Privacy Policy

Last Updated: May 17, 2026

1. Introduction

This Privacy Policy explains how ColorCargo (“the App”, “we”, “us”) collects, uses, and protects information when you use our mobile puzzle game on iOS. We are committed to transparency, data minimization, and to keeping your privacy safe.

ColorCargo is intended for a 4+ age rating in the Apple App Store and is not primarily directed to children under 13. The App is designed for general audiences and does not require account creation. We do not operate any server backend; we hold no personal data about you on our infrastructure.

This Privacy Policy is reflected in the App Privacy Details disclosed on the App Store product page. We strive to keep both consistent.

For our Terms of Service, see Terms of Service.

2. Data We Collect

2.1 Data we collect directly

ColorCargo collects minimal data from you. The following is Data Not Linked to Your Identity (Apple App Privacy terminology) and is stored on your device. Where noted, limited in-app purchase data may also sync across your devices through Apple’s iCloud — Apple-operated and never transmitted to our servers:

We do not collect: name, email, phone number, photos, contacts, location, health data, financial information, or any account credentials.

In-app purchases (where offered) are processed entirely by Apple via StoreKit. The App receives, on device only, the transaction status (success or failure) and the product identifier of what you purchased; we never receive your payment card details, billing address, or any Apple ID credentials, and this information is not transmitted to any server we operate. See Terms of Service Section 5 for the terms governing purchases.

Your skip-ticket balance (a consumable purchase) may be stored on your device and, when iCloud is enabled, synced across your devices via Apple’s iCloud Key-Value Store; Remove Ads is a non-consumable entitlement managed by Apple through StoreKit.

2.2 Data collected by third-party advertising networks

ColorCargo displays advertisements provided by third-party ad networks through the Unity LevelPlay mediation platform. These networks may collect the following categories, which align with Apple’s App Privacy Details labels:

The ad mediation platform integrated at launch is listed below. Unity LevelPlay serves advertisements from Unity’s own demand sources (including the ironSource Exchange) and may include additional partner networks where enabled. Additional ad networks may be enabled in future updates; if so, this Privacy Policy will be revised and the change highlighted in the App’s release notes. Active partners at any given time are determined by our mediation configuration and bundled SDKs; the SKAdNetworkIdentifiers entries in our Info.plist record the broader set of attribution partners we are registered with at Apple to support potential future activations.

Ad mediation platform Privacy Policy
Unity LevelPlay (Unity Technologies) unity.com/legal/game-player-and-app-user-privacy-policy

Apple’s SKAdNetwork framework is used for privacy-preserving ad attribution. Where supported, SKAN 4 postbacks replace device-level tracking with crowd-anonymized signals.

2.3 Apple App Tracking Transparency (ATT)

On iOS 14.5 and later, you will see a system prompt asking whether ColorCargo (and its ad partners) may track you across other companies’ apps and websites.

2.4 European users — advertising consent choices

If you access the App from the European Economic Area (EEA), the United Kingdom, or Switzerland, and advertising is shown, the App uses Google’s User Messaging Platform (UMP) — a consent-management tool compatible with the IAB Transparency & Consent Framework (TCF) — to request and manage advertising consent where required by the GDPR, UK GDPR, and the ePrivacy Directive.

Some partners may rely on consent or legitimate interests where permitted; you can review and manage these choices in the privacy options form.

This advertising consent is separate from, and in addition to, Apple’s App Tracking Transparency prompt (Section 2.3); depending on your choices, both may apply.

You can review or change your advertising consent at any time from Settings → Privacy Choices inside the App, which reopens the Google UMP privacy options form. This option is shown to users in the EEA, the UK, and Switzerland.

3. How We Use Data

We use the data above strictly to:

We do not profile users for purposes beyond basic ad targeting. We do not use your data for marketing communications, data brokering, or training AI models.

4. Data Sharing

Data is shared only with:

We do not share data with: data brokers, social-media platforms (unless you initiate sharing yourself, for example by screenshotting), generative-AI service providers, or any other third party.

4.1 California “Sale” and “Sharing” of Personal Information

We do not sell your personal information for monetary compensation. Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), our disclosure of limited device and ad-interaction data to ad partners for cross-context behavioral advertising may qualify as “sharing.” You can opt out of this “sharing” at any time by:

  1. Denying the App Tracking Transparency prompt when shown, or revoking it later in iOS Settings → Privacy & Security → Tracking → ColorCargo, or
  2. Contacting us at onuragames@gmail.com with the subject line “Do Not Share – California Resident”.

5. Data Retention

6. Your Rights

In addition to the universal rights below, residents of certain regions have additional statutory rights (see Section 6.1).

Universal rights — available to all users:

6.1 Regional Privacy Rights

European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR / FADP):

If you reside in the EEA, the UK, or Switzerland, you have the right to:

Because ColorCargo holds no personal data on its own backend, most of these rights are exercised against the ad networks listed in Section 2.2, who act as data controllers (or joint controllers) for the data they collect. Contact us at onuragames@gmail.com for assistance navigating these requests.

We will respond to verifiable requests within 30 days (extendable by 60 additional days where permitted by GDPR Article 12).

California (CCPA / CPRA):

California residents have the right to:

We will respond to verifiable California requests within 45 days (extendable by 45 additional days where permitted by CCPA § 1798.130).

Türkiye (KVKK — Personal Data Protection Authority):

If you reside in Türkiye, KVKK Article 11 grants you the rights to:

Contact us at onuragames@gmail.com to exercise these rights.

Other regions: If you reside in a jurisdiction with additional privacy rights (e.g., Brazil LGPD, Canada PIPEDA, Australia Privacy Act, India DPDP, China PIPL), comparable rights may apply. Contact us and we will respond in accordance with applicable law.

7. Children’s Privacy

ColorCargo is intended for a 4+ age rating in the App Store but is not primarily directed to children under 13. We do not knowingly collect personal information from children under 13 within the meaning of the Children’s Online Privacy Protection Act (COPPA) or analogous laws in other jurisdictions.

If we learn that personal information of a child under 13 has been inadvertently collected through one of our ad partners, we will work with the relevant network to delete or disable such information and, where required, to apply non-behavioral (contextual) advertising for that user.

Ads delivered via our mediation platform are required by Apple App Store Review Guideline 2.5.18 and our agreements with each ad network to be appropriate for the App’s 4+ age rating. Inappropriate ads may still slip through occasionally; please use Settings → Report Ad to flag them, or email onuragames@gmail.com.

Parents and guardians can disable behavioral advertising for their household via iOS family-sharing parental controls and by restricting ATT in iOS Settings → Screen Time → Content & Privacy Restrictions.

8. Security

We do not transmit user data to our own servers, so the primary security surface is limited to:

We do not have access to any breach reporting mechanism, because we hold no personal data ourselves. If a breach occurs at one of our ad partners, that partner is responsible for notifying you in accordance with applicable law (e.g., GDPR Article 33, CCPA § 1798.82).

9. Changes to This Policy

We may update this Privacy Policy as needed (e.g., when adding new ad networks, features, or legal sections). The “Last Updated” date at the top of this document will reflect the most recent revision. Significant changes will be highlighted in the App’s release notes on the App Store.

Your continued use of the App after such updates constitutes acceptance of the revised Policy.

10. Contact

Questions, concerns, or rights requests? Contact us at:

onuragames@gmail.com

We aim to respond within a reasonable timeframe, and within the statutory deadlines set out in Section 6.1 where they apply.

11. Governing Law

This Privacy Policy is governed by the laws of the Republic of Türkiye, without regard to conflict of laws principles. Nothing in this Policy limits any mandatory consumer-protection or data-protection rights granted to you under the law of your country of residence.

12. App Information