Privacy Policy
2. What we collect
3. Information we receive from PayPal
4. Identity verification (if requested)
5. Why we use it (lawful basis)
6. Who we share it with
7. International transfers
8. How long we keep it
9. Age
10. Your rights
11. Changes
12. Contact
1. Who we are
MAOZLY LTD, a company registered in England and Wales (company number 16542151), registered office 4 Purcells Avenue, Edgware, London HA8 8DT, United Kingdom, is the data controller for the games published by Glee Games (currently Block Chill, Bubble Bunny, Cake Craze, Link Life, Potion Sort, Solitaire Secret and Word Winner), for the player programs operated by MAOZLY LTD — including where they run inside partner apps — and for this website. Contact: hello@gleegames.co.
2. What we collect
| Information | Why | Source |
|---|---|---|
| Player ID that our servers assign to you, your game progress and settings and, if you take part in a player program, your program balance and payment history | Run the games, keep your progress, keep one player profile across our games, run the programs | Our games, our player programs |
| Device identifiers: the Android ID our app sees, the App Set ID and an ID our app creates on install | Recognise your device, link your player profile, prevent multiple accounts, cheating and fraud | Our games, our player programs |
| Device and app information (manufacturer, model, operating system and version, app name and version, screen size and density, network type) | Run the apps, fix bugs, make the games work on your device | Our games, our player programs, PostHog |
| Advertising identifier | Show ads in our games and measure them | Google AdMob and the ad networks that work through it; also recorded with our analytics events |
| Your ad consent choices | Respect your choice on personalised ads | Google's consent tool in our games |
| App interactions and gameplay (app opened and closed, sessions, games and levels played and finished, ads shown and their estimated value to us) | Measure and improve the games, find bugs, balance difficulty, run the programs | Our games, our player programs, PostHog |
| Player name and avatar you choose, and your scores, in games with leaderboards | Show you and other players on the leaderboards | You, our games |
| IP address (approximate location) | Check you are in a country where a game feature or program is offered, prevent fraud, approximate country and city for analytics | Our services, our advertising and analytics providers |
| Device integrity signals | Detect modified apps, emulators and automated play | Google Play Integrity |
| Name and email address, when you request a payment under a player program | Send your payment and contact you about it | You |
| PayPal email address, PayPal account ID (payer ID), account verification status and account country, if you connect PayPal (see section 3) | Send payments to your PayPal account, check that PayPal payments are offered in your country, prevent fraud and duplicate payments | PayPal, with your permission |
| Selfie and face-scan data, only if you are asked to verify your identity (see section 4) | Confirm you are a real person and prevent fraud | You, through our identity-verification provider |
| Messages you send us | Reply to you | You |
We never collect payment card or bank details, precise (GPS) location, contacts, your phone's IMEI or MAC address. We collect a photo of you only if you are asked to complete identity verification (section 4).
3. Information we receive from PayPal
If you connect your PayPal account using Log in with PayPal, PayPal shares with us, with your permission, your PayPal email address, your PayPal account ID (payer ID), whether your PayPal account is verified, and the country of your PayPal account. We use this information only to identify the PayPal account you chose, send to it the payments we may make to you under our player programs, check that PayPal payments are offered in your country, and prevent fraud and duplicate payments, and for no other purpose. We do not receive your PayPal password or any of your financial details, such as card or bank account numbers.
We keep your PayPal email address, verification status and account country only while PayPal is connected to your account. We do not keep PayPal access tokens after we have read this information. After you disconnect or delete your account, we keep only your payer ID and the payment amount and date inside your payment records, for as long as UK tax and accounting law requires (normally six years after the end of the financial year of the payment), and then delete them.
You can disconnect PayPal at any time in the app or in your PayPal account settings, where PayPal lists the apps you have connected. After you disconnect, we stop receiving information from PayPal and delete your PayPal email address; we keep your payer ID only inside the records of payments already made. You can also ask us to delete the PayPal information we hold by emailing hello@gleegames.co.
We do not sell, rent or share the information PayPal gives us. We disclose it only to PayPal, to send your payment, and to service providers that process it on our behalf under contract. Where a player program runs inside a partner app, the partner app operator acts only as our service provider for PayPal information and may not use it for its own purposes.
We protect PayPal information with encryption in transit and at rest, keep it on our own cloud infrastructure, and limit access to the people who need it to run payments and prevent fraud. We never show your PayPal email address or other PayPal account details to other users.
4. Identity verification (if requested)
To prevent fraud, we may ask you, usually before your first payment under a player program, to take a selfie with your device's camera so that an automated face scan can confirm you are a real person. When this is used, we collect the selfie and the face-scan data created from it (a face template), together with the result of the check. We use this data only to confirm you are a real person and to prevent fraud. We never use it for advertising, and we do not sell or share it except with the identity-verification provider that processes it on our behalf.
Selfie and face-scan data are deleted within 30 days of the verification decision, unless an investigation into fraud or misuse of that account is open, in which case we keep them only until the investigation ends. We keep the result of the check (passed or failed, and its date) with your account records. We ask for your explicit consent before any scan. You can decline, although you may then be unable to receive a payment.
5. Why we use it (lawful basis)
| Use | Lawful basis |
|---|---|
| Run the games, keep your progress, show leaderboards, run the player programs and send payments | Performance of our contract with you |
| Show non-personalised ads | Legitimate interest in funding free games |
| Show personalised ads | Your consent where required (UK, EEA, Switzerland) |
| Measure and improve the games | Legitimate interest |
| Prevent fraud, cheating and abuse | Legitimate interest and legal obligation |
| Keep payment records | Legal obligation |
| Identity verification (face scan) | Your explicit consent |
| Marketing messages | Your consent (opt-in) |
Messages we send you. Messages about your account and the delivery of your payments are transactional, and we send them as part of running the programs. We send marketing or other non-transactional messages only if you have separately opted in to receive them, and you can withdraw that consent at any time using the unsubscribe link in the message or by emailing hello@gleegames.co. We never use the email address PayPal shares with us for marketing unless you have opted in.
6. Who we share it with
- Advertising: Google AdMob and the ad networks that work through it, which receive your advertising identifier, device information, IP address and ad interactions. Consent for personalised ads is collected with Google's consent tool. You can reset your advertising ID or opt out of ads personalisation in your Android settings, and change your consent choice from the game's privacy options where shown.
- Analytics: PostHog (United States), which receives the app interactions, device and app information, advertising identifier and IP address described in section 2.
- Fraud prevention: Google Play Integrity, and an identity-verification provider for face scans (section 4).
- Payments: PayPal, and any other payment provider shown in the app, which receive only the details needed to send your payment. PayPal receives the PayPal account we pay, the amount and a payment reference. PayPal is one of the methods we use to make payments. It is not a sponsor of, or affiliated with, our player programs. PayPal processes your data as an independent controller under its own Privacy Statement.
- App distribution: Google Play, which delivers our games and updates under Google's own privacy policy.
- Hosting and infrastructure: Google Cloud for our game servers, DigitalOcean for this website, Google Workspace for email.
- Other players: your player name, avatar and scores on leaderboards. We never show other players your device identifiers, email address or payment details.
- Authorities: where the law requires it.
We do not sell personal information. Sharing an advertising identifier for personalised ads may count as "sharing" under some laws, such as California's; you can opt out in your device settings or by contacting us.
7. International transfers
Our providers may process data in the United States and other countries. We rely on UK and EU safeguards such as adequacy decisions, the UK International Data Transfer Agreement and EU Standard Contractual Clauses.
8. How long we keep it
- Player profile and game data: while you play, then for a limited period after your last play, or until you ask us to delete it.
- Analytics events: for a limited period, to measure and improve the games, and then deleted or kept only in aggregated form.
- Payment records: for as long as accounting law and fraud checks require.
- PayPal information: email address, verification status and account country only while PayPal is connected; no PayPal access tokens are kept; after you disconnect or delete your account, only your payer ID and the payment amount and date, inside your payment records, for as long as UK tax and accounting law requires (section 3).
- Selfie and face-scan data: deleted within 30 days of the verification decision, unless an investigation is open (section 4).
- Emails: as long as needed to deal with your question.
- Data kept after deletion: if you delete your account, we delete your player profile, player name, avatar, scores and history, but keep the payment records and fraud checks the law or fraud prevention requires, for the period those duties require.
Deleting your data. Uninstalling a game removes the data it keeps on your device. To delete your player profile and the data linked to it on our servers, email hello@gleegames.co with the subject "Delete my game data", as explained at gleegames.co/delete. If you take part in a player program, you can also delete your account in the app where the program runs, where that option is shown.
9. Age
Our games and player programs are for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has used them, contact us and we will delete their data.
10. Your rights
In the UK and EU you can ask to access, correct, delete or move your data, object to some uses, and take back your consent at any time. California residents can ask to know, correct or delete their personal information, and opt out of its sale or sharing (we do not sell it); we will not treat you differently for using these rights. Email hello@gleegames.co. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local regulator.
11. Changes
We will post updates here and give reasonable notice in the app for material changes. The current version is always at gleegames.co/privacy.
12. Contact
MAOZLY LTD (Glee Games)
4 Purcells Avenue, Edgware, London HA8 8DT, United Kingdom
Questions and privacy requests: hello@gleegames.co
Legal notices: legal@gleegames.co