Privacy Policy
Boutique Goes Viral ("the Game") is published by Codevine ("we", "us"). This policy explains what information the Game handles, why, who we share it with and the choices you have. We collect only what we need to run the Game, keep your progress safe and understand which of our ads work.
1. Information we collect
You give us
- Player name you choose, shown to other players on leaderboards and in the friends list.
- Sign in with Apple or Google (optional). If you link your account we receive the provider's account identifier and, where the provider shares it, your email address (Apple may give us a private relay address). We do not receive your password.
- Messages to support, including the email address you write from.
Created automatically when you play
- Game account and progress: a player ID generated on first launch, a device identifier created by the Game, a friend code, level results, scores, inventory, in-game currency balances and settings (such as language).
- Purchases: which in-game item you bought, when, the store transaction ID and the price in your store currency. Payment itself is handled entirely by Apple or Google; we never see your card or bank details.
- Notifications (optional): if you allow notifications, a push token issued by Apple/Google through Firebase Cloud Messaging, plus your language so messages arrive in it.
- Gameplay statistics and crash reports (optional): only if you turn on "Help us improve the game".
- Ad measurement (you can turn this off): see section 3.
- Technical data: IP address, device model, operating system and app version, which our servers log to keep the service secure and working.
We do not collect your precise location, contacts, photos or microphone.
2. How we use information
- To run the Game: save and restore your progress, show leaderboards and friends, deliver the items you buy, and restore purchases.
- To send the notifications you opted into (for example, when your lives refill), respecting quiet hours.
- To keep the Game fair and secure: verify purchases with the stores, prevent fraud and cheating.
- To improve the Game, if you opted into statistics and crash reports.
- To measure which of our advertising campaigns bring players to the Game (section 3).
- To answer your support requests and meet legal obligations.
We do not sell your personal information and we do not show third-party ads inside the Game.
3. Ad measurement (attribution)
We advertise the Game on networks such as Meta, TikTok and Google. To learn which ad led to an install, the Game uses Tenjin, a mobile measurement partner. When you open the Game, Tenjin may receive your device's advertising identifier (IDFA on iOS, only if you allow tracking when asked; Google Advertising ID on Android), IP address, device and app information, and a small set of in-game milestones (for example, finishing the first level or making a first purchase, including its amount). Tenjin shares install and milestone results with the ad network that ran the ad so the campaign can be measured and optimised.
- iOS: you choose in the "Allow tracking" prompt. If you decline, the advertising identifier is not shared and Apple's privacy-preserving SKAdNetwork is used instead.
- All platforms: turn off Settings → Your privacy → Ad measurement in the Game. Tenjin then receives nothing from your device.
- Android: you can also reset or delete your advertising ID in your device settings.
4. Who we share information with
| Partner | Purpose |
|---|---|
| Apple, Google | App distribution, payments, Sign in with Apple/Google, push notification delivery |
| RevenueCat | Purchase processing and receipt verification |
| Google Firebase | Push notification delivery |
| Tenjin | Ad measurement (section 3); results shared with the ad network involved (Meta, TikTok, Google) |
| Oracle Cloud, Cloudflare | Hosting, security and content delivery |
These partners process data on our behalf or under their own privacy policies for the stated purpose only. We may also disclose information if required by law or to protect players and the Game, or to a successor if the Game changes owner (this policy would continue to apply).
Other players can see your player name, avatar, level progress and leaderboard scores.
5. How long we keep it
We keep your game account while it is active. If you do not play for 24 months or ask us to delete your account, we delete or anonymise it within 30 days, except purchase records we must keep for tax and accounting law (up to 10 years). Server logs are kept for no more than 90 days.
6. Your rights and choices
- Change your notification, statistics and ad-measurement choices at any time in the Game's Settings or your device settings.
- Request a copy of your data, correction or deletion — see Delete your account or email us.
- If you live in the EEA, UK, Turkey or a US state with privacy laws (such as California), you have rights to access, correct, delete and port your data, to object to or restrict processing and to withdraw consent. You can also complain to your local data protection authority.
Our legal bases (where GDPR/KVKK apply): performing our contract with you (running the Game and purchases), your consent (notifications, statistics, tracking on iOS) and our legitimate interest in keeping the Game secure and measuring our own advertising (you can object at any time via the Ad measurement setting).
7. Children
The Game is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from them. If you believe a child has given us information, email us and we will delete it.
8. Security and international transfers
Data is encrypted in transit (HTTPS) and stored on access-controlled servers. Our partners may process data outside your country; where required we rely on appropriate safeguards such as standard contractual clauses.
9. Changes
We will post updates here and change the effective date above; for significant changes we will also tell you in the Game.
10. Contact
Codevine · contact@codevine.net