Pigeon Post Privacy Policy

1. Controller and contact

The data controller is Mattia D’Alleva, operating under the Codalbyte brand, in L’Aquila, Italy, VAT number 02669150696. For information or to exercise your rights, contact [email protected].

2. Gameplay and saved progress

You can play without creating an account. The app stores progress, stars, stamps, customizations, preferences and ad frequency counters on your device. These enable gameplay and are not automatically sent to Codalbyte as a remote game save.

iCloud synchronization is on by default unless previously disabled, and works when iCloud is available. Stars, unlocked deliveries, stamps, purchased accessories and your equipped outfit are synchronized through Apple using your iCloud account and app-generated save identifiers. To merge changes across devices, we also store reward counters, purchases and outfit revisions. Audio preferences, reminders and privacy choices remain on the device; achievements are managed separately through Game Center. The app does not receive your Apple Account password. You can disable synchronization in preferences and continue using local saves; this does not delete data already stored in iCloud.

Processing necessary to provide the game and requested features is based on performance of the service, under Article 6(1)(b) GDPR.

Game Center (optional)

If you choose to use Game Center, the app sends achievement progress to Apple, associated with your Game Center player. It stores your player identifier and achievements awaiting synchronization on the device, separately for each account. These data are used to record and display achievements; they are not sent to Codalbyte servers and do not enable Google Analytics. You can keep playing without signing in to Game Center. Apple manages account, profile and visibility settings through Game Center settings. The app does not receive your Apple account credentials. Data held by Apple are subject to its terms and privacy policy.

3. Optional analytics

“Share gameplay statistics” is initially turned off. After a successful delivery, we may offer you a one-time choice to enable it. Selecting “Not now” or dismissing the prompt leaves it off; you can choose later in preferences. If you enable it, Google Analytics for Firebase receives gameplay events, such as level, outcome, duration, distance, cargo, stars and reward usage, along with events relating to ads and game configuration. A run may be associated with a random identifier. The service also processes technical metadata and app or installation identifiers.

We use this information to understand level difficulty and improve the game and how ads work. The legal basis is your consent, Article 6(1)(a) GDPR. You can withdraw it in preferences without losing access to the game. Disabling analytics stops Analytics collection and resets its local data; it does not automatically erase events already transmitted. We do not intentionally include names, email addresses or credentials in gameplay events.

4. Advertising

Pigeon Post uses Google AdMob for interstitial ads and optional rewarded videos. The service may process IP addresses and approximate location, device or app identifiers, ad interactions, diagnostics and performance data to deliver, measure and protect advertising. Ads may be preloaded before you choose to watch a video.

Ad choices are separate from analytics consent. Where required, Google’s consent process is displayed; you can revisit choices through “Ad privacy preferences”, when available. Purposes requiring consent are managed through this process. Declining personalization does not necessarily remove ads or all technical processing. Any tracking subject to Apple’s rules also requires the relevant system permission.

For details about Google’s processing, see Google’s Privacy Policy and data use in partner services.

5. Remote configuration

Firebase Remote Config lets us update parameters such as ad frequency. It works even when optional analytics is disabled and uses installation identifiers and technical information such as app version, operating system, language and country. We use it to maintain a consistent service configuration, based on our legitimate interest in operating the service, Article 6(1)(f) GDPR. You may object to this processing by contacting us.

Reminders are local notifications scheduled on your device with iOS permission. You can change their time or disable them in the game and system settings; they do not require a remote push notification service.

Postcards are shared only at your initiative through the iOS share sheet. The service you select receives the shared content under its own privacy policy.

If you contact us, we process your email address and message to respond, based on performance of the service or legal obligations, depending on the request.

7. Recipients and transfers

Depending on the features used, data is processed by Codalbyte, Apple for iCloud and Game Center, and Google for the services described above. These providers may act as processors or independent controllers depending on the service and applicable terms. See also Apple’s Privacy Policy and Firebase Privacy.

These services may involve processing outside the European Economic Area. Where applicable, transfers rely on adequacy decisions, including the Data Privacy Framework for certified recipients, or standard contractual clauses and safeguards required by the GDPR. Contact us for information about applicable safeguards.

8. Retention and deletion

Local saves remain on your device until the app’s data is removed, subject to any backups. Deleting the app does not necessarily delete iCloud data, which must also be managed through available Apple tools.

Google Analytics is configured to retain event data for 2 months and user data for 14 months. Reset on new activity is enabled: each new user activity restarts the 14-month retention period for the associated user data, thereby extending its retention. Aggregated reports may be subject to different retention rules.

Identifiers used by Remote Config follow Firebase’s retention and deletion lifecycle. Advertising data follows Google’s retention rules for the respective purposes. Details are available in the provider policies linked above.

We keep correspondence to handle your request and follow-ups, and subsequently only where needed for legal obligations or the protection of rights, for the applicable periods. You can request deletion by emailing us. As the game does not require an account, we may need additional information to locate relevant pseudonymous data without asking for unnecessary information.

9. Your rights

Where provided by applicable law, you may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting prior lawful processing.

Contact [email protected]. You may also complain to the Italian Data Protection Authority or the competent authority in your country. If a request concerns a child’s data, please tell us so we can handle it appropriately.

10. Changes

We will update this policy when the game or its data processing changes. The date above identifies the version; where necessary, we will notify users of material changes and request fresh consent.