Kraft Labs
Effective 2 September 2026 · Last updated 21 September 2026
This policy applies to every mobile game published by Kraft Labs ("we", "us"), including Zen Connect and Merge Fortune. It explains what our games collect, why, and what control you have over it. If anything here is unclear, write to us at thekraft.labs@gmail.com.
The short version. We never ask for your name, email or phone number. Zen Connect keeps your progress only on your device. Merge Fortune creates an anonymous guest account the first time you play and backs your progress up to our server, so it can be restored if something goes wrong; it also uses that account for in-game mail, gift codes and notifications. Beyond that, what leaves your device is advertising, crash and performance data, and purchase confirmations, handled by our service providers. You can turn off personalized advertising at any time, and ask us to delete your data.
Kraft Labs develops and publishes mobile games. For any privacy question or request, contact thekraft.labs@gmail.com. We aim to reply within 30 days.
Each of our games also carries its own Data Safety summary on its Google Play listing, describing exactly what that particular game collects. Where the listing and this policy differ in detail, the game's own Data Safety summary describes that game most precisely.
None of our games has a sign-up form. We never ask for your name, email address, phone number, postal address or photographs.
Zen Connect has no account of any kind.
Merge Fortune creates an anonymous guest account automatically the first time you play (through Unity Authentication). It is a random identifier, not linked to your name or any other account, and it lets our server keep a backup of your progress and deliver in-game mail and gifts to you. The guest account belongs to this installation: if you uninstall the game or change phones, the new installation gets a new guest account, and our support team can move your progress to it on request if you give us the Player ID shown in Settings.
The following is stored locally on your phone:
Your game progress — your board, level, currencies, items and everything you have built or collected.
Your settings — sound, music and notification preferences.
A randomly generated player identifier, used only so our support team can match your message to your device if you write to us. It is not linked to your identity.
Deleting the app removes this data from your phone. For Zen Connect it is stored only on your device, so we cannot recover it for you afterwards. For Merge Fortune a copy is also kept on our server — see section 3b.
Your game progress — a copy of your save (board, level, currencies, items, collections), uploaded when the game goes to the background and at most every five minutes while it changes, plus one backup copy per day for the last 7 days.
Your guest account identifier and the Player ID shown in Settings, the game version, and the time of each backup.
In-game mail and gift codes — letters sent to you, which ones you have claimed, and which gift codes you have redeemed.
Notification token — if notifications are allowed, a token that lets us send you notifications, your notification on/off setting, your time zone offset and your device language.
Purchase records — the order identifier, product and Google's confirmation for each purchase, which we check with Google to prevent fraud.
This data is stored with Google Cloud (Firebase) in the United States and is only reachable by our own server code and our team.
Our games use third-party services that collect data directly. We receive only aggregated reports, never a list of identifiable individuals. Not every game uses every service below.
Advertising (Zen Connect — Unity Ads) — advertising ID, IP address, device model and operating system, coarse location derived from IP, and ad interactions. Includes rewarded videos you choose to watch.
Advertising (Merge Fortune — Google AdMob) — advertising ID, IP address, device model and operating system, coarse location derived from IP, and ad interactions. Includes rewarded videos you choose to watch.
Crash reports and performance (all games — Firebase Crashlytics) — crash logs, device model, operating system version, app version, and a pseudonymous app instance identifier.
Gameplay analytics (all games — Firebase Analytics) — in-game events such as level reached and tutorial progress, tied to a pseudonymous identifier, not to you.
Purchases (all games — Google Play Billing) — purchase confirmation and order identifier. Payment details are handled entirely by Google Play; we never see or store your card or bank information.
Core device services (all games — Google Play Services) — standard services the app relies on to run and to verify its installation.
Game balance updates (Merge Fortune — Kraft Labs, hosted on Firebase Hosting) — your device requests a configuration file from our host. Standard server logs may record the IP address and time of the request.
Guest account (Merge Fortune — Unity Authentication) — creates and verifies the anonymous guest account described in section 2.
Game server and cloud save (Merge Fortune — Google Cloud / Firebase) — stores the data listed in section 3b.
Notifications (Merge Fortune — Firebase Cloud Messaging) — delivers notifications to your device using the notification token.
These providers handle data under their own terms: the Google Privacy Policy (policies.google.com/privacy), how Google uses information from apps that use its services (policies.google.com/technologies/partner-sites), and the Unity Game Player and App User Privacy Policy (unity.com/legal/game-player-and-app-user-privacy-policy).
If you are in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:
Consent — for personalized advertising. We ask before any personalized ad is shown, and you can change your answer at any time (see section 6).
Legitimate interests — for crash reporting, security, and understanding how our games are played, so we can fix and improve them. We use pseudonymous identifiers rather than identifying you.
Performance of a contract — for processing a purchase you have chosen to make.
Personalized advertising. If you are in the EEA or the UK, a consent prompt appears before advertising is shown. Where a game provides it, you can change that choice later in the game's own settings under Ad Preferences. Declining personalized ads does not remove ads; it means the ads you see are less relevant.
Your advertising identifier. This control works for every game and every provider. On Android you can reset or delete your advertising ID at any time, usually under Settings → Privacy → Ads. Deleting it stops apps, including ours, from receiving it.
Notifications. Notifications are optional and stay off until you allow them. You can turn them off entirely, or switch off individual types where a game offers that, in the game's settings or in your phone's own app settings.
Deleting your data. In Merge Fortune, open Settings → Contact Support and write "DELETE" (your Player ID is filled in for you), or follow the steps at https://mergefortune.web.app/account-deletion. We delete your cloud save and its backups, your mail, gift-code records, notification token and guest account within 30 days and confirm by email. Purchase records are kept for tax, accounting and fraud-prevention purposes as described in section 9. For Zen Connect, uninstalling the app deletes your progress; for data held by our providers, email thekraft.labs@gmail.com with the game name.
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting processing already carried out. You also have the right to complain to your local data protection authority.
If you are a California resident, you may request access to or deletion of your personal information, and you may opt out of the "sale" or "sharing" of personal information. Showing personalized advertising may count as "sharing" for cross-context behavioural advertising under the CPRA; declining personalized ads, or resetting your advertising identifier as described in section 6, is how to opt out. We do not sell personal information for money.
To exercise any of these rights, write to thekraft.labs@gmail.com. We will not treat you differently for making a request.
Our games are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact thekraft.labs@gmail.com and we will delete it.
Data on your device stays until you delete the app. Merge Fortune's cloud save and its 7 daily backups, mail and gift-code records, and notification token are kept while you play, and deleted when you ask us to (section 6) or after 24 months without any activity. Crash and analytics data held by our providers is retained according to their retention settings, which do not exceed 14 months for event data. Purchase records are kept as long as required for tax and accounting purposes. Server request logs are kept for a short operational period and then discarded.
The service providers named in section 4 operate globally, so data may be processed outside your country, including in the United States. They rely on the European Commission's Standard Contractual Clauses and other approved safeguards for such transfers.
Connections between our games and our services use HTTPS. Merge Fortune's server data is stored in a database that the game itself cannot read or write directly: only our server code, which checks your guest account's signed token on every request, can reach it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We will update this page when our games change what they collect, or when a new game is released that collects something different. The "last updated" date at the top always reflects the current version. If a change is significant, we will make it visible in the game before it takes effect.
Kraft Labs
thekraft.labs@gmail.com