Privacy Policy
Last updated 3 October 2026 · applies to Nonogram: Cozy Picture Cross for iPhone and iPad.
This policy describes what the app collects and who handles it. It was written by going through the app's own source code and its shipping privacy manifest, not from a template — where a section says the app does not do something, that is because there is no code in it that does.
Who is responsible
DevOrbit Labs is the data controller for the processing described here. You can reach a person at halimozturk@windowslive.com.
What stays on your device
Your game itself — which puzzles you have solved, the board you are in the middle of, your coins, your streak, your gallery, your settings — is written to storage on your device and mirrored to your own iCloud account so that it reaches your other devices. That mirror uses Apple's key-value storage inside your personal iCloud container. We have no access to it and no server of our own that it is copied to.
There is no account to create. The app never asks for your name, your email address, your phone number or your date of birth, and there is nowhere in it to type them.
What is collected, and why
The app includes three third-party components, each doing one job.
| What | Who handles it | Why | Tied to you? |
|---|---|---|---|
| Usage events — screens opened, puzzles started and solved, hints used, purchases completed, crash and performance reports | Mixpanel | To understand which parts of the game work and to find crashes | No — a random identifier, not you |
| Approximate location — city, region and country, derived by Mixpanel from the IP address your request arrives on | Mixpanel | A by-product of the analytics above; the app never asks iOS for your location and has no location permission | No |
| Purchase history — which in-app items you bought | RevenueCat | To deliver what you paid for and to restore it on your other devices | No — a random identifier, not you |
| One answer you choose to give — the tap you make on "Where did you first hear about Nonogram?", from a fixed list of seven options | Mixpanel, RevenueCat | To learn which channels reach players. It is a choice from a list, never free text, and you can skip it | No |
| App Store attribution — whether your install came from an Apple Search Ads campaign | Apple (AdServices) | To measure advertising on the App Store. This is Apple's own mechanism and does not involve tracking permission | No |
Things the app does not collect
No name, email address, phone number, postal address or contacts. No precise location and no location permission of any kind. No photos, microphone or camera access. No health or fitness data. No financial information — the coins in the game are game pieces, and Apple handles payment without passing us your card details. No free text, because there is nowhere in the app to write any. No browsing or search history, because the app has no search and no browser.
No ads, no tracking
The current version of the game contains no advertising and no ad network. It does not ask for tracking permission, does not read your device's advertising identifier, and does not link anything about you with data from other companies' apps or websites.
Game Center
If you are signed in to Game Center, achievements and leaderboard entries are handled by Apple under Apple's privacy policy. The app does not store a Game Center identifier of its own.
Children
The app is rated 4+, but it is a general-audience game and is not directed at children under 13. It does not knowingly collect personal information from children under 13. If you believe a child has provided information through the app, write to the address above and it will be deleted.
Where the data goes
The processors named above operate in the United States and in the European Union. Transfers out of the EEA and the UK rest on the European Commission's Standard Contractual Clauses, which each of those processors has in place.
How long it is kept
Usage events are kept by Mixpanel for as long as they are useful for product analysis and are then deleted on that service's schedule. Purchase records are kept by RevenueCat while your purchases remain valid and for as long as tax and accounting law requires afterwards. The game data on your device and in your iCloud is kept until you delete the app or clear it yourself.
Your rights
Wherever you live, you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being processed. If you are in the EEA or the UK, those rights come from the GDPR; if you are in California, from the CCPA/CPRA. Write to halimozturk@windowslive.com and you will get an answer within 30 days.
One of these you can exercise yourself, immediately: delete the app to remove its data from your device.
We do not sell or share personal information, for money or for advertising.
Changes
If what the app collects changes, this page is rewritten from the code again and the date at the top changes with it. Material changes will also be noted in the App Store release notes for the version that makes them.