Privacy Policy for the game Cozinha em Apuros
Summary
- The game is free and can be completed from start to finish without watching any ad and without buying anything.
- An ad only appears if you tap a button labeled "Ad" (to earn one more basket of cards or to restart a wave with extra gold). There are no ads in the middle of a match, when the game opens, or in banners.
- The first time you open the game, it asks for your year of birth once (you can answer "Prefer not to say") and stores only the age range, on the device. Personalized ads are shown only to players who declare they are adults and accept; for minors and for anyone who does not answer or declines, ads are non-personalized.
- We do not ask for or receive your name, email, date of birth, photos or location. Progress stays on the device. After the age question, the game sends usage statistics (for example, at which stage and wave a match ended) and crash reports (when the game closes by itself or hits an error), linked to a random code for the app, without your name, so we can fix bugs and make the stages fairer. Google processes this data for us (Firebase, section 3A). You can turn it off in Settings > Privacy > Statistics and crash reports.
- Google is the party that receives data in order to show the ad (AdMob, section 3).
- In Settings, under Ads and purchases, you can turn off ad and purchase offers (for example, a parent can do this). Turning them back on and making a purchase require answering a question for adults.
- Optional purchases (the Master Chef Pack and, in the future, Cherry packs) are made through Google Play. Nothing based on a random draw is sold.
1. Data that stays only on your device
The game stores the following only on the device, in a private app file that we do not access:
- progress: stages, stars, chef coins, chef cards and levels, brigade chefs and invitations received, spells, recipes, baskets and Grandma's Orders;
- achievements, rank and match statistics (for example, how many foods you have defeated);
- settings (volumes, speed, screen effects, tips already seen, ad offers on or off);
- daily ad counters (to respect the daily limit) and the purchase record (so you are not charged or rewarded twice);
- the declared age range (under 13, 13 to 17, 18 or over — never the year or the date), the ad consent choice (section 4) and the choice for the statistics and crash reports switch (section 3A). The age range is never sent to anyone;
- counters for the statistics (installation day, days on which the game was opened, attempts per stage);
- the chef name you choose (optional, up to 16 characters; the default is "Chef Pitada"). This name never leaves the device.
2. Android backup (Auto Backup)
If Android backup is turned on, the system itself may keep a copy of the progress file in your Google account and copy it to a new device. This is done by Android/Google, under settings that you control (Settings > System > Backup; the path may vary). We have no access to that copy. Google's policy: policies.google.com/privacy.
3. Ads (Google AdMob)
When you tap an "Ad" button and the device is online, the game uses the Google Mobile Ads SDK, from Google, to fetch and show a video ad. To do this, the Google SDK automatically collects and receives technical data such as:
- IP address (which may indicate approximate location, such as city or country);
- device and app information (model, operating system, language, game version) and app identifiers generated by Google;
- the Android advertising ID, only when the ad is personalized (an adult who accepted);
- interactions with the ad (whether it was shown, watched to the end, or tapped);
- diagnostic data (SDK crashes and performance).
How we have configured it:
- Adult who accepted ads based on their interests: personalized ads, with content suitable for all ages with parental guidance ("PG" rating). You can change this at any time in Settings > Privacy > Review privacy, and also in the device's ad settings.
- Minor, no answer, or declined: non-personalized ads, with the request tagged as coming from a user under the age of consent and general-audience content ("G"); for players who declared they are under 13, the request is also tagged as child-directed.
- Ads for alcoholic beverages, gambling, dating, sexual content and other sensitive categories are blocked.
- No mediation: only Google serves ads in the game.
- We use the SDK only to show the ad, deliver the reward, limit frequency and prevent fraud.
Google's handling of this data follows its own policy: policies.google.com/privacy and "How Google uses information from sites or apps that use our services": policies.google.com/technologies/partner-sites. We receive from Google only aggregated reports (how many ads were viewed, revenue), with no data that identifies a player.
3A. Usage statistics and crash reports (Google Firebase)
We use two services from Firebase, by Google, which processes the data on our behalf, under the Firebase data processing terms.
Firebase Analytics — usage statistics. It only starts after the age question. The game sends events such as: stage started or finished (result, wave, lives, stars, chefs and levels used, duration), tutorial steps, chef coins earned and spent, baskets received, ad offered, watched or declined, purchase completed or not, settings changes and daily progress. Along with these, Firebase automatically receives technical data: a random identifier for the app on this installation, device model and operating system, language, game version, approximate country (derived from the IP address) and the start and duration of sessions.
- We do not send: the chef name, age range or year, typed text, email, Google account or purchase order code. We do not use a user ID. Analytics does not collect the advertising ID or the Android ID.
- What for: to find out where the game is too hard or too confusing, whether the game economy is balanced, whether the ads are annoying and whether purchases work. We do not use the statistics to choose ads or to build advertising audiences.
- Per-person configuration (Google consent mode): outside the European Economic Area and the United Kingdom, for minors, for anyone who answered "Prefer not to say" and for adults who did not accept personalized ads, the statistics are sent with all advertising signals denied; only an adult who accepted personalized ads has those signals allowed. In the European Economic Area, the United Kingdom and Switzerland, nothing is sent without the consent given in Google's form — and, for minors or anyone who does not answer, nothing is sent.
- For how long: data linked to the random identifier is kept for 2 months and then deleted; only non-identifying totals remain (for example, "how many players beat stage 3"). Optional sharing of this data with Google for other purposes is turned off.
Firebase Crashlytics — crash reports. It works from the first launch, because the most serious failures tend to happen right at the start, and the report is used to keep the game working and to protect your progress. When the game closes by itself or hits an error, the following is sent: the point in the code where it happened, device model and operating system, free memory and storage, game version, a random installation identifier and the game context (screen, stage, wave and speed). No user ID, no name, no age. Reports are kept for up to 90 days.
How to turn it off: Settings > Privacy > Statistics and crash reports: Off (one tap; turning it back on is also one tap). When it is off, the game sends neither statistics nor crash reports, and reports not yet sent are deleted. Review privacy erases your answers, generates a new random identifier for the statistics and asks for your age again on the spot; until you answer, no statistics are sent. Without an internet connection, nothing is sent.
Google and Firebase policies: policies.google.com/privacy and firebase.google.com/support/privacy.
4. Age and consent
- Age: the first time the game is opened, and only once, it asks for the year of birth (you can answer "Prefer not to say"; the Back button counts as "Prefer not to say"). We store only the age range, on the device; it decides whether ads may be personalized (adults only) and how statistics are sent (section 3A). The age range never leaves the device.
- Consent: for players who declare they are adults, the game asks whether they accept ads based on their interests — in the European Economic Area, the United Kingdom and Switzerland through Google's form, right after the age question; in Brazil and all other countries, through a question from the game itself, on the first tap on an "Ad" button. The answer stays on the device and can be changed in Settings > Privacy > Review privacy. Declining changes nothing in the game: ads remain optional (just non-personalized), and the game can be completed without them.
5. In-app purchases (Google Play)
Purchases are made through Google Play. Payment, card and billing data are handled by Google, under its own policy; we do not receive payment data. The game receives from Google Play only the purchase confirmation (product, order code and status) in order to deliver and restore what was bought; this record stays on the device. We receive sales reports from Google Play, which may include the country and the purchase amount. Purchases only open after a question for adults and can also be blocked by Google Play parental controls (Family Link / purchase authentication).
6. Children and teenagers
The game is made for a general audience and is not directed at children, but we know that minors may play it. For that reason: anyone who declares they are a minor (or does not answer) receives only non-personalized ads, tagged as under the age of consent and with general-audience content; statistics for minors are sent with all advertising signals denied (and, in the European Economic Area, the United Kingdom and Switzerland, are not sent at all), never include the age and are never used for advertising; no ad appears without the player tapping; there is no chat, login or content from other players; nothing based on a random draw is sold for money or for purchased currency; purchases require a question for adults and can be blocked by Google Play parental controls; ads and purchases can be turned off in Settings. We do not ask for or store a real name, date of birth, email, photo or location. We recommend using a nickname as the chef name.
Laws taken into account: Brazil's General Data Protection Law (LGPD, Law 13,709/2018), Brazil's Digital Statute for Children and Adolescents (Law 15,211/2025), the European Union's General Data Protection Regulation (GDPR) and, where applicable, COPPA (USA).
7. What we use the data for and on what legal basis
| Purpose | Data | Where | Legal basis |
|---|---|---|---|
| Saving progress and settings | section 1 | on the device only | performance of the service requested by the user |
| Showing the ad the player asked for and delivering the reward | section 3 | Google (AdMob) | performance of the service requested by the user and legitimate interest; consent where the law requires it |
| Personalized ads (only for adults who accepted) | section 3, with the advertising ID | Google (AdMob) | consent |
| Preventing fraud and limiting ad frequency | section 3 | Google (AdMob) | legitimate interest |
| Selling and restoring purchases | section 5 | Google Play | performance of a contract |
| Usage statistics to improve the game | section 3A | Google (Firebase), on our behalf | legitimate interest, with the switch to opt out; in the European Economic Area, the United Kingdom and Switzerland, consent |
| Crash reports to keep the game working and protect progress | section 3A | Google (Firebase), on our behalf | legitimate interest and performance of the service, with the switch to opt out |
We do not sell data and we do not use the data for any other purpose. We do not profile anyone: the statistics are used to tune the game, not for advertising; the interest profile behind personalized ads belongs to Google and applies only to adults who accepted.
International transfers: Google may process the data on servers outside Brazil and the European Union (for example, in the United States), under its own contractual safeguards, such as standard data protection clauses.
8. For how long
- Data on the device: until you erase your progress, clear the app's data or uninstall. "Erase progress" does not erase the purchase record (so you do not lose what you paid for) or the consent choice.
- Usage statistics (Firebase Analytics): 2 months, then deleted (only non-identifying totals remain).
- Crash reports (Firebase Crashlytics): up to 90 days.
- Data received by Google for ads (AdMob): for the period set out in Google's policy.
9. Your rights and how to delete data
Under the LGPD and the GDPR you can request confirmation, access, correction, deletion, portability and information about sharing, object to the processing and withdraw consent. We have no server of our own and we do not know who you are: the statistics and crash reports are held in Firebase linked only to random app codes. For that reason, requests are normally handled on the device itself:
- In the game: Settings > Privacy > Statistics and crash reports: Off (stops sending and deletes reports not yet sent); Settings > Privacy > Review privacy (generates a new random code; older events are no longer linked to this device and are deleted within the period in section 8); Settings > Erase progress; Settings > Ads and purchases > Ad offers: Off.
- On Android: uninstall the game or use "Clear data" for the app.
- Data held by Google: myaccount.google.com and the device's ad settings.
- Questions or requests: write to contato@tatsumuraka.com; we reply within 15 days. In Brazil you can lodge a complaint with the ANPD (www.gov.br/anpd); in Portugal, with the CNPD (www.cnpd.pt).
10. Changes to this policy
Any new feature that uses data (for example, another ad provider, cloud saves, server-side purchase verification or another online feature) will be described here before the version that introduces it, with the new date at the top.