Legal
Witch's Shop: Brew & Merge privacy policy
How the app handles your information.
Last updated: 3 October 2026.
What the app collects
- Your game progress (levels, stars, coins, items you own). It is stored on your device. On iPhone and iPad the game also saves it to your own iCloud account, so it can sync between your devices and come back on a new one. On Android it may be in your Google account backup if you use it. Apple and Google keep that data under their own terms. We do not receive or hold a copy.
- Technical requests when the game checks for new levels and content. These go to GitHub, which serves the content packs and can see your IP address.
- Ads: the game shows ads from Google AdMob, which are rewarded ads (optional, for a bonus) and ads between boards from board 8 and a banner along the bottom of the board screen. AdMob collects your device advertising ID, your IP address and data about how you use the app and the ads. See how Google uses data in ads and the Google Privacy Policy.
- Consent: in the EU, the UK and Switzerland, a Google consent form (UMP) asks for your choice before personalised ads. On iPhone, Apple's App Tracking Transparency prompt asks before you are tracked across other companies' apps and websites. You can change your choice later where the form or your device settings allow.
- Purchases are handled by the App Store or Google Play. The game never sees your card details.
- Support emails: your email address, your name if you give it, and your message.
The game has no accounts or sign-in, and we use no analytics of our own.
Why we use it, and our legal basis
- To run the game, remember your progress and check for new content: this is needed to provide the game you asked for (performance of a contract).
- To show personalised ads and use your advertising ID for them: your consent, given through the Google consent form or Apple's prompt. You can withdraw it at any time.
- To handle purchases: your contract with Apple or Google, who process the payment.
- To answer your support emails: our legitimate interest in helping you, and steps you ask us to take.
We do not sell your information.
Who processes it
Google AdMob (ads and consent), Apple (App Store, and iCloud for saving your progress) and Google (Google Play) for payments, GitHub (content packs), and Cloudflare Pages for this website.
Transfers outside the EU
Google, GitHub and Apple can process data in the United States and other countries outside the European Economic Area. Where this happens, they rely on safeguards such as the EU-US Data Privacy Framework or standard contractual clauses. See their own privacy policies for details.
How long we keep it
- Game progress: kept only on your device and in your own iCloud or Google account, for as long as you keep it there.
- Ad data: kept by Google under Google's own retention rules.
- Support emails: kept for up to 2 years, then deleted.
Removing your data
There are no accounts to delete. Deleting the app removes your progress from your device. Progress saved in iCloud stays in your iCloud account until you delete it in your iCloud storage settings. To ask us to delete a support email or anything else we hold, email support@gryfi.app.
Your rights
Under the GDPR you can ask to access, correct, delete, restrict or export your information, and object to how we use it, by emailing support@gryfi.app. Where we rely on your consent, you can withdraw it at any time. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, cnpd.pt), to the Dutch authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the country where you live.
US state privacy rights
If you live in a US state with a privacy law, such as California, Colorado, Connecticut, Texas or Virginia, you may have the right to know what personal information we collect, to access, correct and delete it, and to opt out of the sale or sharing of your personal information for targeted advertising. You will not be treated differently for using these rights.
The personal information collected in the game is limited to identifiers (your device advertising ID and IP address) and data about how you use the app and its ads, which Google AdMob collects to show ads. We do not sell your information for money. Under some state laws, sharing it with an ad provider for targeted advertising can count as a "sale" or "sharing", so we treat it that way and let you opt out. We do not collect sensitive personal information, and we do not knowingly sell or share the information of anyone under 16.
To opt out, use the privacy choices option in the Google consent message where the app shows it, or limit ad tracking in your device settings (for example by resetting or turning off your advertising ID). You can also email support@gryfi.app. To use any other right, email the same address. We will reply within the time the law requires and may need to confirm it is you.
Children
The game is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and think a child has sent us information, email support@gryfi.app and we will delete it.
Changes to this policy
We may update this policy. The date at the top shows the latest version.
Who is responsible
The data controller is Vitor Alberto dos Santos Azevedo (NIF PT216141362), Narcis 19, 1619BC Andijk, Netherlands, who publishes Witch's Shop: Brew & Merge. Contact: support@gryfi.app