Privacy Policy
1. Who is responsible
Karotto is published by Alora Games (Alan Rocha, an individual, Brazil). Contact for privacy matters: support@aloragames.com.
2. What data the game uses
- Progress and preferences (completed games, stars, hints, chocolate eggs, sound and settings): stay on your device. If you use Save your progress (Google or Apple account) or iCloud (iPhone), a copy of your progress is also kept in those services (on our server, for the account) so you can recover it on another device. The game only uses your e-mail, verified by Google or Apple, to recognize that copy.
- Player ID and support data: the game creates a random code (for example KR-7H3F-92QX) that does not depend on your e-mail, and sends it to our server from time to time together with your device's country and language, play time, current level, stars, platform and app version. We use this only to help you when you contact support (the ID goes in the "Contact us" e-mail) and to improve the game. You can turn this off in Settings › Privacy and purchases › Support data, and Erase my data or Delete my account remove your e-mail and what identifies the device (language and time zone).
- Ads: the game shows third-party ads (Google AdMob). These services may collect the device's advertising identifier, IP address, device information and ad interaction data to show, measure and prevent fraud in ads.
- Purchases: are processed by Google Play or the App Store. We do not receive your payment details.
3. Personalized ads
Before the first ad, iPhone asks whether the app may track your activity (App Tracking Transparency) and, where the law requires it, Google shows a consent form. You can review this choice at any time in Settings › Privacy and purchases › Ad privacy options and in your device settings. You can also reset or limit the advertising identifier in your device settings.
4. Children
The game is suitable for all ages. We do not knowingly collect personal data from children. The ads shown should be suitable for all audiences. Parents and guardians can ask questions at the e-mail above.
5. Your rights (LGPD and GDPR)
You can ask for confirmation of processing, access, correction, deletion of data, information about sharing, and withdraw consent. In the app, use Settings › Privacy and purchases › Erase my data to delete everything the game stores on the device, including the iCloud copy (iPhone), and, if an account is linked, the account too. To delete only the account, use Settings › Privacy and purchases › Account › Delete my account: the progress backup, e-mail and sessions are deleted from our servers and you are signed out on all devices — in that case the iCloud copy is not affected, and stays in your Apple account, managed by you. For data held by ad providers, see their policies or contact us. If you are in Europe, you also have the GDPR rights (access, rectification, erasure, portability and objection) and can complain to the data protection authority of your country.
6. Sharing
We do not sell data. Ad data is processed by the ad providers mentioned above.
7. Where data is stored
The game server (account backup and support data) is hosted with a provider in the United States, and the connection goes through Cloudflare's network. When you use these features, your data is processed outside your country, with the security measures described below.
8. Retention and security
Game data stays on the device until you delete it or uninstall the app. We take reasonable precautions, but no system is completely secure.
9. Changes to this policy
We may update this policy. The update date appears at the top.