Privacy Policy
Gobblet Gobblers 3D
Last Updated: October 21, 2026
1. Introduction
Welcome to Gobblet Gobblers 3D ("the Game"), available on iOS (App Store) and Android (Google Play). The Game is developed by Mahmoud Khairy, an independent developer based in Egypt, who is responsible for the information described in this policy. We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.
2. Information We Collect
2.1 Information You Provide
| Data | Purpose |
|---|---|
| Display Name & Avatar | Shown to other players in matches, friends lists and leaderboards |
| Chat Messages (match chat and direct messages) | In-game communication. An automatic word filter runs on your device. |
| Reports & Blocks | Community safety. A report stores who reported whom, the reason and a copy of the reported content (for a direct-message report, up to the last 20 messages of that conversation from the last 30 days) so it can be reviewed. |
| Support Emails | Answering you. The pre-filled email from Settings → Contact Support includes the app version and your player ID; you can edit it before sending. |
2.2 Account & Sign-In
- Guest: an anonymous account ID is created so you can play online. No name or email.
- Sign in with Apple (iOS): we receive a stable Apple user ID and the email address Apple shares with us, which may be a private relay address. Apple may also share your name; we do not store it. We keep an Apple-issued token only so the Game's access to your Apple ID can be revoked when you delete your account.
- Google Sign-In (Android): we receive your Google account ID and email address, which we use to identify your account and keep your progress across devices. We do not use your Google name, and we do not receive your password or your contacts.
2.3 Automatic Collection
| Data | Purpose |
|---|---|
| Game Statistics & Match Results | Leaderboards, matchmaking and daily tasks |
| Coins, Items & Wallet Transactions | Keeping your balance and inventory correct |
| Purchase Records (store transaction ID, product, platform, date and status) | Delivering and restoring purchases and handling refunds. Payments are processed by Apple or Google; we never see your card details. |
| Approximate Country | Looked up from your IP address through ipinfo.io (or ipapi.co as a fallback). We store only the two-letter country code, shown as a flag on the leaderboard. We do not store your IP address. |
| Push Notification Token | Notifying you of new messages |
| Usage Analytics (Google Firebase Analytics) | Understanding how the Game is used and how ads perform: app and screen events, ad events, device model, OS version and an app-instance identifier. Not linked to your account ID. |
| Advertising Identifiers (Apple IDFA with your permission; Android Advertising ID) | Ads served and measured by Google AdMob (see section 4) |
| Crash & Error Logs | Diagnosing crashes and fixing bugs |
Crash and error reports describe the technical failure: the error message, the stack trace, the app version, the device's operating system and browser-engine version, and which screen was open. They are automatically scrubbed of email addresses, account identifiers and access tokens before they leave your device, they do not include your name, your account ID or a device ID, and our crash reporting provider is instructed not to store IP addresses.
Voice chat (Squad Party): live audio between squad members, only after you tap the microphone button. It is never recorded or stored. Voice travels directly between devices (peer-to-peer), so squad members' devices can see each other's IP address; when a direct connection is not possible it is relayed through Cloudflare. Local (LAN) play finds games on your own Wi-Fi network and stays on that network.
3. How We Use Information
- Enable online multiplayer, matchmaking, friends, chat and voice
- Process in-app purchases and virtual currency
- Display ads via Google AdMob, including rewarded ads you choose to watch
- Track daily tasks and rewards
- Prevent cheating, fraud and abuse, and review reports
- Detect, diagnose and fix crashes and errors
- Improve game performance and features
If you are in the EEA or UK, we rely on: performance of our contract with you (providing the Game); legitimate interests (security, anti-abuse, analytics and fixing crashes); your consent (personalized ads); and legal obligations (purchase and tax records).
4. Advertising, Consent & Tracking
- EEA, UK and Switzerland: Google's consent form asks for your choice, and ads stay non-personalized until you consent. You can change your choice at any time in Settings → Privacy Options.
- iPhone: Apple's App Tracking Transparency prompt asks for your permission before the advertising identifier can be used. If you decline, Apple does not share it.
- Android: you can reset or delete your Advertising ID in your device settings.
5. Information Sharing
We do NOT sell your personal information. We share data with these service providers, who process it on our behalf:
| Provider | Service | Privacy |
|---|---|---|
| Supabase | Backend/Database, sign-in, real-time play (EU - Ireland) | Policy |
| AdMob (ads & consent), Firebase Analytics, Firebase Cloud Messaging (notifications), Google Sign-In, Google Play Billing, Google Fonts | Policy | |
| Apple | Sign in with Apple, App Store payments, push notifications (APNs) | Policy |
| Cloudflare | Delivering message notifications, voice-chat connection and relay | Policy |
| Sentry | Crash & error reporting (EU - Germany) | Policy |
| ipinfo.io / ipapi.co | Approximate country from IP address | Policy / Policy |
Other players can see your display name, avatar, country flag, game statistics and the messages you send them. Squad members hear you while your microphone is on.
5.1 Refund requests on the App Store (iPhone & iPad)
When you ask Apple for a refund of an in-app purchase (coins or Remove Ads), Apple may ask us whether the purchase was delivered and used. Only with your permission, we answer Apple with: whether the purchase was delivered, what percentage of the coins in that pack was used, whether a free sample was offered, and our refund preference, identified by the purchase's transaction number. Apple uses this information only to decide your refund request and keeps it under its own privacy policy (privacy.apple.com). We ask for this permission in the app after your first successful coin purchase on iOS; you can choose Don't Allow and nothing is shared. If you choose Don't Allow, we may ask once more after 30 days and never again after that. You can change your choice at any time in Settings → Privacy Options. This is unrelated to advertising or tracking.
6. Notifications
A new-message notification shows the sender's display name and a short preview of the message (up to 80 characters, word-filtered). To deliver it, the preview passes through Cloudflare, Google Firebase Cloud Messaging and, on iPhone, Apple Push Notification service. You can turn notifications off at any time in your device settings.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account Data | Until you request deletion |
| Game Statistics | Until you request deletion |
| Chat Messages, Reports & Blocks | Until you request deletion |
| Purchase Records | As long as needed to restore purchases, handle refunds and meet tax and accounting obligations |
| Crash & Error Logs | Up to 90 days |
| Analytics | Up to 14 months (Google Analytics retention), then only aggregated reports |
| Ad View Records | Until you request deletion (removed from our live systems after the 48-hour waiting period) |
| Ad Request Records | 90 days (deleted automatically), or until you delete your account (removed from our live systems after the 48-hour waiting period) |
8. Your Rights
Delete Account: Settings → Profile → Delete Account, or email us.
Personalized Ads: change your choice in Settings → Privacy Options (EEA/UK), decline tracking on iPhone, or reset/delete your Advertising ID on Android.
Notifications: turn them off in your device settings.
Access Your Data: Contact us to request a copy of your data.
9. Children's Privacy
Gobblet Gobblers 3D is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately.
10. Data Security
We protect your data using:
- HTTPS/TLS encryption for all data transmission
- Secure sign-in with Apple and Google
- Row-level security in our database, so players can only reach their own data
- Server-side checks for coins, rewards and purchases, which are verified with Apple and Google
- Regular security audits
11. International Transfers
Your data may be processed in the European Union (Supabase - Ireland; Sentry - Germany) and in other countries including the United States (Google, Apple, Cloudflare). We rely on our providers' standard contractual safeguards for international transfers.
12. Contact Us
Email: Mahmoudkhiry74@gmail.com
In the Game: Settings → Contact Support
Developer: Mahmoud Khairy
13. GDPR Rights (EEA/UK)
If you are in the EEA or UK, you have the right to: access, rectify, erase, restrict, port, and object to your data processing, and to withdraw consent at any time. Contact us at Mahmoudkhiry74@gmail.com to exercise these rights; we reply within 30 days. You may also complain to your local data protection authority.
14. CCPA Rights (California)
California residents have the right to know, delete, correct, and opt out. We do NOT sell personal information. Personalized ads from Google AdMob may count as "sharing" for cross-context behavioral advertising; you can opt out on your device by declining tracking on iPhone or deleting your Advertising ID on Android.
15. Changes to This Policy
We will update this page and its date when this policy changes.
16. YouTube API Services
Our own marketing tools use YouTube API Services to upload short gameplay videos of the game to our own YouTube channel ("Gobblet Gobblers 3D Game") and to read the statistics of our own channel and videos (for example views, likes and views by country), and to read the comments people post on our own videos so we can answer them. These tools act only on our own channel and its videos: they do not access any other channel and they do not access any data about players of the game.
- By watching or interacting with our videos on YouTube, you are subject to the YouTube Terms of Service.
- YouTube is a Google service. Google's handling of data is described in the Google Privacy Policy.
- The access we granted to our own tools can be reviewed or revoked at any time on the Google security settings page.
- We do not store any YouTube data other than the IDs and basic statistics of our own videos, kept only to measure which of our videos people like, and the IDs of the comments we have answered (so we never answer the same comment twice). We do not store commenters' names or comment texts. Questions or deletion requests: Mahmoudkhiry74@gmail.com.
17. Install Source and Friend Invites
To learn which of our channels (for example a social media post or a friend's invite) brings new players, and to run the "invite a friend" reward, the game stores the following for your account:
- Install source (Android only): the campaign name that Google Play passes to the app when it was installed from one of our links (for example "invite" or the name of a post), the platform, and when the install and the link click happened. It is read from Google Play on your device, sent to our server only after you answer the consent message for ads and data (and only if that answer allows it), and stored once per account. It never contains an advertising ID or a device ID.
- Invites: who invited whom (by player code), when the invite was claimed, whether the invited player finished a first game, and the coins given to both players.
- This data is used only for these purposes, is not sold or shared with third parties, and is deleted when you delete your account (see "Data Retention").
18. Ad Views
When an ad is shown in the game, we record it with your account: the type of ad (interstitial or rewarded), the ad network that served it, the revenue the ad earned and its currency, where in the game it appeared, your platform (Android or iOS), the app version, and the time. We use these records to understand how the game earns and how players use ads, and to improve the game. They are not shared with advertisers and they contain no device identifiers or advertising IDs. They are kept with your account and deleted with it: when you delete your account, they are removed from our live systems after the 48-hour waiting period (see "Data Retention").
Ad requests. We also record what happens when the game asks for an ad, with your account: why the ad was requested (for example after a match), whether it loaded and how long that took, any error the ad network returned (for example "no fill"), whether it was shown and, if not, why not, how long a loaded ad had been waiting, and whether you left the "Looking for an ad" screen. We use these records to understand why ads do or do not appear and to improve how the game loads them. They contain no device identifiers or advertising IDs and are not shared with advertisers. They are not recorded if you have removed ads. They are deleted automatically after 90 days, or earlier if you delete your account (removed from our live systems after the 48-hour waiting period).