PRIVACY POLICY FOR PUZZLE HAVEN

Last updated: 2 September 2026

1. About this Privacy Policy

This Privacy Policy describes how WeNova KB ("WeNova") handles personal data and other information when you use Puzzle Haven ("The Game").

WeNova is the data controller for the processing of personal data described in this policy when WeNova determines the purposes and means of processing.

Puzzle Haven is a mobile game that uses both local storage on your device and external services for player accounts, cloud saving, leaderboards, ads, and in-app purchases.

2. What Data Do We Process?

The data processed depends on the functions, services, devices, and platforms you use.

2.1 Player Account and Identifiers

Puzzle Haven uses Unity Authentication to create and manage a player account.

A Unity player account is automatically created without you needing to provide an email address or password.

The following information may be processed in connection with the account:

• randomly generated Unity Player ID,
• session and access tokens,
• IP address and related technical information,
• the player's chosen display name,
• authentication status,
• information about account linking,
• information necessary to protect and operate the account.

2.2 Profile and Leaderboard

The player can choose a display name and avatar.

The following information may be visible to other players on the Puzzle Haven leaderboard:

• the player's display name,
• points in Classic,
• leaderboard position.

Do not use your real name, email address, phone number, address, or other sensitive personal information as a display name.

2.3 Game Data and Progress

Puzzle Haven may process game information such as:

• completed levels,
• best scores in Classic and Timed,
• current adventure level,
• virtual coins,
• Boosters and power-ups,
• selected avatar,
• progress in One Line,
• guidance status,
• use free clues,
• suite for daily rewards,
• bonus date,
• waiting time for the free spin,
• current game mode,
• other information required to save and restore the Game.

2.4 Technical Information

Online services used by Puzzle Haven may process technical information and usage information necessary to provide, protect, maintain, and improve the Services.

This can include, for example:

• Unity Player ID,
• identifier for service, installation, or device,
• IP address,
• approximate location derived from the IP address,
• unit type,
• operating system,
• platform,
• version of the Game,
• service requests,
• sessions,
• use of functions,
• game data sent to Cloud Save or Leaderboards,
• error and crash information,
• performance and diagnostic information,
• information used to prevent fraud, abuse, and security incidents.

With your consent, Puzzle Haven also uses Unity Analytics to understand how the Game is used and to improve gameplay and level balance.

Unity Analytics may process a Unity-generated pseudonymous user or installation identifier, session and event identifiers, IP address and approximate location, device and platform information, Game version and standard application lifecycle events. Puzzle Haven also submits fixed gameplay events containing:

• the game mode or screen opened;
• an action category, such as a mode or level starting or ending, a level failing, or a hint being used;
• the applicable level number; and
• a non-negative gameplay value, such as a session score or the coin cost of a hint.

Our custom Analytics events do not include a player's chosen display name, email address, Game Center identifier or free-text content. Analytics data is linked to a Unity-generated technical identifier and is reviewed primarily through aggregated reports; it is therefore pseudonymous rather than completely anonymous.

Analytics collection is disabled unless you allow it through the in-game prompt. You can change your choice later through Settings → Privacy & Analytics. This choice is separate from advertising consent. We use the resulting information to understand feature usage, locate unusually difficult levels, improve game balance and identify where players leave a game mode.

Puzzle Haven currently does not use Unity Cloud Diagnostics or Unity Crash Reporting as enabled standalone services.

However, other integrated services, such as Unity Authentication and Google Mobile Ads, may still process limited usage, performance, crash, or diagnostic information.

2.5 Purchases

Puzzle Haven offers optional purchases in the app.

Purchases are processed by the digital store linked to the platform, such as the Apple App Store or Google Play, where applicable.

WeNova will not have access to your full payment card or bank details.

We, the Game, or our service providers may receive limited information about a purchase, such as:

• product and product identifier,
• transaction or purchase identifiers,
• transaction status,
• results of implementation,
• information required to validate a purchase,
• information required to assign virtual content,
• information required to restore eligible non-consumable purchases.

2.6 Advertising and Advertising Data

Puzzle Haven displays interstitial ads and optional rewarded ads via Google AdMob.

Depending on the device, region, privacy settings, ad configuration, and Google's systems, Google and its advertising partners may process, for example:

• IP address,
• approximate geographical location derived from the IP address,
• device or app identifier,
• advertising identifiers where permitted,
• information about the device, operating system, app, and language,
• ads displayed,
• interactions with advertisements,
• completion of rewarded ads,
• app launches and product interactions,
• information on the results and measurement of the advertisements,
• crash logs,
• diagnostic information,
• performance information.

2.7 Information Puzzle Haven Does Not Normally Request

Puzzle Haven does not intentionally request the following information during normal gameplay:

• your real name,
• your email address,
• your phone number,
• your postal address,
• your contacts,
• pictures,
• audio recordings,
• precise GPS location,
• health information,
• full credit card details.

3. How Do We Use the Data?

Information may be processed for the following purposes:

• to provide and operate Puzzle Haven,
• create and manage your Unity player account,
• authenticate the player,
• link your player account to Game Center where available,
• save and restore game progress,
• manage player profile and leaderboard,
• remember settings and preferences,
• provide virtual coins, boosters, rewards, and other game content,
• execute and validate purchases,
• restore eligible purchases,
• display and measure ads,
• personalize ads when permitted and the user has made the necessary selections,
• manage privacy and consent options,
• understand how the Game and its online services are used,
• improve, balance, and develop the Game,
• identify and solve technical problems,
• prevent fraud, abuse, and security threats,
• provide support,
• handle privacy requests,
• fulfill legal obligations,
• protect the rights and security of the Game, our users, and our services.

4. App-Specific Features

4.1 Local Storage

Puzzle Haven stores some information locally on your device so that the Game can function and remember your progress and settings.

This may include, among other things:

• game progress and completed levels,
• records in Classic and Timed,
• settings and preferences,
• virtual coins,
• Boosters and power-ups,
• selected avatar,
• One Line Progress,
• guidance status,
• use free clues,
• suite for daily rewards,
• bonus date,
• waiting time for the free spin,
• current game mode.

Local data generally remains until it is removed by the Game, the app's data is cleared, the account deletion feature is used, or Puzzle Haven is uninstalled.

When the Game is uninstalled, local data is usually removed from the device. However, this does not automatically delete cloud data, top charts, platform purchase history, or an Apple Game Center account.

4.2 Unity Authentication

Puzzle Haven uses Unity Authentication to create and manage player accounts.

If Game Center is unavailable or not authenticated, Puzzle Haven may use anonymous Unity Authentication.

If the account is not linked to a supported external identity provider, an anonymous account may not be recoverable after the game has been uninstalled.

4.3 Apple Game Center

On Apple devices, Puzzle Haven can authenticate via Apple Game Center and associate the Game Center ID with the Unity Player ID.

This allows you to restore any eligible cloud-saved progress when the same Game Center account is used on a different compatible device or after reinstalling the game.

For this purpose, the game and relevant service providers may process a Game Center-specific player identifier and verification information provided by Apple.

Puzzle Haven will not have access to your Apple account password.

4.4 Unity Cloud Save

Puzzle Haven uses Unity Cloud Save to backup and restore selected game progress.

Cloud savings may include:

• balance of virtual coins,
• best scores in Classic and Timed,
• current adventure level,
• selected avatar,
• completed One Line levels,
• guidance status,
• use free clues,
• guidance status for the block puzzle,
• suite for daily rewards,
• bonus date,
• time associated with the waiting period for the free spin.

The information in Cloud Save is linked to the Unity Player ID.

4.5 Unity Leaderboards

Puzzle Haven uses Unity Leaderboards for the monthly rankings in Classic.

Unity Leaderboards can handle:

• Unity Player ID,
• IP address,
• submitted points,
• information necessary to display and operate the ranking.

The points on the leaderboard are usually reset according to the monthly schedule configured for the Game.

The account deletion feature can also remove a player's leaderboard data.

4.6 Unity Cloud Code

Puzzle Haven uses Unity Cloud Code for limited server-side actions.

This includes securely removing the authenticated player's leaderboard data during account deletion.

5. Legal Basis Under the GDPR

When GDPR applies, we link each processing to a specific purpose and legal basis. The table below summarizes the main processing activities at Puzzle Haven.

When a service provider processes data as a data controller, such as Google for certain AdMob processing or Apple for its platform services, the provider also determines its own legal bases and retention periods according to its privacy information.

6. Service Providers and Sharing

We do not sell personal data for financial compensation.

Information may be processed by or disclosed to service providers when necessary to operate Puzzle Haven.

6.1 Unity Technologies

Unity Technologies S.F., USA, is the Unity partner responsible for the Unity services covered by the Unity Terms of Service, as per Unity's current privacy policy. Unity Technologies ApS in Denmark is Unity's contact point within the EU.

Unity provides the game engine and Unity Gaming Services used by Puzzle Haven, including:

• Authentication,
• Cloud Save,
• Leaderboards,
• Cloud Code,
• Analytics, with consent.

6.2 Google and Advertising Technology Providers

For users in the EEA, Google Ireland Limited is usually the Google entity responsible for Google's services, unless otherwise specified in a service-specific privacy notice. Google LLC and other Google companies may also process data when necessary for the services.

Google provides:

• Google AdMob,
• User Messaging Platform (UMP),
• related advertising technology,
• advertising security,
• measurement,
• privacy and consent management.

AdMob may use additional ad technology providers. The current list of providers depends on WeNova's AdMob configuration and the choices shown through the Google User Messaging Platform. When UMP is displayed, the user can see the current providers and their purposes in the privacy notice. Google also provides the current list of AdMob Ad Technology Providers in its advertising and privacy tools.

6.3 Apple

Apple provides, among other things:

• App Store,
• StoreKit,
• processing and restoration of purchases,
• Game Center,
• other platform services on Apple devices.

6.4 Google Play

If Puzzle Haven is distributed via Google Play, Google may process, for example:

• downloads,
• platform services,
• purchase,
• related technical information.

When a service provider processes personal data on our behalf, the processing must comply with applicable data protection regulations and, where necessary, data protection agreements.

We require service providers who process personal data on our behalf to provide appropriate protection for the data in accordance with applicable data protection legislation.

Information may also be disclosed when required by law, a binding legal request, or a court order, or when reasonably necessary to protect users, rights, or the security of our services.

For more information on the processing of each supplier, please refer to their privacy policy:

• Unity: https://unity.com/legal/privacy-policy
• Google: https://policies.google.com/privacy
• Google - Advertising and Privacy: https://policies.google.com/technologies/ads
• Apple: https://www.apple.com/legal/privacy/
• Google - Current Ad Tech Providers: https://support.google.com/admob/answer/9012903

7. Transfers Outside the EU/EEA

Puzzle Haven uses service providers that operate internationally. Therefore, data may be processed outside the EU/EEA.

For Unity Gaming Services, data may be processed by Unity Technologies S.F. in the United States. Unity's Data Protection Supplement includes the EU Commission's Standard Contract Clauses (SCC) for transfers to third countries when necessary.

For Google services, Google Ireland Limited is the Google entity responsible for users in the EEA unless otherwise specified for a particular service. Data may be transferred to Google LLC in the United States or other Google entities and advertising technology providers. Google states that transfers, depending on the recipient and circumstances, may be supported by decisions on adequate level of protection, the EU-US Data Privacy Framework, or standard contractual clauses where necessary.

Apple and other providers may also process data internationally in accordance with their respective privacy and data protection policies. When required by the GDPR, the transfer must be subject to a valid transfer mechanism and appropriate safeguards.

You can contact us for more information on the protection measures used for transfers outside the EU/EEA or to request a copy of the relevant protection mechanisms.

8. How Long Do We Keep the Data?

We use the following filtering criteria for the data controlled by WeNova:

• Local game data: remains until the player clears app data, uses the game's deletion feature where local data is covered by the feature, or uninstalls the game.
• Unity Authentication and Cloud Save: remain while the player account is active and are deleted when account deletion is completed, except for limited information retained during a provider's technical deletion or backup cycle or as required by law.
• Leaderboard data: The active leaderboard resets each month. Previous ranking periods may be retained as archived versions to determine rankings and season rewards.
• Security and diagnostic information: is deleted when it is no longer needed to identify, investigate, or prevent the technical problem, fraud, or security threat for which the information was processed.
• Advertising and Consent Data: processed in accordance with the user's current privacy choices. Information processed by Google or other independent advertising technology providers is also subject to the respective provider's storage and deletion policies.
• Purchase and transaction information: is retained as long as it is needed for the delivery or refund of purchases. Information subject to accounting, tax, fraud, or dispute claims is retained for the duration of those claims.
• Support and privacy matters: are archived when the matter is resolved and the information is no longer needed for follow-up, legal obligations, or legal claims.
• Unity Analytics: information is retained according to our Unity configuration and Unity's applicable retention and deletion processes.

When a law or a binding legal obligation requires a longer retention period, that period applies before the above filtering criteria. When data is no longer needed, it is deleted or anonymized in accordance with applicable law.

9. Deletion of Account and Data

An authenticated player can request deletion directly in Puzzle Haven by:

Settings → Delete Account & Cloud Data

After confirmation and completed processing, the process is designed to delete:

• the player's leaderboard data in Puzzle Haven,
• player data in Unity Cloud Save,
• the player's account in Unity Authentication.

The Game also withdraws Analytics consent on the device and sends Unity Analytics a data-deletion request when the service is available. Unity may need to retain limited information where required by law or for security and deletion-record purposes.

The process also restores the applicable local account status for Puzzle Haven on the device.

The deletion may take a short time and requires an internet connection.

The process does not erase:

• your Apple account,
• your Apple Game Center account,
• your Google account,
• the device's advertising settings,
• purchase history on the App Store or Google Play,
• information that another provider must retain in accordance with its own legal obligations.

If Puzzle Haven is distributed via Google Play, WeNova will also provide an external web resource where users can request account deletion and deletion of associated data.

You can also contact support@wenovastudio.se regarding a privacy or deletion request.

10. Children’s Privacy

Puzzle Haven is intended for a general audience and is not specifically directed to children under the age of 13.

Age limits and requirements may vary between countries and regions.

During regular gameplay, the game does not require players to provide a real name, email address, phone number, or mailing address.

However, the online services described in this privacy policy may automatically process:

• pseudonym identifiers,
• IP addresses,
• technical information,
• game information,
• advertising information.

Players should not use real contact information or sensitive personal data as display names on the leaderboard.

When we know that a user must be treated as a child, we strive to apply the protections required by applicable law and relevant requirements from platforms and service providers.

If legally required parental consent or other authorization is not obtained, the relevant online processing or function should not be used.

We do not knowingly sell or share personal data of users under the age of 16 for targeted advertising where this is prohibited by applicable law.

If a parent or guardian believes that a child has provided personal data or that personal data has been processed in an unauthorized manner, they can contact support@wenovastudio.se.

11. Profiling, Advertising and Automated Decision-Making

11.1 Google AdMob

Puzzle Haven displays interstitial ads and optional rewarded ads via Google AdMob.

Rewarded ads are shown when a player voluntarily chooses to watch an ad in exchange for the reward specified in the Game.

Depending on applicable law, region, and user privacy preferences, ads may be personalized or non-personalized.

Google may use information to:

• provide advertisements,
• limit ads,
• protect the advertising system,
• measure ads,
• improve ads and advertising services.

11.2 User Messaging Platform

When necessary, Puzzle Haven uses Google’s User Messaging Platform (“UMP”) to request or manage privacy choices before certain ad-related processing occurs.

When Google requires the user to be able to open the privacy options, this option is available in the Game under:

Settings → Ad Privacy

Withdrawing consent does not necessarily mean that all ads will disappear.

Instead, the user may receive ads that are not personalized using data that requires consent.

11.3 App Tracking Transparency and Device Settings

Mobile operating systems provide privacy controls for advertising, tracking, permissions, and ad identifiers.

On Apple devices, App Tracking Transparency and other platform requirements may limit access to the advertising identifier and tracking between apps or websites.

You can also use privacy and advertising settings provided by your device or platform.

You may allow, decline or later withdraw optional gameplay Analytics through Settings → Privacy & Analytics. Withdrawing consent stops new Analytics collection on that installation but does not affect processing performed lawfully before withdrawal. Account deletion additionally requests deletion from Unity Analytics as described in Section 9.

11.4 Purchase to Remove Ads

If a player purchases an option that removes ads, mandatory interstitial ads will be disabled according to the purchased product.

Optional rewarded ads may still be available if the player chooses to use them.

11.5 Sale and Sharing Under U.S. Law

WeNova does not sell personal data for financial compensation.

Depending on the definitions in applicable state laws in the United States, the use of advertising identifiers or the disclosure of information to advertising partners for personalized or cross-context behavioral advertising may still be considered, for example:

• "sharing",
• "targeted advertising",
• "sales".

Where necessary, applicable options are provided through UMP, unit settings, or by contacting us.

Puzzle Haven does not use personal data for automated decisions that have legal or similarly significant consequences for the user.

12. Your Rights

Depending on your location and applicable laws, you may have the right to:

• receive information on how your personal data is processed,
• access your personal data,
• request correction of incorrect personal data,
• request deletion of personal data,
• request restriction of certain processing,
• object to certain processing,
• revoke consent when the processing is based on consent,
• request data portability for certain personal data,
• opt out of certain targeted advertising, sales, or sharing where applicable,
• file a complaint with a competent data protection authority.

Not all rights apply in all situations, and statutory exceptions may apply.

We may need some information to verify your request and locate the appropriate player account.

This could be your Puzzle Haven Player ID, for example, which is displayed in the Game settings.

Do not send passwords, full credit card details, or any other sensitive personal information via email.

To exercise your rights, you can contact:

support@wenovastudio.se

If you are in Sweden, you also have the right to lodge a complaint with the Swedish Data Protection Authority (IMY).

Individuals in other countries may have the right to contact their local privacy or data protection authority.

13. Security

WeNova implements appropriate technical and organizational security measures to protect the information processed in connection with Puzzle Haven.

We also use established platform and technology providers for parts of the Game:

• infrastructure,
• authentication,
• cloud storage,
• chart positions,
• analytics,
• advertising,
• payment processing.

No electronic transfer, software, or storage method can be guaranteed to be completely secure.

We are therefore continuously working to limit risks and protect the information processed in connection with the Game.

14. Changes to This Privacy Policy

We may update this Privacy Policy when Puzzle Haven changes, when service providers or processing activities change, or when legal requirements change.

The date at the top shows when the policy was last updated.

If a change is significant, we will inform the user appropriately when required by law.

The latest version is available through Puzzle Haven and on our website.

15. Language Versions

This privacy policy may be available in multiple languages.

In the event of any differences or contradictions between the Swedish version and a translation, the Swedish version shall prevail.

16. Contact and Company Information

If you have any questions about this privacy policy or our processing of personal data, please contact WeNova:

Company: WeNova KB
Company registration number: 969804-6944
Registered office: Sollentuna, Sweden
Email: support@wenovastudio.se
Website: https://wenovastudio.se