1Who we are
CookieJar is made by Ogy Digital Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are the controller of the personal data described here. Questions go to admin@thecookiejar.app.
Updated 10 October 2026
Privacy, in plain words
CookieJar is for quick games, not for collecting your life story. Here's exactly what we collect, why, and how to get rid of it.
No ads. No tracking.
No advertising SDKs, no advertising ID, and nothing that follows you across other apps or websites.
Games get nothing personal
The games you play inside CookieJar only receive a random seed and send back a score.
Light analytics
We count how features are used to improve the app. No phone number, no real name, no location.
Delete anytime
Profile → Settings → Delete account removes your account and what's linked to it.
2What we collect, and why
Your account
- Phone number (to send your sign-in code)
- Username and display name
- Bio and profile photo, if you add them
- Birthday, if you add it (kept private)
Why: To create your account, sign you in and show your public profile.
Things you create
- Games you publish: files, title, description, thumbnail
- Reports and blocks you make
Why: To host your games, keep the community safe and review reports.
Activity in the app
- Games you play, like and save; people you follow
- Tournament entries, scores and leaderboard positions
- Coin activity: daily coins, entry fees and prizes (virtual coins, never cash)
Why: To run the feed, tournaments, leaderboards and your wallet.
Purchases
- Supporter Pack purchase and restore history
- Never your card or bank details. Apple or Google handle payment
Why: To unlock what you bought and restore it on a new device.
Usage analytics
- Your account ID and public username
- Product events such as 'game started' or 'tournament joined'
- Device model, OS version, app version and language
Why: To understand which features work and fix what doesn't. IP-based location is switched off.
What we don't collect
Precise or approximate locationContactsHealth or fitness dataBrowsing historyAdvertising identifiersCard or bank details
3Our legal reasons
- Running the service you asked for (contract): your account, games, feed, tournaments, purchases.
- Legitimate interests: keeping CookieJar safe, handling reports, and understanding usage to improve the app.
- Legal obligations: keeping purchase records and answering lawful requests.
4Who sees your data
Other players see your public profile (username, display name, bio, photo), the games you publish and your tournament scores. Your phone number and birthday are never shown.
Game creators see totals such as plays, likes and saves, never who you are.
Service providers process data for us under contract and only to run CookieJar:
Supabase
Accounts, database, file storage and sign-in codes
PostHog
Product analytics (hosted in the United States)
RevenueCat
Keeps track of Supporter Pack purchases
Apple & Google
App distribution and in-app payments
We don't sell your data, and we don't share it with anyone for advertising.
5Games inside CookieJar
Each game runs in a sealed web view. CookieJar gives it a random seed for fair tournaments and receives your score at the end. No name, phone number, account ID or other personal data is passed to the game.
6International transfers
Some providers, including PostHog, store data in the United States. Where data leaves the UK or EU, we rely on the safeguards the law provides, such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
7How long we keep it
- Account data and content: for as long as your account exists.
- When you delete your account, your profile, games and activity are deleted. Backups roll off within 30 days.
- Purchase records: as long as the law and the app stores require.
- Analytics events: kept for a limited period, then deleted in line with PostHog's retention settings.
8Your rights and choices
You can ask to see, correct, export or delete your data, or object to how we use it. You can edit your profile and delete your account in the app at any time (Profile → Settings → Delete account). For anything else, email admin@thecookiejar.app and we'll reply within 30 days.
If you're in the UK you can complain to the Information Commissioner's Office (ico.org.uk). In the EU or Türkiye, you can contact your local data protection authority. We'd love the chance to fix things first.
9Children
CookieJar isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email admin@thecookiejar.app and we'll delete the account.
10Keeping data safe
Data travels over encrypted connections and is protected by access rules in our database. No system is perfectly secure, so we limit what we collect in the first place.
11Changes to this policy
When we change this policy we update the date at the top. If a change is significant, we'll tell you in the app before it applies.
Questions?
Write to admin@thecookiejar.app. A real person reads every message.