Konfeti Games
Konfeti Games
SnackShot is a single-player archery game for iPhone, iPad and Android phones and tablets, published by Konfeti Games ("we", "us"). This policy explains exactly what the app collects, why, who else receives it, and how you can get it deleted.
The short version. The entire game works with no account and no network connection. We do not ask for the App Tracking Transparency permission, we never read your device's advertising identifier (IDFA), and we do not track you across other companies' apps or websites. We do not sell or share your personal information. An account is optional and exists only to carry your progress between devices and to list you, under an anonymous handle, on the daily records board.
Your progress — levels, score, stars, coins, unlocked bows — is stored only on your device. It is not sent anywhere. In this mode the app still collects the following, which is not tied to your identity:
| Data | Purpose | Processor |
|---|---|---|
| Gameplay events: level started, level completed, level failed and why (out of arrows / time up / hit a bird / hit the glass), coins earned, bow unlocked, chest claimed, revive token used, second chance offered / taken / declined, checkpoint shared, review prompt shown, SnackShot Club offer shown / plan selected / closed | Understanding where the difficulty curve breaks and where players stop playing | Google Firebase Analytics |
| Ad events: which ad format and ad unit was shown, whether a rewarded ad was watched to completion | Measuring whether the ad pacing is tolerable | Google Firebase Analytics, Google AdMob |
| Purchase events: product identifier, price and currency of an in-app purchase | Understanding which packs players find worth buying | Google Firebase Analytics |
| A Firebase app instance identifier, and device identifiers used by the advertising SDK. Never the IDFA on iOS. On Android this includes the Google Advertising ID — see section 2. | Distinguishing one installation from another without identifying you | Google Firebase, Google AdMob |
| Crash reports: stack trace, iOS or Android version, device model, and the game context at the moment of the crash (current checkpoint, arrows remaining, whether Endless Mode was active, whether a pack was owned, which bow was equipped) | Fixing crashes | Google Firebase Crashlytics |
| Ad serving data used by Google to select and measure ads | Showing ads, which is what funds the free version | Google AdMob |
An account is entirely optional and can be skipped forever. You can sign in with an email address and password, with Google, or with Apple. If you do:
users/<your account
id>/progress: highest checkpoint reached, current checkpoint,
high score, total stars, stars per checkpoint, saved checkpoint state,
whether you have seen the tutorial, and your wallet (coins, unlocked bows,
revive tokens).dailyBoard/<category>/<your account id> with
today's date (as a UTC day number) and today's count: checkpoints reached,
seconds played or coins earned. The row is stored under your account
identifier and shown with a short anonymous handle made from that
identifier (for example "Archer K7Q2"). Other signed-in players can see
the handle and the count. Your name and email are never published there.
Deleting your account deletes these rows.That is the complete list. No contacts, no photos, no location, no health data, no address book, no microphone or camera.
If you are signed in to Game Center on iOS, or Google Play Games on Android, the app submits your high score to a leaderboard and reports achievement progress. This goes to Apple or to Google respectively, under their own privacy policies — we never receive your Game Center or Play Games identity. Signing out of either stops it.
In-app purchases are processed entirely by Apple on iOS and by Google Play on Android. The app receives a confirmation that a purchase succeeded and the product identifier. We never see or receive your card number, billing address, or your Apple ID or Google Account password.
Web checkout (United States App Store only). If your App Store account is in the United States, the app may open a checkout page run by Stripe in Safari instead of Apple's purchase sheet. Stripe collects your payment details and email address directly; we never see your card number. The checkout carries a random identifier generated by the app. Our checkout service (a Cloudflare Worker) asks Stripe whether that checkout was paid and stores the identifier with the products and subscription it owns, so the app can deliver and restore them. Manage or cancel a Club subscription bought this way with the Manage button in the app's Store, or at billing.stripe.com with the email you paid with.
SnackShot Club (optional subscription). Each subscription purchase carries a random identifier generated by the app. If you are signed in, that identifier is stored with your account so that Apple's subscription notifications (renewal, expiry, refund, cancellation of auto-renewal) can be matched to it. We keep the subscription's state, product, expiry date and renewal status, and daily counts of these events. We use this only to keep your Club benefits correct and to understand how many players keep or cancel the subscription. Apple, not us, handles billing and cancellation; manage or cancel anytime in your App Store account settings. If you start a free trial, the app schedules one local reminder notification two days before it ends (only if you allow notifications).
Reminders about your daily chest, login streak and (if you start one) the end of a Club free trial are local notifications scheduled on your device. There is no push server, no Apple push certificate, no Firebase Cloud Messaging token, and no device token — nothing about your notifications leaves your device. This is true on both platforms.
The free version of SnackShot is funded by ads served through Google AdMob. Two things about how we do it are worth stating plainly:
If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows a consent form from Google's certified consent platform before any ad is requested. Until you answer it, no ad request is made at all and the game simply runs without ads.
You can change your answer at any time: Settings → Ad Privacy inside the game. That row only appears where consent law requires it.
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act and comparable state laws. You still have the rights described in section 5.
| Company | What for | Their policy |
|---|---|---|
| Google (Firebase Authentication, Realtime Database, Cloud Functions, Analytics, Crashlytics; AdMob) | Accounts, progress sync, keeping SnackShot Club subscriptions in step with Apple, analytics, crash reports, advertising | policies.google.com/privacy |
| Apple (App Store, StoreKit, Game Center) — iOS only | App distribution, purchases, leaderboards and achievements | apple.com/legal/privacy |
| Stripe — iOS, United States App Store only | Web checkout payments and subscription billing | stripe.com/privacy |
| Cloudflare (Workers) — iOS, United States App Store only | Checking that a web checkout was paid, and restoring it | cloudflare.com/privacypolicy |
| Google Play (distribution, Play Billing, Play Games, Play Integrity) — Android only | App distribution, purchases, leaderboards and achievements, and checking that the app is a genuine copy | policies.google.com/privacy |
We do not use any other advertising network, analytics provider, or data broker. We have never sold personal information and do not intend to.
Google processes this data on servers that may be located outside your country, including in the United States, under Google's own standard contractual clauses and transfer safeguards.
Depending on where you live, you have the right to access your data, correct it, delete it, obtain a portable copy, object to or restrict processing, and withdraw consent. This includes rights under the GDPR (EEA/UK), the CCPA/CPRA and comparable US state laws, and PIPEDA (Canada). We will never treat you differently for exercising any of them.
Deleting everything takes two taps and needs no email to us. Open Account → Delete Account in the game. This erases your cloud progress and your authentication record together. Then delete the app to remove what is stored on the device. Full instructions, including what to do if you have already uninstalled the app, are on the Delete Your Account page.
To withdraw advertising consent, use Settings → Ad Privacy. For anything else — a copy of your data, a correction, or a question about this policy — write to konfetigames@gmail.com. We answer within 30 days.
SnackShot is a general-audience game, rated 9+ on the App Store and Everyone on Google Play. Those ratings describe what is in the game — snacks and arrows, cartoon-style — and not who it is aimed at.
SnackShot is not a children’s product and is not offered as one on any platform. It is not in Apple’s Kids Category, it is not listed for a child target audience on Google Play, and it is not marked as child-directed with any advertising provider. We do not knowingly collect personal information from children under 13, or under the equivalent minimum age where you live. If you believe a child has created an account, write to konfetigames@gmail.com and we will delete it.
All network traffic uses HTTPS; the app refuses plain HTTP connections entirely. Requests to our database are attested with Apple's App Attest on iOS and Google's Play Integrity on Android, so data cannot be read or written by anything other than a genuine copy of the app. Database rules restrict every account to its own record. No security measure is perfect, and we do not claim otherwise.
If we change this policy we will update the date at the top. Material changes — a new category of data, or a new company receiving it — will also be announced in the app before they take effect.
Konfeti Games
konfetigames@gmail.com