Privacy Policy for Purple Koala Studios
Last updated: 30 September 2026
1. Who we are and what this policy covers
Purple Koala Studios Pty Ltd is responsible for the first-party information described in this policy. It covers our website and mobile games, including Jewel Craft 3D and Word Ace: Solitaire Puzzle. Contact us at contact@purplekoalastudios.com about privacy or your information.
Solo gameplay does not require a separate Purple Koala Studios account. Jewel Craft's optional online Challenges use your Apple Game Center or Google Play Games account. Advertising, optional gameplay analytics, and online Challenges handle different information and have separate purposes and controls.
2. Information we handle
Local game data: Our games store progress, saved puzzles, rewards, tutorial completion and settings on your device. Jewel Craft's solo saves are local, not a cloud-save service. Uninstalling the game or clearing its data can remove this progress.
Optional Jewel Craft gameplay analytics: With your permission, Jewel Craft sends summaries of session and level play time, levels attempted and completed, moves and timing summaries, level loading, the last screen or level, and special-item and rewarded-ad use. A random installation identifier is converted by our service into a stable pseudonymous identifier so we can understand return visits and improve the game. This is not anonymous data. We do not collect your name, email, contacts, precise location or advertising identifier for this analytics service, and do not join it to advertising or Challenge identities.
Jewel Craft online Challenges: We process proof of Game Center or Play Games sign-in and assign a stable game identity. Our Challenge service stores your platform display name and a small copy of your platform avatar, and processes invitations, recent-player availability, game progress and results to provide private two-player games. An authorised opponent can see your game profile, availability and information needed for the Challenge. Profile images are not publicly listed. App Attest and Play Integrity proofs help protect profile access and verify legitimate app installations; we do not receive your Apple or Google account password.
Service diagnostics: Our online services process network requests and limited security and operational information, such as request times, outcomes, rates, game identifiers and technical errors, to operate the service and investigate faults or abuse. Challenge rate limiting uses an obscured value derived from the source IP address. Compact game diagnostics do not retain message payloads or authentication tokens.
Advertising: Google AdMob and the Google Mobile Ads SDK may collect and share IP addresses, advertising or other device identifiers, approximate location derived from IP addresses, app interactions, ad views and taps, and diagnostic/performance information. Google uses this information for advertising, measurement, analytics, security and fraud prevention, subject to your choices and applicable requirements.
Support: If you contact us, we receive your email address and the information you choose to send. Please do not send account passwords, payment-card details or identity documents unless a necessary, secure verification process has been separately arranged. We do not receive payment-card details for app-store purchases.
3. Purposes and legal bases
We use local game data and Challenge information to provide the features you request; optional gameplay analytics to understand and improve the game; support information to answer requests; and limited diagnostics to maintain security, reliability and prevent abuse. Where applicable data-protection law requires a legal basis, we rely on performance of the service you request, our legitimate interests in operating a secure and reliable service, compliance with legal obligations, or your consent for optional analytics and advertising processing that requires consent. You may withdraw consent without losing access to solo gameplay.
4. Recipients and international processing
Jewel Craft uses Google Cloud in Australia for first-party analytics and Amazon Web Services, principally in Sydney, for Challenges. Hosting, content-delivery and platform providers may process information in other countries. Apple and Google also process platform-account information under their own policies. Our website uses GitHub Pages and may load fonts from Google; those services receive the network information needed to deliver their content.
We share Challenge profile/game information with authorised opponents to deliver the feature you choose. We use service providers to host and protect information and may disclose information when required by law. Where international-transfer safeguards are required, applicable provider agreements and legally recognised safeguards govern those transfers.
We do not sell personal information for money. Some advertising disclosures may count as a sale, sharing or targeted advertising under applicable law. Google's practices are explained in How Google uses information from apps that use its services and Google's Privacy Policy.
5. Security and retention
We use encrypted connections and access controls for our online services. No system can guarantee absolute security.
Gameplay analytics: Summaries may be retained for up to 730 days. Turning analytics off clears pending summaries on your device and queues a request to delete analytics linked to that installation. The request is sent when the app next has a connection; server-side deletion is processed by a scheduled worker, normally within six hours after receipt. Keep the app installed and open it online so an offline deletion request can be sent. Uninstalling first can remove the local identifier needed to locate those summaries.
Challenges: Stable identity mappings, profiles, avatars and Apple attestation registrations are retained to recognise returning players; they currently have no automatic inactivity expiry. Profile-sharing permissions expire after 90 days unless renewed. Invitations expire within 30 minutes; presence and anti-abuse records have short expiries. Expired database records may take a few days to be physically removed. Compact game logs are retained for three days and other service logs generally for seven days. Deleting the app or disabling analytics does not delete Challenge server data. Confirmed online-deletion requests remove the active Challenge identity, profile, avatars and associated Challenge records, including cached server copies of the avatar. Cleanup normally completes within a few minutes after the server accepts the request. A minimal record containing the retired game identifier and deletion status is kept for two days to prevent old sign-in sessions from restoring deleted data; unfinished requests remain queued until resolved. See the deletion-request instructions below.
We retain support correspondence only as needed to deal with the request and maintain necessary records. Restricted backups and legally required security records may remain for their retention period after removal from active systems. Google's advertising-data retention is governed by its policies.
6. Advertising and analytics choices
Advertising choices: Our games use Google's User Messaging Platform (UMP) to obtain advertising choices where required. People in the EEA, UK and Switzerland may receive consent choices, and people in relevant US states may receive sale/sharing or targeted-advertising opt-out choices. Available choices depend on region, app version and applicable requirements. Refusing personalised advertising does not remove advertisements; contextual or limited ads may still appear.
In supported versions, Word Ace offers Settings > Privacy Choices. Jewel Craft uses Settings > Privacy; advertising choices are available there when supported by the installed version and required for the region. Some pre-release versions do not yet provide a working advertising-choice entry point. If an option is unavailable, contact us for assistance and use the device controls below. We do not describe an unavailable control as a way to withdraw consent.
Jewel Craft analytics: You may decline optional analytics or turn it off in Settings > Privacy. This is separate from advertising consent and also requests deletion of that installation's analytics as described above.
Device controls: Android users can reset or delete their advertising ID where supported. iOS users can review tracking permissions in Settings > Privacy & Security > Tracking. Our current games do not request Apple's IDFA through an App Tracking Transparency prompt; if a future version performs tracking requiring that permission, it must ask first. You can also use Google My Ad Center. Device controls do not delete first-party Challenge or analytics records.
7. Access and deletion requests
Jewel Craft analytics: Turn analytics off in the app while online, or reopen it online after doing so, to send the installation-linked deletion request. We cannot normally find this pseudonymous history from your email address alone.
Jewel Craft Challenge data: In versions supporting this control, open Settings > Privacy > Delete online data. Review the confirmation and choose Delete Challenge data to verify your signed-in game account and request removal of your online profile, avatar, invitations and associated Challenge records. The app disconnects and displays the request status. Solo progress and saved puzzles remain on your device, and your Apple or Google account is unaffected. Connecting again creates a new online profile. Optional gameplay analytics has its own separate deletion control above. Earlier pre-release builds may lack the online-deletion button.
Request deletion without using the app: Email contact@purplekoalastudios.com with the subject “Jewel Craft data deletion”, whether you use Game Center or Play Games, and your game display name. You can use this route if you have uninstalled the game or cannot access it. We will arrange ownership verification and identify the correct records before processing the request; a display name alone is not proof of ownership. Do not send passwords. We will confirm when processing is complete.
Local saves: Deleting the app or clearing its data removes local progress, subject to your device's backup behaviour. This does not by itself delete server-side records or data processed by Google for advertising.
Depending on your location, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to processing, withdraw consent, and complain to a data-protection authority. Email us with the game, your country or US state, and the request. We may need proportionate verification and may retain information where law requires it. We will explain any applicable exception.
8. Children
Our games are intended for a general audience and are not directed at children under 13. A store's content age rating is not a statement that every online or advertising feature is intended for children. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.
9. Changes and contact
We update this page when practices change and provide additional notice or obtain new consent where required. The date above identifies this version. For support and privacy requests, contact contact@purplekoalastudios.com.