Privacy Policy

1. Who are we?

Mosapop is a puzzle game for iPhone, available in 19 languages, published on the App Store by an independent developer. For any questions about this policy, see “Contact.”

2. Data collected by the developer

Only for gift codes. Apart from “Give a skin” and “Use a gift code,” Mosapop sends no data to the developer or to any third party chosen by the developer. The app uses no analytics tools and no advertising identifier, and it does not track you across apps or websites. That is why it does not ask for tracking permission (App Tracking Transparency).

Gift codes are created and checked by the Mosapop server (api.mosapop.com, hosted by Cloudflare), so that a code is only created after a real purchase and can only be used once:

• when you give a skin: the app sends the chosen skin and the proof of purchase signed by the App Store (transaction identifier, product, date; not your name, your address or your payment method). The server keeps the code, the skin, the transaction identifier and the date;
• when you use a code: the app sends the code and a randomly generated installation identifier (kept in your iPhone’s keychain, with no link to you, your Apple Account or your device). The server keeps only a fingerprint of it (SHA-256), so that the code can only be used once and you can use it again after reinstalling the app. This fingerprint is deleted 2 years after the code is used.

This data is used only for gift codes: it is not sold, not shared, and not used for advertising or analytics. Your IP address is seen by Cloudflare for the duration of the request (and to limit the number of attempts); the server does not keep it.

3. Data kept on your device

For the game to work, Mosapop stores the following on your iPhone, in the app’s storage space:

• your progress (levels, gold bricks, Daily Challenge, streaks), your boosters, your lives and your settings (sounds, music, helpers);
• your nickname and brick avatar, if you create one (optional); they are never sent to other players or to the developer;
• the items you have unlocked (skins, backgrounds, frames…) and the gift codes you have created or used;
• the mosaics made from your photos, stored as a grid of colors (the original photo is not kept).

A small part of this information (level, world, lives, streak) is shared with the Mosapop widget, on the same device. This data may be included in your iPhone backups (iCloud or computer) if you have turned them on: those backups are managed by Apple and by you, not by the developer.

Deleting your data: “Settings > Reset the adventure” in the game sets your progress back to zero; deleting the app erases all of its data from the device (except the gift-code installation identifier, kept in the iOS keychain so that a gift you received can be opened again after reinstalling). The developer holds no copy of your progress.

4. Your photos

“My photo as a mosaic” and the profile portrait use the iOS photo picker: the app receives only the photo you choose, with no access to your photo library. The photo is analyzed and turned into a mosaic only on your iPhone (including cutting out the subject, which iOS does on the device). It is never sent anywhere.

“Save to Photos” (Creator Pack) asks for permission to add images only: the app cannot read your photo library. You can remove this permission in Settings > Mosapop > Photos.

5. Game Center (optional)

Game Center is an Apple service. If you choose to sign in (sign-in is handled by Apple):

• your scores and achievements are sent to Game Center for the leaderboards;
• with your consent (an iOS prompt), your list of Game Center friends is read to show their names, their Game Center photos and the level they have reached, on the leaderboard and on the map; a copy is kept on your iPhone so it works offline;
• during a “Challenge a friend” race, your device and your friend’s device (a friend you invited through Game Center) exchange the board’s progress, the times and the equipped mascot. Your friend sees your Game Center name and photo, provided by Apple.

Your nickname, your avatar and your photos from the app are never sent. There is no chat between players. This data is processed by Apple under Apple’s privacy policy. You can play the whole game without Game Center.

6. In-app purchases and gift codes

Purchases are processed by Apple (App Store). The developer never receives your name, your address or your payment information. The app checks your purchases on your iPhone with StoreKit, Apple’s system.

A gift code (“Give a skin”) is created by the Mosapop server after the purchase (see 2). It contains only the name of the skin and a random string of characters, no personal data. You are the one who chooses to send it, using the iOS share sheet. Creating or using a code requires an internet connection; a gift paid for while offline is kept, and its code arrives as soon as you are online.

7. Notifications and reminders

Reminders (evening streak, lives refilled) are local notifications, scheduled on your iPhone: no server is used. You can turn them off at any time in Settings > Mosapop > Notifications.

8. Sharing

When you tap “Share,” the image or text you see is passed, through the iOS share sheet, to the app you choose (Messages, for example). Nothing is shared without your action.

9. Advertising

Mosapop currently includes no ad network and no third-party tracking tool. If that were to change, this policy and the privacy information on the App Store page would be updated beforehand.

10. Children

Mosapop is rated 4+ on the App Store. The app does not ask for a name, an age, an email address or a photo to send: the only data that leaves the iPhone is gift-code data (see 2), which cannot be used to tell who you are.

11. Your rights

The developer holds no data that names you. Gift-code data (see 2) is not linked to anyone: to ask for it to be deleted, write to us and include the code concerned. For data linked to your Apple Account or to Game Center, contact Apple (privacy.apple.com). You can also contact the data protection authority in your country (in France: the CNIL).

12. This website

This website (mosapop.com) uses no cookies, no analytics tools and no trackers. It is hosted by Cloudflare, which sees your IP address while serving you the pages and to protect the site against abuse. Your preferred language may be remembered in your browser (local storage), and it is never sent to us.

13. Contact

Email: contact@mosapop.com. Support: Mosapop support page.

14. Changes

If this policy changes, the new version will be published on this page with its update date.