Asobi Panda
English

Privacy policy

Updated 28 October 2026

In short

Who is responsible

Asobi Panda, the publisher of our games. For any question about your data: contact@asobipanda.com.

What our games and this site handle

Playing as a guest

Data
At first launch, the game draws a random identifier kept in your phone’s keychain. Our server keeps only a one-way fingerprint of it (a hash), which opens a guest account with no name and no email.
Why
Save your progress without asking who you are.
Legal basis
The service you asked for.
How long
Deleted after 24 months without use, or when you delete the account.

Your progress

Data
A copy of where you are in the game: grids finished, stars, gold, items bought, game settings. Another copy can be kept in your own iCloud by Apple; we have no access to it.
Why
Bring your game back after a reinstall or on another phone.
Legal basis
The service you asked for.
How long
With its account: 24 months without use for a guest account, 36 months for an account with an email, or until you delete it.

Your email (optional)

Data
Your email address. To check it, we send a six-digit code that is never stored in clear. We keep no password, because there is none. The email is never used for advertising or newsletters.
Why
Sign you in and find your progress again on another phone.
Legal basis
The service you asked for.
How long
Until you delete the account, or after 36 months without use. A code is valid for ten minutes and erased by the next day at the latest.

Device identifier

Data
The identifier your phone gives to the apps of one publisher (IDFV on iPhone, ANDROID_ID on Android). It is not the advertising identifier. Our server never keeps it as it is, only a fingerprint computed with a secret key (a one-way keyed hash).
Why
Limit abuse of the in-game bonuses and tie a session to a phone.
Legal basis
Our legitimate interest: a fair game for everyone.
How long
With your account.

Bonuses

Data
When the game draws a bonus, the server keeps the device fingerprint, the kind of bonus and the time.
Why
Make sure the same bonus is not drawn twice.
Legal basis
Our legitimate interest: a fair game for everyone.
How long
90 days.

Challenges between friends

Data
When you challenge a friend, the server keeps the grid, your time and a short code. Nothing that identifies you.
Why
Open the same grid for your friend, with the time to beat.
Legal basis
The service you asked for.
How long
12 months.

Anonymous measurements

Data
The game sends measurements of how it is used (for example the size of a finished grid, the playing time, a hint used), with the app version. They carry no player or device identifier, and the server does not record your IP address with them. We use no third-party analytics or crash-reporting tool.
Why
Understand how the games are played and balance them.
Legal basis
Our legitimate interest: improving the games.
How long
24 months.

Purchases

Data
Apple or Google take the payment; we never see your card. For each purchase, the store sends us a signed proof: transaction number, product, date, environment (real or test). We record it in a register that can be neither changed nor erased. It holds neither your email nor your device identifier.
Why
Give you what you bought, and prove each sale and each refund.
Legal basis
The service you asked for, and our legal duty to keep proof of sales.
How long
10 years (accounting proof).

Advertising

Data
The free version shows ads from Google AdMob (Google Ireland Limited). On iPhone they are never personalised: the game does not follow you from app to app or site to site, does not link your data with other companies’ data, and so asks neither for Apple’s tracking permission nor for the advertising identifier. Google only handles technical device data (IP address, model, system, interactions with the ad) to show the ad, limit how often it repeats and fight fraud. In the European Union, the United Kingdom and Switzerland, a Google form first asks for your agreement. Removing ads (an in-game purchase) stops the imposed ads; the reward videos, which you choose, stay on offer.
Why
Fund the games so they stay free.
Legal basis
Your consent where the law requires it; elsewhere, our legitimate interest in funding the games.
How long
Under Google’s own policy (policies.google.com/technologies/partner-sites).

Notifications

Data
The game’s reminders are scheduled on your phone, with your permission. They do not go through our server.
Why
Remind you of the daily challenge and your streak, if you want.
Legal basis
Your consent, which you can withdraw in the game or in your phone’s settings.
How long
Nothing is kept on our server.

Server logs and this site

Data
Like any server, ours notes each request (IP address, date, address called). This site sets no cookies, has no analytics and no third-party script; its fonts are served by the site itself.
Why
Deliver the pages, secure the server and fix outages.
Legal basis
Our legitimate interest: a secure, working service.
How long
14 days.

You write to us

Data
Your email address and your message.
Why
Answer you.
Legal basis
Your request: you are the one writing.
How long
For the exchange, then one year at most.

What stays on your phone

Your settings (theme, sound, vibration, language), the grids you have started and your identifier in the system’s secure storage. Deleting the app erases the settings and the grids in progress. The identifier may survive on iPhone.

Who receives data

Us, and the services that run the games on our behalf:

Each of these services is bound, by contract and by its own commitments, to give your data protection at least equal to the one described in this policy and required by the store rules. Your data is neither sold nor rented, and is shared with no one else unless the law requires it. We do no tracking: no data is linked with other companies’ data to target or measure advertising, nor given to a data broker. No decision about you is made by a machine alone.

Outside the European Union

Our server is in the European Union. Apple and Google may handle data outside it; when they do, it is with the safeguards the law requires, such as an adequacy decision or standard contractual clauses.

Children

Our games are made for all ages and ask for no data to play. Their ads are limited to family content (Google’s “PG” rating: parental guidance). A child under 15 should only add an email with a parent’s permission. A parent can write to us to have an account deleted.

Your rights

You can access your data, correct it, erase it, restrict its use, object to it and get a copy of it, and withdraw a consent. To withdraw a consent: advertising in the game’s Settings (“Privacy choices”), notifications in the game’s Settings or your phone’s. To erase your account and progress: the game’s Settings (Account card, “Delete my account”), or the account deletion page. You can also write to contact@asobipanda.com; we answer within a month. If our answer does not satisfy you, you can complain to your country’s data protection authority, in France the CNIL (cnil.fr).

Changes

If this policy changes in an important way, we say so in the games before it applies. The date above shows the last update.