Pony vs. Autumn privacy notice

Information we process

• Account information: email address, account identifiers, sign-in method and sessions, declared age group and country. We use these to provide and protect the account and apply age-related access rules.
• Game information: player and pony names, appearance, progress, runs, scores, apples, items, fields, access rights and reward history. We use these to save progress and apply game rules.
• Family accounts: the guardian's email address, the child's date of birth, country and game account, and permission choices. These support guardian messages and account management. Where signed consent is required, we also process the guardian's name, signature and permission verification records.
• Purchases and support: purchase references, ownership information, enquiries, reports, blocks and handling records. We use these to provide purchases, offer support and investigate abuse. We do not receive payment card details.
• Technical information: IP addresses, connection and error information, and service logs. These support service operation, troubleshooting and security.

Information comes from you or your guardian, your device, gameplay and the sign-in or app store services you choose. Apple or Google supplies an account identifier and an email address, if available, when you sign in. Account information is needed for online play; offline play requires no account. Necessary cookies and stored sessions allow the sign-in service to work.

When you use public features, other players can see your nickname, pony, appearance and scores. You can manage visibility in the game. Children's public participation also depends on guardian permission.

Children's online play and guardian consent

For a child under 13 living in the United States, the guardian returns a signed consent form to privacy@cron.fi. We check it before enabling online play. Private online play can be allowed without the shared leaderboard. With public permission, other players see the chosen player and pony names, appearance, ranking, scores and run times. They do not see the child's birth date, country, sign-in details or guardian information. Names must not contain a real full name or contact details.

Guardians can review their child's information, withdraw permissions and request account deletion in the family service or by contacting us about privacy. The separate offline game needs no account or consent form. Until consent is checked, request details are used only to contact the guardian and handle the request.

The operator responsible for children's information is Cron Services Oy, Mäntyniemenraitti 2B 11, 14200 Turenki, Finland, telephone +358 40 580 1980, privacy@cron.fi.

Recipients and processing countries

Hosting and storage services process game information on our behalf. The game's storage services are located in Finland. The email delivery service processes recipients' addresses, message contents and delivery records in the United States. A business email service handles support and privacy messages and their contact details; processing may also occur outside the EU/EEA, including in the United States. Only staff who need the information for their work can access it.

Transfers are covered by EU Standard Contractual Clauses or an applicable adequacy decision, such as the EU–US Data Privacy Framework. You can ask privacy@cron.fi for recipient details and a copy of the transfer safeguards.

Apple and Google process sign-in, app store and payment information under their own policies. When restricted data processing applies, Google acts as our service provider. In other processing of advertising data, it may act as an independent controller. These services also process information outside the EU/EEA, including in the United States. Their policies describe the countries and transfer safeguards: Apple's privacy policy, Google's privacy policy and Google's advertising data transfers.

Advertisements and privacy choices

Where ads are available, players aged 18 or over can choose to watch them. Ads are not loaded for minors or players whose age group is unknown. Test versions may show test ads.

Google may process IP addresses, approximate location, device and app identifiers, diagnostics, advertising choices, and ad display and interaction information. The game requests non-personalised ads. We record ad completion and rewards. See how Google uses information.

Watching an ad is optional. We ask for the necessary advertising choices before loading an ad. Where available, you can change them through Ad privacy choices in the game settings.

Legal grounds

• An adult's account, saved progress, chosen public features, purchases and rewards are processed to perform the contract for the game service (GDPR Article 6(1)(b)).
• Children's cloud play and separately chosen public features rely on consent and applicable guardian permission (6(1)(a)), managed in the family service.
• Security, abuse prevention, moderation, troubleshooting and support rely on our legitimate interests in keeping the game safe and working (6(1)(f)). We limit processing to what is needed and give particular consideration to children's rights.
• Advertising and device access requiring consent rely on that consent (6(1)(a)).
• Handling privacy requests fulfils our legal obligations (6(1)(c)).

Retention and deletion

Account, game and family information remains while the account is in use. Inactive accounts have no automatic deletion deadline. Signing out or uninstalling the app does not delete your account.

• Guardian message contents are removed after delivery processing; unsent contents are retained for 24 hours and delivery records for seven days.
• Expired family sessions are removed. Email links and guardian requests are removed one day after expiry.
• Signed-consent requests are valid for 14 days. Records of rejected, cancelled or expired consent requests are removed after 30 days. Approved forms and necessary verification records are kept while the permission is needed. When all permission is withdrawn, consent is replaced or the child's account is deleted, the associated evidence is deleted within 30 days. A staff member checks removal of the returned form from our privacy mailbox.
• Internal support-note text is retained for 90 days. Support emails are kept while the enquiry and necessary follow-up are handled.
• Our email delivery provider states standard retention periods of 30 days for emails and logs, and seven days for backups.
• Game backups are normally retained for up to eight weeks. A copy essential for recovery is removed when no longer needed for that purpose.

Logs, abuse cases and limited deletion records are reviewed when the matter is closed, and unnecessary information is removed. These records do not all have a fixed deletion deadline.

Account deletion removes game information and sign-in links. Limited purchase or case records may be retained for a legal obligation or an unresolved dispute; we explain any exception when handling your request. A limited identifier that prevents reuse of the same purchase is retained only for as long as it is necessary for that purpose. Backups expire separately. Deletion does not affect your own Apple or Google account.

Your rights

Contact privacy@cron.fi to request access, correction or deletion of your information. Where applicable, you can request restriction or data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. This affects the relevant feature, not the lawfulness of earlier processing or the separate offline game.

You can also request account deletion in the game's account settings, or a child's account deletion in the family service. We verify identity where needed and confirm completion separately.

You can lodge a complaint with Finland's Office of the Data Protection Ombudsman.