Privacy policy

01Who we are

OneLevel (“we”, “us”) is an independent studio that makes games and apps, including Momento Puzzle and Lipsody. We decide how and why the data described here is used, which makes us its data controller. You can reach us at [email protected].

02What this policy covers

• This website, onelevel.one.
• Momento Puzzle, our puzzle game.

Lipsody has its own privacy policy at lipsody.app/privacy, and that policy applies to Lipsody instead of this one.

When you download or buy something in one of our apps, Apple and Google also process data under their own privacy policies.

03This website

onelevel.one has no cookies, no analytics, no ads and no forms. To deliver the pages, our hosting and network providers see the IP address a request comes from, the browser it was made with and the page it asked for, and keep these in server logs for a limited time to run the site and protect it from abuse.

The site loads its typefaces from Google Fonts, so your browser also connects to Google’s servers, which see your IP address. If you email us, we keep your message and address until the matter is closed.

04What stays on your phone

Momento Puzzle has no accounts. It doesn’t ask for your name, email address, phone number, contacts, photos, camera, microphone or precise location.

Your progress, your hints, your settings and the choices you make in the game are saved on your phone. They are not sent to us, and deleting the game removes them.

05What Momento Puzzle collects

To run the game, fix it and keep it free, the following data leaves your phone. None of it includes your name or contact details.

A device identifier

The game uses an identifier that is specific to our apps on your device. It doesn’t reveal who you are; it lets us connect the game’s statistics and purchases coming from the same device.

How you play

Events such as starting or finishing a level, using a hint, opening the shop, starting or completing a purchase, watching a rewarded video, sharing a puzzle or turning on notifications, and how long a session lasts. Each event comes with technical details: app version, device model, operating system, language, and the country or region inferred from your IP address. We collect these with Google Analytics for Firebase and with a product analytics service, to see where players get stuck and what to fix or make next.

Crash reports

If the game crashes or hits an error, Firebase Crashlytics receives a report with the device model, operating system, app version, what the game was doing at the time and the device identifier.

Notifications

If you allow notifications, for example to hear about new chapters, Firebase Cloud Messaging gives the game a token so we can send them. You can turn them off at any time in your phone’s settings.

Purchases

Momento Premium and hint packs are sold through Google Play or the App Store. We never see your card number or billing details. A purchase management service checks the store’s receipt and tells the game what you own. We see what was bought, when, at what price and in which store country.

06Ads and measurement

Momento Puzzle is free because it shows ads: banners, short full-screen ads between levels, and videos you can choose to watch for extra hints.

Ad networks

An ad mediation platform decides which ad network fills each ad space. To show and measure ads, limit how often you see them and prevent fraud, the platform and the ad networks receive your device’s advertising identifier, your IP address and the approximate location it implies, device and operating system details, your language, information about the game, and how you interact with the ads. Where you allow it, they also use this data to show you ads based on your interests, combined with what they learn from other apps and websites. Google AdMob is one of these networks; how Google uses information from apps that use its services is explained at policies.google.com/technologies/partner-sites.

Install measurement and share links

A mobile measurement service records whether an ad campaign or a shared link brought you to the game, so we can tell which of our own ads work. It receives the advertising identifier, your IP address, device details and when the game is installed and opened. The same service creates the links the game makes when you share a puzzle.

Meta

The game includes Meta’s software development kit. It reports app installs, app opens and the revenue from ads shown in the game to Meta, so that our own ads on Facebook and Instagram reach people likely to enjoy the game. Meta receives device details and, where allowed, your advertising identifier. Third parties, including Meta, may collect or receive information from the game and elsewhere on the internet and use it to provide measurement services and to target ads. Your choices explains how to opt out.

Consent

Where the law requires it, such as in the European Economic Area, the United Kingdom and Switzerland, the game asks for your consent before ad partners use your data for personalized ads. On iPhone and iPad, the game asks for your permission before any partner may access your device’s advertising identifier; if you don’t allow it, the identifier is not shared.

07Why we use it

Each use rests on one legal ground:

• Running the game and delivering what you bought.contract
• Showing the ads that keep the game free, limiting how often they appear and preventing fraud.legitimate interests
• Personalized ads, and access to your device’s advertising identifier where the law requires consent for it.consent
• Usage statistics, crash reports and measuring our own ad campaigns.legitimate interests, or consent where the law requires it
• Notifications.consent, given through your phone’s permission
• Answering you, and keeping the records tax law requires.legitimate interests; legal obligation

Under the GDPR these are Article 6(1)(b) for contract, 6(1)(f) for legitimate interests, 6(1)(a) for consent and 6(1)(c) for legal obligations; under Turkey’s KVKK, Articles 5(2)(c), 5(2)(f), 5(1) and 5(2)(ç). You can object to processing based on legitimate interests and withdraw your consent at any time; withdrawing it doesn’t affect what happened before. We make no decisions about you by automated means alone that have legal or similarly significant effects.

08Who receives it

These companies receive data from the game or this website. Some are service providers that act only on our instructions, under contracts that require them to protect it. Others — Google’s advertising and store businesses, Meta, Apple and the ad networks — also use it for their own purposes, under their own privacy policies.

Google

Firebase (usage statistics, crash reports and notifications), AdMob as one of the ad networks, Google Fonts for this website, and Google Play for downloads and purchases.

United States and other countries

Meta

Measuring and optimizing our own ads on Facebook and Instagram, through Meta’s software development kit.

Ireland, United States and other countries

Apple

The App Store, for downloads and purchases.

United States and other countries

An ad mediation platform

Chooses which ad network fills each ad space, and asks for consent where the law requires it.

United States and other countries

Ad networks

Deliver and measure the ads, through the mediation platform. Where consent is required, the consent screen in the game names each of them.

Worldwide

A mobile measurement service

Install attribution, and the links the game creates when you share a puzzle.

United States and other countries

A product analytics service

Statistics on how the game is played.

United States

A purchase management service

Checks store receipts and keeps track of what you own.

United States

Hosting and network providers

Serve this website and protect it from attacks.

United States and other countries

Ask us and we will tell you which company provides each of these services.

Otherwise we disclose data only where the law requires it, to protect rights or safety, or as part of a sale or merger of the business, in which case this policy keeps applying to it.

We don’t sell personal data for money. Some US state laws count letting ad partners use device data for targeted advertising as “selling” or “sharing”; Your choices explains how to opt out of it.

09Where it goes

The services above operate in the United States, the European Union and other countries, so your data may be processed outside your own. Where it leaves the European Economic Area, the United Kingdom or Turkey, we rely on the safeguards the law provides for that transfer: an adequacy decision such as the EU–US Data Privacy Framework or Standard Contractual Clauses, and for Turkey those of Article 9 of the KVKK, such as standard contracts. Ask us and we will send you a copy of the safeguard that applies.

10How long we keep it

• On your phone: until you delete the game.
• Usage statistics: in Google Analytics for the retention period set there, 14 months at most; in the product analytics service for as long as they help us understand how the game is played across versions, after which we delete them.
• Crash reports: 90 days.
• Purchase records: for as long as a purchase can still be restored or refunded, and longer where tax or accounting law requires it.
• Emails: until the matter is closed.
• Website server logs: a limited period, then deleted automatically.
• Ad partners, the measurement service and Meta: under their own retention policies.

11Your choices

Personalized ads and tracking

• Android: Settings → Privacy → Ads (on some phones, Settings → Google → Ads), then delete or reset your advertising ID. Apps then get no identifier from it.
• iPhone and iPad: Settings → Privacy & Security → Tracking, and turn tracking off for the game or for every app.
• In the EEA, the UK and Switzerland: the consent screen the game shows before ads load. To change your answer later, write to us and we will tell you how.
• Industry opt-outs: youronlinechoices.eu in Europe and aboutads.info/choices in the United States.

Notifications

Turn them off at any time in your phone’s settings.

Fewer ads

Momento Premium removes banners and the ads between levels. Rewarded videos stay available if you want extra hints.

Deleting your data

Deleting the game removes everything it kept on your phone. To have the data held by us and our providers deleted, write to us. The game has no accounts, so tell us your device model and roughly when you played, and include your advertising ID if you can; it helps us find the right records.

12Your rights

Depending on where you live, you can ask whether we process your data and for a copy of it; have it corrected, deleted or restricted; object to its use; receive it in a portable format; and learn which third parties in Turkey or abroad it was passed to, and have them told about a correction or deletion. You can withdraw consent at any time, claim compensation for harm caused by unlawful processing, and complain to your data protection authority — in Turkey, the Personal Data Protection Authority (KVKK).

Residents of some US states have similar rights, including to opt out of targeted advertising and of the “sale” or “sharing” of personal data.

Write to [email protected] and we will answer within 30 days. We won’t treat you differently for using any of these rights.

13Children

Momento Puzzle is a general-audience game. It is not directed at children under 13, or the higher age that applies where you live, and we don’t knowingly collect their personal data. If you believe a child has given us personal data, write to us and we will delete it.

14Security

Data travels encrypted. Momento Puzzle has no server of our own and no accounts to break into: the data above goes from the game straight to the services named here, each of which protects it under its own security program. No system is perfect and we won’t claim ours is; if a breach affects you, we will tell you and the authorities as the law requires.

15Changes

We update this page when what we do changes, and the date at the top changes with it. If a change materially affects you, we will say so in the game or on this site rather than hope you notice.

16Contact

[email protected]
OneLevel