Privacy Policy

This Privacy Policy explains how Manifiora (“we”, “us”), the developer and data controller, handles information when you use the Cozy Garden Mahjong mobile game for iOS and Android (the “App”) and this website. By using the App you acknowledge this policy. If you have any questions, contact us at hello.manifiora@gmail.com.

1. Information we collect

We never ask for your name, email address or contacts. The only information that reaches us is the usage statistics described in section 4 and the crash reports described in section 5, which Google’s Firebase services collect for us.

Game data stored on your device

To save your progress, the App stores the following on your device only: completed levels, best scores, Garden Stars, garden restoration choices, your chosen companion, daily challenges played, tutorial status and settings (language, appearance theme, music, sound effects, haptics, reduced motion). This save is never sent to us or to anyone else, and it is removed when you delete the App. (The game events in section 4 are separate usage statistics, not a copy of your save.)

Device language

If you leave the language setting on “System”, the App reads your device’s preferred language to show the game in that language. This happens on your device only.

Data collected by Google

The Google Mobile Ads SDK and Google’s User Messaging Platform (UMP), which are built into the App, collect the data described in section 3. Google Analytics for Firebase collects the usage statistics described in section 4, and Firebase Crashlytics the crash reports described in section 5.

2. Information we do not collect

The App has no accounts, sign-in, chat, social features, user-generated content, push notifications or in-app purchases. It does not request access to your precise location, contacts, photos, camera, microphone, health or financial information, and it does not read your browsing or search history.

3. Advertising — Google AdMob

The App is free and is supported by ads from Google AdMob, a service of Google LLC and Google Ireland Limited (“Google”). We show two kinds of ads: an optional rewarded ad you can choose to watch when your tray is full, and an occasional full-screen ad between levels. Ads are never shown while you are playing a level.

When the App requests or shows an ad, Google’s SDKs may collect the following. This list follows Google’s own data disclosures and the privacy manifests shipped with its SDKs:

Google may link some of this data (such as device identifiers, advertising data and approximate location) to your device. Whether ads are personalized depends on your consent choices (see section 6).

iOS: the App does not request App Tracking Transparency (ATT) permission. Because of this, iOS does not give the App or Google access to your device’s advertising identifier (IDFA).

Android: you can reset or delete your advertising ID at any time in your device settings (for example Settings → Google → Ads, or Settings → Privacy → Ads). The ads SDK may also use Android’s Privacy Sandbox features (such as Topics and Attribution Reporting), which you can manage in Settings → Privacy → Ads privacy.

Google processes this data under its own privacy policy and the Google advertising terms, which require it to protect personal data at least as well as described here. Learn more in Google’s Privacy Policy and How Google uses information from sites or apps that use its services.

4. Usage statistics — Google Analytics for Firebase

To understand how the game is played and to improve it (for example, to find levels that are too hard), the App uses Google Analytics for Firebase, a service of Google. It records a small set of game events:

• the App being opened and the screens you visit (Home, Journey, game, Settings);
• a level or Daily Garden being started, completed, or reaching “No Room Left” — with the level number, moves, time and score;
• a rewarded or full-screen ad being shown, and a reward being granted;
• changes to the appearance theme or the language.

With these events Google Analytics also receives technical information: a random ID that Firebase creates for this installation of the App, device model, operating system and App version, language, and your country or region (derived from your IP address, which Google Analytics does not store). It does not receive your name, email, contacts or game save, and it does not use the advertising identifier (IDFA on iOS, advertising ID on Android) or the identifier for vendors (IDFV). We have turned off Google Analytics’ advertising features: this data is not used for ads, ad personalisation or tracking across other companies’ apps.

Consent: where the law requires consent (such as the EEA, the UK and Switzerland), usage statistics are collected only according to the choices you make in Google’s consent message, and you can change them in Settings → Privacy Options. Elsewhere they are collected by default. Nothing is collected before the App knows which of these applies to you.

5. Crash reports — Firebase Crashlytics

If the App crashes or hits a serious error, Firebase Crashlytics, a service of Google, sends us a crash report so we can find and fix the problem. A report contains technical details only: the error and where in the App’s code it happened, the device model, operating system and App version, device state at the time (such as free memory and disk space, and orientation), the time of the crash, and a random ID that Crashlytics creates for this installation of the App (used to count how many installations a problem affects). If usage statistics are allowed (section 4), a report may also list the game events from that section that happened just before the crash.

A crash report does not contain your name, email, contacts, game save or any advertising identifier, and we do not attach a user ID or other personal details to it. Crash reports are used only to keep the App stable — never for advertising or profiling. We send them based on our legitimate interest in a working, stable App (Article 6(1)(f) GDPR; Article 5(2)(f) KVKK), so they do not depend on the consent message in section 6. You can object at any time by contacting us at hello.manifiora@gmail.com; uninstalling the App stops crash reports entirely.

6. Your ad choices and consent

If you are in the European Economic Area, the United Kingdom or Switzerland — or in another region where the law requires it — the App shows Google’s consent message before any ad is requested, and no ad is requested until you have made a choice. You decide whether Google may use your data for personalized ads. Non-personalized ads still use limited data, such as approximate location and device information, for measurement and fraud prevention. Your choices in the same message also decide whether usage statistics (section 4) are collected.

You can withdraw or change your consent at any time in the App under Settings → Privacy Options (shown wherever the law requires it). You can also limit ad personalization in your device settings, or stop all data collection by uninstalling the App.

7. Notice for US residents

Under some US state privacy laws (such as California’s CCPA/CPRA), letting an advertising partner collect device data for personalized ads may be considered a “sale” or “sharing” of personal information. The categories involved are identifiers, internet or other electronic network activity (ad interactions) and approximate geolocation, provided to Google for advertising. Usage statistics (section 4) and crash reports (section 5) are processed by Google as our service provider only; they are not sold or shared for advertising. We do not sell personal information for money. You can opt out of personalized ads through Privacy Options in the App where Google shows it, through your device’s ad settings, or by contacting us. We will not treat you differently for exercising your rights.

8. Sharing and selling

We do not sell or rent personal information and we do not share any data ourselves. The only third party that receives data from the App is Google — for advertising (AdMob), usage statistics and crash reports (Firebase), as described above. Apple and Google also process data about your download of the App under their own privacy policies. We may disclose information if required by law.

9. Children

The App is a calm game with no mature content, but it is intended for a general audience and is not directed at children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, contact us and we will help remove it.

10. Retention and deletion

• Game data stays on your device until you delete the App. We never have a copy, so we cannot view, restore or delete it for you — uninstalling the App deletes it.
• Ad data is retained by Google under its own retention policies. You can reset your advertising ID (Android), change your consent in the App, or manage your data at My Ad Center.
• Usage statistics are kept by Google Analytics for the retention period we have set (2 months for event-level data), after which they are deleted; only aggregated reports without the installation ID remain.
• Crash reports are kept by Firebase Crashlytics for 90 days and then deleted.
• Emails you send us are kept only as long as needed to answer you and then deleted, normally within 12 months.

11. Your rights

Depending on where you live — for example under the GDPR, the UK GDPR, US state privacy laws or Turkey’s Personal Data Protection Law No. 6698 (KVKK) — you may have the right to access, correct, delete or restrict the use of your personal data, to object to processing, to data portability, to withdraw consent and to lodge a complaint with your data protection authority. Since we don’t hold personal data about you, most requests are best handled through the in-app Privacy Options or directly with Google. You can always contact us at hello.manifiora@gmail.com and we will respond within 30 days.

12. International transfers

Google may process ad data, usage statistics and crash reports on servers outside your country, including in the United States, using safeguards such as the EU Standard Contractual Clauses.

13. Security

Game data never leaves your device. All data collected by Google’s SDKs is sent over encrypted connections (HTTPS/TLS).

14. This website

This website does not use cookies, analytics or advertising. Our hosting provider (Vercel) may process technical data such as your IP address in server logs to deliver the site and protect it from abuse.

15. Changes to this policy

We will update this policy if the App’s data practices change — for example if we add another service — before the change takes effect. The date at the top always shows the current version.

16. Contact