Kraft Labs
Effective 2 September 2026 · Last updated 2 September 2026
This policy applies to every mobile game published by Kraft Labs (“we”, “us”), including Zen Connect and Merge Fortune. It explains what our games collect, why, and what control you have over it. If anything here is unclear, write to us at thekraft.labs@gmail.com.
The short version. Your game progress stays on your device — we do not upload it and we cannot see it. We do not ask for your name, email, or account. What does leave your device is limited to advertising, crash and performance data, and purchase confirmations, all handled by our service providers. You can turn off personalized advertising at any time.
Kraft Labs develops and publishes mobile games. For any privacy question or request, contact thekraft.labs@gmail.com. We aim to reply within 30 days.
Each of our games also carries its own Data Safety summary on its Google Play listing, describing exactly what that particular game collects. Where the listing and this policy differ in detail, the game’s own Data Safety summary describes that game most precisely.
Our games have no sign-up, no login, and no user profile. We never ask for your name, email address, phone number, postal address, or photographs. You can play without giving us any personal detail directly. Should a future game offer an optional account or cloud save, we will update this policy before that game is released.
The following is stored locally on your phone and is not transmitted to us or anyone else:
Your game progress — your board, level, currencies, items and everything you have built or collected.
Your settings — sound, music and notification preferences.
A randomly generated player identifier, used only so our support team can match your message to your device if you write to us. It is not linked to your identity.
Deleting the app, or resetting your progress from inside the game where that option exists, removes this data. Because it is stored only on your device, we cannot recover it for you afterwards.
Our games use third-party services that collect data directly. We receive only aggregated reports, never a list of identifiable individuals. Not every game uses every service below.
Advertising (Zen Connect — Unity Ads) — advertising ID, IP address, device model and operating system, coarse location derived from IP, and ad interactions. Includes rewarded videos you choose to watch.
Advertising (Merge Fortune — Google AdMob) — advertising ID, IP address, device model and operating system, coarse location derived from IP, and ad interactions. Includes rewarded videos you choose to watch.
Crash reports and performance (all games — Firebase Crashlytics) — crash logs, device model, operating system version, app version, and a pseudonymous app instance identifier.
Gameplay analytics (all games — Firebase Analytics) — in-game events such as level reached and tutorial progress, tied to a pseudonymous identifier, not to you.
Purchases (all games — Google Play Billing) — purchase confirmation and order identifier. Payment details are handled entirely by Google Play; we never see or store your card or bank information.
Core device services (all games — Google Play Services) — standard services the app relies on to run and to verify its installation.
Game balance updates (Merge Fortune — Kraft Labs) — your device requests a configuration file from our host. Standard server logs may record the IP address and time of the request.
These providers handle data under their own terms: the Google Privacy Policy, how Google uses information from apps that use its services, and the Unity Game Player and App User Privacy Policy.
If you are in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:
Consent — for personalized advertising. We ask before any personalized ad is shown, and you can change your answer at any time (see section 6).
Legitimate interests — for crash reporting, security, and understanding how our games are played, so we can fix and improve them. We use pseudonymous identifiers rather than identifying you.
Performance of a contract — for processing a purchase you have chosen to make.
Personalized advertising. If you are in the EEA or the UK, a consent prompt appears before advertising is shown. Where a game provides it, you can change that choice later in the game’s own settings under Ad Preferences. Declining personalized ads does not remove ads; it means the ads you see are less relevant.
Your advertising identifier. This control works for every game and every provider. On Android you can reset or delete your advertising ID at any time, usually under Settings → Privacy → Ads. Deleting it stops apps, including ours, from receiving it.
Notifications. Notifications are optional and stay off until you allow them. You can turn them off entirely, or switch off individual types where a game offers that, in the game’s settings or in your phone’s own app settings.
Deleting your data. Because your progress lives only on your device, uninstalling the app or resetting your progress deletes it. For data held by our providers on our behalf, email thekraft.labs@gmail.com and include the game name and, where the game shows one, the player identifier from its settings screen, so we can locate the correct records.
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting processing already carried out. You also have the right to complain to your local data protection authority.
If you are a California resident, you may request access to or deletion of your personal information, and you may opt out of the “sale” or “sharing” of personal information. Showing personalized advertising may count as “sharing” for cross-context behavioural advertising under the CPRA; declining personalized ads, or resetting your advertising identifier as described in section 6, is how to opt out. We do not sell personal information for money.
To exercise any of these rights, write to thekraft.labs@gmail.com. We will not treat you differently for making a request.
Our games are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact thekraft.labs@gmail.com and we will delete it.
Data on your device stays until you delete the app or reset your progress. Crash and analytics data held by our providers is retained according to their retention settings, which do not exceed 14 months for event data. Purchase records are kept as long as required for tax and accounting purposes. Server request logs are kept for a short operational period and then discarded.
The service providers named in section 4 operate globally, so data may be processed outside your country, including in the United States. They rely on the European Commission’s Standard Contractual Clauses and other approved safeguards for such transfers.
Connections between our games and our services use HTTPS. We hold no database of user accounts, because we do not create accounts — which removes an entire category of risk. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We will update this page when our games change what they collect, or when a new game is released that collects something different. The “last updated” date at the top always reflects the current version. If a change is significant, we will make it visible in the game before it takes effect.
Kraft Labs
thekraft.labs@gmail.com