Paaket Games
Privacy Policy
This policy covers the games made and published by Paaket Games, our websites (paaket.com and our games' own sites, such as sweettrail.paaket.com), and the e-mails you send us. It explains what information we use and why, who else receives it, and the choices you have. We have tried to keep it short and plain.
Not every game has every feature described here. A game uses only the information its own features need: a game without ads, for example, shares nothing with ad networks.
On this page
- The short version
- Who we are
- Our games
- What our games use
- When you contact us
- Our websites
- Advertising
- Notifications
- Services we rely on
- Why we use your information
- How long we keep information
- Your rights and choices
- Children
- Keeping information safe
- International transfers
- Changes to this policy
- Contact
The short version
- You don't have to tell us who you are to play. Where a game lets you create an account, for example to keep your progress across devices, it is optional, and we ask only for an e-mail address and a password.
- Your progress is saved on your device. In games with online features, a copy is also kept on our server, as a backup and for features such as events.
- Some of our games show ads. Where the law requires it, you choose whether ads may be personalised, and you can change your mind at any time.
- Purchases go through the App Store or Google Play. We never see your payment details.
- Notifications are off until you switch them on.
- You can ask for a copy of your data, or for it to be deleted, at any time: in the game where it offers this, or by e-mailing us.
- Our websites don't track you: no ads, no analytics and no cookies for visitors.
- We do not sell your personal information.
Who we are
Our games and websites are made and published by Paaket Games, Accra, Ghana ("we", "us"). We are responsible for the personal data described in this policy. You can reach us at info@paaket.com, or through the support contact on each game's App Store or Google Play page.
Our games
This policy applies to every game we publish:
- Sweet Trail, a match-3 puzzle game. It also has its own, more detailed privacy policy, shown in the game and at sweettrail.paaket.com/privacy. For Sweet Trail, that policy applies where the two differ.
- Echoes of the Ancestors, a stealth-puzzle adventure, now in development.
- Every game we release after these. We add each new game to this list when it comes out. If a game ever needs to work differently from this policy, it will have its own policy, and we will say so here.
What our games use
What a game uses depends on the features it has. Each of the following applies only to games with that feature.
On your device. Our games save your progress and settings on your device, along with the profile you choose (such as a name and an avatar) and a random player ID, which you can quote if you contact us. A game may also keep a simple log of game events on your device, to help look into problems.
A guest account. The first time a game with online features connects, it creates random identifiers for your installation and a secret key that proves the game on your device is yours. You don't need to sign in, and the guest account is not linked to your name or e-mail address. We store the secret key only in a scrambled (hashed) form.
Cloud save. From time to time, the game sends a copy of your progress, including your profile, to our server. It serves as a backup, and if you create an account, it lets you carry your progress to another device.
An account (optional). Where a game offers one, you can create an account with your e-mail address and a password. We send codes to the address to confirm it is yours and to reset a forgotten password. We store your e-mail address and a scrambled (hashed) form of your password, never the password itself. The codes are also stored hashed, for no more than an hour. We use your e-mail address only for your account: we never show it to other players, and we don't send you marketing e-mails unless you ask for them.
Your profile and photo. A game may let you choose a profile name and an avatar, which can be a photo of your own. You choose the photo in your device's own photo picker, and the game receives only that one photo: it never looks through your library. Our server keeps only a small copy, without the location, date, camera or other details stored in the photo file, and only after an automatic check against the game's photo rules: a photo that breaks them is not kept at all. Other players may see your picture, for example on leaderboards, and can report it. It is deleted from our server when you change it or delete your data.
Events and leaderboards. When you take part, the game sends your results, such as your score, so that we can keep the leaderboard. Other players see your score, your rank, and the name and picture the leaderboard shows.
Purchases. When you buy something with real money, we receive the store's confirmation so that we can check it and deliver what you bought exactly once. We keep the platform (Apple or Google), the product, the transaction number, what was delivered and when. The store's receipt is checked, not kept, and we never receive your card or bank details. If a purchase is refunded, the store tells us, so that we can take back what it delivered.
Settings, news and updates. The game downloads its current settings and event information, and asks our server whether there is news, a maintenance notice, or a newer version you need. To answer, it sends the game's version and your device's platform (such as iOS or Android), and we keep the latest version and platform of each of your devices to plan updates. We may send in-game messages and gifts to all players or to you.
Statistics. We use the progress in cloud saves and the times devices connect to our server to make statistics, such as how many players finish each level or come back after a week. The statistics count players together; we use them to balance and improve our games, and never to single anyone out.
Server logs. Our server records each request it receives, from our games and from visitors to our websites: the time, the address requested, the result and the IP address it came from. We use these logs to keep our services running and to protect them from abuse, for example by limiting how many requests one address can make. We do not use IP addresses to work out where you are. Secret keys and receipts are removed from the logs.
When you contact us
When you e-mail us, we receive your e-mail address, your message and anything you attach, and we use them to answer you and to put right what went wrong. If the game shows a player ID, please include it, so that we can find your game quickly.
Our team. To help you, and to keep our games fair, our team can look up the information described here on our server, correct your progress or rewards, or limit an account that breaks a game's terms. Access is limited to the people who run our games and protected by two-step sign-in, and every look-up and change is recorded.
Our websites
paaket.com and our games' websites show no ads, use no analytics and set no cookies for visitors, and every file they load comes from our own server. Our server records each visit in its logs, as described above. If you use one of their forms, such as the form to delete your account on a game's site, we use what you enter only to handle your request. The only cookie is the one that keeps our own team signed in to our tools.
Advertising
Some of our games show ads. Today they come from two ad networks: Google AdMob, and Unity Ads through Unity's LevelPlay ad service. They are:
- rewarded ads, which you choose to watch in return for a reward;
- in some games, now and then, a full-screen ad at a natural break, such as after you finish a level.
To show ads and measure how they perform, the network that shows an ad may collect information from your device, such as its advertising ID, IP address and device type, and how you interact with ads. Google uses this information under its own privacy policy (policies.google.com/privacy), and Unity under its own (unity.com/legal/game-player-and-app-user-privacy-policy). Ads in our games are limited to content suitable for a general audience.
Your choices:
- In the EEA, the UK, Switzerland and some US states, the game asks you through Google's consent form whether ads may be personalised. Your answer applies to every ad network in the game, and you can change it at any time in the game's privacy settings.
- On iPhone and iPad, the advertising ID is used for tracking only if you allow it when Apple's App Tracking Transparency prompt asks. You can change this in your device's Settings, under Privacy & Security › Tracking.
- On Android, you can reset or delete your advertising ID in your device settings.
Saying no never stops you playing. You may see less relevant ads, and occasionally fewer rewarded ads may be available.
Notifications
Notifications are off until you switch them on; your device then asks for your permission. A game may offer:
- reminders, for example when your lives are full or a daily treat is waiting. They are scheduled on your device, and nothing about them is sent to us;
- news, gifts and offers from our team, which we send from our server. For these, the game sends our server your device's notification address (a push token from Apple or, on Android, from Google's Firebase), its platform and its time-zone offset, so that nothing arrives at night. We keep the address until you switch these notifications off, sign out or delete your data, or until your device has stopped connecting to our server for several months.
You can turn notifications off in the game or in your device's settings at any time.
Services we rely on
- Apple and Google (the App Store and Google Play): downloads, updates, payments and refunds.
- Apple and Google (Apple Push Notification service and Firebase Cloud Messaging): deliver the notifications you choose to receive from our team. They receive your device's notification address and the notification, and nothing else from the game.
- Google (AdMob and its consent tools) and Unity Technologies (Unity Ads and its LevelPlay ad service): ads and ad consent, as described above.
- Unity Technologies (the engine some of our games are built with, and its purchase library): may receive basic technical details, such as your device model, operating system and graphics chip, and an installation ID used by its services.
- Replit (our hosting provider): runs our server, its database and our websites, and stores the data of the online features, including profile pictures, on our behalf.
- Resend (our e-mail provider): sends the codes for your account, and receives the e-mails you send us. For codes, it receives your e-mail address and the message, and nothing else from the game.
- OpenAI (our moderation provider): checks each profile picture against the game's photo rules. It receives the small picture and nothing else from the game, and under its terms for businesses it does not use it to train its models and keeps it for no more than 30 days, to detect abuse.
We share only what these services need to do their job, and we update this list when we add or change one. We may also disclose information if the law requires it, or to protect our rights, our players or the public. If Paaket Games, or one of its games, is sold to or merged with another company, the information that game uses may pass to the new owner, and we will tell you before it is used under a different policy. We do not sell your personal information.
Why we use your information
If you are in the EEA, the UK or Switzerland, the law asks us to name a legal basis for each use. We rely on:
- providing the game you asked for (our Terms of Use, or the game's own terms): saving your progress, the cloud save, accounts, events, profile photos and delivering purchases;
- our legitimate interests: keeping our games and websites secure and working, preventing abuse, checking profile pictures and handling reports so our games stay friendly for everyone, fixing problems, helping you when you contact us, sending news and in-game messages, and making statistics that count players together;
- your consent: personalised ads, tracking on iPhone and iPad, and notifications, including the news, gifts and offers our team sends. You can withdraw your consent at any time, as described above;
- legal obligations: where the law requires us to keep or disclose information.
How long we keep information
- On your device: until you delete it or uninstall the game. Your device's own backups, such as iCloud or Google backups, may keep copies according to your backup settings.
- On our server: your cloud save, your account, your event results and your purchase records are kept for as long as your account exists. Codes sent by e-mail are deleted within an hour. Your profile picture is kept until you change it or delete your data, and your notification address as described under Notifications.
- When you ask us to delete your data: it is deleted no later than 30 days after your request. We then keep only a short record of the request (its dates, how we checked it was yours, and your player ID) for three years, to show that we handled it.
- Backups: encrypted copies of our server's data, which we keep to recover from failures, are deleted after 90 days. Until then, a backup may still hold data that was deleted from the server after it was made.
- Server logs: kept for 30 days by our hosting provider, then deleted automatically.
- Your e-mails to us: for as long as we need them to help you and to answer any follow-up, and then deleted.
Your rights and choices
Depending on where you live, you have rights over your personal data. They include the right to access it, correct it, delete it and receive it in a portable format, to object to or restrict how it is used, and to withdraw your consent.
Where a game offers it, its privacy settings let you take a copy of your data, or ask for it to be deleted, straight away. For anything else, or if you no longer have the game, e-mail us at info@paaket.com, or follow the steps for your game on our account deletion page. We may need your player ID, and to check that the request comes from you, before we act on it. We reply within one month.
You also have the right to complain to the data protection authority where you live. In Ghana, where we are based, that is the Data Protection Commission.
US state privacy rights. Where the law of your state gives you rights to know, delete or correct personal information, or to opt out of its "sale" or "sharing" for targeted advertising, you can use them as described above. Use the game's privacy choices to opt out of personalised ads where it offers them. We do not sell personal information for money.
Children
Our games are made for a general audience. They are not directed at children under 13, or under the minimum age for consent in your country, and the ads in them are limited to content suitable for a general audience. We do not knowingly collect personal information from children. Please do not use a real name as your profile name. Photos of children can't be used as profile pictures: the automatic check refuses them, and we remove any that get through. If you believe a child has given us personal information, contact us and we will delete it straight away. If we ever make a game for children, it will have its own privacy policy that follows the rules for children's games.
Keeping information safe
Our games and websites talk to our server over encrypted connections (HTTPS). Secret keys and passwords are stored only in hashed form, our backups are encrypted, and access to our server is limited to the people who run it. No system is perfectly secure, but we work hard to protect your information.
International transfers
We are based in Ghana, and our service providers may process information in other countries, including the United States. Where the law requires it, these transfers are protected by safeguards such as the European Commission's standard contractual clauses.
Changes to this policy
We may update this policy as our games change and new ones come out. The date at the top shows the latest version. If we make important changes, we will tell you in our games or on this page before they take effect.
Contact
Paaket Games
Accra, Ghana
E-mail: info@paaket.com
