Match Pop Privacy Policy

Last updated: 2026-10-26 · Applies to Match Pop for iOS and this website

1. Who we are

Match Pop is developed and published by Idan Menashe Debbi, an individual developer publishing under the brand name IdanGames. IdanGames is a brand name, not a registered company. In this policy, "we", "us" and "our" mean that individual developer.

For data protection purposes, we are the party responsible for (the "controller" of) the personal data described in this policy, except where Apple processes data under its own privacy policy (section 4).

Contact for every privacy question or request: idandebi1234@gmail.com (section 15).

2. Data kept on your device

The game stores the following on your device only. We do not receive it.

• Your progress: levels, stars, coins, boosters, lives, streaks, rewards and similar game state.
• A record of purchases already delivered, so that each purchase is delivered exactly once.
• Your settings (sound, music, vibration, language) and your analytics choice, with the date you made it.
• A random Analytics ID (section 3) and, while analytics are allowed, a short queue of analytics events waiting to be sent.

Your iCloud copy

If iCloud is turned on for your Apple Account, the game also keeps a copy of your saved progress (the first item in the list above) in your own iCloud, using Apple's iCloud key-value storage. It is stored by Apple in your iCloud account under Apple's terms; we do not receive it and cannot access it. When you reinstall the game, or install it on another iPhone signed in to the same Apple Account, the game restores that copy automatically, as long as the new installation has not yet made a purchase of its own. If iCloud is off, or the latest progress had not reached iCloud before the game was deleted (for example when playing offline), that progress cannot be recovered. You can remove the copy in your iPhone's Settings → [your name] → iCloud → Manage Storage. There is no account. See also our Terms of Use.

3. Analytics and diagnostics

We use PostHog (PostHog, Inc.) to understand how the game is played and how well it runs. The game sends this data directly to PostHog over an encrypted (HTTPS) connection, only while analytics are allowed (section 8).

What is sent

The Analytics ID is not your Apple Account, your device's advertising identifier (IDFA) or a hardware identifier. It is shown in the game under Settings, so that you can quote it in a privacy request. Because analytics data is linked to this ID, we treat it as pseudonymous personal data, not as anonymous data.

Like any internet service, PostHog receives your device's IP address when the game connects. Our PostHog project is configured to discard IP addresses and not to derive a location from them.

We do not use PostHog's session recording, heatmaps or automatic screen capture, and the game does not include PostHog's software development kit; it sends the events listed above and nothing else.

4. In-app purchases

Match Pop is free to play and offers optional in-app purchases of virtual items (see our Terms of Use).

• Apple processes every payment under Apple's own terms and privacy policy. We never receive your payment card, bank or Apple Account details.
• RevenueCat (RevenueCat, Inc.) acts as our purchase service provider. When the store is in use, it receives the App Store transaction information (such as the product, transaction ID and date) and keeps a random customer ID that it creates on your device, so that we can verify each purchase and deliver it exactly once. This is necessary to provide what you bought and does not depend on your analytics choice.
• We have configured RevenueCat not to collect advertising or device identifiers and we do not forward purchase data from RevenueCat to PostHog. The shop events described in section 3 are sent by the game itself, and only while analytics are allowed.

5. When you contact us

If you email us, we receive your email address, your message and anything you choose to include (for example your Analytics ID, device model or an Apple Order ID). We use it only to answer you and handle your request. Our support email is provided by Google (Gmail), so Google processes these messages under its own terms.

6. What we do not collect

The game does not ask for or collect your name, email address (unless you write to us), phone number, contacts, photos, precise or approximate location, health or fitness data, browsing history or messages. It does not use the advertising identifier (IDFA), does not include advertising or attribution software, and does not ask for App Tracking Transparency permission, because it does not track you as Apple defines tracking. To decide whether to ask for analytics consent (section 8), the game reads your device's region and time-zone settings on the device; this information is not sent to us.

7. Why we use data, and legal bases

• To improve the game: find levels that are too hard or too easy, balance rewards and prices, and understand which features are used (analytics).
• To keep it working well: find crashes, errors and slow devices (diagnostics).
• To sell and deliver purchases, prevent duplicate deliveries and recover a purchase that was charged but not delivered (RevenueCat, Apple).
• To answer you when you contact us.

We do not use your data for advertising, do not sell it, and do not share it with others for their own purposes.

Where the EU or UK General Data Protection Regulation (GDPR) or a similar law applies, our legal bases are:

• Analytics and diagnostics: your consent. In those regions the game sends nothing until you choose "Allow analytics", and you can withdraw your consent at any time in Settings. Withdrawal does not affect sending that happened before it.
• Purchases: performance of our contract with you (delivering what you bought), and our legitimate interest in making sure a purchase is delivered exactly once.
• Support emails: our legitimate interest in answering you and keeping a record of what was agreed, and, for a privacy request, our legal obligation to handle it.
• This website: our legitimate interest in delivering it securely (section 9).

Elsewhere, we rely on the grounds that the law where you live provides; in every region, you can switch analytics off. You are not legally required to give us any data. Without analytics, the game works the same; without the purchase information in section 4, a purchase cannot be verified or delivered.

8. Your analytics choices

• In the European Economic Area, the United Kingdom, Switzerland, Israel, South Korea, Vietnam, China, Brazil and Turkey, and wherever the game cannot determine your region, nothing is sent to PostHog unless you choose "Allow analytics" when the game asks. The game decides this from your device's region and time-zone settings.
• Elsewhere, analytics are on by default, and you can switch them off.
• Everywhere, you can switch analytics off or on at any time in Settings → Analytics. When you switch them off, events that have not been sent yet are deleted from your device and nothing more is sent. Data already sent is not deleted automatically; to have it deleted, see section 11.
• The game works the same whatever you choose.

9. Service providers and international transfers

This means your data may be processed in the United States and other countries whose data protection laws differ from yours. Where the law requires safeguards for these transfers, we rely on the Standard Contractual Clauses approved by the European Commission, with the United Kingdom's addendum and the Swiss adaptations, which are part of our data processing agreements with PostHog and RevenueCat; Cloudflare also relies on its certification under the EU–US Data Privacy Framework. Our service providers use sub-processors of their own, which they list in those agreements. You can ask us for more information about these safeguards (section 15).

This website

This website has no cookies, no analytics, no advertising and no scripts. To deliver and protect it, Cloudflare processes the technical information every web request carries, such as your IP address, browser type and the page requested. We do not use that information to identify you.

We may also disclose data if required by law, or to protect our rights or the safety of others.

10. How long we keep data

• Analytics and diagnostics (PostHog): our analytics plan keeps events for one year. Older events are no longer available to us and are removed under PostHog's retention process. You can ask us to delete yours sooner (section 11).
• Purchase records (RevenueCat): for as long as Match Pop sells in-app purchases, because these records are how the game recovers a purchase that was charged but not delivered. If we stop selling, we close our RevenueCat project and RevenueCat deletes the records under its data processing agreement. You can ask us to delete yours sooner; a purchase that has not been delivered then cannot be recovered.
• Support emails: for up to two years after our last message to each other, then deleted, unless we need them longer to establish or defend a legal claim.
• Website request information (Cloudflare): only as long as Cloudflare needs it to deliver and secure the website, under its own retention practices.
• Data on your device: until you delete the app.
• Your iCloud copy: in your iCloud until you remove it (section 2). The game keeps at most five copies, one per installation, and removes older ones itself.

11. Your rights and requests

Depending on where you live, you may have the right to access your personal data, correct it, delete it, receive a copy of it, object to or restrict its use, and withdraw your consent at any time (withdrawal does not affect use before it). You can also complain to your data protection authority; in Israel, the Privacy Protection Authority; in the EU, your local supervisory authority; in the UK, the Information Commissioner's Office.

How to make a request

1. In the game, open Settings and tap Analytics ID to copy it. (We cannot find your data without it, because we do not know who you are.)
2. Email it to idandebi1234@gmail.com with your request. For purchase records, also include the Order ID from your App Store receipt email.

We will reply within the time the law requires (for example, one month under the GDPR). For a deletion request, we delete your analytics data at PostHog and, if you made purchases, your customer record at RevenueCat. PostHog deletes event data in the background, so it can take some time to complete; we will confirm when it has finished and tell you if anything could not be deleted. Apple keeps its own records of App Store purchases, which we cannot delete; contact Apple for those.

Deleting the app deletes the data stored on your device, but not data already sent to PostHog or RevenueCat. For that, please send a request as above.

If you live in Israel, you have the right under the Protection of Privacy Law to review the information held about you and to ask for it to be corrected or deleted. If you live in a US state with a privacy law, you have the rights that law gives you; we do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of. We will not treat you differently for using any of these rights.

12. Children

Match Pop is a general-audience game for players and families. It is not directed specifically at children under 13. We know that children may still play it, so the game is designed to collect as little as possible from everyone:

• It does not ask for age, name, email address, phone number, photos or location, and offers no chat, user profiles, social features or user-generated content.
• It shows no ads and contains no advertising or tracking software.
• The Analytics ID and the data in section 3 are used only to keep the game working and to analyse and improve it. They are never used for advertising, to build a profile of a person, or to contact anyone.
• In the regions listed in section 8, including the European Economic Area and the United Kingdom, nothing is sent to PostHog unless analytics are allowed.

We do not knowingly collect contact information from children under 13 (or the age set by the law where they live). If we learn that a child has emailed us, we use the message only to reply, where appropriate to a parent or guardian, and then delete it.

If you are a parent or guardian, you can switch analytics off on your child's device in Settings at any time. To have data linked to your child's Analytics ID deleted, send us that ID (Settings → Analytics ID) and we will delete it. Purchases on a child's device can be controlled with Apple's Screen Time and Ask to Buy in Family Sharing.

13. Security

Data is sent over encrypted connections, and stored in the app's private storage on your device. Access to our accounts with our service providers is limited to us. No system is completely secure, and we cannot guarantee absolute security.

14. Changes to this policy

We will update this page when the game's data practices change and change the "Last updated" date above. If a change affects what we collect with your consent, the game will ask for your consent again where the law requires it.

15. Contact

Idan Menashe Debbi (IdanGames)
Email: idandebi1234@gmail.com
Support page: Match Pop Support