Pastel Zip Puzzle
Privacy Policy
WorkMade Corp. (the “Company”), which operates Pastel Zip Puzzle (the “Service”), publishes this privacy policy to protect users’ personal information in accordance with applicable privacy laws.
This policy applies to the websites, mobile websites and apps provided by the Company.
1. Service and scope
This is a logic puzzle for users aged 13 and over. There is no registration, login, chat, user posting or Company-operated game-progress synchronization. We do not ask for your name, date of birth or phone number to play, or request camera, microphone, contacts or precise-location permissions. We have not added Firebase Analytics or a separate behavioral analytics tool. Advertising SDK and payment processing are described separately below.
2. On-device data and backup
Boards, completion records, elapsed time, hints, attendance and language, sound and haptic preferences are stored locally. Installation authentication information and purchase-permission caches are also stored on the device. We do not upload boards or hint/life records to the payment server. Android automatic backup is disabled. Uninstalling, changing devices or storage damage may remove local records; retention of payment records does not restore game progress.
3. Purchases and server records
Interstitial ad removal is a one-time non-consumable purchase; banners and optional rewarded ads remain. At launch, resume, ownership checks, purchase and restore, our payment API processes an installation identifier, installation authentication data, app, package, platform and access/processing times. Purchases add the product identifier, Google Play purchase token, order identifier, status and processing times for verification, storage, acknowledgement, restoration, refunds and duplicate prevention. We process Play purchase, cancellation and refund notifications using Google Play and Cloudflare Workers/D1. The app does not send card numbers, payment passwords or store-account email addresses to our server. In-app billing is not enabled in the currently unreleased iOS app.
4. Advertising SDK data
We use Google AdMob and the User Messaging Platform (UMP). Google SDKs may process IP addresses, IP-based approximate location, advertising/device identifiers, ad and app interactions, diagnostics/performance data and privacy-choice signals for advertising, measurement, troubleshooting, fraud prevention and consent management. IP-based regional checks differ from accessing precise location permission. Processing depends on region, OS, consent, SDK and ad settings. See Google’s official resources below for its practices and retention.
5. Advertising privacy choices
UMP determines whether regional consent or privacy-choice forms are required. Where applicable, choices can be changed through Advertising privacy settings in the app and advertising identifiers/settings can be managed through the OS. Refusing advertising consent does not itself prevent puzzle play, although ad availability and rewards may change. iOS tracking follows the permissions and settings actually implemented on that platform; this policy is not tracking authorization or proof of consent in every region.
6. Support and public pages
For email support we use your sender address and the message/attachments you choose to send to answer and resolve the issue. The app does not automatically attach game progress or raw purchase tokens. AWS S3/CloudFront serves public policies and may receive connection information such as IP addresses and browser information with page requests. We add no advertising or analytics SDK, tracking cookies or third-party font requests to these public policy pages.
7. Retention and deletion
Local progress can remain until app data is cleared or the app is removed; OS backups follow your settings and the provider’s retention. Valid purchases are retained while restoration rights remain active. Revoked transactions are retained for five years from revocation and then pruned in batches when no processing jobs remain. Completed notifications, jobs and audit records are pruned after 90 days; installations without transaction links and without access for one year are also pruned in batches. Legally required records follow the applicable retention duty. Unnecessary support information is deleted without undue delay after its purpose is fulfilled. Advertising, store and backup providers follow their own retention and rights procedures.
8. Providers and international processing
Google provides ads, consent, Play billing and transaction notifications; Cloudflare runs the payment API and encrypted transaction storage; AWS delivers public documents. The data described above is transmitted over networks such as HTTPS when payments, consent, ads or public pages are requested, and may be processed in the United States and other service-provider countries. AWS document origins are in Seoul and the CDN responds across regions. Provider privacy resources below describe processing locations, subprocessors, retention and safeguards. We do not sell game progress or send payment records for advertising.
9. Your rights and deletion requests
Contact the email below for access, correction, deletion, processing restrictions or international-processing questions. We may request the minimum information needed to verify authority over an installation or purchase; we do not require raw purchase tokens or card information. Legal retention, restoration or dispute-handling duties may limit immediate deletion, and we will explain the reason. Removing the app does not delete all server transactions or provider records. There is no membership account to close.
10. Age and protection
The Service targets users aged 13 and over and is not designed for children under 13. Content ratings are distinct from the target audience and remain subject to store review. We do not collect dates of birth or provide our own age-verification system. Users below a jurisdiction’s consent age must meet applicable guardian-consent requirements, and guardians may contact us about data requests.
11. Security
We use HTTPS and installation-specific authentication for server requests, encrypt purchase evidence at rest and restrict access. Device authentication data is protected using platform security storage. You can manage shared-device access and backup settings.
12. Contact
13. Notice of changes
This privacy policy may change due to changes in law or Company policy. Important changes will be announced in the app or on distribution pages.