Privacy Policy — Chalk Hero (iOS)
Effective date: 10 September 2026
Applies to: Chalk Hero for iOS
Developer: JUAN DU
1. Summary
Chalk Hero is a single-player game. There is no account, no login, and no sign-up — we never ask for your name, email, phone number, photos, contacts, or precise location.
However, the game is supported by advertising, and the advertising and analytics SDKs we embed do collect data about your device and how you use the app. This policy explains exactly what that means. We would rather tell you plainly than hide it behind "we respect your privacy".
2. What is collected, by whom, and why
Data that never leaves your device
Your game progress is stored locally on your device and is never uploaded by us:
| Data | Examples |
|---|---|
| Lesson progress | cleared lessons, star ratings |
| Character progression | upgrade tree, equipped chalk and accessories |
| Collection | codex entries, memory fragments |
| Preferences | sound, music track, language |
| Daily state | check-in streak, daily task progress |
| Purchase entitlement | a single "ads removed" flag |
Deleting the app deletes this data. The native builds have no cloud backup — if you delete the app, your progress is gone, and we cannot recover it for you.
Advertising — Google AdMob
We show rewarded video, interstitial, and banner ads through Google AdMob. AdMob collects:
- Advertising identifier — IDFA on iOS (only if you allow tracking, see §3), Advertising ID on Android
- Ad interaction data — which ads were shown, viewed, or clicked
- Device and network information — device model, OS version, IP address (from which an
approximate, city-or-region-level location can be inferred)
This is used to select and measure ads, including personalised advertising across other apps and websites. We do not receive your advertising identifier ourselves — it goes to Google.
Google's privacy policy: https://policies.google.com/privacy How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites
Analytics — Google Firebase Analytics
We record in-game events to understand where players get stuck and to improve the game. The events are about gameplay, not about you. The complete list:
run_start, wave, death, revive, victory, semester_start, result, choice, tree_up, skin_buy, codex_claim, checkin, return_gift, prep_run, prep_buy, prep_short, rush_clear, loop_perfect, loop_inf, share, share_in, invite_in, ad_show, ad_end, ad_fallback, ad_probe, inter_show, iap_buy, iap_restore, cape_gift, bgm_pick, lang, privacy_open, ftue, setBonus
Their parameters are gameplay values only — wave number, lesson index, score, which upgrade was picked, which ad slot was shown. Firebase additionally assigns an app instance identifier and records device model, OS version, and approximate location derived from IP address.
Firebase privacy and security: https://firebase.google.com/support/privacy
Crash reporting — Firebase Crashlytics
When the game crashes or hits an error, we receive a crash report so we can find and fix the problem: the program call stack at the point of failure, device model, OS version, free memory and storage, and the time of the error. It contains no name, account or anything outside the game, and is only linked to the app instance identifier above.
Crashlytics data: https://firebase.google.com/support/privacy#crash-stored-info
Remote configuration — Firebase Remote Config
At launch the game reads a set of game values from Firebase (for example, how much health the enemies in a given lesson have), so we can adjust difficulty without shipping a new version. This is download-only: it reads values and uploads nothing about you (other than the app instance identifier needed to read them). We may give different players different values to compare which difficulty works better (A/B testing).
Purchases — Apple
The optional Remove Ads purchase is processed entirely by Apple. We never see your payment details. The app stores only a single true/false flag locally recording that you own it, and asks Apple to restore it when you tap "Restore Purchases".
Install attribution — SKAdNetwork
iOS reports app installs attributed to ads through Apple's SKAdNetwork, which is designed to measure ad campaigns without identifying you. This is handled by the operating system.
What we do NOT collect
- No name, email address, phone number, or postal address
- No precise (GPS) location
- No contacts, photos, microphone, camera, or health data
- No account — there is nothing to log into
- We do not sell or share your personal information for money
3. Your choices and controls
App Tracking Transparency
Before we ever use your IDFA, iOS asks for your permission. If you decline, the game works exactly the same and your rewards are unchanged — you simply see less relevant ads. You can change your answer at any time in Settings → Privacy & Security → Tracking.
Advertising consent (European Economic Area, UK, Switzerland)
If you are in the EEA, the UK, or Switzerland, we ask for your consent through Google's User Messaging Platform before ads are personalised. You can change or withdraw that consent at any time from inside the game: Settings → Ad Privacy Options.
Opting out of personalised ads at the OS level
- iOS: Settings → Privacy & Security → Tracking → turn off "Allow Apps to Request to Track"
Removing ads entirely
On iOS you can buy Remove Ads. After that no ads are requested, so AdMob no longer receives data about you from this app.
4. Legal bases (GDPR)
For users in the EEA, the UK, and Switzerland:
| Purpose | Legal basis |
|---|---|
| Running the game, saving progress on your device | Contract — you asked us to provide the game |
| Non-personalised advertising and basic analytics | Legitimate interests — funding and improving a free game |
| Personalised advertising | Consent — collected via Google UMP, withdrawable at any time — see Advertising consent in §3 |
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent.
Because we operate no account system, we usually cannot connect a request to a specific person — we have no identifier that maps to you. In practice:
- Deleting your data held by us: uninstall the app. Everything we hold locally is deleted.
- Data held by Google: use the OS controls in §3, or contact Google directly.
- Anything else: email us at contact@pukagame.com and we will help where we technically can.
EEA/UK users also have the right to lodge a complaint with their local data protection authority.
6. California (CCPA/CPRA)
We do not sell your personal information for money. Sharing advertising identifiers with Google for personalised advertising may qualify as "sharing for cross-context behavioural advertising" under California law. You can opt out using the controls in §3 — on iOS, declining the tracking prompt is a complete opt-out.
7. Children
Chalk Hero is not directed to children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect personal information from children.
Although the game is set in a classroom and drawn in a cartoon style, it is designed for a general audience and is rated for cartoon fantasy violence. We do not enable child-directed treatment in our advertising configuration.
If you believe a child has provided us with personal information, contact contact@pukagame.com and we will delete what we can.
8. Data retention and international transfers
We retain no personal data on our own servers — we operate none for the native builds. Data held by Google (AdMob, Firebase) is retained according to Google's own policies and may be processed on servers outside your country, including in the United States, under the safeguards described in Google's privacy documentation.
9. Changes to this policy
If we change what is collected, we will update this policy and its effective date before the change ships. Material changes will be announced in the app or in the store release notes.
10. Contact
Questions about this policy: contact@pukagame.com