Loot Match! Sort & Match 3D – Privacy Policy
Last updated: October 16, 2026
This policy explains how Jellybean Entertainment Co., Ltd. ("we", "us") handles information when you play Loot Match! Sort & Match 3D (the "Game").
Who we are
Jellybean Entertainment Co., Ltd. (a Japanese corporation) Shinjuku Park Tower N 30F, 3-7-1 Nishishinjuku, Shinjuku-ku, Tokyo 163-1030, Japan Representative: Vince McDonnell Contact: info@jellybeanent.com Privacy contact: Privacy Officer (Data Protection Officer), Jellybean Entertainment – privacy@jellybeanent.com
We are responsible for your personal information under Japan's Act on the Protection of Personal Information (APPI) and, where they apply, other privacy laws such as the GDPR, PIPEDA and the Philippines Data Privacy Act.
Information we collect
No email/password registration is required. You play as a guest: when you first open the Game, Firebase Authentication (anonymous sign-in) creates a guest identity and player ID for you. We collect:
- Player ID and game data: your guest identity, player ID, progress, inventory and settings, so your game can be saved and restored.
- Usage data: gameplay events such as stages started or finished, upgrades chosen and session length.
- Device and technical data: device model, operating system, app version, language, approximate country or region, time zone, IP address, and app or device identifiers.
- Crash and performance data: crash logs and diagnostic information.
- Purchase data: if you make an in-app purchase, a record of the item, price and transaction ID. We do not receive your full payment-card details. Apple or Google processes payments, and we receive purchase records.
- Advertising data: the Game shows ads. Our ad partners may collect your device's advertising identifier (according to your device settings and choices), IP address, device information and ad interactions. See "Ads and your choices" below.
- Support messages: if you email us, your email address and anything you include in the message.
We do not offer chat, public profiles or user-generated content. You don't need to provide your real name to play. Support messages may contain your name or other information you provide. We do not collect your contacts, photos or precise location.
How we use information
- To create and manage your guest account and sign you in (authentication and account management)
- To run the Game, save your progress and deliver purchased items
- To understand how the Game is played, fix bugs and improve balance
- To show ads and measure their performance
- To prevent fraud and cheating and keep the Game secure
- To answer support requests
- To comply with legal obligations
We do not enable Google Analytics advertising features (such as Google signals or advertising personalization) in Firebase Analytics.
Legal basis (EEA and UK)
If the GDPR or UK GDPR applies to you, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Guest account, running the Game, saving progress, delivering purchases | Performance of our contract with you (the Game's terms) |
| Analytics, bug fixing and improving the Game | Our legitimate interests in operating and improving the Game |
| Crash reporting, security, fraud and cheat prevention | Our legitimate interests in keeping the Game stable and secure |
| Personalized ads | Your consent |
| Non-personalized ads and ad measurement | Our legitimate interests in funding a free Game with ads |
| Answering support requests | Our legitimate interests in helping you (or contract, where it concerns your account) |
| Keeping purchase records and responding to authorities | Compliance with legal obligations |
Who we share information with
We do not sell your personal information. We share it only with:
- Google (Google Cloud and Firebase): server hosting, guest sign-in (Firebase Authentication), analytics and crash reporting.
- Apple and Google: app distribution and payment processing.
- Advertising partners: to show and measure ads, under their own privacy policies (see below).
- Authorities: when required by law, or to protect our rights or the safety of others.
Services we use
| Service | Provider | Purpose | Privacy policy |
|---|---|---|---|
| Firebase Authentication | Anonymous guest sign-in and player ID | https://firebase.google.com/support/privacy | |
| Firebase Analytics (Google Analytics for Firebase) | Gameplay analytics | https://policies.google.com/privacy | |
| Firebase Crashlytics | Crash and performance reporting | https://firebase.google.com/support/privacy | |
| Unity LevelPlay | Unity Technologies | Ad mediation and ad measurement | https://unity.com/legal/game-player-and-app-user-privacy-policy |
| App Store payments | Apple | App distribution and in-app purchases | https://www.apple.com/legal/privacy/ |
| Google Play payments | App distribution and in-app purchases | https://policies.google.com/privacy |
Ads and your choices
We use Unity LevelPlay (by Unity Technologies) as our ad mediation platform. It chooses which ad network shows an ad. Unity's privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
LevelPlay may show ads from other ad networks it works with. Unity keeps a list of these partners and links to their privacy policies in its privacy policy, linked above. We will update this page if we add an ad network directly.
Personalized vs. non-personalized ads. Personalized ads are chosen using information such as your advertising ID and app activity, so they are more likely to match your interests. Non-personalized ads are based only on general context, such as the Game itself and your approximate location, and are not tailored to you. You will still see ads either way.
Your consent choices. Where the law requires it (for example in the EEA, UK and Switzerland), we show a consent prompt when you first play so you can choose whether to allow personalized ads. If you don't agree, you'll see non-personalized ads. We only show personalized ads after you agree through this in-game consent prompt or, on iOS, Apple's App Tracking Transparency prompt, as applicable.
Withdrawing consent. You can withdraw your consent to personalized ads at any time by: (a) changing your device's advertising ID settings (see iOS and Android below); (b) using the in-game privacy settings, once available; or (c) emailing privacy@jellybeanent.com with your player ID. After you withdraw, you will see non-personalized ads. Withdrawing does not affect processing done before you withdrew.
iOS (App Tracking Transparency). On iPhone and iPad, we ask for your permission through Apple's App Tracking Transparency prompt before any tracking. If you choose "Ask App Not to Track", your advertising ID is not shared with ad partners for tracking. You can change this any time in Settings > Privacy & Security > Tracking.
Android (Advertising ID). You can opt out of personalized ads or reset or delete your advertising ID in your device settings (Settings > Google > Ads, or Settings > Privacy > Ads).
International transfers
Our servers run on Google Cloud in Tokyo, Japan. However, some of the providers we use process personal information outside Japan. The main destination is the United States, where Google (Firebase Authentication, Firebase Analytics and Firebase Crashlytics) and Unity Technologies (Unity LevelPlay) process data, including IP addresses and device identifiers. These providers, Apple and the ad networks that LevelPlay works with may also process data in other countries.
Safeguards. We share data with these providers under their data protection terms (for example, the Firebase Data Processing and Security Terms: https://firebase.google.com/terms/data-processing-terms), which require them to protect personal information. Where applicable (for example, for data from the EEA, UK or Switzerland), transfers rely on the European Commission's Standard Contractual Clauses (SCCs) or other recognized transfer mechanisms. For details on how Firebase handles data, see https://firebase.google.com/support/privacy
Information about foreign privacy laws (Japan APPI). Japan's Personal Information Protection Commission publishes information about personal information protection systems in other countries, including the United States: https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku (Japanese). If you would like more information about these transfers, including the countries involved, the privacy laws there and the safeguards our providers have in place, email privacy@jellybeanent.com.
How long we keep information
- Account and game data: kept while your account is active, and deleted within 30 days of a deletion request.
- Backups: deleted data is purged from backups within 90 days.
- Crash and analytics data: analytics event data is kept for 2 months and crash reports for 90 days, then deleted automatically.
- Support emails: kept for up to 2 years.
- Purchase records: kept for as long as tax and accounting law requires.
Security
We use encrypted connections (HTTPS/TLS), access controls and Google Cloud's security infrastructure. No system is completely secure, but we work to protect your information.
Your rights and choices
Depending on where you live, you may ask us to access, correct or delete your information, stop using it or stop sharing it with third parties, or give you a copy of it. You may also complain to your local data protection authority. To make a request, email privacy@jellybeanent.com with your player ID (shown in the game's settings). We will reply within 30 days and may need to verify that you own the account.
- Ads: see "Ads and your choices" above.
- Notifications: Loot Match does not send push notifications yet. If we add them, we will ask your permission first, and you can turn them off at any time in your device settings.
- Deleting your data: email privacy@jellybeanent.com with the subject "Delete my data" and include your Player ID. We will delete your account and game data within 30 days. Full steps are on our Delete Your Data page: Delete Your Data. An in-game option (Settings > Delete Account) is coming soon.
Your rights by region
- Japan (APPI): you may ask us to disclose the personal information we hold about you (including records of third-party transfers), to correct, add to or delete it, and to suspend its use or deletion, or stop providing it to third parties. You can complain to the Personal Information Protection Commission (https://www.ppc.go.jp/en/).
- Philippines (Data Privacy Act of 2012): you have the right to be informed, to access, to correct, to erasure or blocking, to object, to data portability and to claim damages. You can complain to the National Privacy Commission (https://www.privacy.gov.ph/).
- Canada (PIPEDA): you may ask to access and correct your personal information and may withdraw your consent, subject to legal or contractual limits. You can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca/en/).
- EEA and UK (GDPR / UK GDPR): you have the rights of access, rectification, erasure, restriction, objection (including to processing based on legitimate interests) and data portability, and you may withdraw consent at any time. You can complain to your local supervisory authority (in the UK, the Information Commissioner's Office).
Children
The Game is not directed to children under 13, and its target audience is ages 13 and up. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you are a parent or guardian and think your child under 13 has given us information, please contact us at privacy@jellybeanent.com.
Teens (13–17). If you are between 13 and 17, please review this policy with a parent or guardian. A parent or guardian may contact us at privacy@jellybeanent.com to exercise rights on a teen's behalf.
Changes
We may update this policy. If we do, we will change the "Last updated" date above, and for significant changes we will give notice in the Game or on this page.
Contact
Jellybean Entertainment Co., Ltd. General: info@jellybeanent.com Privacy Officer (Data Protection Officer): privacy@jellybeanent.com