Privacy Policy

Zellige Mender (Android and iOS) · Yassine Benchekroun · Effective date: 13 October 2026

The short version

You never need an account, a name or an email address to play.
Your progress is saved on your phone and, when you are online, backed up to Unity Cloud Save under a random player ID.
The game is free because it shows a few ads, delivered by Unity LevelPlay and the ad networks it works with. They use your advertising ID only as your choices allow.
In the EEA, the UK and Switzerland we ask before ads are personalised or analytics are collected. Everywhere else you can switch both off any time in Settings > Privacy. On iPhone, Apple's tracking prompt also applies.
Purchases are handled by Google Play or the App Store; RevenueCat checks them for us. We never see your card details.
We do not sell your personal information. You can delete your data in the game (Settings > Delete my data) or by email: see Delete your data.

1. Who we are

Zellige Mender is made by Yassine Benchekroun ("we", "us"), the controller of the personal data described here. Contact: jonas.b3n@gmail.com.

Who we are: Yassine Benchekroun, an independent developer. Postal address: 30 N Gould Street, Sheridan, WY 82801, USA. Email: jonas.b3n@gmail.com.

2. Data stored on your device

Game progress: panels, stars, coins, hints, riad decor, Atelier designs, Daily Courtyard streak, settings, and a random local player ID. Stored in the app's private folder with automatic backup copies.
Your privacy choices and a cached copy of what you bought (for example "no ads" or the Riad Pass), so they work offline.

3. Data processed by our service providers

Unity Gaming Services (Unity Technologies)

Service	What is processed	Why
Authentication	A random player ID created when you first go online; installation ID; device and app information.	To link your cloud backup and leaderboard entries to you without an account.
Cloud Save	A copy of your game progress linked to the player ID.	Backup and restore (for example after reinstalling).
Remote Config	Player ID, app version, platform, approximate country from your IP address.	Game settings such as hint prices and ad pacing without an app update.
Leaderboards	Player ID, an automatically generated nickname, your Daily Courtyard or Weekly Grand Rosette score (time plus penalties).	The daily and weekly leaderboards. Other players see the nickname and score only.
Analytics	Gameplay events (panel started or finished, hints used, purchases), session information, device model, OS, language, approximate country.	To find panels that are too hard or too easy and fix problems. Only with your consent where the law requires it.

Advertising: Unity LevelPlay and mediated ad networks

Ads come through Unity LevelPlay, which picks an ad from several networks. We use Unity Ads and ironSource Ads; if we add a network we will list it here. To show, cap and measure ads and prevent fraud, these companies process your advertising ID (Google Advertising ID or Apple IDFA when you allow tracking), IP address and approximate location, device and network information, and how you interact with ads.

Personalised ads are used only when your choices allow (consent in the EEA/UK/Switzerland, no opt-out elsewhere, and on iPhone only if you allow tracking).
Non-personalised ads still use some device data (frequency caps, fraud checks, counting views) but not to build a profile about you.
Rewarded ads are always optional. Interstitial ads never appear around the Daily Courtyard or Weekly Grand Rosette.

Unity Ads and ironSource Ads: unity.com/legal/game-player-and-app-user-privacy-policy

Purchases: RevenueCat, Google Play and the App Store

Google Play or the App Store handles payment. RevenueCat receives the receipt, product, price, currency, date, a random app user ID and device information to confirm and restore purchases. We never receive card details.

RevenueCat: revenuecat.com/privacy
Google: policies.google.com/privacy · Apple: apple.com/legal/privacy

4. Your choices

EEA, UK, Switzerland: on first launch we ask whether you agree to personalised ads and analytics. If you say no, you get the full game with non-personalised ads and no analytics.
Everywhere: Settings > Privacy lets you allow or refuse personalised ads and analytics at any time. Refusing also tells our ad partners not to "sell" or "share" your information for cross-context advertising (US state laws such as the CCPA/CPRA).
Android: Settings > Privacy > Ads lets you delete or reset your advertising ID. iPhone: Settings > Privacy & Security > Tracking.
No interstitial ads: the one-time "Remove Ads" purchase.

5. Legal bases (EEA/UK)

Consent: personalised ads and analytics (withdraw any time in Settings > Privacy).
Contract: saving your progress, leaderboards, delivering purchases.
Legitimate interests: non-personalised ads that fund the free game, fraud prevention, security.
Legal obligations: purchase records for tax and accounting.

6. Children

Zellige Mender is a general-audience puzzle game and is not directed to children under 13 (or the age of digital consent in your country). We do not knowingly collect personal information from children. If you think a child's data was collected, contact us and we will delete it.

7. How long we keep data

On your device: until you delete it in the game, uninstall, or clear the app's data.
Cloud Save and player ID: while you play; deleted when you use Delete my data or within 30 days of a verified email request. Unused backups may be deleted after 24 months.
Leaderboards: daily boards reset every day and weekly boards every Monday; we keep at most 30 days of daily and 12 weeks of weekly results.
Analytics: kept by Unity for up to 13 months in identifiable form, then aggregated or deleted.
Purchase records: as needed for restores and as required by tax law.

8. Your rights and deleting your data

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent. You can also complain to your data protection authority. The quickest way to delete everything is in the game; the full steps are on Delete your data.

9. International transfers and security

Our providers may process data in the United States and other countries, with legal safeguards such as Standard Contractual Clauses or the EU-US Data Privacy Framework. All network traffic is encrypted (HTTPS/TLS).

10. Changes and contact

If we change this policy we will update the date above and, for important changes, tell you in the game. Contact: jonas.b3n@gmail.com.