Farmers Market Story Privacy Policy
This policy explains what information the Farmers Market Story mobile game ("the Game") collects, how we use it, and the choices you have. "We", "us" and "our" mean Boring Lava LLC, the Game's developer. Questions: support@boringlava.com. For help with the Game, see Support.
Summary
- You can play without creating an account. We never ask for your name, email address, phone number, or location.
- Your game progress is saved on your device.
- Our servers keep a random player ID and the records needed for daily rewards, events, purchases and ad rewards.
- The Game sends play analytics linked to that random ID. You can turn analytics off and delete them in Settings.
- You can choose to watch an optional rewarded ad from Google AdMob to skip a stall's cooldown. Ads are non-personalized and are not used to track you; Google collects device information to serve them under its own policy.
- Purchases are processed by Apple or Google. We never see your payment card details.
- We do not sell your personal information or share it for cross-context behavioral advertising.
Information we collect
Game data stored on your device
Your board, inventory, progress and settings are stored on your device. The Game excludes this data from device backups, so uninstalling the Game removes it.
Cloud saves
Where the Game offers cloud saves, your save is stored in Apple's or Google's saved-games service under their privacy policies. We do not run a separate save account for you and do not receive your cloud save.
Player ID and sign-in
When the Game first connects to our servers, it creates a random player ID and installation ID and receives session credentials. The credentials are kept in your device's secure storage (Keychain on iOS, Keystore on Android). If you are signed in to Game Center or Google Play Games, the Game can send a one-time platform verification so that rewards and purchases can be recovered after a reinstall on the same platform. We keep only a one-way hash of your platform player ID. We never receive your Apple or Google account email or password.
Rewards, events and purchases
To deliver rewards and items exactly once, our servers record daily-reward claims, event participation and progress (such as which items you delivered and when), in-game-currency offers you buy, and item deliveries. For real-money purchases we receive transaction information from Apple or Google: the product, the transaction or order identifier, purchase and refund status, and dates. Google Play purchase tokens are stored encrypted. Payment details are handled entirely by Apple or Google.
Rewarded advertising
When a stall is cooling down, the Game may offer an optional rewarded video ad from Google AdMob that skips the cooldown. Watching is always your choice: you can keep waiting or spend gems instead, and ads are limited to a few per day. The Game shows no other ads.
When you choose to watch an ad, Google's Mobile Ads software in the Game collects and sends to Google your approximate location (derived from your IP address), device and advertising identifiers, how you interact with the ad, advertising data, and diagnostic and performance information. Google uses this to serve and measure the ad, for analytics, and to prevent fraud. We ask Google to show only non-personalized ads with restricted data processing, so nothing is used to personalize the ads you see or to track you across other companies' apps and websites, and the Game does not ask for App Tracking Transparency permission. See How Google uses information from sites or apps that use its services.
From Google we receive only a signed confirmation that an ad finished, which we use to grant your reward. We keep a one-way hash of that confirmation's transaction identifier and its time so the same ad cannot grant a reward twice.
Play analytics and diagnostics
The Game sends limited gameplay analytics to our own servers. These include session starts and lengths, player level, tutorial and story progress, orders, merges, in-game currency earned and spent, screens and dialogs viewed, event participation, in-game purchase outcomes, error codes, performance timings, platform, and app version. Records are linked to your random player ID and a per-launch session ID. Analytics never include your save, board positions, screenshots, recordings, free-form text, credentials, receipts, advertising identifiers or device model.
Analytics are on by default. Turn off Share play analytics in the Game's Settings to stop sending them; this also deletes unsent analytics on your device. Delete my analytics data deletes the detailed analytics linked to your player ID on our servers.
Server requests
Our servers and hosting provider (Amazon Web Services, including its CloudFront network) process your IP address and request details to deliver each request. We do not keep web access logs. Our application error logs record an error code and request number, not your IP address, and system logs are kept for 7 days.
Support email
If you email us, we receive your email address, your message, and anything you choose to include.
How we use information
- To run the Game, sync rewards and events, and deliver and restore purchases.
- To grant rewards for completed ads and enforce fair limits.
- To prevent fraud and abuse and keep our servers secure.
- To fix bugs and improve game balance and features.
- To answer support requests and meet legal obligations.
How we share information
We do not sell personal information or share it for cross-context behavioral advertising. We share information only with:
- Amazon Web Services, which hosts our servers and backups in the United States.
- Apple and Google, to verify platform sign-in and to confirm purchases and refunds.
- Google AdMob, when you choose to watch a rewarded ad: the approximate location, device and advertising identifiers, ad interactions, advertising data and diagnostics described above, for advertising, analytics and fraud prevention.
- Authorities or others when required by law or to protect our rights, users or the public, and a successor in a merger or acquisition, subject to this policy.
Data retention
- Detailed analytics: 90 days. Anonymous daily totals that cannot identify you: up to 13 months.
- Player ID, reward, event, ad-reward, purchase and refund records: for as long as needed to provide the Game, prevent duplicate rewards, handle refunds and meet legal and tax obligations, or until you ask us to delete them. After a deletion request we keep only real-money purchase and refund records, unlinked from your game data, for 7 years for tax and accounting.
- Support emails: as long as needed to resolve your request.
- Server error logs: 7 days. Encrypted server backups: removed within about 30 days, so deleted data can remain in backups until then.
Your choices and rights
- Analytics: turn off or delete in the Game's Settings.
- Ads: ads are optional; skip them by waiting or spending gems. On Android you can also reset or delete your advertising ID in Settings › Privacy › Ads.
- Device data: uninstalling the Game removes data stored on your device.
- Access or deletion: see Delete your data, or email support@boringlava.com with the Support ID shown in the Game's Settings › Privacy & Support. Some transaction records may be kept where the law requires.
Depending on where you live (for example California or Canada), you may have rights to know about, access, correct or delete your personal information, and not to be treated differently for using them. Contact us to exercise these rights.
Children
The Game is intended for a general adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.
Security
We use encryption in transit (HTTPS), secure credential storage on your device, hashed tokens, encrypted storage and backups, and restricted server access. No system is perfectly secure, but we work to protect your data.
International users
The Game is offered in the United States and Canada. Information is processed and stored in the United States (Oregon).
Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date and, for material changes, tell you in the Game where appropriate.
Contact
Boring Lava LLC
Washington, United States
support@boringlava.com