Privacy policy
The short version
- The game collects no personal data. There are no accounts, no ads, no analytics and no tracking. Your progress and settings stay on your device.
- Game Center is optional. If you're signed in to Apple's Game Center, the game sends it your badges and your star total, and Apple handles them. We don't receive them.
- If you email us, for example with Send feedback in the game, we get what's in that email and use it only to help you.
- We never sell or share your personal information, and never use it for advertising.
- You're in control. Ask us to see, correct or delete anything we hold, at [email protected].
Who we are
MarblePath (the game for iPhone and iPad, and this website) is made by Aaron Hatton, an independent developer, who is the “controller” of any personal data described here. Contact: [email protected].
This policy covers the MarblePath app and the website at marblepath.app. It's written to meet the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), and the US Children's Online Privacy Protection Act (COPPA).
In the game
MarblePath doesn't collect, send or share any personal data while you play. It doesn't ask for your name, email, age, location, contacts, photos, microphone or camera, and it contains no advertising, analytics, crash-reporting or tracking software. It doesn't use Apple's advertising identifier and doesn't track you across other apps or websites.
To remember your game, MarblePath stores your progress (levels, stars, coins, items and badges) and your settings (sound levels, captions, reduced motion and marble speed) on your device only. We can't see it. It's included in your device's own backups (for example iCloud Backup, which Apple handles under its own privacy policy). To delete it, use Settings → Reset game in the game, or delete the app.
Game Center
On iPhone and iPad, MarblePath works with Apple's Game Center. If you're signed in to Game Center on your device, the game sends it the badges you've earned (as achievements) and your total number of stars (for the Total Stars leaderboard). Nothing else from your game is sent. Game Center is run by Apple under Apple's privacy policy; who can see your achievements and scores, such as your Game Center friends, depends on your Game Center settings. We don't receive your Game Center name or account details. If you're not signed in, or you sign out in Settings → Game Center, nothing is sent.
While the game is running it keeps a short list of recent events, such as which screen you're on and any errors, so a bug report can say what happened. This list lives only in memory, is never saved or sent on its own, and is cleared when the app closes.
When you send feedback or contact us
Tapping Send feedback in the game opens a pre-filled email in your own Mail app. Nothing is sent until you press send, and you can read, edit or remove anything in the email first. If you send it, we receive:
- your email address and name as your Mail app shows them, and anything you write;
- debug info added by the game: app version and build; device model, operating system and browser engine (the “user agent”); screen and window size; language and time zone; the time of the report; the level you were on and how your pieces were placed; your progress and settings (as listed above, plus play counts such as runs and levels completed); and the recent events list.
The debug info doesn't include your name, contact details, location or any identifier for your device. The same applies to anything you email us directly.
Why and on what basis: only to reply to you, fix bugs and improve the game. Under the GDPR our lawful basis is our legitimate interest in supporting the game and responding to people who contact us (Article 6(1)(f)), and where you ask us for help, taking the steps you've asked for (Article 6(1)(b)).
How long we keep it: until your question or bug is dealt with, then we delete it, and in any case within 24 months of your last message. A bug's description may be kept longer only after removing anything that identifies you.
On this website
This website uses no cookies, no analytics and no tracking, and loads nothing from other websites (even the font is served from here). Like every website, its host receives technical information when you visit, such as your IP address, browser type and the page requested, because that's needed to deliver the page and protect it from abuse. Our host, Cloudflare, processes this on our behalf and keeps it only briefly. Our lawful basis is our legitimate interest in running a secure website (GDPR Article 6(1)(f)).
Who else handles data
We use these service providers, under contracts that only let them process the data to provide their service to us:
| Provider | What for | Data |
|---|---|---|
| Google (Google Workspace) | Receiving and storing support email | Emails you send us |
| Cloudflare | Hosting this website, and our domain | Technical data from website visits |
Apple distributes the app through the App Store and TestFlight, and runs Game Center (see Game Center). Apple may collect information about your download and use of its services under Apple's privacy policy; we don't control that. If you choose to share crash reports or app usage with app developers in your device's settings, Apple may pass us anonymous crash and usage statistics that don't identify you.
Google and Cloudflare may process data outside your country, including in the United States. Where data from the EU, EEA, UK or Switzerland is transferred, they rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
We don't sell personal information, don't “share” it for cross-context behavioural advertising, and don't disclose it to anyone else except where the law requires us to.
Children
MarblePath is made for families, and many players are children. Because the game collects no personal data, children can play without giving us any information. We don't knowingly collect personal information from children under 13 (or the age of digital consent where you live, up to 16 in parts of the EU). Sending feedback opens the device's Mail app, which we ask that a parent or guardian use. If you believe a child has sent us personal information, email us and we'll delete it promptly.
Your rights
Everyone
Wherever you live, you can ask us what personal information we hold about you, ask for a copy, and ask us to correct or delete it. Email [email protected] with “Privacy request” in the subject. We may ask you to send it from the email address you contacted us from, so we know it's you. We'll reply within one month and won't charge you.
EU, EEA, UK and Switzerland (GDPR)
You have the right to access your personal data, to have it corrected or erased, to restrict or object to our processing it, and to data portability. Where we rely on legitimate interests you can object at any time. You also have the right to complain to the data protection authority where you live or work, for example the Information Commissioner's Office (ICO) in the UK, though we'd appreciate the chance to sort it out with you first. We don't make decisions about you by automated means or profile you.
California and other US states (CCPA)
In the past 12 months, the only personal information we've collected is what people choose to send us by email: identifiers (name and email address), internet or other electronic network activity information (the debug info and website technical data described above) and anything else you include in your message. It came from you directly, and from your browser when you visit this website. We use it only for the purposes in this policy, and disclose it only to the service providers listed above.
We have not sold or shared personal information, including that of anyone under 16, and we don't collect sensitive personal information. Because we don't sell or share, there's nothing to opt out of; if your browser sends a Global Privacy Control signal, we treat it as a request to opt out anyway.
You have the right to know what we've collected about you and how we use and disclose it, to get a copy, to have it deleted or corrected, and not to be treated differently for using these rights. You, or an agent you authorise, can make a request by emailing [email protected]. We'll confirm we got it within 10 business days and respond within 45 days. Residents of other US states with privacy laws have similar rights, which you can use the same way, including appealing any decision by replying to our answer.
Security
Your game data never leaves your device unless you send it, apart from the badges and star total shared with Game Center when you're signed in to it. Email and this website are protected in transit with encryption (TLS), and only Aaron Hatton can read support email.
Changes to this policy
If we change how MarblePath handles data, we'll update this page and the date at the top before the change takes effect. If we ever want to collect anything new from the game, such as anonymous usage statistics, we'll ask for your permission in the game first and won't collect it unless you agree.
Contact
Questions or requests about privacy: [email protected].