Privacy policy

Effective 2 October 2026

Who is responsible?

The operator and data controller is Mpen Apps, Vachou 9, 54629 Thessaloniki, Greece. For support and privacy requests, contact mpenapps@protonmail.com. This policy covers the Field Shift iOS app and this website.

What is processed, and why?

• On your device: saved runs, scores, achievements, settings, shuffle use, and ad timing. These make the game, resume, preferences, and purchased benefits work. They are stored locally; we do not upload your board or individual moves. Apple device backups may include local app data under your Apple settings.
• Purchases: Apple processes payments. RevenueCat verifies purchase records and manages ad-free access using an app-specific anonymous customer identifier, product and transaction information, purchase status, app version, and technical request data. We do not receive card details. No name, email, or advertising identifier is supplied to RevenueCat by this app.
• Advertisements and consent: Google AdMob and its consent service process consent preferences and may process IP address/general location, device or app identifiers, ad views and interactions, and technical diagnostics. These support ad delivery, measurement, security, and fraud prevention. Ads are requested only when Google's consent system permits them. Field Shift requests non-personalized ads and does not request Apple's permission for cross-app tracking. Non-personalized ads still involve some data processing and may require consent for device storage.
• Optional analytics: Aptabase receives app-open and app-close events, session duration, totals for runs, balls cleared and boosts used, and whether ad-free access is active. The SDK includes basic app/OS/device-class and session metadata. We send no name, email, purchase identifier, advertising identifier, exact board, or individual swipe history. Aptabase uses temporary session measurements and daily-rotating server-side hashes; it does not give us a persistent identity across days or apps. Our account uses Aptabase's EU region. Disable this in Settings → Share anonymous analytics.
• Support: when you email us, we receive the address, message, and any information you choose to attach. Send only what is needed to resolve your request.
• Website: Cloudflare delivers and secures these pages and may process ordinary network information, including IP address and request/security logs. This website sets no analytics, advertising, or tracking cookies and contains no advertising scripts.

Legal bases in the EEA, UK, and Switzerland

We process information needed to provide the game and purchased benefits to perform our contract with you, and transaction records where required by law. We use consent for advertising/device-storage operations where required, with choices presented by Google's consent service. Our limited analytics, service security, and ordinary support administration rely on our legitimate interest in maintaining and improving the app without identifying players; you may turn analytics off or object. Where local law requires consent for a particular operation, consent is required before that operation.

Your choices

Use Settings → Ad privacy choices whenever Google requires a privacy-choice entry point. You can revisit or withdraw the applicable ad consent there. Turning off anonymous analytics stops future analytics events. Removing Ads disables automatic interstitial and app-open ads; optional rewarded videos remain available only when you choose to watch one. Device system privacy controls also apply. Withdrawing consent does not affect processing that was lawful before withdrawal.

Providers and international transfers

We use Apple, RevenueCat, Google, Aptabase, Cloudflare, and Proton. Their linked notices explain their processing. Aptabase analytics for our EU account are processed and stored within the EU. Other providers may process information outside your country, including in the US. Where GDPR applies, transfers require an applicable adequacy decision or other valid safeguards, such as Standard Contractual Clauses and supplementary measures where necessary. Contact us for information about the safeguards relevant to your request.

How long is information kept?

Local game data remains until you remove app data or delete the app; restored device backups may restore it. We retain support correspondence for up to 24 months after resolution unless a legal obligation or active dispute requires longer. Purchase records are retained for entitlement restoration and any applicable accounting, tax, or legal obligation. Service providers retain their technical, consent, and advertising records under their published policies. Aptabase's published policy permits analytics retention for up to five years; its anonymous design can prevent identifying a particular person's historic event. We do not retain a separate player-level analytics database.

Your data rights

Depending on the applicable law, you may request access, correction, erasure, restriction, portability, or object to processing, including processing based on legitimate interests. Email mpenapps@protonmail.com. We normally respond within one month under GDPR, subject to lawful extensions, and may ask only for information reasonably needed to verify the request. We cannot identify anonymous events or local data that never reached us; we will explain any applicable limitation. You may complain to your local supervisory authority, including the Hellenic Data Protection Authority. We do not make automated decisions producing legal or similarly significant effects.

Children

Field Shift is a general-audience puzzle, not a child-directed service or Kids Category app. It is not intended for children under 13 or a higher minimum age required by local law. Parents who believe a child has provided personal information can contact us. We do not knowingly solicit children's personal information.

Changes

Material changes will be announced in the app or on this page, with an updated effective date. A change requiring new consent will not replace the need to obtain that consent.