Privacy policy

Effective date: 15 October 2026

Controller: MetrasApp — Theodoros Tsavlidis, 3 Digeni, Ampelokipoi, Thessaloniki 56123, Greece

Contact for privacy questions: pagkos@in-app.pro

1. About this policy

This policy explains what information the Pagkos mobile game ("Pagkos", "the app", "we") and the website https://games.in-app.pro/pagkos/ handle, why, and what choices you have. It applies to the iOS and Android versions of the app and to the website.

2. Short summary

You do not need an account, a sign-in or an email address to play.
We do not run a server that receives your game data. Your progress, settings and coins are stored on your device only.
The app uses Google Firebase Analytics (anonymous usage statistics) and Firebase Crashlytics (crash reports) to keep the game running well. Analytics follows your consent choice. This website uses no analytics.
We show ads through Google AdMob (rewarded ads, and later possibly interstitial ads for players who have not made a purchase). In the EEA, the UK and Switzerland, Google's consent form (UMP) asks for your choice before any ad is requested.
On iOS, the advertising identifier (IDFA) is only used if you allow tracking in Apple's App Tracking Transparency prompt.
Purchases are handled by Apple or Google. We never see your payment details.
The app is intended for players aged 13 and older and is not directed at children.

3. Information we process

a) On your device (not sent to us)

Game progress, level results, unlocked worlds, settings, and in-game coin balance.
Your ad consent choices, stored locally so the consent prompt is not repeated unnecessarily.

b) Advertising (Google AdMob)

Advertising identifier: the Identifier for Advertising (IDFA) on iOS, only if you allow tracking in the Apple prompt; the Android Advertising ID on Android, subject to your device settings and your consent.
IP address, device and network information (for example device model, operating system version, app version), and ad interaction data (for example, whether an ad was viewed or clicked).
Google may use this information to deliver and measure ads and to prevent fraud, as described in Google's own privacy policy. Without consent, only non-personalised ads may be shown, where available.
Rewarded ads are always your choice: they are never shown without your action.

c) Analytics and crash reports (Google Firebase)

Firebase Analytics records how the app is used, for example which levels are started, completed or failed, which screens and offers are viewed, and whether a rewarded ad was offered or watched. It does not record your name, email or contacts.
Firebase uses an app-instance (installation) identifier, and receives device and app information (for example device model, operating system version, app version, language, approximate location from the IP address) and diagnostic data.
In the EEA, the UK and Switzerland, analytics storage and advertising signals stay denied until you answer Google's consent form (Google Consent Mode). If you decline, Firebase only receives anonymous, cookieless pings that do not use device storage. You can change your choice in the app under Settings, "Privacy & ad choices".
Firebase Crashlytics collects crash and error reports (stack traces, device model, operating system version, app state at the time of the crash) so we can fix bugs. We do not attach advertising identifiers to them. Crashlytics is used on the basis of our legitimate interest in a stable app.
Firebase Remote Config downloads game settings (for example how often certain offers appear) and does not send your personal data to us.
Google acts as our processor for these services.

d) Consent (Google User Messaging Platform, UMP)

If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, Google's UMP consent form asks for your consent before ads are requested.
Your consent status is stored on your device so your choice is respected. You can review it in the app under Settings, "Privacy & ad choices".

e) App Tracking Transparency (iOS)

Before the advertising identifier is used for tracking, iOS asks for your permission. If you decline, the IDFA is not used. You can change this at any time in the iOS Settings app.

f) Purchases (Apple App Store, Google Play)

Payments are processed by Apple or Google. We never receive or store your name, card or other payment details.
To confirm a purchase and unlock what you bought (for example removing ads), the app may use the purchase-validation service RevenueCat, if used in your version. In that case RevenueCat acts as our processor and receives an anonymous app user identifier and your purchase status.

g) This website

The website is static. It sets no cookies and uses no analytics, advertising or tracking scripts.
It is hosted by Cloudflare, Inc. Like most web servers, Cloudflare may process technical request data such as IP address, date and time, requested page and browser type for security and operation.
If you email us, we receive your email address and what you write, and we use it only to answer you.

h) What we do not collect

We do not ask for your name, phone number, postal address or contacts.
We do not collect precise location.
We do not access your photos, microphone or camera.
We do not sell your personal information.

4. Why we process this information and legal bases (EEA and UK)

Purpose	Information	Legal basis
Running the game and saving progress on your device	Section 3a	Performance of the service (Art. 6(1)(b) GDPR)
Showing ads	Advertising identifier, IP, ad data	Consent (Art. 6(1)(a)), collected through UMP where required
Remembering your ad consent and complying with law	Consent status	Legal obligation and legitimate interests (Art. 6(1)(c), (f))
Handling purchases and restoring them	Purchase data, anonymous purchase ID	Performance of the contract (Art. 6(1)(b))
Understanding how the app is used and improving it (Firebase Analytics)	App-instance ID, usage events, device and app information	Consent (Art. 6(1)(a)), through the Google consent form where required
Finding and fixing crashes (Firebase Crashlytics)	Crash reports, device and app information	Legitimate interests (Art. 6(1)(f))
Keeping the website secure and available	Server logs	Legitimate interests (Art. 6(1)(f))
Answering your emails	Email address and message	Legitimate interests (Art. 6(1)(f))

5. Who receives the information

Google (Firebase Analytics, Crashlytics, Remote Config): processes analytics and crash data on our behalf as our processor.
Google (AdMob, UMP): acts as a service provider and, for some advertising functions, as an independent controller under its own policies.
Apple and Google (app stores): process downloads and purchases under their own terms.
RevenueCat: processes purchase status on our behalf, if used.
Cloudflare, Inc.: hosts this website.
We do not share data with other third parties for their own marketing.

Some providers are located outside the EEA or the UK, including in the United States. Where this applies, transfers rely on safeguards offered by those providers, such as Standard Contractual Clauses or an adequacy decision.

6. How long we keep information

On your device: until you uninstall the app or clear its data.
Advertising data: held by Google according to its own retention practices.
Analytics data (Firebase): kept by Google for a limited period, which we set to the shortest option offered (2 months for event-level data); crash reports are kept for a limited period according to Firebase's practices.
Purchase records: kept by Apple, Google (and RevenueCat, if used) as required for accounting and to restore purchases.
Website server logs: kept by Cloudflare for a limited time according to its own practices.
Emails to us: kept as long as needed to answer you and handle your request.

7. Your choices

Analytics: your consent choice applies to Firebase Analytics as well, and you can change it in the app under Settings, "Privacy & ad choices". You can also reset or limit your device identifiers in your device settings.
Ads: you can change your consent at any time in the app under Settings, "Privacy & ad choices", and in your device settings. You can reset your advertising identifier on iOS or Android.
Tracking on iOS: you can allow or deny tracking in the Apple prompt, and change this later in iOS Settings.
Rewarded ads: you choose whether to watch them.
Uninstalling the app removes the data stored on your device. Data already held by providers is handled under section 6.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, to receive a copy of it, to object to processing, and to withdraw consent at any time without affecting earlier processing. To exercise these rights, contact us at pagkos@in-app.pro. You also have the right to lodge a complaint with your national data protection authority. In Greece this is the Hellenic Data Protection Authority (www.dpa.gr).

9. Age

Pagkos is intended for players aged 13 and older and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a person under 13 has provided personal information through the app, contact us at pagkos@in-app.pro and we will take steps to delete it.

10. Security

We use the security measures provided by Apple, Google and our service providers. No method of transmission or storage is completely secure.

11. Changes to this policy

We may update this policy. The effective date at the top will change, and material changes will be shown in the app or on the store listing before they take effect where required.