Privacy Policy

This policy explains what information Jelly Stack ("the game") collects, why, who it is shared with, and the choices you have. We try to collect as little as we can. If you have a question, email jellystacksupport@gmail.com.

1. Who we are

Kelastudios is the developer of Jelly Stack and is based in Australia. We are responsible for the personal information described here. Contact: jellystacksupport@gmail.com.

2. What we collect

If you create an account

• Email address and password. Sign-in is handled by Google Firebase Authentication. We never see your password; it is stored by Firebase in protected form.
• Username. This is public to other players: anyone who knows it can send you a friend request.
• Friends data. Your friends list, friend requests you send or receive, and battle invitations (who sent it and the room code). These are stored in Google Cloud Firestore.
• An account ID that Firebase generates for you.
• Profile picture (optional). If you choose a photo from your gallery, a small square copy (96 pixels) is stored in Google Cloud Firestore and shown to other players next to your username, on leaderboards, in friend lists and in matches. The original stays on your phone. You can remove it at any time in the game, deleting your account removes it, and other players can report photos that break the rules.
• Blocks and reports. If you block or report another player, we store who you blocked, and for a report your account ID, the other player's account ID and name, and your reason. Reports are only used to review and act on abuse.

When you play

• Progress and settings (levels completed, stars, coins, sound settings, your local rating and display name) are stored on your device. We do not upload them.
• Live battles. During a match, your board state, move count, time and display name are sent to your opponent through the Photon multiplayer service (Exit Games). This data is only used to run the match and is not kept by us afterwards.

Automatically

• Crash and usage information (for example device model, operating system version, app version, and what happened before a crash), collected through Google Firebase services so we can fix bugs and understand how the game is used.
• Advertising information collected by Google AdMob when ads are shown: your device's advertising ID, IP address and general device details. See section 4.
• Install and ad measurement information collected by AppsFlyer on Android: your device's advertising ID, IP address, device details, which ad led you to install the game, and a few early in-game actions (finishing the tutorial, reaching a few wins, making a purchase). See section 4.
• Connection information such as your IP address, which any online service receives when your device connects to it.

Purchases

Purchases are processed by Google Play or the Apple App Store. We receive confirmation that a purchase (for example "Remove Ads") was made, but never your payment card details.

3. Why we use it

• To run the game: sign you in, find and connect you with friends, and run multiplayer matches.
• To show ads and let you remove them by purchase.
• To keep the game safe and fair, for example to remove abusive usernames or handle reports.
• To fix crashes and improve the game.
• To reply when you contact us.

4. Advertising

The game shows ads from Google AdMob. AdMob may use your advertising ID to show ads and measure them. In regions where the law requires it, such as the European Economic Area and the United Kingdom, we ask for your consent before personalised ads are used, and you can change your choice later. On Android you can reset your advertising ID or opt out of personalised ads in your device's Google settings; on iPhone you can control tracking in Settings > Privacy. Learn more in Google's advertising policy.

If you installed the game after seeing one of our ads (for example on TikTok), we use the measurement service AppsFlyer to find out which ad led to the install and to see whether ads work. It receives your advertising ID, IP address and device details, plus a few early in-game actions such as finishing the tutorial, reaching a few wins and making a purchase. It does not receive your email, username or friends list. It starts only after the same consent step as analytics, where the law requires one, and you can stop it by resetting or turning off your advertising ID in your device settings. Learn more in AppsFlyer's privacy policy.

5. Who we share it with

We do not sell your personal information. We share it only with services that help us run the game, who may only use it for that purpose:

Your username is visible to other players who search for it. We may also disclose information if the law requires it or to protect the rights and safety of players.

6. Where it is stored

These services run on servers in several countries, including the United States and Europe, so your information may be handled outside Australia. We choose well-known providers with their own security and privacy commitments.

7. How long we keep it

• Account data is kept until you delete your account. Deleting it inside the game removes your username, profile, friend links, friend requests and invitations. Copies in routine backups may remain for up to 30 days.
• Crash and usage reports are kept for the periods set by Google Firebase (typically up to 90 days for crash reports).
• Progress stored on your device stays there until you clear the game's data or uninstall it.

8. Your choices and rights

• Delete your account in the game: Battle > Friends > Delete account. See how to delete your account, including if you can no longer open the game.
• Ask to see or correct the information we hold about you by emailing us. You can change your display name on your device at any time.
• Control ads as described in section 4.

Under the Australian Privacy Act 1988 you may ask us for access to, or correction of, your personal information, and we will respond within a reasonable time. If you have a complaint, contact us first. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au). If you live in the EEA or UK you may also have rights such as objecting to processing or complaining to your local data protection authority; email us to use them.

9. Children

Jelly Stack is a general-audience puzzle game and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, email us and we will delete it. Players under 16 should have a parent or guardian's permission before creating an account.

10. Security

We use reputable providers, encrypted connections, and access rules so that players can only read their own data. No system is completely secure, so please use a strong, unique password.

11. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will make significant changes visible in the game or on this page.

12. Contact

Kelastudios, Australia
jellystacksupport@gmail.com