What the Cubes? Impossible — Privacy Policy
_Last updated: June 2026_
1. Who we are (Data Controller)
The data controller for the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") is:
Can Ayan (sole trader) Email: info@kalibrefin.com
We are referred to in this policy as "we", "us", or "the controller". This policy covers the iOS game "What the Cubes? Impossible" (the "Game").
2. The short version
What the Cubes? Impossible is an offline, on-device arcade game. It does not require an account to play, does not run third-party analytics or advertising SDKs, and does not track you across other apps or websites. The only data that ever leaves your device is what Apple itself processes for in-app purchases.
3. What data we process
3.1 Stored on your device
- Game progress: best score, coins, gems, unlocked skins, the
currently equipped skin.
- Settings: sound on/off, haptics on/off, language, onboarding and
tutorial completion flags.
- Purchase flags: which non-consumable products (e.g. the Starter
Bundle / Founder skin) you own, so they can be restored.
This data lives in the app's local storage (iOS UserDefaults / the app sandbox). It is never uploaded to a server we operate. If you have iCloud backup enabled, iOS may include this data in your device backup — that path is operated by Apple, and we have no access to it.
3.2 In-app purchases (StoreKit)
When you buy coins, gems, or the Starter Bundle, the transaction is handled entirely by Apple through StoreKit. We never see or receive your name, card number, or any payment details. We receive only an anonymous transaction identifier from Apple, used on-device to grant the items you bought and to prevent granting the same purchase twice. We do not operate any purchase server.
3.3 What we do NOT collect
- ❌ Precise or coarse location (no GPS, no location permission).
- ❌ Contacts, photos, microphone, camera, or motion sensors.
- ❌ HealthKit or any health data.
- ❌ Advertising identifiers (IDFA). No ads, no ad SDKs.
- ❌ Any cross-app or cross-site tracking (NSPrivacyTracking = false).
- ❌ Real names, card numbers, or payment details (Apple handles all of
this).
4. Legal basis (GDPR Article 6)
| Processing | Lawful basis |
|---|---|
| Storing game progress, settings and purchase flags on your device | Contract (Art 6(1)(b)) — necessary to provide the Game. |
| Processing the anonymous StoreKit transaction ID to grant purchases | Contract (Art 6(1)(b)). |
We do not rely on consent-based tracking because we do not track you.
5. Who we share data with
We do not sell, rent, or share your data with advertisers, data brokers, or analytics providers. The only third party involved is:
- Apple, Inc. — through StoreKit (in-app purchases), governed by
Apple's privacy policy.
6. How long we keep it (Retention)
| Data | Retention |
|---|---|
| On-device game progress, settings, purchase flags | Kept on your device while the app is installed. Removed when you delete the app. |
| Purchase records | Held by Apple under the App Store agreement, outside our control. |
To erase all local data, delete the app from your device.
7. Your rights under GDPR (Articles 12–22)
You have the rights of access, rectification, erasure, restriction, portability, and objection. Because essentially all data we process lives on your own device, the fastest way to exercise erasure is to delete the app. For anything else, email info@kalibrefin.com and we will respond within one month.
You also have the right to lodge a complaint with your local data protection supervisory authority.
8. Children
The Game is not directed at children and is rated for a general audience. We do not knowingly collect data from children. Because the Game offers in-app purchases, we recommend parents enable Apple's Ask to Buy / Screen Time purchase restrictions for children's devices. If you believe a child has provided us data, contact info@kalibrefin.com.
9. Changes to this policy
We will update the "Last updated" date above and post the new version at the same URL. Material changes will be reflected here before they take effect.
10. Contact
Questions, data requests, or anything else:
Can Ayan Email: info@kalibrefin.com