Privacy

We run our business without collecting any more personal data than is absolutely necessary. The information we gather is only used for the purposes stated here. We never sell it or give it to anyone else for their own purposes. A few companies handle it on our behalf, and we name them below. Where this page says "you", it means whoever is playing, whether that is you or your child.

Our games and our websites contain no advertising and no advertising trackers of any kind.

Our Apps

We collect the operating system version, screen size, manufacturer, model, amount of memory, language, and region settings of the device, so that we can make sure our games run well on the devices people actually own.

When something goes wrong in one of our apps, it sends us a report so that we can fix it. The report contains the error, the technical trace showing where in our own code it happened, the device details listed above, the app version, and the time it occurred. It does not include your game progress, your scores, or anything you have typed. We do not use a third-party crash reporting service; these reports go to our own servers, in Sweden and nowhere else.

Each game has a feedback screen. If you use it, what you type is e-mailed to us, along with your e-mail address if you choose to give one so that we can reply, and the device details listed above if you choose to include them. Both are optional, and we use them only to answer you.

Your Player Profile

Our games keep a profile for each player. It records which games have been played and for how long, the result of each one, the coins earned and spent, and the collections and albums unlocked. All of it is counts and timings.

The profile is created on your device the first time you open a game, and that is where it stays. Unless you choose to sign in, none of it is ever sent to us. Signing in is optional. It is what lets your game progress be seen on a new phone, or an additional tablet or other device, and nothing else does, so a player who has not signed in starts over on a new device.

If you do sign in, your profile is copied to our servers, and even then none of it is attached to your name, because we never learn your name. We ask the provider you sign in through only to confirm the sign-in, and what we store is a one-way hash of its answer: a scrambled fingerprint that cannot be unscrambled back into the answer it was made from. Your e-mail address and your account name at that provider are never written down anywhere on our side. If you use a passkey instead, we store the public half of it, which is the half designed to be shown to anyone. What tells one player from another on our side is that hash together with a random code we generate, and neither can be turned back into anything about you.

On leaderboards, a player appears under a name that is not their own. It is chosen from a fixed list of names built into the game, with a title and a number after it, so that a leaderboard can tell two players apart without either of them having told us who they are. There is no way to type in a player name of your own, and that is deliberate.

Alongside the hash we record the country and the state or province your sign-in came from. The device details listed above are different: they are sent whether or not you sign in, and they are stored as separate records with no player attached to them, so they can be counted but not followed.

A signed-in player's profile and those device details are held in two places: Amazon's data centers in Stockholm, Sweden, and in Oregon, in the United States. Your device connects to whichever of the two is nearer, so a family in Europe is answered from Stockholm and a family in North America from Oregon. The two are kept in step with each other so that your profile is waiting wherever you next sign in, which means it lives in both countries rather than one. We are comfortable with that because none of it says who a player is: we never learn your name or your e-mail address, so what is kept in both places is a hash, a random code, a name out of our own list, and a set of counts.

You can delete your account at any time from the account screen inside any of our games. That removes your sign-in from all of our games and websites at once, and it cannot be undone. Records of individual games played are kept, but they are no longer connected to anything, and signing in again later starts a new, empty account.

Our Websites

We record which web browser you use and the country where your device is located, so that we can make sure our site works well for our visitors. This information is not personally identifiable. It is gathered for us by Plausible Analytics, which sets no cookies and does not follow you to other websites.

Our pages carry a chat assistant, the owl in the bottom-right corner. It sits there quietly until you click it. If you ask it a question, your question and its answer are sent to Amazon Web Services, which runs the artificial intelligence that writes the reply on our behalf. Both the assistant and the artificial intelligence behind it run within the European Union. The conversation is kept for seven days so that the assistant can follow the thread, and is then discarded. Please do not type anything private or sensitive into it.

Opening the chat sets a cookie so the assistant can remember your conversation as you move between Greenleaf Creations pages, and asks Cloudflare Turnstile to confirm that you are a person and not an automated script or bot.

Our Newsletter

If you choose to subscribe to our newsletter, we keep your e-mail address for the single purpose of sending you the newsletters you ask for. We never share your e-mail with other organizations or contact you for other reasons. It is held in the same two places as a player's profile, in Sweden and in Oregon.

Contact Us

If you have a question about anything on this page, write to us at support@greenleaf.nu.