Mosaic Loop for iOS

What Changed in This Version

Earlier releases of Mosaic Loop showed no ads and used no analytics or attribution services. That is no longer true. To keep the game free, this version includes in-app advertising, install attribution, and gameplay analytics, which means device and usage information now leaves your device. This policy describes the current version, with the specifics rather than generic language, so you can see exactly what is involved.

Information Handled by the App

Mosaic Loop is a single-player puzzle game. It does not require an account and does not ask for your name, email address, phone number, date of birth, precise or coarse location, photos, contacts, calendar, microphone, camera, health data, or payment card details.

To provide the game, Mosaic Loop stores gameplay state and preferences on your device using the standard iOS user-defaults storage. This is limited to:

• Progress: the level you have reached in the 1–1,000 level sequence.
• Board state: the positions of the gems on the current board, the contents of the conveyor buffer, the level status, and the order in which colors were completed, so an unfinished level can be restored.
• Settings: your music, sound effect, and vibration switches.
• Tutorial state: whether the first-level tutorial has been completed.

None of this local game data identifies you, and it is not included in the app's level-download requests or sent to us. Mosaic Loop creates no account and builds no device fingerprint. The identifiers it does use for advertising and measurement are listed under “Identifiers We Use” below.

Remote Level Delivery

Mosaic Loop includes playable levels in the app bundle and can also contact mosaicloop-prod.web.app, hosted by Google Firebase Hosting, to retrieve a small manifest and, when enabled by that manifest, a JSON level pack. The downloaded file contains game-level definitions only; it does not contain executable code. A validated copy may be cached in the app's private storage for later use.

These HTTPS requests do not include your saved progress, board state, settings, name, email address, advertising identifier, or other app-generated identifier. As with a normal web request, Google may process technical request information such as your IP address, request time, user agent, and network diagnostics to deliver and secure the service. Google handles that information under the Google Privacy Policy and its applicable Firebase terms. Mosaic Loop has no server-side account, cloud save, leaderboard, or messaging.

Identifiers We Use

• A random app identifier. On first launch the app generates a random value, hashes it, and stores it on your device. It is not derived from your hardware, your Apple Account, or your advertising identifier, and it is not shared with other apps. It lets us count installs and sessions without knowing who you are. Deleting the app deletes it; reinstalling produces a new one.
• The Identifier for Advertisers (IDFA). Used only if you allow tracking in the iOS prompt described below. If you decline, or take no action, the app and its partners do not use it. The app explicitly refuses to report the all-zero placeholder value iOS returns when permission is absent.
• Partner identifiers. AppsFlyer and the Meta SDK each generate their own app-scoped identifier for measuring installs and ad performance.

App Tracking Transparency

On iOS 14 and later the app presents Apple’s tracking prompt, explaining that “Your permission helps us measure ads and keep the game free.” Your answer is entirely yours:

• If you allow it, the advertising and attribution partners may use the IDFA to measure ads and to personalize what you are shown.
• If you decline, the IDFA is not used. You will still see ads, but they will be less relevant, and measurement falls back to non-identifying signals.

You can change your answer at any time in Settings → Privacy & Security → Tracking, and you can limit personalized Apple advertising under Settings → Privacy & Security → Apple Advertising. Declining never restricts any part of the game.

In-App Advertising

Ads are served through AppLovin MAX, which mediates demand from several advertising networks. The current build places ads in three spots:

• Banner — shown at the bottom during gameplay and hidden on the home screen.
• Interstitial — shown after a level’s results screen, starting at level 3, at most every second level, and never within 90 seconds of the previous one.
• Rewarded — never automatic. You start it yourself from the conveyor capacity or dead-end dialog, and it grants 12 extra conveyor slots only after the ad network confirms you finished watching.

To select and measure an ad, these networks typically receive your IP address, coarse location derived from it, device model and operating-system version, language and country settings, the ad unit involved, and, when you have allowed tracking, the IDFA. We do not control what each network collects; their own policies do.

The networks mediated in this build are AppLovin, BidMachine, BIGO Ads, ByteDance (Pangle), Mintegral, Unity Ads, and Vungle (Liftoff). This list can change when mediation is reconfigured, and this page is updated when it does.

Partners and Their Policies

• AppLovin MAX (ad serving and mediation) — privacy policy
• BidMachine — privacy policy
• BIGO Ads — privacy policy
• ByteDance / Pangle — privacy policy
• Mintegral — privacy policy
• Unity Ads — privacy policy
• Vungle / Liftoff — privacy policy
• AppsFlyer (install attribution and ad-revenue measurement) — privacy policy
• Meta / Facebook SDK (install and event measurement) — privacy policy. On iOS the app disables the SDK’s collection of the advertising identifier.
• Google Firebase (level hosting, and aggregate analytics when enabled in a build) — privacy notice

Gameplay Analytics

The app records what happens in the game so we can see where levels are too hard and whether ads are working: app opens, session start and end, level start and end with duration and move count, accepted and rejected taps, tutorial progress, and ad events (requested, shown, failed, closed, impression, rewarded started, completed, or failed). Ad impressions carry the revenue value the ad network reports for that impression.

These events describe the game, not you. The payload builder explicitly refuses to attach fields named for the advertising identifier, IP address, email address, phone number, password, or access token, and it caps how many fields an event may carry.

Data Sent to Our Reporting Server

The app reports installs and a few milestone events to our own reporting endpoint so we can tell how many people install the game and where they came from. Each request carries: the app identifier and platform, the random app identifier described above, the store channel and region setting, the app version, your device model and brand, the screen size, the operating-system version, the device language, country, and time zone, and the AppsFlyer and Meta identifiers when they are available. The milestone events are limited to first launch, app open, tutorial completion, and ad impressions with their reported revenue value.

As with any internet request, our server and our partners’ servers necessarily see the IP address the request comes from. Events that cannot be delivered are queued on your device and retried; the queue holds at most 300 events and is discarded when the app is deleted.

Required Reason APIs

The app bundle includes a privacy manifest declaring the Apple “required reason” APIs used by the game engine: user defaults (to read and write your local save), available disk space, file timestamps, and system uptime. Those four are used only to load and store local game data and to time animations, and their values are not sent off the device. The advertising and measurement SDKs bundled with the app ship their own privacy manifests declaring the data they collect and the tracking domains they contact.

Purchases

The build reviewed for this policy contains no in-app purchases and no purchase processing code. If a future version offers optional in-app purchases, they will be handled by Apple through the App Store. Apple would provide the app only with the product identifier, transaction status, and receipt needed to unlock the purchased item; we would not receive your payment card details. Apple handles that purchase and account data under the Apple Privacy Policy.

How Information Is Used

• To run the game: resume an unfinished level, unlock the next one, restore your settings, and fetch level updates.
• To show ads, decide which ad to show, cap how often you see one, and confirm a rewarded ad was actually watched before granting the reward.
• To measure advertising: attribute installs to the campaign that produced them and record ad revenue.
• To improve the game: find levels where players get stuck, and detect crashes and failures.
• To prevent fraud and abuse, including invalid ad traffic.
• To answer you if you email us.

We do not sell player information for money. Depending on where you live, sharing data with advertising partners for personalized advertising may still count as a “sale” or “sharing” under local law; the controls described under “Your Rights and Choices” are how you opt out.

Sharing and Sale of Information

We do not sell or rent player information for money, and we never share your saved progress or board state with anyone. We do share the device and usage information described above with the advertising, attribution, and analytics partners listed on this page, so they can serve and measure ads. Google acts as the service provider for level delivery. Information you send by email is also processed by your email provider. We would otherwise disclose information only when required by law or necessary to protect rights, safety, and security.

Retention and Deletion

Local game data stays on your device until the app overwrites it during normal play or you delete the app and iOS removes its container. Mosaic Loop has no cloud save, so deleting the app permanently removes your progress and it cannot be restored by us. Deleting the app also removes the random app identifier and any queued analytics events.

Install and event records tied to the random app identifier are kept only as long as needed for attribution, revenue reconciliation, fraud prevention, and product analysis. Our advertising and measurement partners keep data under their own retention schedules, described in the policies linked above.

A downloaded level pack remains in the app's private cache until it is replaced or the app is deleted. Retention of technical request logs by Google is governed by Google's policies and Firebase service terms.

If your device backs up to iCloud or to a computer, your save data may be included in that backup. Those backups are controlled by you through iOS settings and are governed by Apple's terms, not by us.

Emails you send us are kept only as long as reasonably necessary to respond, resolve the issue, and meet legal obligations. You may ask us to delete information you previously sent through email, subject to applicable law.

International Transfers

Our reporting server and our advertising and measurement partners operate in several countries, so the information described here may be processed outside the country where you live, including in jurisdictions with different data-protection rules. Where required, transfers rely on the safeguards described in the receiving partner’s privacy policy.

Security

The app keeps saves and downloaded levels in the private storage area provided by iOS. Level-delivery and reporting requests use encrypted connections, and downloaded packs are validated before use. We use reasonable safeguards for the limited information we receive by email. No storage or transmission method is completely secure, so please do not include sensitive personal information in a support message unless it is necessary to resolve your request.

Children's Privacy

Mosaic Loop is a general-audience puzzle game. It is not directed to children under 13 (or the equivalent age in your country), and we do not knowingly collect personal information from them. It has no account creation, no chat or social features, and no user-generated content, but because this version shows advertising and uses device identifiers, it is not intended for children in that age group. If you believe a child has used the app or contacted us, email us and we will delete the associated information.

Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of personal information a company holds about you, and to opt out of personalized advertising. Because there is no account, the practical controls are on your device:

• Turn off tracking: decline the tracking prompt, or change it later in Settings → Privacy & Security → Tracking.
• Limit Apple’s ad personalization: Settings → Privacy & Security → Apple Advertising.
• Skip rewarded ads: they are never required, and every level is completable without watching one.
• Remove everything: deleting the app removes the local save, the random app identifier, and the pending event queue.

You can also email the address below to request access to or deletion of information associated with your app identifier, and we will act on the request as applicable law requires.

Changes to This Policy

We may update this policy when Mosaic Loop changes or when legal requirements change. The current version is always posted on this page and the “Last updated” date is revised. If a future release adds cloud saves, accounts, analytics, crash reporting, advertising, attribution, or additional data collection, this policy will be updated before that release ships.