CombooThis policy explains what personal data we handle when you play Comboo (Comboo: Block Puzzle Duels) on iPhone and when you visit getcomboo.com, what we use it for, who we share it with and how you can exercise your rights. We wrote it in plain language on purpose. If anything is unclear, write to us at hello@noles.app.
In short: you can play without signing up, other players only see your handle, your score and the replay of your game, we never see your card details, we don't sell your data, and ads are personalized only if you allow tracking.
1. Who is responsible for your data
The controller of your personal data is Noles Technology Inc. ("Comboo," "we," "us"), a corporation organized in the State of Delaware, United States, with its address at 46 Avenue B, New York, NY 10009, USA.
Contact for everything related to privacy and personal data, including our data protection officer (encarregado) under Brazilian law: hello@noles.app
2. What data we handle
2.1 Your account
- Anonymous account ID. The first time you open Comboo, the app creates an anonymous account with a random identifier. There is no sign-up, and we don't ask for your name, email or phone number.
- Sign in with Apple (optional). If you choose to sign in with Apple, we receive the identifier Apple assigns to you for Comboo and, if you choose to share them, your name and your email address or an Apple private relay email address.
- Your handle. The public name you choose for duels and the world ladder.
2.2 Game data
- Scores and progress: your scores, your progress in each mode (for example, Journey levels), your streaks and streak freezes, and your duel rating and results.
- Move logs of Daily Board and Duel games: the moves you made in those games. We use them to validate your score by replaying them against the same pieces, and as replays and duel opponents for other players (see section 4).
2.3 Purchases
Comboo Pro is paid through Apple. We never see or receive your card details. Through our subscription provider, RevenueCat, we receive your purchase status: which product you have, whether it is active or in a free trial, its dates and the transaction identifiers Apple provides.
2.4 Product analytics
We use PostHog to understand how the app is used, through events such as "game started," "game ended" or "paywall viewed," together with basic technical information such as device model, iOS version, app version and language. These analytics are not linked to your account. You can turn them off at any time in the app's Settings.
2.5 Ads
Comboo shows two kinds of ads, both served by AppLovin (AppLovin MAX): rewarded videos, which play only when you choose to watch one (for example, to revive or to double a reward), and an ad shown occasionally after a game ends. Ads are never shown during a game, Comboo has no banner ads, and Comboo Pro subscribers see no ads. When an ad is requested or shown, AppLovin may collect the information needed to show and measure it, such as device information (for example device model, operating system and language), your IP address and your interactions with the ad (for example, whether it was shown, completed or tapped).
Tracking permission. iOS asks whether you allow Comboo to track you (App Tracking Transparency). Only if you allow it may AppLovin use your device's advertising identifier (IDFA) to personalize the ads you see. If you don't allow it, the IDFA is not available to us or to AppLovin and ads are not personalized with it. You can change your choice at any time in iPhone Settings > Privacy & Security > Tracking.
2.6 Game Center
If you are signed in to Game Center on your iPhone, Comboo sends your scores to Game Center leaderboards. Game Center is run by Apple; your Game Center profile and what other people see there are governed by Apple's privacy policy.
2.7 Notifications
Reminders about the Daily Board and your streak are local notifications: they are scheduled on your iPhone by the app. We don't run a push notification server and we don't collect a push token. You can turn them off in iPhone Settings > Notifications > Comboo.
2.8 If you write to us
Your email address and the content of your message, so we can reply.
2.9 Website
getcomboo.com uses no cookies, analytics or trackers. Our hosting provider may log basic technical data (such as IP address and browser type) to run and protect the site.
3. What we use your data for and why
| Purpose | Data | Legal basis |
|---|---|---|
| Run the game, save your progress and your account | Account ID, game data, handle | Performance of our agreement with you (terms of use) |
| Ranked duels, friend duels, Daily Board and the world ladder | Handle, scores, ratings, move logs | Performance of our agreement with you |
| Validate scores and prevent cheating | Move logs, scores | Our legitimate interest in a fair game for every player |
| Unlock Comboo Pro and restore purchases | Purchase status | Performance of our agreement with you |
| Show ads (rewarded videos you choose to watch and occasional ads after a game ends) | Technical ad data and ad interactions | Performance of our agreement with you |
| Personalize those ads with the IDFA | Advertising identifier | Your consent (tracking permission), which you can withdraw at any time |
| Improve the app with usage analytics | Analytics events | Our legitimate interest in improving the app; you can turn it off in Settings |
| Answer your messages and requests | Email and message | Performance of our agreement with you, and legal obligations |
| Keep the service secure and comply with the law | The data needed in each case | Legal obligations and our legitimate interest in security |
Under Mexican law, all of these purposes are necessary for the service you asked for, except two secondary purposes: personalizing ads with the IDFA and usage analytics. You can refuse them by turning off analytics in the app's Settings and by not allowing tracking, and refusing does not affect the game.
If we ever want to use your data for a new purpose, we will tell you first and, where the law requires it, ask for your consent.
4. What other players see
When you play a Daily Board or a Duel, other players can see your handle, your score and the replay of your game (for example, as the ghost opponent in a Ranked Duel or a friend duel, or on the world ladder). They don't see anything else: not your account ID, your Apple details, your email, your purchases or your device.
If you play in Game Center, Apple shows your Game Center profile on its leaderboards under its own rules.
5. What we never do
- We don't sell or rent your personal data.
- We never receive your card or payment details.
- We don't use your advertising identifier unless you allow tracking.
- We don't link analytics to your account.
- We don't show anyone your Apple email or name.
6. Who we share your data with
We only share data with providers that help us run Comboo. They act on our instructions, under confidentiality and security obligations, except where noted that they act under their own terms.
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | The servers that run our own database, accounts and game data | United States |
| Cloudflare, Inc. (R2) | Nightly encrypted backups of our database | North America |
| RevenueCat, Inc. | Purchase and subscription status | United States |
| PostHog, Inc. | Product analytics not linked to your account | United States or European Union |
| AppLovin Corp. (AppLovin MAX) | Serving ads (rewarded videos you choose to watch and occasional ads after a game ends); ad personalization only with your tracking permission | United States |
| Apple Inc. | Sign in with Apple, App Store payments, Game Center | Under Apple's own terms |
| Vercel Inc. | Hosting getcomboo.com | United States |
AppLovin and the ad networks it works with may process data as independent controllers under their own privacy policies. Apple processes Sign in with Apple, payments and Game Center under its own privacy policy.
We may also disclose data if a law, a court order or a competent authority requires it, to protect our rights or people's safety, or to a buyer or successor if Noles Technology Inc. sells or transfers the Comboo business; that successor would be bound by this policy.
7. Where your data is stored
Your account and game data are stored on our own servers in the United States, hosted by Hetzner. Every night we make an encrypted backup of the database, stored with Cloudflare R2 in North America.
If you live outside the United States, for example in Mexico or Brazil, this means your data is transferred abroad. We do so to provide the service you asked for and with the protections described in this policy. For Brazil, this is an international data transfer under article 33 of the LGPD.
8. How long we keep your data
- Account and game data: until you delete your account.
- When you delete your account (in the app: Settings > Account > Delete account), we delete your account from our servers, including your handle, scores, ratings, streaks and move logs. Move logs that other players were using as duel opponents are deleted with your account. Copies inside our encrypted nightly backups disappear as those backups are rotated out.
- Purchase records: the subscription status kept by RevenueCat and Apple's records follow their own retention rules and legal obligations (for example, tax rules).
- Analytics events: they are not linked to your account, so they are kept in de-identified form and are not tied back to you.
- Messages you send us: as long as needed to answer you and keep a record of the request.
If you remove the app without signing in with Apple, you lose access to your anonymous account. To have it deleted, delete your account in the app before removing it.
9. How we protect your data
- Encryption in transit and encrypted backups.
- Access rules so that one account can't read another account's private data.
- Server-side score validation.
- Internal access limited to the people who need it to run the service.
No system is 100% secure. If a security breach significantly affects your rights, we will notify you without undue delay, and the authorities where the law requires it.
10. Your rights
You can exercise most rights directly in the app: delete your account in Settings > Account > Delete account, turn analytics off in Settings, and change your tracking permission in iPhone Settings. For everything else, write to hello@noles.app with the subject "Privacy rights." We may ask for information to confirm the request comes from the account holder, for example your handle or the email linked to Sign in with Apple.
United States (California and other states)
Depending on where you live, you may have the right to know what personal data we have about you and get a copy, correct it, delete it, and opt out of the sale of personal data, the "sharing" of personal data for cross-context behavioral advertising, and targeted advertising. We don't sell personal data. If you allow tracking, AppLovin may use your advertising identifier for ad personalization, which some state laws may treat as "sharing" or targeted advertising: you can opt out at any time by turning off tracking for Comboo in iPhone Settings > Privacy & Security > Tracking. We don't use or disclose sensitive personal information for purposes that would require offering a right to limit it. You can use an authorized agent, and you can appeal our decision by replying to it. We will not discriminate against you for exercising your rights. We answer within 45 days.
Mexico (ARCO rights)
Under the Federal Law on Protection of Personal Data Held by Private Parties, you have the right to Access your data, Rectify it, Cancel it and Oppose its use (ARCO rights), and to revoke your consent and limit the use or disclosure of your data. Send your request to hello@noles.app with your name or handle, the right you want to exercise, the data involved and, if needed, information that helps us locate it. We will answer within 20 business days, and if your request is granted we will carry it out within 15 business days after our answer. If you are not satisfied, you can go to the competent Mexican data protection authority.
Brazil (LGPD)
Under article 18 of the LGPD you have the right to confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary or excessive data, portability, deletion of data processed with your consent, information about who we share data with, information about the possibility of not consenting and its consequences, and to withdraw consent. You can also object to processing based on legitimate interest. Our data protection officer (encarregado) can be reached at hello@noles.app. We answer within 15 days. You can also file a complaint with the National Data Protection Authority (ANPD).
11. Children
Comboo is not directed to children under 13, and we don't knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13 without the required parental consent, we will delete it. If you believe a child has given us data, write to hello@noles.app.
12. Changes to this policy
If we change this policy, we will publish the new version at getcomboo.com/privacy/ with its date and version. If the change is significant, we will also tell you in the app before it takes effect and, where the law requires it, ask for your consent again.
13. Contact
Noles Technology Inc. · 46 Avenue B, New York, NY 10009, USA · hello@noles.app