Legal

Privacy Policy

This policy explains what information Dingbat Labs collects, why we collect it, and what you can do about it. It covers this website and every application we publish, unless an app ships its own policy that says otherwise.

Last updated: 30 September 2026

1. Who we are

Dingbat Labs, LLC (“we”, “us”) is the data controller for the information described here. You can reach us at privacy@dingbatlabs.com or through our contact page.

2. Information we collect

Information you give us

• Your name and email address, if you contact us or ask for support.
• Anything you choose to include in a message, bug report or feedback form.
• If an app offers an optional account, the email address and display name you provide when creating it. No app of ours requires an account today.

Information collected automatically

• Website: our host records standard server logs (IP address, browser type, pages requested and timestamps) for security and to keep the site running.
• Apps: nothing reaches us. Our apps send us no analytics, no usage data, no device identifiers and no crash reports. Where Apple or Google show us aggregate figures in App Store Connect or the Play Console, that data is gathered and anonymised by them from people who chose to share it. It never reaches us in a form that identifies anyone.
• Ads: two of our games show ads, and the ad network they use collects data from the device under its own policy. What it receives, and when, is set out under Advertising below. The network shows us only totals — how many ads were requested and shown, and what they earned — which identify no one.

Information we do not collect

We collect nothing from your device: no analytics, no identifiers, no profile of how you use our apps. We have never sold personal information and have no plans to. Apart from the one ad network described under Advertising, used by two games, we use no advertising networks, no third-party tracking pixels and no cross-site trackers, and we do not build advertising profiles or combine what little we hold with data from anywhere else.

If that ever changes we will say so here first, and date the change at the top of this page.

What our games keep, and what the platform handles

Our games save your progress — levels cleared, best results, streaks and settings — on the device itself. We cannot see any of it, and deleting the app deletes it.

Where a game supports your platform’s gaming service (Game Center on Apple devices, and its equivalents elsewhere), and you are signed in to it, the game submits your scores and the achievements you earn to that service so leaderboards and achievement lists work. That data is handled by the platform under its own privacy policy — Apple’s is here — and what other players can see, such as your nickname beside a score, is governed by your own settings with that service. Signed out, the game sends nothing and stays fully playable.

Some games show you our other titles on a store page presented by the platform inside the game. The list is built into the game, it fetches nothing from us, and we are not told whether you looked.

Advertising

Two of our games show ads: an arcade game and a treasure-maze game. Every other app we publish shows none and contains no advertising code. Both games get their ads from Google AdMob, through Google’s Mobile Ads software built into the game, and from no other network. What the two have in common comes first; where they differ, each is described on its own.

What Google receives. When a game asks for an ad, Google’s software sends Google what it needs to choose, deliver and measure one, and to guard against fraud. According to Google’s own disclosure, that can include:

• your IP address, which may be used to estimate your general location;
• a device identifier. Google always may get an identifier that Apple scopes to one developer’s apps on your device. It gets your device’s advertising identifier (IDFA) only if you allow tracking, which only the maze game asks (below);
• advertising data, such as the ads you have been shown, and your interactions with them, such as video views and taps;
• performance data, such as app launch time, hang rate and energy use, and crash logs.

Google handles this under its own policies, not ours: How Google uses information from sites or apps that use our services and the Google Privacy Policy. None of it comes to us.

When that happens. Not only when an ad plays. So that an ad is ready the moment it is wanted, each game asks Google for one in advance, when it starts and again after each ad it shows, and that request sends the data above whether or not an ad is ever shown. When no ad is available, nothing waits for one: an offer to watch simply does not appear. With no network connection, both games play in full and show no ads.

The arcade game

Its ads are rewarded ads, and one plays only when you choose it: a button on the game-over card offers an ad in return for a continue. No ad plays between stages or at any other time.

If you buy the unlock. The game’s one in-app purchase removes the ads. Once you own it, the game requests no ads at all, so none of the ad data above is sent.

No tracking permission. The arcade game never shows Apple’s “Allow to track” prompt, so your device’s advertising identifier stays out of it.

The maze game

It shows two kinds of ad:

• Rewarded ads, only when you choose one. A button offers an ad in return for something in the game: a continue after your last heart, double the coins from a map you escaped, double the daily chest, or one free supply item a day.
• Occasional full-screen ads between maps (“interstitials”). One can appear after you tap to leave a map you escaped, and never in your first session, before you have escaped Map 5, after a map you lost, in the daily challenge, within a minute of a rewarded ad, more often than once every three escaped maps, or within three minutes of the last one.

If you buy the Explorer’s Pass. The Pass removes the between-map ads. Rewarded ads are still offered to Pass holders, because they are your choice, so the game still asks Google for them in advance as described above. Buying coins does not change the ads.

Tracking, and only if you allow it. After you escape the third map, the game shows one screen explaining its ads and then Apple’s “Allow to track” prompt. It asks once. If you allow it, Google receives your device’s advertising identifier (IDFA) and may use it to match the game’s ads to your interests using what it knows from other companies’ apps and websites — what Apple calls tracking. If you ask the game not to track, Google does not get the IDFA and the game plays exactly the same: nothing is rewarded or withheld for either answer. You can change your answer at any time in your device’s Settings → Privacy & Security → Tracking.

Both games

In the EEA, the UK and Switzerland. Each game shows Google’s consent form before it asks for any ad, so you can choose whether your data may be used for personalised ads and the related purposes the form lists. If you decline, Google may still show ads that are not personalised. You can change your answer at any time from Privacy Options in the game’s Settings (the gear). To know whether the form applies where you are, each game checks with Google’s consent service when it starts, and that check also reaches Google. In the maze game, this form comes before the tracking prompt.

What the ads may show. We have limited both games’ ads to content Google rates suitable for general audiences with parental guidance (“PG”). Neither game is directed at children, and we do not ask Google to treat their players as children.

3. How we use information

• To provide, operate and maintain our website and applications.
• To answer your questions and provide support.
• To investigate and fix problems you report to us.
• To meet legal obligations, and to protect against fraud or abuse.

Where the law requires a lawful basis (for example under the UK/EU GDPR), we rely on legitimate interests for security and product improvement, contract performance for delivering an app you have bought or installed, and consent where we ask for it.

4. Service providers

We rely on a small number of third parties to run the business: our website host, our email provider, the stores that distribute our apps (the Apple App Store, Google Play and Steam), and Google AdMob for the ads in the two games that have them.

Our host and email provider act on our instructions and may not use what they handle for their own purposes. The stores work differently: when you buy or download an app through one, that transaction runs under the store’s own privacy policy, not ours. We never see your payment details, and what reaches us is limited to the aggregate figures described in section 2. Google AdMob is the same: it collects what section 2 describes under its own policies, not ours, and shows us only totals.

Some builds can also be downloaded straight from this website. That involves no store at all, only the standard server logs described in section 2.

5. Sharing your information

We share personal information only when one of the following applies:

• You have asked us to, or given consent.
• A service provider needs it to perform a task described above.
• The law requires it, or it is needed to establish or defend a legal claim.
• The business is sold or reorganised, in which case information transfers with it and this policy continues to apply until you are told otherwise.

6. How long we keep it

Support correspondence is kept for two years, so we have the history if you write to us again about the same thing. Server logs are held by our host under their own retention schedule, typically no more than 30 days. We hold no crash or analytics data at all, so there is nothing of that kind to retain. What Google receives through the games’ ads is kept under Google’s own retention policy. When information is no longer needed, we delete it.

7. Security

We use reasonable technical and organisational measures to protect personal information, including encryption in transit and access controls on the systems that hold it. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Children

Our apps and website are not directed at children under 13 (or under the higher age set by local law where you live, which is 16 in parts of the European Economic Area), and we do not knowingly collect personal information from them. Our apps send us nothing from anyone’s device regardless of age. The two games’ ads, described in section 2, are limited to PG content, and we do not ask Google to treat their players as children. If you believe a child has sent us information through email or a support request, write to us and we will delete it.

9. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a portable copy, and to withdraw consent at any time — for either game’s ads in the EEA, the UK and Switzerland, from Privacy Options in that game’s Settings, and for the maze game’s tracking, from your device’s Settings → Privacy & Security → Tracking. Residents of California may also request details of the categories of information collected and disclosed, and may opt out of any sale of personal information. We do not sell it.

To exercise any of these, email privacy@dingbatlabs.com. We will respond within the period the applicable law allows. You will not be charged or treated differently for asking. If you are in the UK or EU and are unhappy with our response, you may complain to your national data protection authority.

10. International transfers

We are based in the United States and our service providers, Google among them, may process data there or elsewhere. Where information moves out of the UK or European Economic Area, we rely on appropriate safeguards such as the standard contractual clauses.

11. Changes to this policy

If this policy changes we will update the date at the top of the page, and for significant changes we will give notice in the app or on this site before they take effect.

12. Contact us

Questions about privacy go to privacy@dingbatlabs.com. Anything else is welcome through the contact page.