The Chocolate House Privacy Policy

Effective date: 27 September 2026

This policy explains what The Chocolate House does with your data. It is published at https://playchocolatehouse.com/privacy, the address registered with the App Store and Google Play and linked from Settings inside the game.

Who we are

The Chocolate House (the game) is made and published by Franz Health Ltd. Franz Health Ltd is the data controller for your personal data. Franz Health Ltd is registered in England and Wales, company number 17182431. We are registered with the UK Information Commissioner (ICO), registration number ZC198020. You can reach us at support@playchocolatehouse.com.

The short version

• There are no accounts and no sign in.
• There are no push notifications and no local notifications.
• The game never requests camera, microphone, photo or location permission.
• Your chocolatier, its saves and its settings stay on your device. We cannot see them.
• Play statistics are kept only if you switch on Share play statistics. They stay on your device, and leave it only inside a support email you choose to send.
• The only data that leaves your device goes to the vendors described below, for ads, optional install attribution and purchases.

The rest of this document is the same information, at the length the law prefers.

Data that stays on your device

The game stores your save, your settings, your purchase records and, if you switch them on, your play statistics locally on your device. We run no servers, so there is nowhere for this data to go, and we could not recover a save for you. Deleting the game deletes all of it.

Advertising (Google AdMob)

The game shows ads through Google AdMob, and asks for advertising consent through the User Messaging Platform (UMP), also from Google. Ads are limited to content rated for a general audience. There are two kinds of ad:

• Reward videos, which play only when you choose one, in exchange for the reward stated before it starts. The reward is granted only when the video finishes, and no reward ever depends on tapping an ad or allowing tracking.
• Automatic ad breaks, a full screen ad that can appear when you close a trading report or the summary of your time away. The button that closes the report says so before you tap it. None appears early in your first session, breaks are spaced apart and capped per hour, and the Ads card in Settings states the current limits. The Remove Automatic Ads purchase turns them off for good, and reward videos stay available.

Consent comes first. At first launch the consent form appears where the law requires it (in the UK, the EEA and Switzerland), and on iOS Apple then asks whether the game may use your advertising identifier (App Tracking Transparency). No ad is requested until both steps are done, and neither answer changes what you can do in the game.

When an ad is requested, Google processes: device identifiers (including the advertising identifier, where you have permitted it), your IP address (from which a coarse location is derived), device and app information, ad interaction events, and diagnostics. If you decline consent, or decline tracking permission on iOS, ads become non personalised, but Google still processes your IP address and device information to serve ads, limit how often they appear and prevent fraud.

Google describes its own processing at https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

Optional install attribution (AppsFlyer)

Share install attribution in Settings > Privacy is off until you switch it on. After the advertising consent flow has completed, switching it on starts AppsFlyer so we can measure which campaign led to an install. AppsFlyer may process your IP address (to estimate an approximate location), device identifiers (including the advertising identifier where permitted), and app launch data. We do not send it your save, game progress, purchases, contact details or an account ID. Switching this setting off stops AppsFlyer collection on this device. The game remains fully playable either way.

AppsFlyer describes its processing at https://www.appsflyer.com/legal/privacy-policy/.

Purchases (RevenueCat)

In app purchases are made through Apple or Google and managed through RevenueCat. Because the game has no accounts, RevenueCat assigns an anonymous random app user ID and records your purchase history and receipt validation data against it. This is used to deliver your purchases, restore them when you reinstall, and help you when something goes wrong. Payment itself is handled entirely by Apple or Google. We never see your card details, and neither does RevenueCat.

• Sovereigns are the game currency you can buy. They can also be earned free in play and from reward videos. Your balance, and a count of where your Sovereigns came from, are kept on your device with the rest of your save.
• Each purchase is credited once. The game keeps the store transaction IDs it has credited on your device, so a repeated report from the store, or a reinstall, never credits a purchase twice.
• A purchase waiting for approval (Ask to Buy, or a pending payment on Google Play) grants nothing until the store confirms it. A cancelled or failed purchase grants nothing and is not charged.
• Restore purchases, in the Store and in Settings, asks the store which one time purchases (such as Remove Automatic Ads) belong to your store account and applies them again. Sovereign packs are consumable, so they are spent in the game and cannot be restored.
• Refunds are decided by Apple or Google under their own policies. When a one time purchase is refunded, the game removes what it unlocked the next time the store reports your purchases. Sovereigns from a refunded pack may be taken back, never more than you hold, and a refund never removes your chocolatier, its stock or its cash.

RevenueCat describes its own processing at https://www.revenuecat.com/privacy.

Play statistics

Share play statistics is a switch in the Privacy card of Settings. It is off until you switch it on. While it is on, the game keeps a small record of play events on your device, such as a session ending, opening the Store, a purchase starting, completing or failing, a restore, or a reward video finishing. Each event holds only numbers and names the game itself defines, such as a product ID or the length of a session. Store, purchase and ad events also note whether you have removed ads or bought anything, your Sovereign balance, and how much of your cash in the game came from rewards or purchases. The record keeps only the latest 256 events. It never holds your name, anything you typed, your location, or any identifier of you or your device.

Nothing sends this record anywhere. It leaves your device only if you write to support with Email support in Settings while the switch is on: the email then includes a short summary of the record, which you can read, change or delete before you choose to send it. Switching Share play statistics off deletes the record.

Identifiers

We run no servers and hold none of these identifiers ourselves. They exist on your device and at the vendors named above, nowhere else.

Legal bases

Under the UK GDPR and the EU GDPR, we rely on: consent, for personalised advertising and for play statistics you include in a support email; contract, for delivering, restoring and supporting the purchases you make; and legitimate interests, for non personalised ad serving, fraud prevention and vendor diagnostics. Optional install attribution relies on your consent, which you can withdraw in Settings. Where we rely on legitimate interests, the interest is running a free game funded by ads and optional purchases without being defrauded while doing it.

Consent, and changing your mind

The consent form and the tracking question come before any advertising processing, as described under Advertising above. Ad privacy options, in the Ads card of Settings, reopens the consent form at any time wherever the form applies. You can also withdraw tracking permission in iOS Settings > Privacy and Security > Tracking, and on Android you can reset or delete your advertising ID in system settings. Withdrawing consent is as easy as giving it. Declining everything leaves the game fully playable.

Choices inside the game

• Ad privacy options, in the Ads card of Settings, reopens the consent form so you can revisit your advertising choices.
• Share install attribution, in the Privacy card of Settings, is off until you enable it and can be switched off there again.
• Share play statistics, in the Privacy card of Settings, is off until you switch it on, and switching it off deletes the record.
• Remove Automatic Ads, in the Store, turns automatic ad breaks off for good.

Retention

We retain nothing, because there is no server to retain it on. Play statistics on your device keep only the latest 256 events, and are deleted when you switch them off or delete the game. The vendors above retain data under their own policies, at the links above. Support email threads are kept for as long as needed to resolve the issue and are then deleted.

Children

The game is for players aged 13 and over. It is not directed at children under 13, and it carries an age rating in each store. We do not knowingly process the data of children under 13. If you believe a child has sent us personal data by email, contact us and we will delete it.

Your rights (UK and EU)

You have the rights of access, rectification, erasure, restriction, portability and objection. To exercise them, email support@playchocolatehouse.com. For most of the data described in this policy the vendors above are the ones actually holding it, and we will point you to the right place rather than pretend to search servers we do not have. You also have the right to complain to the ICO (https://ico.org.uk) or to your local EU supervisory authority.

US state privacy

We do not sell personal information for money. The advertising described above is the processing that some US state laws count as sharing or targeted advertising. You can opt out through the consent form, the tracking permission, Ad privacy options in Settings and the advertising ID controls of your operating system. We honour rights requests sent to the support email, verified against device level identifiers you provide, because we hold nothing else to verify you with.

International transfers

The vendors named above process data in the United States and elsewhere. Those transfers rely on standard contractual clauses, the UK Addendum, or the Data Privacy Framework between the EU and the US where the vendor is certified under it.

Changes

When this policy changes, we will update this page and the effective date at the top. The game cannot message you, so this page is where changes appear.

Contact

support@playchocolatehouse.com. Franz Health Ltd, England and Wales, United Kingdom.