Privacy Policy — Pavey Group

1. This website

This website is intentionally minimal. It exists to describe our products and to provide support and legal information. It does not use advertising cookies or behavioural tracking, and it does not ask you to create an account or submit a form. Our hosting provider may process standard technical request data, such as IP address and browser type, in server logs for security and reliability. If we ever add analytics or other cookies, this page will be updated first and any consent required under applicable law will be requested.

2. Mobile apps (general)

Individual Pavey Group apps may rely on third-party service providers, for example Apple (app distribution and platform services), Supabase (database and backend services), and Google (advertising and consent management). The exact data practices depend on the specific app, and are described in that app’s App Store privacy declaration and in-app privacy information.

3. DROP — Daily Reaction Game

DROP uses the following services and data:

• Supabase (game backend). DROP uses Supabase for anonymous authentication and to store the data needed to run the game online: leaderboard and player records, daily attempt data, your chosen player display name, and gameplay statistics needed for competition. An anonymous account identifier is used to preserve your scores, streaks and leaderboard position; it is not intended to identify you by name. Some information may also be stored locally on your device. See the Supabase Privacy Policy.
• Leaderboards. If you take part in a leaderboard, your score and any display name you choose may be visible to other players. Please do not use a display name that identifies you personally.
• Google AdMob (advertising). DROP uses Google AdMob (Google Mobile Ads SDK) to display advertising. This processing is carried out by Google as the advertising provider; Pavey Group does not receive all of this information directly. Where applicable, Google may process information such as device and app information, IP address and the approximate or general location derived from it, advertising-related identifiers, ad impressions and interactions, product and app interactions, diagnostic and crash information, performance information, and your advertising consent status. How Google handles this data is described in Google’s Privacy Policy and Google’s advertising privacy information.
• Consent management (Google UMP). Where required — including in the EEA, UK and Switzerland — DROP uses Google’s User Messaging Platform (UMP) to present advertising privacy choices (consent, do not consent, and manage options) and to record your consent status. Where required, you can change or withdraw your advertising consent later through the Ad Privacy Choices function within DROP. Refusing advertising consent does not prevent you from playing DROP.
• Tracking. DROP does not currently request Apple’s App Tracking Transparency permission and does not intentionally use IDFA-based cross-app tracking. Advertising is configured without personalised-ad requests where applicable. Google may nevertheless process device, advertising and interaction information as described in this Privacy Policy and Google’s privacy documentation.
• Diagnostics. Device and app diagnostic data, such as app version and general device model, may be processed to keep the app stable and to fix problems.

4. Purposes and legal bases

We process data to provide the service you asked for (running the app and saving your progress), to keep our products secure and reliable, and — where relevant and permitted — to show advertising. Depending on the case, processing is based on performance of a contract, our legitimate interest in a working and secure product, or your consent. Where processing relies on consent, you can withdraw it at any time, including through your device settings.

5. Processors and international transfers

Service providers act as processors on our behalf under written agreements and only process data on our instructions. Some providers may process data outside the European Economic Area; where that happens, we rely on the transfer safeguards offered by those providers, such as the European Commission’s standard contractual clauses.

6. Retention

Game progress data is kept while your app installation or anonymous account remains active, and is deleted or anonymised when it is no longer needed or when you ask us to delete it. Diagnostic data is kept for a short period for troubleshooting. Server logs are kept only as long as needed for security and operations.

7. Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to certain processing. You may also withdraw consent and complain to a supervisory authority in your country of residence. Because DROP data is tied to an anonymous identifier, we may need that identifier from within the app to locate your records.

8. Deletion requests

To delete your app data, contact us with the app name and, where possible, the anonymous identifier shown in the app’s settings. We will confirm once the deletion is complete. Deleting the app from your device may not by itself remove data held on our backend.

9. Children

Our apps are not directed at children under the age required for consent in their country, and we do not knowingly collect their personal data.

10. Contact

Privacy questions and deletion requests can be sent to support@pavey.online. Company details are listed in our Legal Notice, and general help is available on the Support page.