This Privacy Policy explains what information the Emoji Slap mobile app (the “App”) and the website at emojislap.com collect, how it is used, who it is shared with, and the choices and rights you have. The App and website are operated by Enigma Design Group Inc (“we,” “us,” or “our”), a company organized under the laws of Wyoming, USA. By using the App or the website, you agree to this Policy. See also our Terms and Conditions.

1. The Short Version

The App does not require an account, and we do not ask for your name, email, or login.
Your game progress and settings are stored on your device. We also keep an anonymous record of how the game is played: games played per mode, your best score in each mode, which codes you have unlocked, which pages you open, and which in-app item you bought. It is information about how the game is used, never about who you are.
That record is stored under an anonymous sign-in created automatically for your installation. It has no email address, no password, and no connection to your Apple ID. The App also generates a random 5-character code you can look up at any time. Neither is your name, your email, your Apple ID, or your device’s serial number, and neither is derived from anything about you or your phone. Their only job is to tell one installation apart from another so the counts do not all pile up together.
The App is free and supported by ads served through Google AdMob. Ads are the main way information about your device is collected.
The App also sends anonymous gameplay analytics and crash diagnostics to Google Firebase so we can keep it running and improve it. This is not linked to your name or an account.
On iOS, we ask permission before any advertising identifier is used to personalize ads. If you decline, you still see ads, just non-personalized ones.
We do not sell your personal information for money. If you allow tracking, certain advertising identifiers are “shared” for personalized ads as defined by California law, and you can opt out at any time (see Section 13).

2. Who This Policy Covers

This Policy covers the Emoji Slap App distributed through the Apple App Store and the informational website at emojislap.com. The App is intended for users aged 13 and over. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (see Section 10).

3. Information We Do Not Collect

We do not operate user accounts or logins for the App, and we do not ask for or collect your name, email address, phone number, or contacts through gameplay. The only time we ask for an email address is when you contact us, or use the request form on Your Privacy Choices, and then only so we can reply. See Section 7.
There is no login, no player profile, and no leaderboard carrying your name. Your settings and full game state live on your device, in local storage, with a copy of your progress kept in the iOS Keychain so it survives reinstalling the App. Deleting the App clears its local storage, but the Keychain copy remains on the device. That copy holds your unlocks, purchases, boss progress, and how many games you have played in each mode. Keeping it is deliberate, so that reinstalling gives you your progress back rather than a blank slate. iOS does not provide a per-app control for clearing it; it is removed if you erase the device.

This section is about identifying you. Separately, the App does serve ads, send anonymous analytics and crash diagnostics, and keep a limited anonymous gameplay record on our servers, as described in Sections 4 through 6. That record contains counts, best scores, whether any in-app purchase has been made, and basic technical details about the App and device. It never contains your name, email, or account, because we hold none of those.

4. Information Collected Through Advertising

The App displays ads using Google AdMob (provided by Google LLC). To serve and measure ads, the Google Mobile Ads SDK and its partners may collect:

Device and technical information (device model, operating system version, language, network, and coarse, region-level location derived from IP address).
Advertising and usage identifiers, including the Apple Identifier for Advertisers (IDFA) where you have allowed tracking, and Apple’s SKAdNetwork attribution signals.
Ad interaction data, such as which ads were shown, tapped, or completed.

This information is processed by Google to deliver, cap, measure, and (with your permission) personalize ads, and to detect invalid activity. For details, see Google’s Privacy Policy and how Google uses information from apps that use its services.

5. App Tracking Transparency (iOS)

Apple requires apps to ask permission before tracking you across other companies’ apps and websites. The App may present Apple’s App Tracking Transparency prompt. If you allow tracking, AdMob may use your IDFA to personalize ads. If you do not allow tracking, the App still works and still shows ads, but they are non-personalized. You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.

6. Analytics and Diagnostics

What we collect, and what we do not. It is worth separating two different things that happen in the same App. Section 4 describes what Google’s advertising system collects in order to show you ads; that is the part that involves advertising identifiers and tracking, and it is Google’s system, not ours. This section describes what we collect, and it is a much smaller and duller list: how the game is played, how well it ran, and what you bought in it. How many games were played and in which modes, what the best score was, which codes were unlocked, which menu pages and tabs you open, when the store or the ad-free offer is shown to you, which item you purchased, whether the App crashed, and how smoothly it ran. Nothing in it identifies you, because we do not have anything that could. There is no account, no login, no name, no email address, no phone number, and no password anywhere in Emoji Slap.

About the 5-character code. Because every installation sends its own counts, we need some way to tell them apart, otherwise every player’s games would add up into one meaningless pile. So on first launch the App generates a random 5-character code from letters and digits, for example K3P9Z. It is worth being precise about what that code is and is not:

It is randomly generated. It is not calculated from your name, your email, your Apple ID, your phone number, your device serial number, your IP address, or anything else about you or your hardware.
It is not personal information. It cannot be reversed into anything about you, because nothing about you went into making it.
It is not even guaranteed to be unique. Five characters gives roughly 60 million combinations, so two unrelated players can be issued the same code, and at scale some will be. It is a rough grouping label, not an identity. (The anonymous sign-in that the gameplay record is actually stored under is unique to your installation. It still carries no email, password, or Apple ID.)
You can look it up yourself. Open Settings, tap CODES, and enter USERID. The App will show you the code for this installation.
It is not the advertising identifier described in Section 4, and it is never given to advertisers or used to follow you into other apps or websites.
It does survive reinstalling the App, because it is kept in the iOS Keychain. That is deliberate, so a reinstalled copy keeps reporting under the same code rather than counting as a brand new installation. Your unlocks and progress survive a reinstall too, but for a separate reason and through their own separate Keychain copy, described in Section 3.

With that established, here is the limited anonymous information the App sends to Google Firebase (provided by Google LLC), which processes it on our behalf:

Usage analytics (Firebase Analytics, part of Google Analytics): anonymous gameplay events — for example when a game starts and ends, the game mode, your score and how long a round lasted, and how many games have been played. These events are not tied to your name or an account.
Crash and diagnostic data (Firebase Crashlytics): if the App crashes or hits an error, we receive a report that may include the device model, operating system version, and technical details about what went wrong, together with a random, app-generated identifier used only to group reports from the same installation. This identifier is not your name, email, or Apple ID, and is not used to track you across other apps or websites.
Performance data: the App reports how well it runs: memory use, device thermal state, whether Low Power Mode was on, frame rate and dropped frames during a round, how long the App took to launch, and whether iOS ever terminated it for using too much memory or becoming unresponsive. This is sent to Google Analytics for Firebase and is used only to find and fix performance problems.
Anonymous gameplay record (Google Cloud Firestore): the App keeps a single record per installation summarising how the game has been played. It contains: the number of games played in total and per mode, your best score in each mode, which mode you play most, which cheat, secret, and slap-skin codes you have unlocked, how many of each kind, and how often each was used, whether any in-app purchase has been made (but never which card, price, or billing detail), your app version, iOS version, and device language, and the random 5-character code described above. It does not contain your name, email, Apple ID, or any account, because the App has none.
Anonymous sign-in (Firebase Authentication): so that each installation can write only its own record and no one else’s, the App signs in automatically to an anonymous Firebase identity. This identity is created by Google without any email address, password, or connection to your Apple ID. It is the identifier the record above is stored under, and it is also what stops one installation from writing to another installation’s record.
In-app navigation and store activity: the App reports which menu and information pages you open and how you reached them, which tab you view inside a page, when the store is opened, when the ad-free offer is shown to you and whether you tapped through to the store, and, when you complete a purchase, which product you bought and how many games you had played at that point. This tells us which pages go unread and whether the offer is annoying people. It carries no payment information of any kind.

We use this information only to operate, fix, and improve the App. It is processed by Google on our behalf. For details, see Firebase’s privacy and security information and Google’s Privacy Policy.

7. Information You Send Us

If you email us, use the contact form on emojislap.com, or submit the request form on Your Privacy Choices, we receive the email address and message you provide so we can respond. On the privacy request form we also receive the 5-character installation code you enter, which is what lets us find the record you are asking about. That email address is used to confirm and carry out your request and for nothing else: it is never added to a mailing list, never attached to your gameplay record, and never sent to an advertiser. Contact-form submissions are delivered to us through Resend (our email provider). We use this information only to handle your request, not for marketing.

The App also includes an optional “Tell Us Why” feedback screen. If you choose to submit it, the reasons you select and any comment you type are sent to us through Google Cloud Firestore, along with your app version, iOS version, device language, and the random, app-generated installation identifier described in Section 6. As a backup, in case that send fails, the reasons you selected and the length of your comment (never its text) are also sent as a Google Analytics event. This feedback is submitted anonymously, is not linked to an account, and is used only to improve the App. Please do not include personal information in the comment box.

8. Website Information

The emojislap.com website is a static informational site hosted on Cloudflare Pages. It is separate from the game App, and each collects information independently.

Hosting (Cloudflare): Cloudflare automatically logs standard request metadata (such as IP address, requested URL, timestamp, and user-agent) for security and abuse prevention.
Website analytics (Google Analytics): the website uses Google Analytics 4 (provided by Google LLC) to measure aggregate traffic such as page views and general visitor trends. Google Analytics sets cookies and receives your IP address and basic usage information. This is separate from the in-App Firebase Analytics described in Section 6. You can opt out using your browser’s privacy controls or Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.
Web fonts: the fonts used on this website are served from our own servers, so viewing a page does not send your IP address to a font provider. The game App bundles its fonts in the same way.

The website does not display ads or set advertising cookies. We may link to our social media profiles (such as YouTube, Instagram, TikTok, and X); those are external sites governed by their own privacy policies.

9. How We Use Information

To provide, maintain, and improve the App and website.
To understand which modes and features are actually played, and which information pages go unread, so we know what to build next.
To find and fix crashes and performance problems, including on older devices.
To understand which in-app purchases players want, and whether the ad-free offer is shown too often.
To display and measure advertising that keeps the App free.
To respond to your support requests.
To protect against fraud and abuse and to comply with legal obligations.

10. Children’s Privacy

The App is rated for ages 13 and up and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at info@emojislap.com and we will delete it.

11. Who We Share Information With

Google (AdMob): to serve and measure ads. See Google’s Privacy Policy.
Google: Firebase Analytics (Google Analytics for Firebase), Crashlytics, Cloud Firestore, and Firebase Authentication for the App’s usage and performance analytics, crash reporting, the anonymous gameplay record, the anonymous sign-in that secures it, and optional in-app feedback; Google Analytics and Google Fonts for the website. See Firebase’s privacy information and Google’s Privacy Policy.
Apple: for App distribution, and, if you make a purchase, for payment processing. See Apple’s Privacy Policy.
Resend: to deliver contact-form and support emails to us.
Cloudflare: website hosting, DNS, and security.

We do not sell your personal information for money. When you allow tracking for personalized ads, the advertising information described in Section 4 is “shared” for cross-context behavioral advertising as defined by California law; see Section 13 for how to opt out.

12. Your Choices and Advertising Controls

Limit ad personalization: decline the App Tracking Transparency prompt, or turn off tracking in iOS Settings > Privacy & Security > Tracking.
Reset your advertising identifier in iOS settings at any time.
Remove local data: deleting the App clears its local storage, but does not clear the iOS Keychain copy of your progress. Your unlocks, purchases, boss progress, and how many games you have played in each mode are deliberately kept there so they survive reinstalling. iOS does not provide a per-app control for clearing that copy, so deleting the App does not remove it. Erasing the device (iOS Settings, General, Transfer or Reset iPhone, Erase All Content and Settings) removes it, along with everything else on the device.
Remove the server-side gameplay record: see Section 13. The App cannot delete it on its own, by design. The record is locked so that it can only be added to, never read back or erased from a device. Deletion is something we carry out for you.
Website analytics: opt out of Google Analytics on emojislap.com using your browser’s privacy settings or Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.

13. Your Rights

Depending on where you live, you may have some or all of the following rights regarding personal information: to access it, correct it, delete it, receive a copy, object to or restrict its use, opt out of “sale” or “sharing” / targeted advertising, and withdraw consent. The quickest route is the Your Privacy Choices page, which walks you through it and confirms your request by email immediately. You can also email info@emojislap.com with the subject “Privacy Request.” We respond within the period required by applicable law, and may need to verify your request first.

What deletion actually reaches, and what it does not. The data described in this Policy is held by several different companies, and we can only delete what we hold. Being precise about that is more useful to you than a blanket promise:

We delete: the anonymous gameplay record in Section 6, in full, and any feedback you sent through the App. Use the Your Privacy Choices page and include your 5-character code, which the App will show you if you open Settings, tap CODES, and enter USERID. We need that code because the record is filed under an anonymous sign-in and we hold no name or email to look you up by. The code is short on purpose and is not guaranteed to be unique, so if it matches more than one record we will email you and ask for a detail only you can see in your own game, such as a best score or your number of games played. If we cannot tell the records apart, we will delete neither, because deleting the wrong one is worse than deleting nothing.
We cannot delete advertising data held by Google. We are not the party that controls it. Manage it at myadcenter.google.com, and switch off the sharing entirely in iOS Settings > Privacy & Security > Tracking.
We cannot locate your analytics events. They are not stored against your installation code, so there is no identifier we can search on to find yours. We would rather tell you that than imply otherwise.
We cannot delete purchase records held by Apple. Manage those at privacy.apple.com.

The App cannot delete its own record, by design: the record is locked so that it can never be read back or erased from a device, which is also what stops anyone else from harvesting or destroying it. Deletion is therefore something we carry out for you. Note too that deletion is a point in time. If you keep playing afterwards, a new record starts from zero on your next completed game.

United States (including California / CCPA as amended by the CPRA): We do not sell your personal information for money. However, when you allow tracking through Apple’s App Tracking Transparency prompt, your advertising identifier and related device and usage information are made available to Google to personalize ads, which California law treats as “sharing” for cross-context behavioral advertising. Your Privacy Choices (Do Not Sell or Share My Personal Information): you can opt out of this sharing at any time by declining the App Tracking Transparency prompt, or in iOS Settings > Privacy & Security > Tracking. With tracking off you still see ads, but they are not personalized and no advertising identifier is shared. We do not collect “sensitive personal information” as defined by the CPRA (any location used is coarse, region-level only), so the right to limit its use does not apply. You also have the right to know, access, correct, and delete your personal information, and not to be discriminated against for exercising these rights. You may designate an authorized agent to make a request on your behalf.
Canada (PIPEDA / Quebec Law 25): you may request access to your personal information and withdraw consent, subject to legal limits.
United Kingdom, Ireland, and the EEA (UK GDPR / EU GDPR): our legal bases are your consent (for personalized advertising and tracking) and our legitimate interests (for basic functionality, security, and non-personalized ads). You may lodge a complaint with your local data protection authority. The App does not currently present an in-app consent prompt for advertising, and for that reason it is not offered in the United Kingdom, Ireland, the EEA, or Switzerland. If that changes, this Policy will be updated before the App becomes available in those regions.

14. Data Retention

On-device data (settings, and the current state of a game) stays until you delete the App.
Keychain data (unlocks, purchases, boss progress, and games played per mode) is kept beyond deleting the App, by design, so your progress survives reinstalling. iOS provides no per-app control for clearing it; it is removed when the device is erased.
The anonymous gameplay record is kept for as long as the App is offered, because it is a running total rather than a log of visits. It holds one record per installation and is overwritten rather than accumulated. You can have it deleted at any time through Your Privacy Choices; that removes the record in full, not just the identifier on it.
Advertising data is retained by Google and its partners according to their own policies.
Analytics, performance, crash, and in-app feedback data is retained by Google (Firebase) according to its policies and our configured retention settings, and is used only in anonymous or aggregated form.
Support emails and privacy requests are kept only as long as needed to handle your request and to show we handled it, then deleted. We keep no separate record of the email addresses that contacted us.

15. International Transfers

Our providers (Google, Apple, Cloudflare, Resend) operate in the United States and may process information in other countries. Where required, we and our providers rely on lawful transfer mechanisms such as Standard Contractual Clauses.

16. Security

We use reasonable safeguards to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

17. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date below reflects the most recent revision. Material changes will be highlighted in the App or on the website where practical.

18. Contact

For privacy questions or to exercise your rights, contact Enigma Design Group Inc at info@emojislap.com. See also our Terms and Conditions.

Last Updated: July 31, 2026