Last updated: 24 October 2026
This Privacy Policy explains what information the mobile game Box Collector ("the Game", "we", "us") collects, why, and what rights you have. The Game is developed and operated by Tutifruti ("the Developer"), based in Slovakia. If you have any questions, contact us at tutifruti.dev@gmail.com.
We have tried to keep this policy short and honest. In plain terms: the Game is a single-player collecting game with an online leaderboard, which you are on by default and can leave at any time in Settings; an optional account that saves your progress online so you can continue on another device; optional in-app purchases through Google Play on Android and the App Store on iPhone and iPad; and an optional way to send us feedback from inside the Game. The Game also offers optional rewarded ads: an ad plays only when you choose to watch one, in exchange for a short in-game bonus. We collect only what these features need, and we do not run analytics tracking.
The "data controller" for the purposes of the EU General Data Protection Regulation (GDPR) is Tutifruti, contactable at tutifruti.dev@gmail.com.
The Game uses Google Firebase (provided by Google Ireland Limited) to run its online features. Google acts as our data processor. Payments are handled by Google Play, which acts as an independent controller under its own terms. Ads are provided by Google AdMob (Google Ireland Limited), which acts as an independent controller for the data it uses to show ads. See Google's Privacy Policy at https://policies.google.com/privacy.
On iPhone and iPad, the Game also uses services from Apple: the App Store (distribution and in-app purchases) and Sign in with Apple. For App Store payments and for your Apple ID, Apple acts as an independent controller. See Apple's Privacy Policy at https://www.apple.com/legal/privacy/.
Automatically, when online:
• A player ID. When the Game first connects to our servers, it is assigned a random anonymous identifier (via Firebase Anonymous Authentication). As long as you do not create an account, it is not linked to your name, email address, or Google or Apple account. It lets the Game keep your leaderboard entry and your nickname. If you create an account, this ID becomes your account's ID.
The online leaderboard (on by default):
• A nickname. Every player starts with an automatic name such as "Player1234", and you can choose your own (3–16 characters).
• Your gameplay statistics, such as your level, achievement points, rank, the number of cards, sets and eras you have collected, your museum, boxes opened, expeditions, trades, daily streak, the date you started playing, the bundles you own, and the face, frame, title and trinkets you have chosen to show. They are updated while you play, at most once every few minutes.
• Your nickname and these statistics are public: every player of the Game can see them on the leaderboard and on your profile.
• You can leave the leaderboard at any time in Settings → "Show me on the leaderboard". Turning it off deletes your leaderboard entry and releases your nickname, and nothing is published while it stays off. Turning it back on publishes your entry again.
If you create an account (optional):
• Your email address. You either type it in together with a password, or it is shared by Google when you choose "Continue with Google", or by Apple when you choose "Continue with Apple" on iPhone or iPad. With Google, your Google profile name and profile picture link are also passed to our sign-in service; the Game never uses or shows them. With Sign in with Apple, you can choose Hide My Email, and Apple does not share your name with the Game.
• Your game progress. With an account, a copy of your whole game save is stored on our server, linked to your account, so that it can be restored on another device or after reinstalling the Game. It is uploaded regularly while you play and when you leave the Game. Only your own account can read it.
• We use your email address only to sign you in and, if you ask for it, to send you a password reset email. We do not send newsletters or marketing.
• The Game is fully playable without an account.
If you buy something (optional):
• Payments are processed by Google Play Billing on Android and by the Apple App Store on iPhone and iPad. We never see your card or payment details.
• The Game receives a purchase record from the store: on Android, from Google Play, the product you bought, the order number and a purchase token; on iPhone and iPad, from the App Store, the product you bought and its transaction ID. Our server checks this record with Google or Apple to make sure the purchase is genuine, and stores the result together with the order or transaction number, the product, and the player ID(s) that sent it.
If you watch an ad (optional):
• The Game shows only rewarded ads, and only when you tap "Watch ad" on the Box screen or "Watch" in the Shop; watching one gives you double XP for 5 minutes. There are no banner ads and no ads that appear on their own. The ad service, Google AdMob, is not started until the first time you tap one of these buttons, so if you never tap one, nothing is sent to it. When you do, Google AdMob receives, on Android, your device's advertising ID, and on every device your IP address (from which an approximate location can be derived), information about your device and the Game, and how you interacted with the ad. We do not receive or store any of this ourselves.
• On iPhone and iPad, the Game does not ask for permission to track you, so your device's advertising identifier (IDFA) is never available to the ads, and the Game does not track you across other companies' apps and websites.
• If you are in the European Economic Area, the United Kingdom or Switzerland, Google's consent form is shown the first time you tap an ad button, and ads are personalised only if you agree. You can change your choice at any time in the Game's Settings under "Ad privacy options". On Android, you can also reset or delete your advertising ID in your phone's settings. For how Google uses this data, see https://policies.google.com/technologies/partner-sites
If you send feedback (optional):
• The message you write and its type (bug, idea or other), sent only when you press Send in Settings → Send Feedback. To help us understand bug reports, it also includes the Game's version, your device model, your Android or iOS/iPadOS version, your level, the number of boxes you have opened, the time it was sent, and your player ID. Feedback is private: only the Developer can read it.
Stored on your device:
• Your game save, settings and preferences are stored locally on your device. Without an account, they are never sent to our servers and are lost if you uninstall the Game. With an account, a copy of your save is also stored on our server (see above); your settings, such as sound and language, always stay only on your device.
We do not collect your precise location, contacts, photos, or other sensitive data. The Game contains no analytics SDKs. The only advertising SDK is Google AdMob, described above.
We process the data above on these bases:
• Contract — providing the account and online save you asked for when creating an account, and delivering the items you buy.
• Legitimate interests — running the Game's public leaderboard, which is part of the game; checking purchases and keeping purchase records to prevent fraud; and showing a non-personalised rewarded ad when you ask to watch one. You can object to the leaderboard at any time by turning off "Show me on the leaderboard" in Settings.
• Consent — when you choose to send us feedback, and for personalised ads, given through Google's consent form. You can ask us to delete your feedback at any time (see Section 6), and you can withdraw your ads consent at any time in Settings under "Ad privacy options".
We do not sell your data. It is processed only by Google Firebase (sign-in, database and the purchase check), which makes the Game's online features work, under Google's terms and Privacy Policy. Payments are processed by Google Play on Android and by the Apple App Store on iPhone and iPad, each under its own terms. If you choose to watch an ad, Google AdMob receives the data described in Section 2 and uses it under its own terms to show the ad and, if you consented, to personalise it.
Leaderboard nicknames and statistics are, by design, visible to other players of the Game.
• Local data stays on your device until you use "Reset progress" in the Game's Settings or uninstall the Game.
• Your account, its email address and your online save are kept until you delete your account.
• Your leaderboard entry is kept while "Show me on the leaderboard" is on, and is deleted when you turn it off or delete your account.
• Purchase records are kept for up to 5 years, also after you delete your account, to prevent fraud and as a record of the sale. They contain no email address and no name.
• Feedback messages are kept for up to one year, after which we delete them.
• We do not keep any ad data. Data received by Google AdMob is kept by Google according to its own Privacy Policy.
Under the GDPR you have the right to access, correct, or delete your personal data, to object to or restrict its processing, and to data portability.
• To delete your account, its email address, your online save, your leaderboard entry and your nickname, open the Game and use Settings → Account → Delete account. If you signed in with Apple, deleting your account also revokes the Game's access to your Apple ID; you can check this in your iPhone's Settings under Sign in with Apple.
• To remove your nickname and statistics from the leaderboard without deleting anything else, turn off Settings → "Show me on the leaderboard" in the Game.
• To make any other data request — for example, to delete your account without the Game, or to delete feedback you sent — email us at tutifruti.dev@gmail.com, from your account's email address if you have one, and we will action it.
You also have the right to lodge a complaint with the Slovak data protection authority (Úrad na ochranu osobných údajov Slovenskej republiky).
The Game is not directed to children. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us data, contact us at tutifruti.dev@gmail.com and we will delete it.
Data sent to our online services is encrypted in transit, and access to all stored data is restricted by server-side security rules: your online save can be read only by your own account, and feedback and purchase records cannot be read by any player. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
We may update this policy as the Game evolves. We will change the "Last updated" date above, and significant changes may be announced in the Game.
Tutifruti
Email: tutifruti.dev@gmail.com