Citygram is developed by Vladyslav Ivashchuk, a registered sole proprietor (ФОП) based in Ukraine. Questions about this policy or your data can be sent to ivashchukvladyslav@gmail.com.
1. Overview
This Privacy Policy explains what information Citygram collects, how it is used, and the choices you have. Citygram is a puzzle game where all content is free to play. We collect the minimum data necessary to make the app work, keep your progress, fix crashes, show ads, and process optional purchases.
2. Information We Collect
Account & Identity
Citygram does not require you to create an account or sign in. On first launch, the app creates an anonymous, randomly generated identifier via Firebase Anonymous Authentication. This identifier is not linked to your name, email, or any personally identifiable information unless you choose to contact us directly (for example, by email). On iOS the identifier is kept in the device Keychain, so it survives reinstalling the app — this is what lets you restore your progress.
Gameplay Data
We store your puzzle progress, completed cities, streaks, and app settings. This data is saved locally on your device and backed up to Cloud Firestore, associated only with your anonymous identifier.
Usage Data
Once per day that you open the app, we record the date you first used Citygram, the date you last used it, your platform (iOS or Android), the app version, and your device language, stored against your anonymous identifier in Cloud Firestore. We use this only to count active players and see how many come back. Citygram does not include a third-party analytics SDK.
Crash Reports
If the app crashes or hits an unexpected error, a crash report is sent to Sentry so we can find and fix the problem. A report contains technical details only — the error and where in the code it happened, your device model, operating system version and app version. The app does not attach your anonymous identifier or any other personal information to crash reports, and reports are stored in Sentry's EU data region.
Advertising Data
Citygram shows ads through Google AdMob to support free gameplay. AdMob may collect device identifiers (such as the IDFA, if you grant tracking permission) and usage data to serve and measure ads. On iOS, we request App Tracking Transparency (ATT) permission before any tracking-related data is collected — you can allow or deny this at any time in your device Settings.
Purchase Data
If you choose to purchase Remove Ads, the transaction is processed by Apple and RevenueCat. RevenueCat receives a transaction identifier and your anonymous app identifier to activate the corresponding entitlement — we do not receive or store your payment details.
3. Third-Party Services
Citygram relies on the following third-party services, each with their own privacy practices:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase (Google) | Anonymous authentication, progress backup, daily usage records | policies.google.com/privacy |
| Sentry | Crash and error reporting | sentry.io/privacy |
| Google AdMob | Displaying interstitial and rewarded ads | policies.google.com/privacy |
| RevenueCat | Managing in-app purchase entitlements | revenuecat.com/privacy |
4. Your Choices
- Advertising consent: in the EEA and UK, you can change or withdraw your consent at any time under Settings → Privacy settings.
- App Tracking Transparency: you can allow or deny ad tracking at any time via iOS Settings → Privacy & Security → Tracking.
- Data deletion: email us to request deletion of any cloud-stored data associated with your anonymous identifier.
- Remove Ads: purchasing Remove Ads stops all ad requests and related ad-serving data collection going forward.
5. Children's Privacy
Citygram is rated 4+ and does not knowingly collect personal information from children. The app does not require sign-in, and no personally identifiable information is collected during normal gameplay.
6. Data Retention
Gameplay progress tied to your anonymous identifier is retained as long as you use the app. If you uninstall the app, locally stored data is removed from your device; cloud-stored data can be deleted on request. On iOS, the anonymous identifier itself stays in the device Keychain after uninstalling. Crash reports are kept by Sentry for a limited period under its standard retention policy and then deleted automatically.
7. Your Rights Under GDPR (EEA and UK Users)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies to you.
Data Controller
The controller of your personal data is Vladyslav Ivashchuk, a registered sole proprietor (ФОП) based in Ukraine, reachable at ivashchukvladyslav@gmail.com. Citygram has not appointed a Data Protection Officer, as it does not meet the criteria under Article 37 GDPR.
Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Saving gameplay progress and settings | Performance of a contract (Art. 6(1)(b)) — providing the game you requested |
| Personalised advertising and related device identifiers | Consent (Art. 6(1)(a)), collected via the in-app consent form and, on iOS, App Tracking Transparency |
| Non-personalised advertising | Legitimate interest (Art. 6(1)(f)) — funding a free-to-play app |
| Daily usage records and crash diagnostics | Consent, where required; otherwise legitimate interest in maintaining and improving the app |
| Processing Remove Ads purchases | Performance of a contract (Art. 6(1)(b)) |
Your Rights
You have the right to:
- Access — obtain confirmation of whether we process data relating to you, and a copy of it.
- Rectification — have inaccurate data corrected.
- Erasure — request deletion of data associated with your anonymous identifier.
- Restriction — request that we limit processing in certain circumstances.
- Object — object to processing based on legitimate interest, including profiling for advertising purposes.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.
Because Citygram identifies you only by a randomly generated anonymous identifier, which is not shown in the app, we may ask for details that help us find your data — such as your device model and roughly when you started playing — before we can act on a request. If we cannot link a request to specific data, we will tell you. Under Article 11 GDPR, we are not required to collect additional information solely to identify you.
Requests can be sent to ivashchukvladyslav@gmail.com and are answered within one month, as required by Article 12(3).
Withdrawing Advertising Consent
You can change or withdraw your advertising consent at any time in the app under Settings → Privacy settings, which reopens the consent form. On iOS you can also revoke tracking permission entirely via Settings → Privacy & Security → Tracking. Withdrawing consent does not remove ads; it means you will see non-personalised ads instead.
Right to Lodge a Complaint
If you believe your data has been handled unlawfully, you may lodge a complaint with your national supervisory authority. A list of EEA authorities is available at edpb.europa.eu. UK users may contact the Information Commissioner's Office at ico.org.uk.
8. International Data Transfers
Citygram is operated from Ukraine, and the third-party services it relies on are operated primarily from the United States. Ukraine is not currently the subject of a European Commission adequacy decision.
In practice, the developer does not receive or export any directly identifying personal data: access is limited to aggregate statistics, anonymous identifiers and technical crash reports within the Firebase, AdMob, RevenueCat and Sentry dashboards. Crash reports are stored in Sentry's EU data region. Where personal data is transferred outside the EEA by those providers, the transfers are governed by the providers' own safeguards — Standard Contractual Clauses approved by the European Commission, and, where applicable, certification under the EU–US Data Privacy Framework. Details are available in each provider's privacy policy, linked in Section 3.
9. United States Privacy Rights
If you are a resident of California, or of another U.S. state with comprehensive privacy legislation, the following applies to you.
Citygram does not sell personal information for money. However, allowing advertising partners to use device identifiers for personalised advertising may qualify as "selling" or "sharing" personal information for cross-context behavioural advertising under the California Consumer Privacy Act as amended by the CPRA, and under comparable state laws.
You may opt out at any time in the app under Settings → Privacy settings, or by denying App Tracking Transparency permission on iOS. Opting out does not remove ads and does not degrade any other part of the app.
Subject to verification, you also have the right to know what personal information is collected and how it is used, to request deletion or correction, and not to be discriminated against for exercising any of these rights. Requests can be sent to ivashchukvladyslav@gmail.com.
Citygram does not knowingly collect or process personal information of consumers under 16 years of age for advertising purposes.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.
11. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at ivashchukvladyslav@gmail.com.