Privacy Policy

Last updated: July 21, 2026

Product: VideoPuzzles: Jigsaw Game

Privacy Policy URL: https://tolastapps.com/videopuzzles/privacy

This Privacy Policy explains how Edhar Toomik, an individual entrepreneur registered in Georgia ("we", "us", or "our") collects, uses, stores, and shares information when you use VideoPuzzles: Jigsaw Game (the "App"), visit the VideoPuzzles pages on our website, or contact us for support.

For privacy questions or requests, contact us at [email protected].

This Privacy Policy applies to the current iOS release of the App. If an Android version is later published by a different legal entity, a separate or updated privacy policy will be provided before that version is released.

1. Who We Are

The data controller responsible for the processing described in this Privacy Policy is:

Edhar Toomik
Individual Entrepreneur registered in Georgia
Email: [email protected]

2. Scope

This Privacy Policy applies to:

• the VideoPuzzles: Jigsaw Game mobile application;
• the VideoPuzzles pages hosted at tolastapps.com;
• support communications sent to our support email address;
• backend services used to operate the App.

The App is a video puzzle game in which users rearrange moving video tiles to restore a complete scene.

3. Accounts and Sign-In

3.1 Guest accounts

You can use the App without linking an Apple or Google account.

To operate gameplay limits, save progress, and synchronize App data, the App automatically creates a technical guest account on our backend. A guest account includes a randomly generated user identifier and an authenticated session.

A guest account is an account for technical purposes even though you do not provide a name, email address, or password.

3.2 Apple and Google sign-in

You may optionally link your guest account using:

• Sign in with Apple;
• Google Sign-In.

Linking an account allows supported progress and preferences to be associated with the linked account and synchronized across devices.

Depending on the provider and the permissions you grant, we may receive:

• your provider-specific account identifier;
• your email address;
• your display name;
• profile information made available by the provider.

The App does not offer email-and-password registration.

3.3 Account merging

When you sign in with Apple or Google, guest progress may be merged with the linked account. This allows gameplay information created before sign-in to remain associated with you.

4. Information We Process

4.1 Account, authentication, and session information

We may process:

• backend user ID;
• guest or linked-account status;
• Apple or Google provider identifier;
• email address and display name provided by Apple or Google;
• authentication provider;
• access tokens and hashed refresh-token records;
• account creation and update timestamps;
• session and token-revocation information.

We use this information to create and authenticate accounts, keep sessions active, merge guest accounts, support cross-device synchronization, prevent abuse, and secure the App.

4.2 Gameplay progress and quota information

We may process gameplay information both locally on your device and on our backend, including:

• puzzles started and completed;
• level and puzzle identifiers;
• moves;
• scores;
• stars;
• points;
• first-completion status;
• number of completed levels;
• daily puzzle allowance and usage;
• account creation date used to calculate the applicable daily allowance.

We use this information to operate gameplay, synchronize progress, enforce free-use limits, show progress, and support future gameplay features.

The App does not currently provide a live global leaderboard.

4.3 Onboarding preferences and settings

We may process:

• selected goals;
• selected themes or categories;
• onboarding responses;
• the optional 1–5 in-app rating collected during onboarding;
• language;
• theme;
• music and audio settings;
• other App preferences.

We use this information to personalize initial puzzle recommendations, configure the App, and improve the user experience.

4.4 Subscription and purchase information

If you purchase a Premium subscription, Apple processes the payment through the App Store.

We do not receive or store your full payment card number, Apple Account password, or other payment credentials.

We and our service providers may process:

• subscription product and billing period;
• entitlement status;
• purchase, renewal, expiration, cancellation, and restoration status;
• trial or introductory-offer status;
• transaction and subscription identifiers;
• Premium status and expiration date.

This information is processed through Apple, RevenueCat, and our backend to provide Premium access, restore purchases, synchronize subscription status, prevent fraud, and provide support.

4.5 Product analytics and App events

We use PostHog for product analytics. We may process events such as:

• App opened;
• onboarding started, viewed, and completed;
• paywall viewed;
• subscription purchase and restoration events;
• puzzle started and completed;
• moves, stars, points, and completion counts;
• daily or offline limit reached;
• login started and completed;
• platform and subscription status.

PostHog is configured with automatic App lifecycle capture disabled. Session replay is not configured.

We associate analytics events with the App's backend user ID so that events can be measured across sessions.

4.6 Crash and diagnostic information

We use Sentry in production to identify errors and crashes.

Sentry may process:

• crash reports;
• stack traces;
• error messages;
• technical breadcrumbs;
• device and operating-system information;
• App version;
• network and diagnostic context.

Sentry is configured with sendDefaultPii: false. We do not explicitly attach the App user ID to Sentry events, and performance tracing, profiling, and session replay are disabled.

4.7 Advertising attribution and campaign measurement

We use AppsFlyer to understand how users discover the App and to measure the performance of campaigns promoting the App.

AppsFlyer may process:

• AppsFlyer ID;
• installation identifier;
• device identifiers such as IDFV;
• IDFA, but only if you grant App Tracking Transparency permission;
• backend customer user ID;
• IP address and network information;
• App installation and campaign information;
• selected App events, including paywall-view events;
• purchase or revenue information received through the RevenueCat-to-AppsFlyer integration.

We may use AppsFlyer with advertising platforms including:

• Google Ads;
• Apple Search Ads;
• Meta;
• Unity Ads;
• AppLovin.

These platforms promote the App outside the App. The App does not currently display third-party advertising inside the App.

4.8 App Tracking Transparency and IDFA

The App uses Apple's App Tracking Transparency framework ("ATT").

Before AppsFlyer accesses the iOS advertising identifier ("IDFA") for tracking or advertising measurement, the App requests permission through Apple's ATT prompt.

If you allow tracking, AppsFlyer and participating advertising partners may use the IDFA and selected App events for campaign attribution and measurement.

If you do not allow tracking:

• the App does not receive a usable IDFA for tracking;
• you can continue to use the App;
• gameplay, sign-in, purchases, purchase restoration, and Premium access remain available.

Apple and participating advertising networks may still provide aggregated or privacy-preserving attribution through technologies such as SKAdNetwork.

You can change your tracking choice in:

iOS Settings → Privacy & Security → Tracking → Video Puzzles

4.9 Device, network, IP address, and approximate location

Our backend infrastructure and service providers may process:

• IP address;
• device type and operating system;
• App version;
• language and regional settings;
• network and request information;
• device, installation, and vendor identifiers.

We do not request GPS location or access precise location services.

AppsFlyer, PostHog, Sentry, Cloudflare, or other infrastructure providers may infer an approximate location, such as country, region, or city, from an IP address.

4.10 Sharing puzzle results

The App may allow you to share an App-generated puzzle result, preview, text, or App Store link through the iOS system share sheet.

The App does not browse, read, upload, or collect the existing photos and videos in your photo library.

If you choose an iOS sharing option that saves an App-generated preview to Photos, the action is initiated by you through the system sharing interface.

4.11 Support communications

If you contact us by email, we may process:

• your email address;
• the content of your message;
• attachments you choose to provide;
• device, account, purchase, or technical information included in the request;
• information reasonably necessary to respond to or resolve the request.

4.12 Website and infrastructure logs

When you access our website or backend services, Cloudflare may process standard request and security logs, including:

• IP address;
• request time and URL;
• browser or client information;
• network and security signals;
• error and performance information.

These logs are used for hosting, content delivery, service operation, security, abuse prevention, and troubleshooting.

5. Information We Do Not Intentionally Collect

At the date of this Privacy Policy, the App does not intentionally collect:

• a phone number;
• a postal address;
• precise GPS location;
• contacts;
• existing photos or videos from your library;
• camera recordings;
• microphone recordings;
• health or fitness information;
• payment card details;
• push notification tokens;
• user-generated public posts, comments, or messages;
• a custom public username or profile.

6. Permissions and Device Features

6.1 Tracking permission

The App requests ATT permission for IDFA-based advertising attribution and measurement.

6.2 Photo Library description

The App includes a Photo Library usage description because its sharing functionality may offer system actions that save an App-generated puzzle preview.

We do not use this permission to browse or upload your existing library.

6.3 Background playback

The App supports background playback for App audio or video features. This does not require a separate iOS permission prompt.

The App does not request camera, microphone, contacts, location, or notification permission in the current release.

7. Why We Process Information

We process information to:

• create and authenticate guest and linked accounts;
• provide the App and its gameplay features;
• synchronize progress and settings;
• enforce daily gameplay limits;
• provide Premium access and restore purchases;
• personalize initial puzzle recommendations;
• operate, secure, and troubleshoot our services;
• understand product usage and improve the App;
• measure advertising campaigns where permitted;
• respond to support and privacy requests;
• prevent fraud, abuse, and unauthorized access;
• comply with legal obligations;
• enforce our Terms of Use.

Where applicable law requires a legal basis, we rely on one or more of the following:

• Performance of a contract — to provide accounts, gameplay, synchronization, purchases, and Premium features;
• Legitimate interests — to operate, secure, analyze, troubleshoot, and improve the App;
• Consent — where consent is required, including ATT permission for IDFA-based tracking;
• Legal obligations — to comply with applicable laws, lawful requests, tax, accounting, fraud-prevention, and consumer-protection requirements.

8. Service Providers and Partners

We use service providers and partners that process information on our behalf or provide their own services.

Our providers may process information in accordance with their own privacy notices and contractual obligations.

9. Sale and Sharing of Personal Information

We do not sell personal information for money.

When you allow ATT, certain identifiers and App events may be shared with AppsFlyer and advertising partners for campaign attribution and measurement. Some privacy laws may treat this type of disclosure as "sharing" for advertising purposes.

You can prevent IDFA-based tracking by denying ATT permission or revoking it in iOS Settings.

10. Where Information Is Stored

Account, progress, preference, quota, and Premium-status information is stored using Cloudflare services, including Cloudflare Workers and D1.

Puzzle videos and preview images are stored in Cloudflare R2 or bundled with the App. These assets are App content and are not user-provided personal data.

Analytics, attribution, subscription, crash, and support information may be stored by the corresponding providers described in this Privacy Policy.

11. International Data Transfers

We operate from Georgia and use providers that may process information in the European Economic Area, the United States, and other countries where they maintain infrastructure.

Where required by applicable law, we and our providers use appropriate safeguards for international transfers.

12. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In particular:

• account, progress, preferences, quota, session, and backend Premium-status information is retained while your account exists and is deleted from our active backend database when you use Delete Account;
• hashed session records are revoked or deleted when you log out or delete your account;
• local App data remains until it is reset, removed through account deletion, or the App is uninstalled;
• support communications may be retained for up to 24 months after the request is resolved;
• Apple and RevenueCat may retain purchase and subscription records as required to process transactions, restore purchases, prevent fraud, comply with law, and operate their services;
• PostHog, AppsFlyer, Sentry, Cloudflare, Apple, Google, and advertising partners retain information according to their configurations, contractual obligations, and applicable policies;
• aggregated or de-identified information may be retained for longer where it no longer reasonably identifies you.

We may retain information for longer where required by law, necessary to establish or defend legal claims, or needed to address fraud, security, or abuse.

13. Account Deletion

You can delete your account in the App through:

Profile → Delete account

The App requires confirmation before deletion.

When you delete your account, the App:

• deletes the user record from our active backend database;
• deletes associated authentication-provider records;
• deletes active session records;
• deletes synchronized puzzle progress;
• deletes stored daily-quota information;
• deletes stored preferences and Premium-status fields from our backend;
• resets local App data;
• signs out of the linked Apple or Google account in the App;
• resets the local PostHog identity;
• logs out of RevenueCat on the device.

Deleting your account does not:

• cancel an active App Store subscription;
• erase purchase records held by Apple;
• automatically erase historical records already retained by RevenueCat, PostHog, AppsFlyer, Sentry, Cloudflare logs, or support email systems.

To cancel a subscription, use your Apple Account subscription settings.

To request access to or deletion of historical information held in connection with our service providers, contact us at [email protected]. We may ask for information reasonably necessary to locate and verify the relevant records.

Account and active backend data deletion is processed when the in-App deletion request succeeds. Provider-side deletion or retention requests may take additional time.

14. Your Choices and Rights

Depending on your location, you may have rights to:

• request access to personal data;
• request correction of inaccurate data;
• request deletion;
• restrict or object to processing;
• withdraw consent;
• request data portability;
• object to direct marketing;
• lodge a complaint with a competent data-protection authority.

To exercise a right, contact [email protected].

We may need to verify your identity or request information needed to locate your account or records.

Withdrawing consent does not affect processing that occurred before withdrawal.

15. Children's Privacy

The App is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13.

If you are under the minimum age required to consent to digital services in your country, you may use the App only with the permission of a parent or legal guardian.

If you believe a child has provided personal information without appropriate permission, contact us at [email protected].

16. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

These measures include authenticated API access, hashed refresh-token records, token rotation, provider authentication, and access controls.

No system, network, or storage method is completely secure, and we cannot guarantee absolute security.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our App, data practices, service providers, or legal obligations change.

If we make material changes, we will update the "Last updated" date and may provide additional notice in the App or on our website where appropriate.

18. Contact Us

Edhar Toomik
Individual Entrepreneur registered in Georgia
Email: [email protected]