Privacy Policy

CatMerge ("the Game") is developed and published by Juan Diego Duque Muñoz, an individual developer operating as Coddifica in Colombia ("we", "us"). We are the data controller for the personal data described here.

You can reach us at [email protected].

This policy covers the Android and iOS versions of the Game.

CatMerge is intended for players aged 13 and over. In the European Economic Area, the United Kingdom, and other regions with a higher digital-consent age, players under 16 should only play with the consent of a parent or guardian.

We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it. If you believe a child under 13 has given us data, write to [email protected].

Data you give us

• A display name you choose — shown on leaderboards and in your profile
• Messages you send us for support — so we can answer you

We do not ask for your real name, postal address, phone number or date of birth, and we never see or store your payment card details.

Data generated by playing

• Game progress, scores, levels, in-game currency and items — to save your progress and sync it across devices
• A pseudonymous player identifier — to link progress to your account
• Purchase status, for example whether ads are removed — to deliver what you paid for and restore it after reinstalling

Data collected for advertising

CatMerge shows ads through Yodo1 MAS, a mediation platform. Mediation means Yodo1 routes each ad request to one of several advertising networks it works with — currently including partners such as Google AdMob, AppLovin, Unity Ads, ironSource and Meta Audience Network. That set can change over time.

Yodo1 and the network serving a given ad may collect and process:

• Advertising identifiers — your Google Advertising ID on Android, or Identifier for Advertisers (IDFA) on iOS
• IP address, and the approximate location (country, region or city level) inferred from it
• Device and technical information — model, operating system version, language, screen size, network type, time zone
• Ad interaction events — which ads were requested, shown, clicked or completed, plus basic diagnostics about ad delivery

This is used to deliver ads, measure them, limit how often you see the same one, detect ad fraud, and — where you have consented or local law allows — personalise what you see.

Yodo1's privacy policy: yodo1.com/privacy

Data from the app stores

Google and Apple give us aggregate, non-identifying statistics about installs, crashes, ratings and revenue, and they confirm to the Game that a purchase is valid. They act as merchant of record — your payment method and billing details stay with them, under their own policies: Google · Apple.

For players in the EEA, the UK and other regions with equivalent law, our legal bases under the GDPR are:

• Running your account, saving and syncing progress, leaderboards — performance of a contract, Art. 6(1)(b)
• Delivering and validating in-app purchases — performance of a contract, Art. 6(1)(b)
• Answering your support requests — contract or legitimate interests, Art. 6(1)(b), (f)
• Non-personalised ads, frequency capping, fraud prevention, security — legitimate interests, Art. 6(1)(f), and consent where required to access information on your device
• Personalised ads and related profiling — consent, Art. 6(1)(a)
• Meeting legal obligations — legal obligation, Art. 6(1)(c)

You can withdraw consent at any time — see Your ad choices.

• Yodo1 and its mediation partners, for the advertising purposes above
• Google and Apple, for account services, cloud save, leaderboards and payment processing
• Cloud hosting providers that store save data on our instructions
• Authorities or third parties, where we are legally required to disclose, or where necessary to establish or defend legal claims

We do not sell your personal data for money. Under some U.S. state privacy laws, sharing device identifiers with advertising partners for cross-context behavioural advertising counts as a "sale" or "share" — see Your rights for how to opt out.

In the Game. On first launch in regions that require it, you'll see a privacy prompt where you can accept or decline personalised advertising. Change it later under Settings.

On Android. Settings → Privacy → Ads lets you reset your advertising ID or delete it entirely. Deleting it stops advertisers receiving an identifier from your device.

On iOS. Settings → Privacy & Security → Tracking lets you turn tracking off for all apps or for CatMerge alone. If you decline the App Tracking Transparency prompt, your IDFA is not made available to advertisers.

Removing ads. You can buy the ad-removal option in the Game. That stops ads being shown; it does not by itself change what the store platforms collect.

Declining personalised ads doesn't stop ads — you'll see non-personalised ones instead, and limited data is still processed to deliver and measure them.

• Account and save data — while your account is active, and up to 90 days after you ask us to delete it
• Purchase records — as long as tax, accounting and refund rules require, typically up to 5 years
• Support correspondence — up to 24 months
• Advertising data held by Yodo1 and its partners — per their own retention policies

EEA, UK and comparable jurisdictions

You have the right to access, correct, delete, restrict or object to our processing of your personal data; the right to data portability; and the right to withdraw consent at any time. You may also complain to your local data protection authority.

California and other U.S. states

You have the right to know what personal information is collected and who receives it, to delete it, to correct it, and to opt out of its sale or sharing for cross-context behavioural advertising. Decline the personalised-ads prompt in the Game, or email us, to opt out. We will not treat you differently for exercising these rights.

Colombia

Under Ley 1581 de 2012 and Decreto 1377 de 2013 you have the rights of habeas data: to know, update and rectify your personal data; to request proof of the authorisation you gave; to be informed of how it is used; to complain to the Superintendencia de Industria y Comercio; to access it free of charge; and to revoke your authorisation or request deletion where processing is not legally required.

How to exercise them

Email [email protected] from the address linked to your account, or use the in-game option below. We reply within the time applicable law requires — generally 30 days, and 15 business days for consultations and claims under Colombian law.

You can delete your CatMerge account and its data at any time:

• In the Game — Settings → Account → Delete Account
• On the web — coddifica.com/delete-account
• By email — [email protected]

Deleting your account removes your save data, display name, leaderboard entries and player identifier. We keep purchase and transaction records where tax and accounting law requires. Data already collected by advertising partners has to be requested from them directly.

We and our service providers may process your data in countries other than your own, including the United States and the European Union. Where data leaves the EEA or the UK, transfers are made under an adequacy decision or Standard Contractual Clauses. Ask us at [email protected] for details.

We encrypt data in transit between the Game and our services (HTTPS/TLS), restrict access to save data, and rely on the platform security of Google Play and Apple. No system is perfectly secure, and we can't guarantee absolute security.

We may update this policy. When we do, we change the date at the top, and for material changes we notify you in the Game before the change takes effect. Continuing to play after that means you accept the updated policy.

Questions about this policy, or about your data, go to the same place: