Nestled — Privacy Policy

1. Who We Are

Nestled is a game for iPhone, published by Olaverse Labs ("we", "us", or "our"), which also maintains this website at olaverse.co.uk. This policy covers the game only. Our website privacy policy covers olaverse.co.uk separately.

Nestled is a puzzle game. You work through levels, earn stars and seeds, build up XP and streaks, and play Rush rounds against the clock. It requires iOS 18 or later.

2. What Stays on Your Device

The game saves the following as a file in its own Documents folder on your iPhone. It is never sent to us or to any server of ours. We do not have any servers for the game.

• Your progress: the levels you have completed, your stars, your seed balance, XP, achievements, streaks, saved boards, and your Rush scores.
• Your settings: sound, haptics, auto-dots, and the timer.

None of it is personal data and none of it identifies you: it is puzzle progress, an in-game currency balance, and four preferences. Because none of it is linked to an account, we have no record of your progress and cannot restore it for you after you reinstall or change phones. Since the file lives in the Documents folder, it is included in your own iPhone and iCloud device backups — see section 9.

3. What Leaves Your Device

The game has no backend, so there is no server of ours that you are talking to when you play. Two third-party components inside the app do connect to the internet:

• Google AdMob, which requests, shows, and measures ads, and which includes Google's consent tool. See sections 4 and 5.
• RevenueCat, together with Apple's App Store, which processes purchases and restores them. See section 6.

Neither of them receives your progress from us. We do not send your levels, stars, seed balance, or saved boards anywhere.

4. Consent and the Tracking Prompt

If you are in the UK or the EEA, you see two things, in this order:

• First, Google's consent form, which asks how your data may be used for advertising. It appears before ads are personalised, and your answer is recorded on your device.
• Then the iOS tracking prompt, which is Apple's own request and asks whether this app may track you across other companies' apps and websites.

Elsewhere, you see the iOS tracking prompt only.

• If you allow tracking, iOS gives Google your advertising identifier (IDFA), and Google may use it to personalise the ads you see and to measure them across other apps and websites.
• If you decline, iOS withholds the IDFA. Google does not receive it and cannot use it to track you. Ads still appear, but they are non-personalised, and every part of the game stays playable. Declining costs you nothing.
• You can change your mind at any time under Settings → Privacy & Security → Tracking.

5. Advertising

The game is free and is paid for by ads supplied by Google AdMob. There are three kinds:

• Banner ads, shown at the edge of the screen.
• Interstitial ads, shown full screen between levels.
• Rewarded video ads, which are always optional. You choose to watch one in exchange for a reward in the game.

To show these ads, measure them, and prevent ad fraud, Google's SDK collects the following from your device:

Ads are personalised only where you have consented, as described in section 4. Google handles this data as its own controller, under the Google Privacy Policy. Google explains how it uses data from apps like this one in How Google uses information from sites or apps that use its services. We do not receive this data about you as an individual. We see only totals, such as how many ads were shown and what they earned.

Your IP address reaches Google with every ad request, and Google can derive an approximate location from it. The game itself never asks for your location and has no access to it. The crash and performance data in the table is generated by Google's ad SDK and goes to Google, not to us — we have no crash reporting of our own.

We never send Google your progress, your purchases, or anything that identifies you by name.

6. In-App Purchases

The game is free to play. You can also buy:

• Remove Ads, a one-off purchase you can restore. It switches off banner and interstitial ads. Rewarded videos stay available if you choose to watch one.
• Seed packs, consumable purchases that add seeds to your balance.

Neither is a subscription, so nothing renews and there is nothing to cancel. Prices are shown in the App Store before you buy and vary by country.

• Apple takes the payment, not us. Your card number, billing address, and payment details go to the App Store under Apple's own privacy policy. The game never sees them, and neither do we or RevenueCat. See Apple's privacy policy.
• RevenueCat records the purchase. RevenueCat, Inc. processes purchases and restores for us as our data processor, and is what unlocks Remove Ads. It creates an anonymous, randomly generated user ID for your installation. It receives your purchase history and receipts, device and OS details, and the IP address the request comes from. The app never gives RevenueCat your advertising identifier, your name, or your email address. See RevenueCat's privacy policy.
• What we see: purchase counts and revenue tied to those random IDs. We cannot work out who you are from it, and we do not try.

Restoring purchases. If you reinstall or move to a new device, use Restore Purchases in the Shop or in Settings to get Remove Ads back. Seeds cannot be restored: they are consumed when you buy them, and your balance is stored only on your device.

Refunds are handled by Apple. Go to reportaproblem.apple.com.

7. What We Never Collect

• No account. No name, email address, phone number, postal address, sign-in, or user profile. Buying something does not create an account.
• No analytics or crash reporting of our own. There is no Firebase, Crashlytics, Mixpanel, Sentry, or similar tool in the game. We do not know which levels you play or how far you have got.
• No payment details. Apple handles all payments.
• No selling. We do not sell, rent, or trade your information.

If we ever change what the game sends off your device, we will update this policy and the app's store privacy disclosures before that version ships, not after.

8. Your Choices

• Personalised ads: decline the tracking prompt, or turn tracking off later under Settings → Privacy & Security → Tracking. Ads become non-personalised and the game keeps working in full.
• Ad consent in the UK and EEA: answer Google's consent form as you wish. Your choice is stored on your device.
• Fewer ads: buy Remove Ads to switch off banner and interstitial ads. Rewarded videos are only ever shown when you choose to watch one.
• Wipe your progress: use Reset progress on the Progress tab, or delete the game. See section 10.
• Restore what you bought: use Restore Purchases in the Shop or in Settings.
• Data held by Google or RevenueCat: contact those companies directly using the links in sections 5 and 6, or email us and we will help.

9. Device Backups

Your progress is saved as a file in the app's Documents folder, which means it is included in your own iPhone and iCloud device backups along with everything else on the phone. Restoring a backup may bring your progress back. That backup is created and held by Apple under its own privacy policy and encryption. We have no access to it and no involvement in it, and we cannot recover progress from it for you. You can turn backups off, or exclude them, in your device settings.

10. Deleting Your Data and Retention

Everything the game stores is on your phone and lasts only until you remove it. You do not need to ask us:

• Reset progress, on the Progress tab in Settings, wipes your saved progress.
• Deleting the game removes its stored file and settings entirely.

There is no account to close and no copy of your progress on our side. Some records can persist after you uninstall: RevenueCat and Apple keep the purchase record, and Google keeps the ad data it holds, each under their own retention policies. You can ask us to erase our side of the purchase record by emailing us. It is held under a random ID, so you may need to send us that ID or your store receipt for us to find it, and we may need to keep the underlying transaction record where tax or accounting law requires. Copies in your device backup are removed through Apple, not us.

11. If You Email Us

The one case where we receive personal information directly is when you choose to contact us. If you email us for support, we receive your email address and whatever you write. We use it only to reply, keep it only as long as needed to resolve the matter and for basic records, and do not add you to a mailing list.

12. Children

Nestled is not directed at children under 13, or under 16 in EU countries that set a higher age for consent to data processing, because it shows advertising that can be personalised. It is not listed in the App Store's Kids category and is not registered as a child-directed app. We do not knowingly collect personal information from children. If you believe a child has used the game in a way that caused their data to be collected, contact us and we will help. In-app purchases should only be made by the holder of the App Store account, or with the account holder's permission. Apple provides parental controls for purchases and for the tracking prompt.

13. The App Store

Downloading the game and making purchases are transactions between you and Apple. Apple collects its own data about downloads, purchases, and crashes under its own policy, which we do not control. Any crash reports Apple shares with us are aggregated and provided by the platform, not gathered by the game.

14. Changes to This Policy

If we change this policy, we will update the date at the top of this page. We will do so before shipping any version of the game that changes what data is handled.

15. Contact

Questions about this policy, or any privacy request: contact@olaverse.co.uk

Appendix: Legal Detail

The sections above are the whole picture in plain English. This appendix restates the same facts in the formal terms that data protection law uses, for anyone who needs them.

A. Controller, Processors, and Scope

For the purposes of the UK GDPR and EU GDPR, the controller is Olaverse Labs, contactable at contact@olaverse.co.uk. Game progress and settings are processed entirely on your own device and are never transmitted to us, so they are not personal data under our control.

For purchase data we are the controller, and RevenueCat, Inc. acts as our processor under a data processing agreement. Apple acts as its own controller for the payment itself.

For advertising, Google acts as an independent controller for the data its AdMob SDK collects from your device, and for the consent record gathered through its consent tool. We do not receive either at the individual level.

We are also the controller for correspondence you send us directly.

B. Lawful Basis for Processing

• Game progress and settings: no lawful basis is required of us, as we carry out no processing. Processing on your own device, under your sole control, is not processing by us.
• Purchase and entitlement data: performance of a contract (Article 6(1)(b)), to deliver and restore what you bought. For the underlying transaction records, compliance with a legal obligation (Article 6(1)(c)) under tax and accounting law.
• Advertising in the UK and EEA: consent (Article 6(1)(a)), and consent under the UK PECR and the EU ePrivacy Directive for storing or accessing information on your device, collected through Google's consent form. You can withdraw it by turning tracking off in iOS settings. Where you decline, Google serves non-personalised ads under its own policies.
• Email correspondence: legitimate interests (Article 6(1)(f)), to respond to a request you chose to send us.

C. Your Rights Under UK and EU GDPR

You have the right to request access to your personal data, and its rectification, erasure, restriction, or portability, and to object to processing. For game progress these rights are exercised directly on your device, since we hold no copy: you already have full access, and Reset progress or deleting the game is immediate erasure.

For purchase records and any email correspondence you have sent us, you can exercise all of these rights by writing to contact@olaverse.co.uk. We respond within one month, as required. Purchase records are keyed to a random identifier rather than to you, so we may need you to supply that identifier or your store receipt to locate them. For advertising data, Google is the controller, and you can exercise your rights with Google directly.

If you believe we have handled your personal data unlawfully, you may complain to the UK Information Commissioner's Office at ico.org.uk, or to your national supervisory authority if you are in the EEA.

D. United States State Privacy Rights

Under laws including the California Consumer Privacy Act as amended by the CPRA, and the comprehensive privacy laws of states such as Virginia, Colorado, Connecticut, Utah, and Texas, we disclose the following:

• Categories of personal information collected through the app: identifiers, limited to a random, app-generated purchaser identifier and the IP address accompanying a purchase request; and commercial information, being your purchase history. Both reach us only through RevenueCat. Game progress remains on your device and is not collected by us.
• Advertising: Google's AdMob SDK collects your advertising identifier where you have allowed tracking, your vendor identifier, your IP address and the approximate location derived from it, ad views and taps, device and OS details, and diagnostic data. Where you allow tracking, Google may use this to personalise ads, which some state laws treat as "sharing" for cross-context behavioural advertising or as "targeted advertising". You can opt out by declining the tracking prompt or turning tracking off in iOS settings, as described in sections 4 and 8. Buying Remove Ads stops banner and interstitial ads.
• Sensitive personal information: none. Neither we nor the game collect precise geolocation.
• Sold: we do not sell personal information for money.
• Sources: your device, via RevenueCat, for purchase data; and you directly, when you email us.
• Retention: purchase records for as long as needed to provide and restore your purchases, and thereafter only as long as tax and accounting law requires; email correspondence for as long as needed to handle your enquiry. Data on your device lasts until you reset your progress or delete the game.

You may exercise your rights of access, correction, deletion, opt-out, and appeal by emailing contact@olaverse.co.uk. We will not discriminate against you for doing so.

E. International Transfers

Your game progress is not transferred anywhere: it stays on your device. Purchase data is processed by RevenueCat, Inc. in the United States, and advertising and consent data are processed by Google in the United States and elsewhere. Both rely on the Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable. Email you send us is handled by our email provider in the course of ordinary email delivery.

F. Security

Your game progress is protected by your device's own security: its passcode, biometrics, and platform encryption. Purchase data travels over encrypted connections to RevenueCat and to the App Store, and ad requests travel over encrypted connections to Google. No system is perfectly secure, but because we hold no game data, a breach of our systems could not expose your progress.

G. Automated Decision-Making

The game calculates stars, XP, streaks, and Rush scores on your device. We make no automated decisions producing legal or similarly significant effects and do not profile you. Where Google personalises ads for those who have consented, it does so as its own controller under its own policies.