google Play Games or Apple account, only to players who have told it they are 16 or over. For younger players it creates no player record on our servers and keeps their progress only on their device. If we learn that a player under 16 has linked an account, we unlink it and delete the name and email address it supplied.

Parents and guardians. You can ask us what we hold about your child, ask us to delete it, or ask us to stop using it, by emailing [email protected]. If your child told the Game they are under 16, we keep no player record for them on our servers: their progress, their age group, the fact that they are under 16 and their choices are stored only on their device, and uninstalling the Game or clearing its data removes them. If they told the Game they are 16 or over, please tell us the device they play on and roughly when they first played, so we can find their player record. If we learn that we have collected personal information from a child that we should not have, we delete it.

Age of digital consent. The Game never asks anyone under 18 for consent to advertising or analytics. That threshold is higher than the age of digital consent in every country we publish in; we chose it because treating every minor the same, protective way is simpler and safer than applying a different age in each country.

7. Who else is involved

We use the providers below. Each receives only what it needs. We do not authorise any of them to sell your information. The advertising companies, Google and Meta also use some of what they receive for their own purposes, under their own policies — which is why we ask for your consent before personalised advertising or analytics is enabled. Under the terms of Kochava's free plan, Kochava may also use the information it receives for its own purposes (section 7.3).

Each provider's own privacy policy, as published at the effective date of this policy: Google (including how Google uses information from apps that use its services and Firebase), Unity, AppLovin, BIGO Ads, Mintegral, Pangle, GameAnalytics, ChottuLink, Kochava, TikTok, Meta, Apple, ipapi.co, OpenWeather, Kit and Cloudflare.

7.1 Other disclosures

We may also disclose information where we reasonably need to in order to: comply with a law, a court order or a lawful request from a public authority; enforce our Terms; investigate suspected cheating, fraud or abuse; protect the rights, safety or property of our players, of third parties or of ourselves; or in connection with a merger, acquisition, financing or sale of assets, in which case we will tell you before your information becomes subject to a different policy.

7.2 Campaign links and deferred deep links

The links in some of our adverts, and the invitation links players share (section 10.5), are short links made with ChottuLink, a link service operated by Tavas Analytics Inc. A short link opens the right screen of the Game when you tap it. If you do not have the Game yet, it takes you to the app store, and when you then install and open the Game it can still deliver the link. This is called a deferred deep link: to make it work, ChottuLink matches the new installation to the link that was tapped before it.

When anyone taps one of these links, the tap is handled by ChottuLink's web server, which receives the link and what any website receives from your browser, including your IP address. That happens before the Game is involved, whatever your age.

Inside the Game, the ChottuLink service is started only if you told the Game you are 18 or over and either agreed to analytics in the consent form (section 3.2) or are in a region where that consent is not required. It is never started for players who told the Game they are under 18, or who have not answered the age question. The Game decides this each time it starts, from the answers stored on your device, so if you withdraw analytics consent the service is no longer started from the next time you open the Game.

When it is started, the service receives technical information about your device (for example its make and model, operating-system version, screen size, and language and time-zone settings), the app version, your IP address, an installation identifier it generates and keeps on your device, and, on Android, the Google Play Install Referrer, which is Google Play's record of the link or advert that led to the install. On iOS, where there is no install referrer, the match relies on the IP address and the device information. ChottuLink uses this to match your installation to a link tapped before it and to deliver that link to the Game. It does not read your advertising identifier, and the Game does not give it your age group, whether you are under 16, your consent answers or your saved progress; it receives your player identifier only inside an invitation link (section 10.5).

A campaign link names one of the Game's themes: Western, Farm or Beach. The Game stores that theme on your device and uses it to decide where its first introduction to choosing a stage ends. The theme itself is not sent anywhere, although if you have allowed analytics, the gameplay events described in section 9 record how many steps that introduction had, which reflects it. The theme stays on your device until you clear the Game's data or uninstall it. A theme can also come from an advert you installed the Game from (section 7.3). ChottuLink keeps what it receives under its own privacy policy, linked above. If you are 18 or over and the Game shows you a Privacy Choices row in Settings (section 3.3), withdrawing analytics consent there stops the Game starting the service from the next time you open it.

7.3 Android advertising campaign measurement

In Android versions where we enable it, we use Kochava to understand whether an advert led to an installation of the Game and to measure later sessions. This is separate from the ChottuLink service above, which delivers campaign and invitation links. The Kochava integration described here does not run on iOS.

Kochava measurement starts only after an adult's consent choices have been resolved and both advertising and analytics are allowed, including where the consent platform determines that consent is not required. It never starts for someone under 18, an unknown age, an unanswered consent request or a refusal of either choice. If you later withdraw either permission, the Game shuts down further Kochava measurement. A later grant can restart it.

Kochava receives installation and session information, campaign/referrer information, device and app information and your IP address (IPv4 and, where available, IPv6). Depending on availability, it also receives its installation ID, the Google App Set ID, your advertising ID, the Google Play Install Referrer and the Meta Install Referrer. The Game does not send Kochava your name, email address, player account ID, saved progress, purchase receipts or custom gameplay events.

When we configure a campaign partner, Kochava can exchange installation, attribution and associated identifier information with that partner so that it can match an installation to an advert and report campaign results. These partners may include TikTok, Meta and Google. This exchange depends on the partners and postbacks we enable; naming them here does not mean every partner receives every installation. Their use of the information is also governed by their own privacy policies, linked above.

Kochava's own use. We use Kochava's free plan. Under the terms of that plan, Kochava may also use the information it receives for its own purposes, as Kochava describes in its privacy information for that plan. Campaign measurement can therefore involve sharing with advertising partners, and use by Kochava for its own purposes, rather than only processing for us.

Choosing where you start. When Kochava runs for you, the Game also asks Kochava whether it credits this installation to an advert and, if it does, which campaign, ad group and advert that was. The Game reads Kochava's answer on your device and uses it for one thing only: if the advert's details carry one of our theme labels (for example in the name of the advert, its ad group or its campaign), the Game can use the matching theme (Western, Farm or Beach) to decide where its first introduction to choosing a stage ends. The Game keeps only that theme, on your device. The Game itself does not store the campaign or advert names, does not send them to us or to anyone else, and does not use them to build a profile of you. Kochava's software in the Game keeps its own copy of the answer on your device, as it does its installation ID. If you have allowed analytics, the gameplay events described in section 9 record how that introduction went, including how many steps it had, which reflects the theme, but not the advert or the campaign. Where Kochava does not run for you, including on iOS, the Game never asks Kochava for this. The advert details in Kochava's answer may come from the advertising partner that showed you the advert, such as TikTok.

Stopping measurement is not deletion. The Game keeps Kochava's local installation identity, and Kochava's copy of its answer, when consent is withdrawn, so a later restart need not be treated as a new installation. A theme an advert has already chosen also stays on your device until you clear the Game's data or uninstall it. Withdrawal and the Game's Delete Account command do not themselves erase records already held by Kochava or the advertising partners. For a data request, contact us through section 18; Kochava's privacy information above also explains how to contact it directly. Provider retention is described in section 15.

8. Advertising in detail

The Game shows two kinds of advert: interstitials between levels, and rewarded videos you choose to watch in exchange for an in-game reward. There are no banner adverts.

Adverts are supplied through Unity LevelPlay mediation, which chooses, for each advert, between the advertising networks included in the Game: Google AdMob, Unity Ads, AppLovin, BIGO Ads, Mintegral and Pangle. Whether an advert is personalised depends entirely on the outcome described in sections 2 and 3:

• Personalised — only for adults who have agreed and, on iOS, have allowed tracking (section 3.4). Your advertising identifier is made available to the advertising networks, and they may use a profile to select adverts.
• Non-personalised — for every player who has not agreed and for every player under 18. Adverts are selected without an advertising profile. A limited amount of information is still processed to deliver and render the advert, to count it, and to detect fraud.

The Game gives its privacy signals to the mediation service before the service starts. It sets network-specific signals only for Google AdMob and Unity Ads (section 2); the other networks receive the signals the mediation service passes on to them, and each network applies them under its own policy.

Most purchases in the Game permanently remove interstitial adverts, and the smallest coin pack pauses them for seven days. Rewarded videos remain available because they are how some rewards are earned.

We receive a report of what each advert impression earned. That report is about the impression, not about you: it is not linked to your name, email address or player identifier.

9. Analytics in detail

When analytics is switched on, the Game reports gameplay events so we can see where players enjoy the Game and where they get stuck. Typical events are: the app started, a session began or ended, a level was started, completed or failed, a booster was used, a popup was opened or closed, a purchase completed, an advert was offered, watched or skipped, a reward was claimed, and an error occurred.

The following rules apply to our gameplay analytics event payloads. Android campaign measurement uses the identifiers described separately in section 7.3.

• No identifiers in our gameplay event payloads. These events carry no player identifier, no name, no email address, no advertising identifier, no device identifier, no purchase receipt and no promotional code. The analytics providers use their own per-app pseudonymous identifier to group events from one installation.
• Only bands, never raw numbers. Every attribute that describes a player is a broad group — for instance a spending band, a session-count band, or the week you installed — rather than an exact figure, so that no attribute can narrow down to an individual.

Consent is checked at the moment an event would be sent. An event that occurs while analytics is off is discarded immediately; it is not stored and cannot be sent later if you change your mind.

10. Saved progress, linked accounts, leaderboards and friends

10.1 Saved progress

Your progress is always saved on your device. If you told the Game you are 16 or over, the Game also creates a player identifier for you, without asking you for anything, and saves your progress against it on our servers so it survives a reinstall or a new device. It does this once you have completed the first few levels, or earlier if you make a purchase, redeem a promotional code or link a sign-in method; you do not need to link an account for it. Your saved progress on our servers is stored in Google Firebase Realtime Database under access rules that make your record readable and writable only by you.

Until then, and always if you told the Game you are under 16, there is no player identifier and nothing is saved on our servers. Your progress exists only on the device: it cannot be recovered on another device, and it is lost if you uninstall the Game or clear its data.

10.2 Linking a sign-in method

If you told the Game you are 16 or over, you can optionally link a Facebook account, Google Play Games (on Android) or Sign in with Apple (on iOS). Linking attaches that method to the player identifier you already have rather than creating a new one, so your progress is preserved. If the method is already attached to a different player record, the Game either keeps you on the record you are playing with or asks you which record to continue with; it never merges two records and never deletes either.

Where the Game offers a bonus for connecting an account, it is granted once per player record.

10.3 Leaderboards

Your best score for each level is stored on our servers as part of your progress record. Where the Game shows a leaderboard — for a level, among friends, or across all players — an entry consists of a score and a shortened handle.

The handle is reduced before it is published: it is a first name plus a last initial, for example “Ada L.”, taken from the name on a linked sign-in. If that name looks like an email address, no handle is written at all. Players who have not linked a sign-in method have no name to publish and appear without one.

Leaderboard entries, and your best scores, can be seen by other players of the Game. Your saved game, inventory, purchases, email address and age group are not readable by anyone but you.

10.4 Friends

If you link Facebook, the Game can show you the progress of Facebook friends who also play, and show them yours: your first name, profile picture and best scores. To do that, the Game reads your friends list from Facebook with the permission you grant there, and records that your Facebook ID belongs to your player identifier so that friends can find you. Facebook only tells the Game about friends who have themselves connected the Game to Facebook. You can revoke the friends permission, or remove the Game entirely, in your Facebook settings.

10.5 Invitations

If you share an invitation link and someone joins through it, we record a connection between the two player identifiers so the reward can be granted. Invitations are available only to players who have a player record (section 10.1). The address an invitation link leads to contains your player identifier and nothing else about you. Where the Game has started the link service for you (section 7.2), it asks ChottuLink to turn that address into a short link, so ChottuLink receives and keeps the address, including your player identifier; otherwise the link you share is the address itself. If a friend opens your link in the Game, their device keeps your player identifier until the invitation has been recorded.

11. Weather and approximate location

The Game can mirror real-world weather in its levels. To choose the weather, it needs to know roughly where you are.

Shortly after it starts, the Game sends one request to ipapi.co, a geolocation service, which reads the IP address the request came from and returns a city and country. The Game then sends that city name to OpenWeather to fetch the current conditions. That is the whole exchange.

The Game does not use your device's location services (GPS) and does not ask for location permission. We do not store your IP address, the city or the weather result on our servers, and none of it goes into analytics: it is used to pick which weather to draw and is then discarded. ipapi.co and OpenWeather process the request under their own privacy policies; beyond the IP address of the request, they receive nothing that identifies you.

12. Notifications

The Game can schedule reminders on your device — for example when your lives have refilled or a daily reward is ready. These are scheduled locally by the app on your device, not pushed from our servers, and they contain no personal information. You control them entirely through your device's notification settings, which the Game's Settings → Notifications row opens for you.

13. Crash reports

The Game uses Firebase Crashlytics to report crashes and serious errors so we can fix them. A report contains the crash itself, technical information about the device and the state of the app at the time, and recent diagnostic log lines.

Crash reporting runs regardless of your advertising and analytics choice. It carries no advertising identifier, builds no profile and is never used for marketing. We rely on our legitimate interest in shipping a product that works.

14. Our website, and cookies

Most of this policy is about the Game. Our website at jollydotsgame.com is separate and much simpler. The Game itself does not use browser cookies; the device and app identifiers it uses are described in sections 4 and 8.

When you visit the website:

• Cloudflare delivers and protects the site, and receives the technical information in your request, including your IP address. It may set a cookie needed for security.
• Google Fonts serves the site's fonts. Your browser requests the font files from Google, which receives your IP address in doing so.
• A Google Ads tag lets Google measure whether an advert brought you to the site and whether the visit led to a signup. It sets Google advertising cookies. You can block or delete cookies in your browser settings, and you can control Google's advertising personalisation at adssettings.google.com.
• Signup forms are provided by Kit. If you enter your email address to be told when the Game launches or updates, Kit stores it and sends the mail on our behalf. You confirm your address by email before anything else is sent, and every email carries an unsubscribe link. The forms are for people aged 16 and over.

15. How long we keep information

16. Where information is processed

We are based in the United Kingdom. Our game servers are provided by Google Firebase and are located in the United States, and our other providers also operate internationally, so your information may be processed in countries other than your own, including the United Kingdom and the United States.

If you are in the EEA or Switzerland, your information reaches us in the United Kingdom under the adequacy decisions those jurisdictions have made for the UK. Where we or our providers transfer information outside the UK, the EEA or Switzerland — including to the United States — we rely on appropriate safeguards: the UK International Data Transfer Agreement or Addendum, the European Commission's Standard Contractual Clauses, or a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions. You can ask us for details of the safeguard that applies to a particular provider.

Kochava, which measures our Android advertising campaigns (section 7.3), processes the information it receives in the United States. It is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework.

17. Security

We take reasonable technical and organisational measures to protect information. Traffic between the Game and our servers is encrypted in transit. Access to your player record is controlled by server-side rules that permit only you to read or write it. Sensitive payment information never reaches us, because purchases are handled entirely by the app stores.

No system is completely secure, and we cannot guarantee absolute security. If a breach occurs that affects your rights, we will notify you and the relevant authorities as the law requires.

18. Your rights, and how to delete your data

Depending on where you live you may have the right to: get a copy of the personal information we hold about you; have it corrected; have it deleted; restrict or object to how we use it; receive it in a portable form; withdraw a consent you previously gave; and complain to a data protection authority.

To exercise any of these, email [email protected]. Please tell us which right you want to use and give us enough information to find your record. If you have linked a sign-in method, telling us which one and the name on it is usually enough. Otherwise, because player records are anonymous, the most useful details are the device you play on, the approximate date you first played, and, if you have made a purchase, a Store order number. We may need to ask you for more information to confirm the request really comes from you, and we will not use that information for anything else.

We will respond within 30 days. If a request is complex we may need longer, and we will tell you if so. Using these rights is free; we may charge or refuse only where a request is manifestly unfounded or excessive, and we will explain if that happens.

You can withdraw consent at any time without contacting us, using Settings → Privacy Choices in the Game (section 3.3), or by changing your device's advertising settings.

18.1 Deleting your account and data

In the Game. If you have a player record on our servers (section 10.1), you can delete it yourself at any time from Settings → Delete Account. It takes effect as soon as you confirm; there is no waiting period. In one step the Game deletes your player record, including any linked sign-in details; your saved progress and best scores; your inventory and entitlements, including the reward offers you have redeemed; and the progress of the invitations you sent. It then deletes the sign-in record for your player identifier (with the exception below), removes your progress from the device, and restarts as a new player. Deletion is permanent: we cannot bring back the progress or in-game items it removes.

Some information outlasts that step:

• Purchase records — the Store transaction identifier, your former player identifier and the time of each purchase. We keep them for accounting and legal reasons and so that a purchase is never paid out twice (section 15).
• Promotional-code markers — a record that your former player identifier redeemed a code, which is how some codes are limited to one use per player.
• Leaderboard entries — your best score for each level, with the shortened handle from section 10.3 if you had linked a sign-in method, stored under your former player identifier, which other players of the Game can read.
• Invitation records — the record that a friend accepted your invitation and, if you joined through a friend's invitation, the record of that under your friend's player identifier.
• Your Facebook index entry — if you linked Facebook, the entry that connects your Facebook ID to your former player identifier.
• An anonymous sign-in record — if you never linked a sign-in method, our sign-in service may refuse to delete your anonymous sign-in record on the spot. The Game then leaves it in place: it holds your former player identifier and no name, email address or game data, and it is not deleted automatically.

The Game cannot delete the leaderboard, invitation, Facebook index and anonymous sign-in records itself. Email us and we will remove them within 30 days. If the Game cannot remove the sign-in record of an account you linked, it tells you so, and you can contact us to finish the deletion.

Your device keeps your age group, whether you told us you are under 16, your consent record, your language, sound, music and notification choices, the installation identifier and the theme a campaign link or advert chose (both in section 4.1), and the bookkeeping that limits rewards and stops purchases being paid out twice, so the Game does not ask the age question again after it restarts. They are removed when you uninstall the Game or clear its data. Analytics events carry no player identifier (section 9), and gameplay analytics and crash data expire as section 15 describes. Android campaign measurement records and Kochava's local installation identity are separate: this in-game account-deletion command does not erase them (section 7.3).

By email. If you cannot use the Game — for example because you have uninstalled it — email [email protected] with the subject “Delete my data” and the details above. We will delete your player record and everything saved against it, together with the records listed above that the Game cannot delete, within 30 days and confirm by email. Purchase records that the law requires us to keep for accounting purposes are retained for that period only, and are not used for anything else.

If you told the Game you are under 16, or never reached the point where it creates a player record, there is no player record on our servers to delete: your progress is kept only on your device, and uninstalling the Game or clearing its data removes it together with everything else in section 4.1. Deleting the Game from your device does not by itself delete a player record from our servers.

19. If you are in the EEA, the UK or Switzerland

Our legal bases are set out in section 5. In addition:

• where we rely on consent, you can withdraw it at any time; that does not affect anything we did before you withdrew it;
• where we rely on legitimate interests, you have the right to object, and we will stop unless we have compelling grounds that override your rights;
• you have the right to lodge a complaint with a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA or Switzerland, the authority in the country where you live, where you work, or where you think the problem happened;
• we do not make decisions about you that produce legal or similarly significant effects using solely automated processing.

20. If you are in the United States

20.1 Do we sell or share your information?

We do not sell personal information for money, and we have never done so.

Some US state laws define “sale” and “sharing” broadly enough to cover letting advertising partners use your advertising identifier to personalise adverts, or exchange campaign measurement information as described in section 7.3. To the extent that counts, it happens only for adults who have agreed to personalised advertising, and you can stop it at any time: use Settings → Privacy Choices in the Game where it is shown, turn off ad personalisation or reset your advertising ID in your device settings (section 3.3), or email [email protected] and we will apply the opt-out for you. The same laws may also cover Kochava's use, under the terms of its free plan, of the campaign measurement information it receives for its own purposes (section 7.3); that concerns only information Kochava receives while its measurement runs for you, which is never for anyone under 18. We do not sell or share the personal information of anyone under 16, and players who state an age under 18 receive no personalised advertising at all.

20.2 Your rights

Depending on your state you may have the right to know what personal information we collect and why, to access and delete it, to correct it, to receive it in a portable form, to opt out of targeted advertising, and not to be discriminated against for exercising those rights. Use [email protected], or the in-game controls in section 3.3. You may also authorise someone to make a request for you; we will ask for proof that you did.

21. Changes to this policy

We will update this policy when the Game changes or the law does. The date at the top of the page shows the current version. Where a change is material we will tell you in the Game or by another prominent means before it takes effect, and where the law requires it we will ask for your consent again.

22. Contact us

Catapult Games Ltd, publisher of Jolly Dots: World of Adventure
Suite 207 Basing House, 46 High Street
Rickmansworth, WD3 1HP
United Kingdom
Email: [email protected]
Website: jollydotsgame.com