Privacy Policy — Mergaloo

Effective date: October 5, 2026 Last updated: October 5, 2026

This Privacy Policy explains what information is collected when you play Mergaloo (ميرجالو, the "Game"), how it is used, who it is shared with, and the choices and rights you have.

1. Who we are

The Game is developed and published by BrightPixel (Suleiman Jaber), Israel ("we", "us"). We are the data controller for the limited processing described below.

Contact: [email protected]

We aim to reply to every privacy request within 30 days (sooner where the law requires).

2. Summary

The Game has no accounts, no sign-in, no chat and no in-app purchases. We never ask for your name, e-mail, phone number, photos, contacts or precise location.
Your game progress is stored only on your device. We do not run servers and we do not receive it.
The Game shows ads through Google AdMob. Google and its ad partners may collect device and usage information to show, measure and (where you allow it) personalize ads. This is the only data that leaves your device.
Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), we ask for your consent before personalized ads are shown, and you can change your choice at any time.
Daily reminders are local notifications scheduled on your device. No push server is used.
We do not sell your personal information for money. Ad-related sharing that some laws treat as "selling" or "sharing" is explained in section 9, with how to opt out.

3. Information stored on your device

The Game saves the following locally, inside the app's private storage on your device:

Game progress: levels unlocked, stars earned, world chests opened, and best scores in Endless mode, so you can continue where you left off.
Wallet: your in-game coins, gems and power-ups.
Unlocks: the jar styles, aim lines and object sets you own and use.
Daily features: the 7-day reward cycle, daily task progress, weekly challenge progress and the free-gem timer.
Settings: game language, sound effects and music (on/off and volume), vibration and daily reminders, to remember your preferences.
Small flags: tutorial steps seen, whether the tutorial was offered, whether you were asked about reminders or about rating the Game, and counters of levels won and retries since the last full-screen ad, so the Game doesn't repeat prompts and spaces out ads.

This information is not sent to us or to anyone else. Uninstalling the Game, or clearing its data in your device settings, deletes all of it permanently. Because we never receive it, we cannot recover lost progress.

The Game uses the internet only to load and show ads. It uses vibration for short haptic feedback (you can turn it off in Settings).

Daily reminders (notifications)

If you agree to daily reminders, the Game asks Android for permission to show notifications and then schedules at most one reminder a day on your device (for example when your daily reward is ready). The text is chosen from your saved progress on the device. Nothing is sent to us or to a notification server. You can turn reminders off at any time in Settings → Daily reminders or in Android's notification settings.

4. Advertising (Google AdMob)

The Game uses Google AdMob, an advertising service provided by Google LLC / Google Ireland Limited. The Game offers:

Rewarded ads: optional videos you choose to watch in exchange for an in-game reward (continuing a level, doubling your coins, a free gem or a free power-up). Watching is always your choice.
Interstitial ads: occasional full-screen ads at natural breaks, after every few levels won or retries, never during play.
Banner ads: a small banner at the bottom of the game screen in some modes.

When an ad is requested or shown, the Google Mobile Ads SDK may automatically collect and process:

Device identifiers: the Android Advertising ID (or similar resettable identifiers) and app-set ID;
Device and app information: device model, operating system and version, language, screen size, app version, mobile carrier and network type;
IP address, which can be used to estimate your approximate (coarse) location (country/city);
Ad interaction data: which ads were shown, clicked or watched, and ad performance and diagnostic data (crash and performance logs of the ad SDK).

Google uses this information to deliver ads, limit how often you see the same ad, measure ad performance, prevent fraud and abuse, and, only where you have allowed it or where the law permits, to show ads based on your interests. Google may share it with its advertising partners as described in its policies:

How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites
Google Privacy Policy: https://policies.google.com/privacy
Google advertising technologies: https://policies.google.com/technologies/ads

We do not receive the advertising identifier or the other raw data the SDK collects. We only see aggregated reports in AdMob (for example how many ads were shown and earnings per country).

5. Legal bases (EEA, UK and Switzerland)

Where the GDPR, UK GDPR or the Swiss Federal Act on Data Protection applies:

Personalized ads and the use of device identifiers for advertising are based on your consent (GDPR Art. 6(1)(a) and the ePrivacy rules). We ask for it through Google's consent form (a certified consent management platform under the IAB Transparency & Consent Framework) the first time you open the Game.
Non-personalized ads, ad delivery, frequency capping, fraud prevention and ad measurement are based on our legitimate interest in funding a free game (Art. 6(1)(f)), within the limits allowed by your consent choices.

You can withdraw or change your consent at any time in the Game: Settings → Privacy options. Withdrawing consent does not affect processing done before you withdrew it. If you refuse consent you can still play the full Game; you may see non-personalized or limited ads.

We share information only as follows:

Google (AdMob) and the advertising partners Google works with, as described in section 4, under Google's terms, which include the EU Standard Contractual Clauses for international transfers.
When required by law, to respond to a valid legal request, or to protect rights, safety and security.

We do not use any analytics, attribution or social-media SDKs, and we do not share data with data brokers.

7. International transfers

Google may process advertising data on servers in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred to countries without an adequacy decision, Google relies on safeguards such as the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

8. Data retention

On-device game data is kept until you delete the app or clear its data.
Advertising data is retained by Google according to its own retention policies (https://policies.google.com/technologies/retention).
E-mails you send us are kept only as long as needed to answer your request, and then deleted (at most 24 months).

9. Your rights and choices

Everyone

Reset or delete your advertising ID: Android Settings → Google → Ads (or Privacy → Ads).
Opt out of personalized ads: Android Settings → Google → Ads → "Delete advertising ID" or "Opt out of Ads Personalization", and in the Game: Settings → Privacy options (where shown).
Manage Google ad settings: https://adssettings.google.com
Turn off reminders: Settings → Daily reminders, or Android's notification settings.
Delete all game data: uninstall the Game or clear its storage in Android Settings → Apps.
Contact us at [email protected] with any question or request.

You have the right to access, rectify, erase, restrict and object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. Because we do not hold personal data about you ourselves, we will help you exercise these rights and point you to Google, which holds the advertising data.

United States (California CCPA/CPRA and other state privacy laws)

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with consumer privacy laws have the right to know what personal information is collected, to access and delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information for targeted (cross-context behavioral) advertising.

In the last 12 months, the categories collected through the ad SDK are: identifiers (advertising ID, IP address), internet or other electronic network activity (ad interactions), and approximate geolocation. They are disclosed to Google and its ad partners for advertising.
We do not sell personal information for money. Using advertising IDs for targeted ads may count as "sharing" or "selling" under some state laws. To opt out, use Android's "Delete advertising ID" / "Opt out of Ads Personalization" setting, the Game's Privacy options (where shown), or e-mail us.
We do not use or disclose sensitive personal information, and we will not discriminate against you for exercising your rights.
You may use an authorized agent; we may need to verify the request.

Israel (Protection of Privacy Law, 5741-1981, as amended)

You have the right to review information about you held in a database and to request its correction or deletion. Contact us at [email protected]. You may also contact the Israel Privacy Protection Authority.

Brazil (LGPD), Canada (PIPEDA) and other countries

You have similar rights to access, correct and delete your personal information and to withdraw consent, as provided by your local law. Contact us and we will respond within the time the law requires.

10. Children's privacy

The Game is a general-audience game and is not directed at children under 13 (or under 16 where that is the age of digital consent in your country). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has used the Game in a way that caused personal information to be collected, contact us at [email protected]. Because the Game does not collect personal information itself, you can also reset the device's advertising ID and uninstall the Game to remove all data.

11. Security

Game data stays in the app's private storage, which other apps cannot read on a standard (non-rooted) device. Communication with Google's ad servers is encrypted (HTTPS). No method of storage or transmission is 100% secure, but we keep the data we handle to a minimum.

12. Changes to this policy

If we change this policy (for example if we add a feature that collects new data, such as analytics, accounts or in-app purchases), we will update this page and its "Last updated" date before the change takes effect, and where required by law we will ask for your consent again.

13. Contact

BrightPixel, Suleiman, Israel E-mail: [email protected] Web: https://brightpixel.work