Privacy, clearly explained.

1. Publisher and current scope

Avandoo is the app and game brand operated by Alligator IT & Transport GmbH, Bloch-Bauer-Promenade 20/18, 1100 Wien, Austria. The company is the website operator and the controller for the processing described as our own processing in this notice. Company contact details are shown below and in the Legal Notice. Electronic contact uses our support page with a human-verification check; requests sent to the company postal address do not require a CAPTCHA. This app notice covers Twisty Android 1.0.1 and the iOS 1.0.1 version being prepared and tested, including the snake puzzle game and Color Blocks. App availability depends on the relevant store approval and installed version; this notice does not announce a public iOS release.

2. Local gameplay data

Progress, records, language, music/sound/vibration settings, shared help points, starter Hint and Undo allowances, attempt counters and applicable entitlement state are kept on the device. Our app does not upload your puzzle moves or scores to a publisher server. There is no app account, cloud-save backend or online leaderboard. This storage provides the game you request (Article 6(1)(b) GDPR where personal data is involved); it is separate from optional advertising storage. Removing app data can remove these records.

3. Google advertising and data categories

The free app integrates Google Mobile Ads for full-screen video and optional rewarded video ads. There are no bottom banner ads in this update. Google may process IP address and inferred approximate location, app/developer-bounded device identifiers, crash and performance diagnostics, advertising data and interactions such as video views. SDK storage and comparable identifiers may be used. This is not an upload of saved puzzle moves, scores or support email. Both platforms request non-personalised ads and there is no separate analytics SDK. Dedicated QA builds use Google sample video ads; production builds use the platform’s own video-only units, subject to consent and ad availability. Google iOS SDK data disclosure; Google Android SDK data disclosure; Google partner-site information; Google Privacy Policy.

4. Consent and privacy options

The app includes Google UMP consent handling before advertising initialisation and ad requests. Where legally required, consent is the basis for non-essential device storage/access and consent-based processing (Article 6(1)(a) GDPR). Other provider processing must rely on the lawful grounds described in its notice; non-personalised does not mean no data processing. Advertising stays paused unless the Google consent SDK permits ad requests. Settings → Change Privacy Options opens the Google options form where available and required; otherwise the app reports its availability. Refusing advertising consent is not treated as being offline and does not itself require purchasing premium.

• Google EU User Consent Policy

5. Advertising providers and tracking

Google and the publisher act as separate controllers for relevant advertising processing, subject to the applicable product terms. We have not integrated additional mediation SDKs. The applicable Google message must identify configured ad technology partners and their purposes before live advertising; a generic list of hundreds of unrelated vendors is not our provider list. This build does not request Apple App Tracking Transparency permission or enable IDFA-based tracking. Any future tracking or personalised-ad change needs appropriate disclosure and permission before use.

• Google advertising controller information
• Ad technology partner controls

6. Connectivity and offline access

The free version checks internet availability with an HTTPS request to https://www.gstatic.com/generate_204. The server receives connection data such as IP address; our request does not include game progress or an app-account identifier. We use reachability to administer free versus verified offline access (Article 6(1)(b) GDPR). This check is not an advertising consent decision. The optional one-time ad-free purchase includes offline play while ownership is verified.

7. Store purchases

iOS purchases use Apple’s App Store and StoreKit; Android purchases use Google Play Billing through the purchase library. The store handles payment details. The app receives product, transaction and current ownership information to verify, finish and restore the non-consumable one-time ad-free purchase (Article 6(1)(b) GDPR). On iOS it checks StoreKit-verified ownership; on Android it also acknowledges completed purchases without consuming the permanent unlock. Refunded or revoked purchases no longer grant access. We do not request payment-card details or store-account passwords and do not operate a publisher purchase-verification server. This is not a monthly subscription. App Store purchase availability depends on Apple approval and account readiness; TestFlight uses Apple’s sandbox. Apple Privacy Policy; Google Privacy Policy.

8. Support, permissions and development

Email support follows the website support privacy information, including Cloudflare routing and Gmail handling. Music and effects are bundled; their playback does not require microphone access. We do not request contacts, camera or precise GPS location. A development build may communicate with its local development/debugging server; this is not a promise that test SDKs never contact providers.

• Website support privacy information

9. International processing

Cloudflare, Google and Apple operate internationally; depending on the service, data may be processed outside the EEA, including in the United States. Their published safeguards include adequacy decisions such as the EU–US Data Privacy Framework for covered transfers and standard contractual clauses where applicable. This is not a promise that every service processes data only in Europe. Use the linked provider notices for their relevant entities and safeguards, or contact us for information about safeguards relating to our processing.

• Cloudflare data processing and transfer safeguards
• Google data transfer safeguards
• Apple Privacy Policy

10. Retention and deletion

Game data stays on the device until removed, overwritten or reset; deleting the app/data may remove it. One-time purchase ownership is rechecked with the store; a refunded or revoked purchase no longer grants access. Google stores consent choices and service data under its applicable SDK and provider policies; we do not operate a separate database of your Google consent strings. Support correspondence follows the retention criteria in the website policy. To request deletion of correspondence, contact us; provider-held information may also require a request to that provider. We do not claim that deleting local saves erases Google or Apple records.

• Google Privacy Policy
• Apple Privacy Policy
• Website Privacy Policy

11. Age and advertising safeguards

Twisty is intended for users aged 13 and above and is not directed at children under 13. A 13+ label is not proof that a user can legally consent to every processing operation. Where consent requires a parent or guardian under local law, that authorisation is needed; in Austria the relevant digital-consent age is generally 14. Current ad requests are non-personalised. We will not introduce consent-based personalised advertising for children by relying only on a store age rating.

12. Your rights and complaints

Depending on the applicable conditions, you may request access, rectification, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Contact us through the support link or the company postal address below. A postal request does not require a browser check. We normally respond within one month; the GDPR permits an extension in qualifying cases. We only request proportionate information needed to identify the relevant records. You may complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Wien, Austria, or another competent supervisory authority. You do not have to contact us first.

• Austrian Data Protection Authority — complaints

13. Choices and release changes

Music, sound and vibration can be changed in Settings. Advertising choices belong in Change Privacy Options, not in a website cookie banner. We do not make solely automated decisions with legal or similarly significant effects about players. This notice will be updated when app data practices, store products or providers change. Notice alone does not activate a service.