Cozy Posy - Privacy Policy

Last updated: 5 September 2026

Cozy Posy is a flower-sorting puzzle game for iPhone, iPad and Android (app id com.caesgames.cozyposy). This page explains in plain language what the game does with data. It is short because the game does very little.

The short version

• Cozy Posy has no accounts, no login, and no server of its own. The developer receives no data about you at all: not your progress, not your score, not an email address, nothing.
• Your saved game stays on your phone.
• The only data that leaves your device for advertising goes to Google. The section below says exactly when that happens - and it can happen in a session where you never watch an ad, because one ad is fetched in the background when the game starts.
• The game also asks the app store you installed from - Apple or Google - what its three coin packs cost where you are, and whether you have a purchase it has not finished delivering. Those requests carry nothing the game knows about you, and they happen every time the game starts, whether or not you ever buy anything. See "Purchases".
• Watching an ad is opt-in. Ads play when you choose to watch one for a reward. There are no banners, no pop-ups, and no ads forced between levels.
• The game never asks you for a name, an email address, an age, or your location, and it never uses your camera, microphone, photos or contacts.

Who is responsible

Cozy Posy is made by an independent developer.

• Developer: Cae's Games (Cennet Okur)
• Contact: caesgames.dev@gmail.com

You can write to that address about anything on this page.

What stays on your device

Your save file. The game keeps one progress file on your phone. It holds the level you have reached, the levels you have unlocked, your coins, your shop reputation and decorations, your daily-gift streak, your lives and the timers that refill them, your boosters, your flower collection and its rewards, your best stars for each level, and your settings (music, sound, vibration, reduced motion).

That file contains no name, no email address, no account, and no device identifier. Nothing in it can identify you. It is never uploaded, and the game contains no code capable of uploading it.

A small local log. For the developer's own testing, the game appends one short line to a text file on your device when things happen. Each line holds a timestamp, an event name - a level starting, being won or being failed, a booster used, the how-to-play screen opened, a rewarded ad watched, a purchase attempted - and a short detail saying which one: which level, which booster, which ad placement, which product. If the game hits an error, the text of the error and the first few lines of its stack trace are written to the same file.

This file also never leaves your device. Nobody can read it remotely; it can only be read from the phone itself. It is capped at about 512KB: at that point it is copied to a single older file beside it (funnel.log.1) and starts again, so at most two of these logs exist and the older one is overwritten at the next changeover.

None of these files is sent anywhere. The game has no server, no cloud save, and no upload of any kind.

What leaves your device: ads from Google

This section describes the only way any data leaves Cozy Posy for advertising. The game's other contact with the outside world is with the app store you installed from - about the price of the coin packs, and about a purchase of yours the game has not finished delivering - and that is described under "Purchases" below.

Cozy Posy shows rewarded video ads: short videos you choose to watch in exchange for something in the game. Ads are supplied by Google (Google AdMob), through Google's Mobile Ads software that is built into the game.

When an ad is requested, Cozy Posy's own code sends nothing about you. It asks Google for an ad and nothing else - no identifier, no profile, no gameplay information. Google's software, running inside the app, then collects and sends its own data directly to Google. According to Google's own documentation, that can include:

• your IP address, and an approximate location (country or region level) worked out from it;
• an identifier for your device: the Advertising ID on Android; on iPhone and iPad the vendor identifier (IDFV), plus the advertising identifier (IDFA) only if you allowed tracking when Apple's prompt asked - see "On iPhone and iPad" below;
• device and app information, such as device model, operating system version and app version;
• what happened with the ad: that it was requested, shown, clicked, or watched to the end.

Google uses this to choose and measure ads and to detect fraud. Google's explanation of how it uses data from apps that use its services is here:

https://policies.google.com/technologies/partner-sites

The developer never sees any of it. What reaches the developer is a totals page in an AdMob account: how many ads were shown and what they earned. No individual person appears in it.

Google is the only third party that receives any data from this game for advertising, and it receives it directly rather than through the developer. Google is bound by its own published privacy commitments, linked above, which provide protection for that data equivalent to what this policy describes.

This data leaves the country you are in. Google's advertising servers may be outside Türkiye, the European Economic Area, the UK and Switzerland, so the data listed above is transferred internationally. Google decides where that data goes and is responsible for the safeguards covering the transfer; its policy, linked above, describes them.

When this happens - the honest part

Watching an ad is your choice. But a rewarded ad is fetched in the background when the game starts, so that the "watch an ad" button is ready if you ever want it. That fetch is a real ad request. It means the data listed above can reach Google on first launch, before you have touched anything, and in a session where you never watch a single ad.

There is one exception. If you are somewhere a consent form is required and you refuse it, Google's advertising software is never started at all: no ad is requested, no ad is loaded, and nothing goes to Google's advertising servers.

One further transmission, for completeness: when the game starts, it asks Google once whether a consent form is required where you are. That check happens before you answer anything and before any ad request. Apart from ad requests themselves, it is the only contact the game makes with Google's advertising side. (On an Android phone the store requests described under "Purchases" reach Google as well, but as the operator of Google Play rather than as an advertising company.)

Your choices about ads

In the European Economic Area, the UK and Switzerland

The first time you open Cozy Posy, Google's consent form appears. Nothing to do with advertising happens until you answer it.

If you refuse, the game never starts Google's advertising software at all. No ad is requested, no ad is loaded, and nothing is sent to Google's advertising servers. The "watch an ad" button simply never appears. Everything else works exactly the same: every level, every reward you earn by playing, and all of your progress.

Changing your mind. Cozy Posy does not yet have a button in its Settings that reopens the consent form. Until it does, removing the app from your device clears the answer that was stored there, so installing it again asks you again. The device-level controls below also work at any time.

On iPhone and iPad

Apple requires your permission before any app may use your device's advertising identifier (IDFA) to track you across other companies' apps and websites. Cozy Posy asks for it: on your first launch, Apple's own "Allow tracking?" prompt appears. It comes after the consent form described above, where one is shown, so you see the explanation before the question.

• If you allow it, Google may use the IDFA to personalise and measure the ads you see.
• If you decline - or if you were never asked, because your device or its settings do not permit the prompt - Google receives no IDFA and serves non-personalised ads instead. Everything in the game works exactly the same either way.

Apple asks once. You can change your answer at any time in Settings > Privacy & Security > Tracking.

From your device settings

• iPhone and iPad: Settings > Privacy & Security > Tracking. Turn tracking off for this app or for all apps.
• Android: Settings > Privacy > Ads (the exact path varies by phone), where you can delete or reset your advertising ID. Deleting it stops personalised ads in every app.

Legal basis

If you are in the EEA, the UK or Switzerland, the GDPR and equivalent laws apply.

• For what Google's advertising software collects, the legal basis is your consent, which you give or refuse in the form described above. Some of the advertising companies listed in that form rely instead on their own legitimate interest for part of what they do, which the form says on its face and which you can object to there, under "Manage options", one company at a time. Refusing consent outright stops the advertising software from starting at all, so it stops both.
• For the single start-up check that decides whether a form is needed, the basis is the legitimate interest in complying with the law that requires the form in the first place.
• For the start-up request that asks the app store what the coin packs cost, the basis is the legitimate interest in showing you a price that is correct in your own currency. That request tells the store which three products this game sells, and nothing about you. Where the same connection asks whether a pack you paid for is still undelivered, or confirms one that has been delivered, the basis is performance of the purchase you made.
• That data is transferred outside the EEA, the UK and Switzerland, as described above. Google is the controller for it there and is responsible for the safeguards that cover the transfer.
• There is no other processing to justify, because no other data leaves your device.

For the advertising data it collects, Google decides how that data is used and is responsible for it in its own right. Google's policy is linked above.

What Cozy Posy does not do

• No account, login, username, email address, password or profile.
• No cloud save, leaderboard, friends list, chat or sharing.
• No analytics service and no crash-reporting service. There is no Firebase, no Unity Analytics, and no tracking or attribution software of any kind. Two pieces of third-party code in the game use the internet and no others: Google's advertising software, and the in-app purchase code that talks to Apple's or Google's store.
• No location access. The game never asks for and never uses your device's location. (Google can infer an approximate area from your IP address, as described above.)
• No camera, microphone, photos, contacts, health or fitness data.
• No push notifications, and no push token or notification address for you (see below).
• No data sold by the developer, and none shared with data brokers, because the developer receives none. Note that personalised advertising can itself count as "sharing" or "selling" under some US state privacy laws. Refusing ad consent, or turning tracking off as described above, stops it.

Reminders on your device

Cozy Posy can remind you when your lives are full or your daily gift is ready. These are local notifications: your phone schedules them itself, from timers inside the game. Nothing is sent over the internet, no message comes from a server, and the game holds no address or token for you. You can turn them off in your device's notification settings.

The game also uses your phone's vibration for feedback on the board, which you can switch off in Settings. Vibration involves no data.

Purchases

Cozy Posy is free to download. Inside it there are three optional coin packs - small, medium and large. Nothing else is for sale, there is no subscription, and there is nothing you have to buy.

The payment is not handled by this game. When you buy a pack, Apple's or Google's own purchase sheet appears, and the payment happens entirely there: the store takes the money, using whatever payment method is already on your store account, and then tells the game one thing - that a purchase of that product succeeded. The developer never receives and never sees your card number, your billing address or your store account. There is no code in the game capable of asking for any of it.

What the game does with that answer is add the coins to the save file on your phone. That is the whole record. No record of the purchase is sent to the developer: there is no receipt held by the developer and no server to hold one on. The only trace outside the save file is a line in the local log described above - a timestamp, an event name, and which pack - which, like every other line in that file, stays on your device.

The price the shop shows. So that a pack can be priced in your own currency rather than in the developer's, the game asks the store, when it starts, what the three packs cost and whether they are available where you are. That request goes to Apple or Google as the operator of the app store you installed the game from, not as an advertising company. It carries the three product identifiers and nothing the game knows about you - no identifier, no save data, no gameplay information - and it is made every time the game starts, whether or not you ever buy anything.

The same connection is used for two other things, both of them about a purchase you made rather than about you. At start-up the game asks the store whether you have a pack you paid for that was never delivered - which is what makes the coins arrive anyway if the app was closed in the middle of a purchase - and once a pack has been delivered, the game tells the store so, which is what stops the store offering it again. Apple's and Google's servers may be outside the country you are in.

How long data is kept

• On your device: your save file and the local logs stay until you remove them. Deleting the app removes everything the game has written. Inside the game, Settings > Delete save erases your progress and its backups; it does not erase the two log files described above, which go when you delete the app.
• By Google: how long Google keeps advertising data is set out in Google's policy, linked above.
• By the developer: nothing is kept, because nothing is received.

Your rights

Because the developer holds no data about you, there is nothing to look up, correct, export or delete on request, and no way to identify you even if we tried. That is not a dodge; it is how the game is built.

What you can actually do:

• Delete everything the game holds: delete the app. Settings > Delete save inside the game clears your progress and its backups, but not the two log files.
• Reach Google's side of it: rights over the data Google collected go to Google, through the policy linked above. Resetting or deleting your advertising ID, as described above, breaks the link to your device.
• Ask anyway: if you are in the EEA, the UK, or a US state with a privacy law, and you want to make a request, write to caesgames.dev@gmail.com. You will get an answer, even when the answer is that there is nothing to hand over. You also have the right to complain to your local data protection authority.

Children

Cozy Posy is made for a general audience. It is not directed at children under 13, and the developer does not knowingly collect personal data from children. If you believe a child has provided personal data through this game, write to caesgames.dev@gmail.com.

The game does tell Google to serve only ads rated G - its strictest content rating - so the ads shown inside Cozy Posy are limited to general-audience material.

Changes to this policy

If the game starts doing something this page does not describe - a cloud save, an analytics tool, a server of its own - this page is updated before that version is released, and the date at the top changes.

Contact

caesgames.dev@gmail.com