Privacy Details
Last updated 31 October 2026.
This page gives the details behind our Privacy page: every piece of data that our apps and web sites collect, the companies that handle it, where it is kept, how long we keep it, why we are allowed to use it, and the rights you have over it. Where this page says "you", it means whoever is using our apps or web site, whether that is you or your child.
Who Is Responsible
Greenleaf Creations Handelsbolag, a trading partnership registered in Sweden, decides how the data on this page is used and is responsible for it. Our Swedish organization number is 969798-1174. You can reach us at support@greenleaf.nu, by telephone at +46 8 501 639 17, or by post at:
Greenleaf Creations Handelsbolag
Ivarskärrsvägen 10
162 44 Vällingby
Sweden
We have not appointed a data protection officer, because the law does not require one for the kind of processing that we do. Write to us at support@greenleaf.nu with any privacy question.
Our Apps
Some of our apps store data about your app usage on our servers. For example, when you complete a game, a record of your game result is sent to us.
An App Passkey is created the first time that one of our apps installed on your device needs to store data like this. That App Passkey is used to identify your device to our servers so that other people can't access your data. It is a cryptographic key pair that belongs just to you. Your private key is kept on your device and never sent anywhere else by us. Your public key is sent to our servers, along with a cryptographic signature of each piece of data you send us.
That key is your account. Until you send the first bit of data to our servers, there is no key and no account at all. Opening an app just to look around does not create a key or an account. There is nothing to sign up for, and we never ask for a name, an e-mail address, or a password. Each app has its own account, and an app installed on a new device creates a new key. If you lose the device, the key is lost with it, and we have no way to give the account back. The account and its data are then deleted two years after the key was last used, as described below.
Each game result also records the version of the app that sent it and the kind of system that it was made for, such as Android or iPhone, so that we can see how quickly our apps are updated. We also count each finished game and each new app account for our statistics, with the country from which it was sent; the count of a finished game also names the app and the kind of system. These counts do not contain your key, so they do not lead back to you.
Additionally, on platforms that support it, our apps send integrity tokens to us. These allow us to validate that the data you are sending is coming from an unmodified copy of our app. We validate this token (sometimes by sending it to the platform provider; currently only Android on Google Play needs this), and we store with each game result only whether the check passed. That is used, for example, to show other players that your game result on our leaderboard came from an unmodified version of our app. If a check fails, our server writes the reason in its working logs and sends us an error report, so that we can find out why.
Those records are held in two places: Amazon's data centers in Stockholm, Sweden, and in Oregon, in the United States. Your device connects to whichever of the two is nearer, so a family in Europe is answered from Stockholm and a family in North America from Oregon. The two are kept in sync with each other so that your data is waiting wherever you next use our apps, which means it lives in both countries rather than one.
You can download a copy of your data at any time from the Your Data tab of the Manage Account screen inside the app. It is a ZIP file of everything that our servers keep for your account, with a description of each file. The download link works for seven days, and we delete the file a day later. If the Manage Account screen in your app has no Your Data tab, update the app from your app store.
You can delete your account at any time from the Danger Zone tab of the same screen. Deleting your account removes your key and its sign-ins from our servers, deletes the data that the key sent, such as your player profile, your progress in each game, and your game results, and deletes any copy of your data that you asked for and that is still waiting for you. The app forgets the key on your device. Only the leaderboard entries are kept, so that our leaderboards stay accurate. An entry contains no name, e-mail address, or Internet address, and once the key is gone, nothing connects it to you or to your device. A deleted player's fantasy name stays on the leaderboards until each entry reaches its one-year expiration date.
This is why nothing connects a kept leaderboard entry to you. Our servers keep your app data in two separate parts. The first part holds your App Passkey: its public key and an account number. The account number is a random number that we make when the key is first used. It is not calculated from the key, so nobody can work it out from the key. The second part holds your player profile, your progress, your game results, and the leaderboard entries, and it knows only the account number. It never stores your key. The record in the first part is the only thing that connects the key on your device to the account number. Deleting the account removes that record, so a leaderboard entry that is kept has an account number that no record on our servers leads to. Until our backups expire, a backup copy can still contain the deleted record, as "How Long We Keep It" explains.
We also tidy up after accounts are inactive. When a key has not been used for two years, we remove that key and its sign-ins from our servers, and within a few days we delete the data that it sent, exactly as if you had deleted the account from inside the app.
When something goes wrong in one of our apps, it sends us a report so that we can fix it. The report contains the error, the technical trace showing where in our own code it happened, the time and time zone, how long the app had been running when the error occurred, and details of your device: its operating system, version, screen size, pixel density, manufacturer, brand, model, amount of memory, language, and regional settings. We do not combine these details into an identifier, and we do not use them to recognize a device. We do not use a third-party crash reporting service. The report is stored on our own servers in Stockholm, and a summary of it (the error, the trace, the local time, and how long the app had been running) is filed as a private ticket in GitHub, the service we use to track our work, where only our team can read it.
Each app has a feedback feature. If you use it, what you type is filed as a private ticket in GitHub. If you choose to include them, the same device details as in a crash report and the app's recent activity log are also sent. If you include your e-mail address in your feedback, we may use it to reply to you, but won't use it for anything else without your consent. Sending any feedback at all is entirely optional.
Games for Kids
Our Games for Kids series of games keeps a profile for each player. The profile contains an avatar (a small cartoon icon), a fantasy name, and a title. The player picks all three from lists that we created. There is nowhere in our games for a child to type anything that another person can see.
Your player profile also includes which games you have played and for how long, the result and scores of each game, the coins earned and spent, and the collections and albums unlocked.
On leaderboards, a player appears under the fantasy icon, name, and title mentioned above, so that a leaderboard can tell two players apart without either of them revealing their real name. Each leaderboard entry is kept for a year after the game result was created and is then removed. We do not retain leaderboard data beyond one year.
Everything in our games that is meant for a grown-up is behind the "Grown-Up Stuff" button on the Pause menu, which first asks a question that is meant to keep young children out. This includes the feedback screen, the Manage Account screen, and every link that leads out of the game, such as the app store. We never ask a child for a name, an e-mail address, or a photo. If you think that a child has sent us their e-mail address or any other personal information, write to us, and we will delete it.
Our Web Sites
Our web sites and the chat assistant are for grown-ups. Our games keep every link to them behind the "Grown-Up Stuff" button.
We record which web browser you use and the country where your device is located, so that we can make sure our site works well for our visitors. This information does not identify you. It is gathered for us by Plausible Analytics, which sets no cookies, does not store your Internet address, and does not follow you to other web sites. Your browser sends each visit to our own address, which passes it on to Plausible.
Our pages carry a chat assistant, the owl in the bottom-right corner. It sits there quietly until you click it. If you ask it a question, your question and its answer are sent to Amazon Web Services, which runs the artificial intelligence that writes the reply on our behalf. Both the assistant and the artificial intelligence behind it run within the European Union. Amazon's artificial intelligence service does not keep your question or the answer, and Amazon does not use them to train its artificial intelligence. We keep the conversation on our own servers at Amazon for seven days so that the assistant can follow the thread, and then we delete it. We also keep a running total of what each conversation cost us to answer, without its words, for a year. Please do not type anything private or sensitive into the chat assistant.
Opening the chat sets a cookie so the assistant can remember your conversation as you move between Greenleaf Creations pages. The cookie lasts seven days. Opening the chat also asks Cloudflare Turnstile to confirm that you are a person and not an automated script or bot. To decide, Cloudflare looks at your Internet address and at your browser, and it uses what it learns to protect other web sites too.
Our Newsletter
If you choose to subscribe to our newsletter, we keep your e-mail address for the single purpose of sending you the newsletters you ask for. We never share this e-mail with other organizations or contact you using it for other reasons. Your e-mail address is held in the same two places as a player's profile, in Sweden and in Oregon.
We send a confirmation message to the address first, and nothing more until you confirm it. An address that is not confirmed within seven days is deleted. The subscriptions page lets you unsubscribe from any of our newsletters, or remove your address completely, at any time. That page keeps your address and its sign-in key in your browser so that you stay signed in, and forgets them when you log out. The subscription form also uses Cloudflare Turnstile, as described above.
Companies That Handle Your Data
These companies handle data for us. Each one receives only what it needs for its part of the work.
| Company | What it does for us | What it receives | Where |
|---|---|---|---|
| Amazon Web Services | Runs our servers, databases, and backups, sends our e-mail, and runs the chat assistant's artificial intelligence | Everything on this page that our servers keep | Stockholm, Sweden, and Oregon, United States; the chat assistant runs within the European Union |
| GitHub | Tracks our work | Feedback, and summaries of crash reports | United States |
| Plausible Analytics | Counts visits to our web sites | The page, your browser, and your country | European Union |
| Cloudflare | Checks that a person, not a bot, is using the chat and the subscription form | Your Internet address and details of your browser | Worldwide |
| Confirms that an Android app from Google Play is unmodified | The app's integrity token | Worldwide |
Amazon Web Services, GitHub, and Plausible Analytics work only on our instructions. Cloudflare and Google also use what they receive for their own security work, under their own privacy policies.
Data Kept Outside the European Union
Our servers in Oregon and the GitHub service are in the United States. Amazon Web Services and GitHub take part in the EU-U.S. Data Privacy Framework, and our agreements with them include the European Union's standard contractual clauses, which are meant to give your data the same protection outside the European Union as inside it. Write to us for a copy of the clauses.
Cloudflare and Google can handle what they receive in any country where they work, under their own privacy policies.
How Long We Keep It
| Data | How long |
|---|---|
| App Passkey and its sign-ins | Until you delete the account, or two years after it was last used |
| Player profiles and progress in each game | Until you delete the account, or a few days after its key expires |
| Game results | Until you delete the account, or a few days after its key expires |
| Counts of finished games and new app accounts, without your key | Indefinitely |
| A copy of your data that you asked for | Eight days, or until you delete the account |
| Leaderboard entries | One year after the game |
| Crash reports and feedback | Indefinitely |
| Chat conversations and the chat cookie | Seven days |
| The cost of each chat conversation, without its words | One year |
| Newsletter addresses | Until you remove the address; seven days if it is never confirmed |
| Our servers' working logs | 90 days |
| Backups | We copy our databases every day, and each copy is deleted after 91 days. Storage can take up to 30 more days to remove it completely. |
Because of the backups, something that you delete can stay in a backup copy for up to four months. We use a backup only to repair our own databases after a failure.
Why We Are Allowed to Use It
European privacy law asks us to name the legal basis for each use of your data.
| Use | Legal basis |
|---|---|
| App accounts, game results, player profiles, and leaderboards | To provide the app that you chose to use. A grown-up buys our app from an app store, so our agreement is with that grown-up, and a child plays with their permission |
| The app version and kind of system with each game result, and the counts of finished games and new app accounts | Our legitimate interest in knowing which of our apps and versions are in use, and in which countries |
| Integrity checks | Our legitimate interest in fair leaderboards and in protecting our servers |
| Crash reports, with the details of your device | Our legitimate interest in finding and fixing faults |
| Feedback and our replies | Our legitimate interest in answering the people who write to us |
| Web Site visit counts | Our legitimate interest in web sites that work for our visitors |
| The chat assistant and its cookie | To answer the questions that you ask it |
| Cloudflare Turnstile | Our legitimate interest in protecting the chat and the subscription form from bots. The check reads your browser only because it is strictly necessary for the chat or the form that you asked to use |
| The newsletter | Your consent, which you can withdraw at any time on the subscriptions page |
| Backups and logs | Our legitimate interest in keeping our services safe and able to recover from a failure |
No Machine Judges You
No computer program, and no artificial intelligence, judges you or makes an important decision about you. We do not use your data to guess what you like or to predict what you will do. A few small things happen automatically: the checkmark on a leaderboard entry, the check for bots on the chat and the subscription form, and the deletion of an account that nobody has used for two years.
Do You Have to Give Us Data?
No law or contract requires you to give us any data. Our games send each game result when you finish a game, because the leaderboards and your saved progress need them. If you would rather that a game did not send this, the only way is not to play it. You can delete the account at any time in the Danger Zone tab of Manage Account. Subscribing to our newsletters is optional; if you decide to subscribe, we need your e-mail address to send you the newsletters that you choose. The feedback form and the chat assistant are also optional.
Your Rights
You can ask us for a copy of your data, ask us to correct or delete it, ask us to stop or limit a use of it, object to a use that relies on our legitimate interest, and ask for your data in a form that you can take to another service. Where a use relies on your consent, you can withdraw the consent at any time. Write to us at support@greenleaf.nu, and we will answer within one month.
Our apps do not know who you are, so we cannot find your app data from your name or your e-mail address. The app on your device holds the only key to it, and without that key we cannot tell which data is yours. Because of this, the law does not ask us to collect more data about you only to find it. Instead, the Manage Account screen in the app does it for you: its Your Data tab downloads a copy of your app data in a form that you can take to another service, and its Danger Zone tab deletes it.
If you are not happy with our answer, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, or to the data protection authority where you live.
Children in the United States
Our Games for Kids are made for children, so the United States Children's Online Privacy Protection Act (COPPA) applies to them. The only personal information under that law that our games collect from a child is the public key of the App Passkey, which is a persistent identifier.
We use the key only to run the games: to keep progress and game results with the right account, to show results on the leaderboards, to confirm that a result came from an unmodified copy of the app, and to protect our servers. We never use it to contact anyone, to show advertisements, or to build a profile of a child, and we never ask for anything that could connect it to a person, such as a name, an e-mail address, or a photo. Only Amazon Web Services, which runs our servers, holds it for us. A child cannot make personal information public: the leaderboards show only the avatar, fantasy name, and title that the child picked from our lists.
Because we use the key only for these internal operations of the games, and collect no other personal information from a child, the law does not ask us to get a parent's consent before the games collect it.
The key is deleted with the account, or two years after it was last used. The table in "How Long We Keep It" is our full retention policy. A parent can manage all of this in Manage Account, behind the "Grown-Up Stuff" button on the Pause menu: the Your Data tab downloads a copy of the child's data, and the Danger Zone tab deletes it. To stop the collection, delete the account and remove the game from the device. The contact details for any question are in "Who Is Responsible".
How We Protect It
Everything that travels between your device and our servers is encrypted. Each record that an app sends carries the signature of its App Passkey, so nobody else can add to or change your data. Our databases and backups are encrypted where they are stored, and only our own team can get to them.
Changes to This Page
When we change what we collect or how we use it, we update this page and our Privacy page, and change the date at the top of both.
Contact Us
If you have a question about anything on this page, write to us at support@greenleaf.nu.