Legal

Privacy policy

Last updated 20 October 2026

• 1. Who we are
• 2. What this policy covers
• 3. What is kept on your device
• 4. What is sent, and to whom
• 5. What we never collect
• 6. Why we use it, and on what legal basis
• 7. The companies involved
• 8. How long it is kept
• 9. Transfers to other countries
• 10. Your rights, and how to use them
• 11. Deleting your information
• 12. Children
• 13. Security
• 14. California residents
• 15. Changes to this policy
• 16. Contact and complaints

1. Who we are

Kinship Studio is a small independent game studio registered in Israel. We make the puzzle game Tile Associations. On Google Play it is listed as "Tile Associations Word Mahjong", and on game sites as "Tile Association: Word Puzzle".

For the information described here, Kinship Studio is the party responsible for it: the "controller" under European and UK data protection law, and the "database owner" under Israel's Protection of Privacy Law, 5741-1981. You can reach us at dev@kinshipstudio.games.

Our contact for privacy requests and complaints is Kinship Studio, at dev@kinshipstudio.games. This is also the contact for players in the Philippines, and our grievance contact for players in India. Section 16 says how we answer.

2. What this policy covers

• Tile Associations, wherever you play it: on game sites such as CrazyGames, Poki and Playgama, on our own websites, and in the Android app.
• Our websites: kinshipstudio.games and its sub-addresses, including the test address tiles.kinshipstudio.games.
• Email you send us.

When you play on a game site, that site is a separate company with its own account system, its own adverts and its own privacy policy. This policy explains what our game does. What the site itself does is explained in its own policy, linked in section 7.

3. What is kept on your device

Everywhere you play in a browser

The game saves your progress in your browser's local storage, under the name kinship.meta.v1. It holds only game information: the level you have reached, your coins, your daily streak and daily bonus days, a board you left part way through, how many times you have tried each level, which tutorials you have already seen, how many reward videos you have watched today, your sound and fullscreen settings, and the time of the last save. It holds nothing about who you are.

When the game starts it also writes and immediately removes a test item, kinship.probe.v1, to check that saving works in your browser. If it does not, the game tells you that your progress will not be kept.

The game also looks at your browser's own description of itself (its "user agent"), on your device only, to tell whether you are inside another app's built-in browser, where progress is often thrown away. The game does not send this anywhere.

This storage is what makes the game work: without it, the game would forget your progress every time you closed it. It stays until you clear your browser's data for the site.

On CrazyGames only: the ByteBrew cookies

On CrazyGames, the analytics service ByteBrew (see section 4) sets cookies in your browser:

What the game sites store themselves

CrazyGames, Poki and Playgama run their own code around the game and may store their own cookies or local storage in your browser, for example for their adverts, their accounts or their own saving. That is covered by their privacy policies, linked in section 7. On CrazyGames, if you are not signed in, the CrazyGames copy of your progress is also kept in your browser (see section 4).

4. What is sent, and to whom

This depends on where you play.

On CrazyGames

• To CrazyGames. The game tells CrazyGames when it has loaded and when play starts and stops, asks it for adverts (including reward videos you choose to watch), and asks it to show banner adverts outside of play.
• A copy of your progress, to CrazyGames. The same progress described in section 3 is copied to CrazyGames' save service, so it survives a cleared browser or a new device. If you are signed in to a CrazyGames account, the copy is kept with your account. If you are not, CrazyGames keeps it in your browser and moves it to your account if you sign in later. We do not receive this copy anywhere else; the game only reads it back when you play.
• Play statistics, to ByteBrew. Each time something happens in the game, a short event is sent, for example "level 12 started", "level 12 won", "a booster was used", "a reward video was offered and watched", "coins were earned from the daily bonus", "the player left in the middle of a level", or "the player was still playing after three minutes". One event, when the game loads, names the language your browser is set to (the language only, for example "en") and the kind of machine you are playing on (for example "android" or "windows", never the model or the version). Exact coin amounts are not sent: only which part of the game coins came from or went to, and, at the start of each level, a rough band for your coin balance, such as "100-499". Each event also carries the game's version and the name of the site. Along with the events, ByteBrew receives:
  • the random identifier from the bb_u_id cookie, and a random identifier for each playing session;
  • the size of your game window;
  • your browser's language setting, for example "en-GB", and the country code it contains, for example "GB";
  • how long each playing session lasted;
  • and, because every request on the internet carries them, your IP address and your browser's user agent (which names your browser and the kind of device).

On Poki

• To Poki. The game tells Poki when it has loaded and when play starts and stops, asks Poki for adverts (including reward videos you choose to watch) and banner adverts outside of play, and sends Poki the same kind of play statistics described above ("level 12 won" and so on, including the language event and whether you were still playing after one, two and three minutes) through Poki's own tools. ByteBrew is not used on Poki.
• A record of your taps, to Poki, in a test session you agreed to. Poki sometimes asks a player whether it may record a test session of a new game. If you agree, that recording also keeps the short notes the game writes as you play: where you tapped and which tile or button it was, which screens you saw, when adverts played, the progress the game started from, your screen size, time zone and language, and the kind of device and browser (never the model). Key presses are noted only for keys such as Enter; letters are never recorded. We use them to play the session back and see where the game was hard. Nothing is kept when no recording is running.
• A copy of your progress, to Poki, if you are signed in. When you are signed in to a Poki account, Poki's own code copies what games keep in your browser's storage, which includes the progress described in section 3, to your Poki account. Poki does this for every game; we do not receive the copy.

On Playgama

• To Playgama. The game tells Playgama when it has loaded, when a level or a Cooking board starts, and whether it was won or lost, and asks Playgama for adverts (including reward videos you choose to watch). This goes through Playgama's own tools, which also count the adverts they show. Nothing else about how you play is sent, and ByteBrew is not used on Playgama.
• A copy of your progress, to Playgama's tools. The game hands a copy of the progress described in section 3 to Playgama's own saving tools, which decide where it is kept: with Playgama, or in your browser. Playgama may pass the game on to partner sites through its own network; on those sites the same tools are used.

On our own websites

• The game on our own sites, including the test address, sends nothing about how you play. It uses no analytics, no advertising and no cookies. Your progress stays in your browser as described in section 3.
• The studio site, kinshipstudio.games, uses no cookies, no analytics and no advertising, and its font is served from our own site rather than from a font service.
• Like every website, our web host automatically records each request in server logs: your IP address, the date and time, the page or file asked for, the address of the page that linked to it, and your browser's user agent. These logs are used to keep the sites running and secure.

In the Android app

The Android app is distributed through Google Play. Its app identifier is tileassociation.games.kinshipstudio.

• Kept on your phone. The same progress described in section 3, kept in the app's own storage instead of a browser, together with your answer to the consent question below, if you were asked it. Uninstalling the app, or clearing its storage in your phone's settings, erases it. We keep no copy of it.
• Android's own backup. The app allows Android's backup. If backup is switched on in your phone's settings, Android may copy the app's storage, including your progress, into your phone's backup in your Google account, and put it back if you reinstall the app or move to a new phone. That copy is made and kept by Google for you, under your Google account; we cannot see it or delete it. You can switch backup off, or delete the backup, in your phone's settings or in Google Drive.
• Play statistics, to Google Analytics for Firebase. The same kind of short events described for CrazyGames above ("level 12 won", "a booster was used" and so on, with the game's version), and never exact coin amounts. Since version 1.0.7 they also include the highest level you have won, whether the app's consent question was shown and what you answered. Since version 1.0.8 they also include how long you played each level, which screen you left from, and one word for the kind of link you installed the app from (for example "facebook", "google_ads" or "organic"), read once from Google Play; the link itself is never stored or sent. Firebase also receives an identifier for this installation of the app, your phone's model, Android version and language, and your IP address, from which it works out roughly where you are. Where you have allowed it (see the consent sections below), or outside the countries where the app asks, Firebase may also receive your device's advertising identifier. In Europe, the UK and Switzerland, since version 1.0.7, they are only collected if you consent in Google's consent message (see below): until you have answered, and if you do not consent, nothing is sent to Firebase. Everywhere else we need these statistics to run and improve the game, so they are sent whatever you answer about adverts. ByteBrew is not used in the app.
• Crash reports, to Firebase Crashlytics. If the app crashes or freezes, a report of what went wrong goes to Firebase Crashlytics, a Google service, with your phone's model and Android version and an identifier for this installation of the app. Crash reports follow the same rule as play statistics: in Europe, the UK and Switzerland they are only sent if you consent in Google's consent message.
• Tests of new features, with Firebase Remote Config. When we try out two versions of a feature (for example whether words are shown under the pictures), the app asks Firebase Remote Config, a Google service, which versions new players should get and in what share. The request carries the identifier for this installation. The version you were given is kept on your phone and sent with your play statistics, so we can compare the two. Nothing else is downloaded: the app can only choose between versions already built into it.
• Adverts, from Google AdMob. The app asks AdMob for adverts: between levels, reward videos you choose to watch, and banners outside of play. To choose and count adverts, Google receives your device's advertising identifier, your IP address, details of your phone and how you interact with the adverts. You can reset the advertising identifier, or opt out of personalised adverts, in your phone's Google settings.
• App events, to Meta. Since version 1.0.5, the app uses Meta's software for app events, so we can see which of our adverts on Facebook and Instagram bring in players who enjoy the game, and show our adverts to people like them. It tells Meta when the app is opened, when the first guided match is finished, and when level 5 is won for the first time (levels 3, 5 and 10 in versions up to 1.0.8), and nothing else about your play. With those events Meta receives your device's advertising identifier, an identifier Meta's software makes for this installation, your phone's model, Android version, language and screen, how the app was installed, and your IP address, from which it works out roughly where you are. Meta uses them under its own privacy policy. We ask Meta to apply what it calls Limited Data Use, so that for players it places in a US state with its own privacy law it uses the events only in the limited way those laws allow. You can see and disconnect what apps have shared with Meta under "Your activity off Meta technologies" in your Facebook or Instagram settings, and resetting or deleting your phone's advertising identifier stops new events being linked to the old one.
• Your consent, in the European Economic Area, the UK and Switzerland. The first time you open the app there, Google's consent message asks for your consent, with "Consent", "Do not consent" and "Manage options". If you do not consent, you still get the whole game, with adverts that are not personalised, and nothing at all goes to Meta: Meta's software is not even started until you have said yes. Your answer also tells Google what it may do with the app's information for advertising, and, since version 1.0.7, it decides the play statistics too: they are sent to Firebase only if you consent, and if you do not, nothing is sent. If you choose "Manage options", play statistics need your yes to storing information on your device and to the three purposes about measuring and improving content. You can change your answer at any time under Settings, then Advert choices, or Settings, then Privacy, then "Change your advert choices".
• Your consent, in India. The first time you open the app there, before you play, the app asks: "Allow personalised adverts?", with two answers, "Allow" and "Don't allow". It explains that Google can use your phone's advertising identifier to choose adverts for you, and that we tell Meta when you open the game and win levels. Until you answer, nothing goes to Meta (its software is not started), no advert is asked for, and Firebase is set not to collect your advertising identifier. If you allow it, Meta receives the app events described above, Google may personalise your adverts, and Firebase may receive the advertising identifier. If you do not, nothing goes to Meta, your adverts are not personalised, and Firebase still receives the play statistics described above, without your advertising identifier. The game is the same either way. Your answer is kept on your phone, and you can change it at any time, with one tap, under Settings, then Advert choices. The app works out whether you are in India or the Philippines on your phone, from your SIM card's country, then your mobile network's country, then the country in your phone's language setting; that country is not sent to us. If the app cannot tell which country you are in, it asks you this question too.
• In the Philippines. Since October 2026 the app no longer asks this question when you first open it there. Meta receives the app events described above, Google may personalise your adverts, and Firebase may receive your advertising identifier, from the start. You can stop this at any time, with one tap: open Settings, then Advert choices, and choose "Don't allow". From then on nothing goes to Meta, your adverts are not personalised, and Firebase no longer receives your advertising identifier; your answer is kept on your phone, and you can change it again in the same place. If you already answered the question in an earlier version of the app, your answer is kept.
• Google Play itself handles installing and updating the app, under Google's own privacy policy.

If you email us

We receive your email address and whatever you write. Email to our address is forwarded by our domain provider, Namecheap, to a mailbox hosted by Google, and we use it only to answer you.

5. What we never collect

• Your name, email address (unless you email us), phone number, postal address, photos, contacts or exact location.
• Anything you type. The game has no chat and no way to send a message.
• Payment details. The game has no purchases.

We do not sell your information and we do not use it to make automated decisions about you. We do not share it with anyone for advertising, with two exceptions, both in the Android app: Google AdMob receives what section 4 describes in order to show and count adverts, and may personalise them as described there; and Meta receives the app events section 4 describes, to measure and improve our own adverts on Facebook and Instagram. Where the app asks for your consent, both happen only as your answer allows.

6. Why we use it, and on what legal basis

Adverts on CrazyGames, Poki and Playgama are chosen and shown by those sites, which decide the legal basis for them and ask for your consent where the law requires it.

Under Israeli law: you are under no legal obligation to give us any of this information. It is collected with your consent, and playing the game is voluntary. If you do not want the information described here to be used, do not play, or use the choices in section 10. If your browser does not allow saving, the game still works but cannot remember your progress.

7. The companies involved

We only pass information to the companies below, and only for the reasons given. Each has its own privacy policy.

We may also disclose information if the law requires it, for example to answer a valid request from a court or an authority.

8. How long it is kept

• Your progress in your browser: until you clear your browser's data for the site. Some browsers, such as Safari, clear it on their own after a period without a visit.
• The ByteBrew cookies: one year from when they were set, or until you clear your cookies.
• Play statistics held by ByteBrew: up to 24 months, under ByteBrew's own policy, unless we ask for them to be deleted sooner.
• The copies of your progress on CrazyGames, Poki and Playgama, and anything else those sites receive: as long as those companies keep it under their own policies.
• What Google and Meta receive from the Android app: as long as those companies keep it under their own policies and the settings they offer us.
• Your answer to a consent question in the Android app: on your phone, until you change it, clear the app's storage or uninstall the app.
• Server logs: for a short period under our host's standard settings, normally no more than about two months, and then deleted.
• Email: as long as we need it to deal with what you asked, and then deleted.

9. Transfers to other countries

We are based in Israel. The European Commission has recognised Israel as giving an adequate level of protection to personal data, and confirmed that decision in January 2024, so information can come to us from the European Economic Area without extra safeguards. The UK recognises Israel in the same way.

Our web host, Jetserver, is in Israel. CrazyGames is in Belgium and Poki is in the Netherlands, both in the European Union. Playgama is in the United Arab Emirates. ByteBrew, Google, Meta and Namecheap are in the United States, and ByteBrew says its service is hosted and operated there. For players in Europe, Meta's service is provided by Meta Platforms Ireland Limited, which transfers data to the United States. If you play in India, the Philippines or anywhere else, what the game sends goes to us in Israel and to the companies in section 7, most of them in the United States.

The United States does not have the same general recognition. Transfers there rely on the safeguards those companies provide: for ByteBrew, the European Commission's standard contractual clauses in ByteBrew's data processing terms; for the others, the standard contractual clauses or the EU-US Data Privacy Framework, as set out in their own policies. Transfers from Israel follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

10. Your rights, and how to use them

Depending on where you live, you have the right to:

• see the information we hold about you, and get a copy of it;
• correct it if it is wrong;
• delete it;
• object to our use of it for play statistics, or ask us to restrict it;
• receive it in a form you can take elsewhere;
• withdraw any consent you have given, at any time, as easily as you gave it (in the Android app: Settings, then Advert choices);
• nominate someone to use these rights for you if you cannot (India);
• complain to a data protection authority (see section 16).

Israeli law gives you the right to see the information about you in a database (section 13 of the Protection of Privacy Law) and to ask for it to be corrected or deleted (section 14).

To use any of these rights, email dev@kinshipstudio.games. We will answer within 30 days. It costs nothing.

An honest limit. Because the game has no account and we never know who you are, we cannot look you up by your name or your email address. On CrazyGames, the only thing that links play statistics to your browser is the random identifier in the bb_u_id cookie; if you send us that identifier, we can find the records that carry it. In the Android app, play statistics are linked to an identifier for the installation that the app does not show you, so we have no way to tell which records are yours. Section 11 says plainly what we can delete and what you can do yourself.

Stopping play statistics

The game does not yet have its own switch for play statistics. Today, on CrazyGames, you can stop them by blocking the address web-platform.bytebrew.io with a content blocker. Blocking or clearing cookies stops your visits being linked together, but does not by itself stop the statistics being sent. You can also email us to object, and we will act on it as far as the identifier in section 11 allows. In the Android app, play statistics are sent while you play; in India and the Philippines you can keep the advertising identifier out of them by choosing "Don't allow" under Settings, then Advert choices, and anywhere you can stop them by uninstalling the app.

11. Deleting your information

What is on your device

You can delete it yourself at any time: clear your browser's cookies and site data for the site you play on (on CrazyGames, that is the CrazyGames site). This erases your progress and the ByteBrew identifier. After that, your next visit starts a new game with a new random identifier that is not connected to the old one.

Play statistics held by ByteBrew

Before clearing your data, find the value of the cookie named bb_u_id in your browser's settings for the site (in most desktop browsers: the padlock or site information icon next to the address, then cookies or site data). Email it to us and ask for deletion. We will pass the request to ByteBrew, which deletes data on request (its privacy policy allows up to 45 days), and tell you when it is done. Without the identifier there is no way for us or ByteBrew to tell which records are yours.

In the Android app

What you can do yourself, at any time:

• Delete your progress and your answer to the consent question: clear the app's storage in your phone's settings (Settings, then Apps, then Tile Associations, then Storage, then Clear data), or uninstall the app.
• Delete the copy in Android's backup, if your phone makes one: in your phone's backup settings or in Google Drive, under Backups.
• Break the link between what was sent before and anything sent later: reset or delete your phone's advertising identifier (on most phones, Settings, then Google, then Ads). New statistics, adverts and Meta events are then not linked to the old ones.
• See and disconnect what the app has shared with Meta: in Facebook or Instagram, Settings, then Accounts Center, then Your information and permissions, then Your activity off Meta technologies.
• Manage what Google does with advertising information about you: My Ad Center in your Google account.
• Stop Meta and personalised adverts from now on: in India and the Philippines, and in Europe, the UK and Switzerland, Settings, then Advert choices.

What we can do, and what we cannot. We hold nothing about you ourselves except email you send us, and we delete that on request. The play statistics and advertising data are held by Google, and the app events by Meta, linked to identifiers for your phone and installation that the app never shows you or us, so we cannot find your records from your name or your email address, and we cannot ask Google or Meta to delete records we cannot point to. If you email us, we will delete what we can find and tell you honestly what we could not. Our data deletion page has the same steps.

The copy of your progress on CrazyGames, and data on Poki and Playgama

These are held by CrazyGames, Poki and Playgama under their own policies and account settings. Contact them directly, using the details in their privacy policies. We will help if we can.

12. Children

Tile Associations is meant for adults, 18 and over. On Google Play its target audience is set to 18 and over, and we aim our own adverts for it at adults. The age ratings the stores give it, such as PEGI 3 and ESRB Everyone, describe its content, which is word puzzles and nothing unsuitable for children; they do not mean the game is made for children.

We do not knowingly collect information from children. The game never asks for a name, an email address or anything else that identifies anyone, and has no chat. We cannot check anyone's age, and game sites and stores can still show the game to younger players.

If you are a parent or guardian and believe a child has used the game, email dev@kinshipstudio.games and we will delete what we hold, as section 11 explains, and help you with the steps you can take yourself.

13. Security

Everything the game and our sites send travels over encrypted connections (HTTPS). We keep as little as we can: no accounts, no passwords, no names. The play statistics dashboard is open only to the studio.

14. California residents

We do not sell personal information, as that term is used in the California Consumer Privacy Act. On game sites and our own websites we do not share it for cross-context behavioural advertising either. In the Android app, personalised adverts from Google AdMob may count as "sharing" under that law; you can opt out by turning off personalised adverts, or deleting the advertising identifier, in your phone's Google settings. The app events sent to Meta go with Limited Data Use switched on, so for players Meta places in California, and in the other US states with a similar law, Meta uses them only as a service provider for us and not to build a profile of you. The categories of information we handle are the ones in sections 3 and 4: identifiers (the random identifier, the identifier for the app's installation, your device's advertising identifier, Meta's identifier for the installation, and your IP address), internet or other electronic activity (play events, how you interact with adverts, and server logs), device information (your phone's or browser's model or kind, its Android version, language and screen size) and approximate location (worked out from your IP address, or the country code in your language setting). You can ask to know, correct or delete this information as described in sections 10 and 11, and we will not treat you differently for doing so. The game does not change its behaviour in response to "Do Not Track" or Global Privacy Control signals.

15. Changes to this policy

If the game starts to collect something new, or uses a new service, we update this page before or at the same time as that version of the game goes live, and change the date at the top. The Privacy page inside the game will point to the updated policy.

16. Contact and complaints

Kinship Studio, Israel. Email: dev@kinshipstudio.games.

For any privacy request or complaint, including a grievance under India's Digital Personal Data Protection Act, 2023, and a complaint under the Philippines' Data Privacy Act of 2012, write to Kinship Studio at dev@kinshipstudio.games. We will acknowledge it and answer within 30 days.

If you are not happy with our answer, you can complain to a data protection authority: in Israel, the Privacy Protection Authority (gov.il); in the European Union, the authority in your country (list of EU authorities); in the UK, the Information Commissioner's Office (ico.org.uk); in the Philippines, the National Privacy Commission (privacy.gov.ph); in India, once you have raised it with us first, the Data Protection Board of India, set up under the Digital Personal Data Protection Act, 2023.