Privacy Policy

Last updated: 15 October 2026

About this policy

This Privacy Policy applies to the iOS version of Storybook Puzzles and describes information handled in the game, its licensing service and these legal-document pages. The operator identified at the end of this document is an individual developer using the CodexTree name. Where data-protection law applies, that operator is the controller of the information processed for these purposes. Parents and guardians may use the details at the end of this document to reach the operator.

Storybook Puzzles is a children's picture-puzzle game. Ordinary play does not require a child account, name, birth date or contact details. Core puzzles and local progress work without an AppService connection. Technical identifiers used for licensing are not anonymous merely because they do not contain a person's name.

Local game information

The game stores puzzle progress, preferences, settings and evidence of access on the device. It does not upload puzzle progress through its licensing requests or provide its own cloud progress sync or cross-device progress transfer. Backup may depend on Apple services and device settings. Resetting progress, removing app data or device failure may erase local progress. Restoring a purchase restores eligible access, not lost progress.

Installation and license checks

When an online license check is due, the game contacts our AppService at api.codextree.io. A check can occur shortly after launch or return to the foreground, without a purchase or other adult action. Requests contain an app-specific installation identifier and a derived device identifier, device model, operating system and version, language or locale, time zone, app version and build, release channel, request identifier and request time. The underlying device identifier used to derive the app-specific value remains on the device.

These records are used to register an installation, deliver and check signed licenses, prevent fraud and abuse, and diagnose licensing failures. The network connection also exposes the IP address to the server and hosting infrastructure. The service may derive an IP-based security fingerprint and keep operational or security logs. We do not use these records for advertising, behavioral profiling or tracking across unrelated apps. An unavailable service does not block ordinary offline play.

Purchases, restores and gifts

Apple handles payments and restores through StoreKit and processes store-account and payment information under its own privacy policy. The game does not collect payment-card numbers or banking credentials.

Locally verified StoreKit ownership grants purchased access. For a production App Store transaction, the game may send Apple's signed transaction information to AppService for purchase records and security checks. That report does not decide purchased access. Sandbox transactions are not sent to production AppService. License and purchase records can include product, transaction, installation and license identifiers, purchase dates and revocation status. An operator-issued signed gift license may independently grant access.

Custom code redemption is unavailable in this version. The in-app access challenge controls access to an adult action; it does not itself constitute privacy consent.

Support and disabled features

If you contact us by email, telephone or post, we process the contact details and information you provide to respond, investigate the issue and keep necessary correspondence. Please contact us as a parent or guardian and avoid sending a child's name, photographs, payment-card details or unrelated personal information.

This version does not enable advertising, third-party analytics, automatic crash uploads to AppService or AppService feedback submission. It does not require access to contacts, photos, microphone or camera for ordinary play. We will update this policy and any required in-app notice before enabling materially different data collection.

Purposes and legal bases

Where applicable law requires a legal basis, purchase verification, requested restores, gift delivery and support are processed as necessary to provide a service requested by an adult or perform the applicable agreement. Strictly necessary licensing integrity, network operation, security and abuse prevention may rely on legitimate interests, subject to the rights and interests of users, particularly children. Records required for accounting, legal claims or regulatory duties are processed to meet applicable legal obligations. When a particular use requires consent or verified parental consent, that consent is required before the use begins; this policy and the purchase access challenge do not replace it.

Children and parental choices

Technical identifiers and licensing records are used for the operation, delivery and protection of the game and its paid or gifted content. We do not use them to contact children, build advertising profiles or sell or rent children's information. We do not ask children to submit freeform personal information through enabled online features. A parent or guardian may ask to review information associated with an installation, request deletion or ask that further collection stop, subject to applicable law and the limited retention described below. We will investigate any report of information collected beyond these stated purposes.

Recipients, security and international processing

Information is available to the operator and authorized service personnel for the purposes described here. Hosting, database and support providers may process it on our behalf. Providers handling information for us are required to limit their use to the relevant service and provide protection consistent with this policy and applicable law. Apple separately handles store transactions. Information may also be disclosed when necessary to comply with law, respond to a lawful request, establish or defend legal claims, or protect the service and its users.

Licensing requests use HTTPS. Access to service records is restricted to authorized roles, and licensing credentials and purchase proofs are handled as protected information. No system can guarantee absolute security. The operator’s location is identified at the end of this document; information may be processed outside your country by the operator, platform stores or contracted infrastructure. Where the law requires safeguards for an international transfer, those safeguards must apply. You may contact us for information about recipients and applicable transfer protections.

Retention and deletion

Local progress remains on the device until it is reset or app data is removed, subject to device backup. Apple retains its own records according to its policies. Removing the game does not itself delete server records or store purchase history.

For an installation without an active verified purchase or valid gift entitlement, AppService automatically deletes its installation identifiers and associated device and technical metadata after 30 consecutive days without a qualifying request from the app. A successful qualifying app request restarts that period; an administrative job or background database operation does not. Pending or newly confirmed payments without issued access have a limited two-day resolution period, rather than an indefinite retention exemption.

For active paid or valid gifted access, we retain only the purchase proof, entitlement and binding information needed to provide and restore that access. Optional device and technical metadata is minimized when the inactivity threshold is reached; diagnostic records have their own shorter retention rule below. When access expires or is revoked, necessary financial, entitlement and security evidence may remain for up to 365 days after the latest relevant transaction, expiry, revocation or verification event, with earlier removal when no longer needed. This limited evidence can remain pseudonymous and is not described as anonymous statistics. Any longer accounting, legal-claim or incident hold must have a specific documented purpose, limited scope and review or end date.

AppService API traffic and diagnostic records are deleted after 30 days from their creation, including for purchasers. Automatic crash uploads remain disabled in this version. Aggregate statistics may remain only if they can no longer identify, single out or be linked back to a person, installation or device. Replacing an identifier with a hash does not by itself make a record anonymous.

Deletion is performed by scheduled cleanup. A service interruption or processing backlog can delay completion; we monitor and resolve such delays. Restricted recovery backups follow a separate rotation: the regular shared service backup cycle is seven days. Deleted information may remain in those backups until rotation and must not be returned to ordinary use by a restore. Older archived recovery or export copies are assessed separately and removed when no longer needed for a specific documented recovery, legal or security purpose. This policy does not represent every historical backup or export as already physically erased.

Support correspondence is kept only as long as needed to resolve the request and meet a specific applicable legal obligation. A verified parent or guardian may request deletion or ask that further collection stop without waiting for the inactivity period. We identify the relevant installation and coordinate stopping further app collection; deleting server records does not itself prevent a device from sending a new request. Necessary purchase evidence may remain for legitimate restoration, and deletion does not create a store refund.

Deleting an AppService observation does not revoke locally verified StoreKit ownership. Apple purchase restoration remains governed by StoreKit.

Your rights and requests

An adult may use the details at the end of this document to request access, correction, deletion or a copy of information, object to or restrict processing, or withdraw consent where consent is the legal basis. Available rights depend on the law that applies. Withdrawing consent does not affect the lawfulness of earlier processing. You may complain to the competent data-protection authority, including the authority where you live if EU or UK data-protection law applies.

We may request limited information to identify the relevant installation and verify your authority to make the request. Please do not send a child's identity document or payment-card information. We respond within the period required by applicable law and explain any lawful limitation. There is no game account to close. A privacy request or deletion of local data does not automatically cancel a store purchase; Apple manages store accounts, refunds and purchase history. Playing offline prevents new licensing requests while the device remains offline, but does not erase records already held.

Privacy-policy pages and changes

These privacy-policy pages contain no advertising or analytics scripts, tracking pixels, embedded third-party media or data-entry forms. The hosting infrastructure may receive an IP address, browser information, requested URL and request time when a page is opened.

Material changes are published at this URL with an updated revision date. Where a new use requires additional notice or consent, it must be provided before that use begins. Contact the operator using the details at the end of this document if you need help understanding this policy.