Privacy policy
Paint Mash: Color Mix Puzzle, by NGOMMA VALUE ADDED SERVICES LIMITED (“we”, “us”). Last updated: 25 October 2026.
This policy explains what information Paint Mash collects, why, and the choices you have. We’ve written it to be read, not skimmed past.
The short version
- You don’t need an account, name, email or phone number to play.
- The game gives your phone a random player number so we can keep your coins, lives and purchases safe and fix problems.
- We record how the game is played (levels, moves, hints used) to make the puzzles better.
- Ads are shown by Google AdMob, which may use your device’s advertising ID. You can limit this in your phone settings and, where the law requires it, through the consent screen.
- Payments are handled by Google Play. We never see your card details.
- You can delete your data at any time: Settings → Delete my data.
- We don’t sell your personal information.
1. Information we collect
| What | Examples | Why |
|---|---|---|
| Random player number | A number created by the game when it first starts, and a secret token | To keep your coins, purchases and progress yours, and to stop cheating |
| Device and app information | Platform (Android), app version, and the country from your phone’s region setting (for example “GB”). We don’t use GPS or your IP address for this | To make sure the game works on your device, and to see how the game does in each country (prices, difficulty, offers) |
| Gameplay information | Levels started and finished, the moves of solved levels (to check rewards), stars, hints, undos and lives used, session length, daily missions | To balance difficulty, find levels that are too hard, and improve the game |
| Purchase information | Product bought, Google Play order number and purchase token, time, and your coin balance and what coins were spent on | To deliver what you bought, handle refunds and prevent fraud |
| Rewarded ad information | That you finished a rewarded ad, and the reward. Your random player number travels with the ad so AdMob can tell our server whom to reward | To give you the reward you earned (a life, a hint or a continue) and apply daily limits |
| Feedback you send | Rating, where you got stuck, whether you’d play tomorrow, your comment | To improve the game. Please don’t write personal details in comments |
We do not collect your name, email, phone number, contacts, photos, precise location or microphone.
2. Advertising
Paint Mash shows ads through Google AdMob: one banner at the bottom of the screen, full-screen ads between some levels, and rewarded videos you can choose to watch for a life, a hint or another reward. AdMob may collect your device’s advertising ID, IP address and information about the ads you see, to show and measure ads and prevent ad fraud. How Google uses this is explained at policies.google.com/technologies/partner-sites.
- Players in the EEA, UK, Switzerland and other places where the law requires it (including some US states) see Google’s consent screen before ads are personalised. You can change your choice at any time from Settings → Privacy choices (ads); the button appears wherever the law gives you that choice.
- Everyone can reset or delete the advertising ID, or turn off ad personalisation, in Android settings → Privacy → Ads.
- Buying Remove ads removes the banner and the ads between levels. Rewarded videos stay available only if you choose to watch them.
3. Who we share information with
We only share information with companies that help us run the game, under contracts that limit what they can do with it:
| Company | Purpose |
|---|---|
| Google Play (Google LLC) | Payments, refunds, app delivery |
| Google AdMob (Google LLC) | Ads (see section 2) |
| Hetzner Online GmbH (Germany) | Runs our game server and database |
We may also disclose information if the law requires it, or to protect players and the game from fraud. We don’t sell personal information.
4. Where information is stored and for how long
Our server is located in Germany. Google’s services may process data in other countries under their own safeguards.
| Information | Kept for |
|---|---|
| Gameplay events | 13 months, then deleted automatically |
| Feedback | 24 months, then deleted automatically |
| Purchase and coin records (the ledger) | 7 years, because tax and accounting rules require financial records, and to handle refunds |
| Server error logs | Rotated automatically; kept for a few weeks at most |
5. Deleting your data and your rights
Delete my data: in the game, open Settings → Delete my data. This:
- deletes your gameplay events and feedback from our server and closes your player record;
- removes the game’s files from your phone.
Records of purchases are kept, without any link to gameplay, for the period in section 4, as the law requires. Uninstalling the game removes the files on your phone but not what’s on our server, so use the button first.
Depending on where you live (for example under Kenya’s Data Protection Act 2019, the EU and UK GDPR, or US state laws), you may have the right to:
- ask what data we hold about you;
- correct it;
- delete it;
- object to or limit how it’s used;
- complain to a data protection authority (in Kenya, the Office of the Data Protection Commissioner).
To use these rights, email us with your player number, shown at the bottom of Settings.
Legal bases (for EEA/UK players):
- running the game you asked for (player number, purchases, rewards);
- our legitimate interest in improving the game and preventing fraud (gameplay events, crash reports);
- your consent (personalised ads, where required).
6. Children
Paint Mash is meant for people aged 13 and over and is not designed for children. We don’t knowingly collect personal information from children under 13. If you believe a child has used the game, contact us and we’ll delete the data.
7. Security
All communication with our server uses HTTPS. Access to the database is limited to a few staff, protected by strong passwords and logged. Changes to players’ coins by staff need approval from a second person. No system is perfectly secure, but we work to protect your information and will tell you and the authorities about a serious breach as the law requires.
8. Changes
If we change this policy we’ll update the date at the top, and for important changes we’ll tell you in the game.
9. Contact
NGOMMA VALUE ADDED SERVICES LIMITED, P. O. Box 6431 - 00622, Nairobi,
Kenya
Email: privacy@nggaminglabs.com