Privacy Policy

• Account data: your email address, a password (stored hashed, never in plain text), your nickname, avatar and language.
• Optional profile details: name, birthday and gender, only if you choose to fill them in.
• Gameplay data: matches you play, scores, ratings, experience and level, records, unlocked items and the ladders you compete on. Leaderboards show your nickname, avatar and scores to other players, and the public leaderboards on fun4all.io show that same nickname, avatar and scores to anyone on the web, no account needed.
• Technical data: device and browser information (user agent), occasional measurements of how smoothly the app runs on your device (things like frame rate, screen size and processor count, which we use to make it faster on older phones), and IP addresses in short-lived server logs used for security and troubleshooting.
• Advertising ID: the mobile app shows ads through Google AdMob, which may collect your device advertising ID and related data, including an approximate location worked out from your IP address. The app itself never asks for or reads your device location. See "Advertising" below.
• Push token: if you allow notifications, your device's push token, so we can tell you about friend requests, match invites and results. We also send optional reminders and offers, such as a nudge that your daily bonus is waiting, but only if you turn "Reminders and offers" on in the app under Settings. It is off unless you turn it on, and you can turn it back off in the same place without losing the notifications above. Turn notifications off in your device settings at any time and we stop everything.
• Content you create: the reviews you write, and the word you type in the Word Workshop in Cuckoo! when you spend coins to build a topic. A public topic joins the worldwide pool and carries your nickname when it comes up; a private one is dealt only in your own solo games.
• Crash and diagnostics data: when the app hits an error it sends us the error message and its stack trace, the screen you were on, the game you were in, the app version and platform you are running, your device user agent and your player id, so we can tell one player stuck in a loop from a fault hitting everybody. Separately we count four plain events against your player id (first open, session start, match started, match completed), which is how we know whether the games are actually being played.
• Social sign-in: if you sign in with Apple or Google instead of using a password, we receive and store the identifier that provider uses for you, your email address, and whether the provider has verified it. Your password never reaches us, because there is not one. If you use Apple's Hide My Email, the address we store is the private relay address Apple gives us, and mail we send there is forwarded to you by Apple.

This website itself sets no tracking cookies.

• To run the games: matchmaking, live multiplayer, leaderboards, levels and unlocks.
• To sign you in and secure your account, including verification and password reset emails.
• To answer support requests.
• To keep play fair: detecting cheating, automation and leaderboard abuse.
• To show ads in the mobile app, which is what keeps FUN4ALL free.
• To send reminders and offers, only if you turn "Reminders and offers" on in the app under Settings. It is off unless you do.
• To promote FUN4ALL on our official Instagram account, fun4all.io: a daily Story can show a game's top ten and the previous day's winner, with the same nickname, avatar and score or rating the leaderboards already show. Guests never appear. "Social sharing" in the app's Settings is on unless you turn it off, and turning it off keeps you out of these posts. A Story disappears after 24 hours unless we keep it in a Highlight on our profile; email us and we will take down one that shows you.

The mobile app uses Google AdMob to display ads. AdMob may process your device advertising ID and related signals to serve and measure ads. This includes an approximate location worked out from your IP address. Where required by law (for example in the EEA and the UK), the app asks for your consent before showing personalized ads, and you can choose non-personalized ads instead. You can also reset or delete your advertising ID in your device settings at any time.

Learn more in Google's Privacy Policy and how Google uses data from partners.

• Google AdMob for advertising in the mobile app.
• Google Firebase Cloud Messaging for delivering push notifications, if you allow them.
• Brevo for delivering account emails such as verification codes and password resets.
• Hosting and infrastructure providers that run our servers.
• Anthropic, whose model builds a Word Workshop topic in Cuckoo! out of the word you type. We send that one word and the language you wrote it in, nothing that identifies you, and what comes back is the topic and its hint chips in every language.
• Apple and Google, as identity providers, when you choose to sign in with them. We check the sign-in with them and receive your account identifier and email address. We send them nothing about how you play.
• Meta, which runs Instagram, when a daily Story on our account shows your nickname, avatar and score or rating. What we post there is public.

These providers process data on our behalf and under their own published safeguards. We do not sell personal data, and we do not share it with anyone else unless the law requires it.

Your account, scores and ladders live on our servers in Germany. To keep online matches responsive, live match traffic runs on a game server in the region you select in the app. If you choose a region outside the European Economic Area, such as the United States, your gameplay traffic is processed there for the duration of those matches, while your account data stays in Germany. You can change or check your region at any time in the app.

The mobile app can update its own content (game screens, artwork and fixes) by downloading a signed update package from our servers, without going through the app store. To do that it tells us which app version it is running and which platform it is on. This carries no personal data and is used only to decide which update to send.

We keep your data for as long as your account exists. Two kinds of data expire on their own before that: a crash report is deleted 60 days after the last time we saw that fault, and one of the four play counters is deleted 90 days after it is recorded. You can permanently delete your account and the data tied to it at any time, directly in the app (Settings, Delete account) or by following the steps on our account deletion page. Two things outlive it, and neither identifies you afterwards: a match you played with other people stays in their history with you removed from it, and a public word topic you published stays playable with the author credit removed. Private topics are deleted outright. In-app deletion is immediate; email requests are completed within 30 days. Residual copies in backups are removed on a rolling basis.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Email us at contact@codeskogens.com and we will honor these requests. If you are in the EEA or UK, you also have the right to complain to your data protection authority.

FUN4ALL is not directed at children under 13, and you must be at least 13 to create an account. If you believe a child under 13 has created an account, contact us and we will delete it.

All traffic is encrypted in transit (HTTPS), passwords are stored hashed, and access to production systems is restricted. No online service can promise perfect security, but we keep the attack surface small and the data we hold minimal.

If this policy changes, we will post the new version here with a new effective date. Meaningful changes will be announced in the app.

Code Skogens LLC

contact@codeskogens.com