Legal
Privacy Policy
Last updated: 22 October 2026
1. Who we are
Kurly Brackets (SMC-Private) Limited ("Kurly Brackets", "we", "us", "our") is a game development studio based in Rawalpindi, Pakistan. This policy covers:
- our website, www.kurlybrackets.com; and
- all mobile games and apps we publish (for example 2468 Block Puzzle: 2048 Merge, Mr Greedy: Tricky Riddles and our other titles), together "our games".
Questions or requests about this policy: hello@kurlybrackets.com.
2. Our games
2.1 What stays on your device
Our games do not ask you to create an account. Your progress, coins, lives, settings and purchases are stored on your device. We do not run servers that receive your game progress, and we cannot see it.
2.2 Advertising
Our games show ads from Google AdMob. To show and measure ads, and to prevent fraud, Google may collect, from your device: your advertising ID and app set ID, your IP address (used to estimate your general location), how you interact with ads and with the app (for example app launches, taps and video views), and diagnostic information about the app and the ad SDK. This data is sent to Google over an encrypted connection. See how Google uses data from apps that use its services.
Your choices. If you are in the European Economic Area, the United Kingdom or Switzerland, the game asks for your consent before showing personalised ads, and you can change your choice at any time in the game's Settings (Privacy choices). On Android you can reset or delete your advertising ID, or opt out of ad personalisation, in your device settings (Settings > Privacy > Ads). Some games let you remove interstitial and app-open ads with a purchase.
2.3 In-app purchases
Purchases are processed by Google Play. Our games use the Google Play Billing Library, through Unity's in-app purchasing component (Unity IAP). To process and verify purchases, restore items you bought, and for analytics, these components may collect purchase history, device and user identifiers, approximate location, and diagnostic and crash information. We do not receive your payment details, which stay with Google. See Unity's privacy policy.
2.4 Game timers
Some games read the current time from an internet server so that timers (such as lives refilling and daily rewards) cannot be changed by altering the device clock. This request carries no personal information beyond what any internet connection reveals, such as your IP address.
2.5 Analytics and crash reporting
Depending on the game, we use Google AdMob and Unity IAP as described above, and some of our games also use Firebase Analytics and Firebase Crashlytics to find bugs and understand how the game is used. Where used, this is limited to technical information such as device model, operating system version, crash logs and anonymous usage events.
2.6 Permissions
Our games need an internet connection to show ads and process purchases. They may use vibration for feedback. They do not ask for access to your contacts, photos, microphone, camera or precise location.
3. Our website
What you send us. When you use our contact form we receive your name, email address and the details you choose to enter: company, country, the kind of help you need, project stage, timeline, budget, your message and whether you would like an NDA. When you request a free store audit we receive your email address and your store listing link. If you email us or message us on WhatsApp, we receive what you send.
Server logs. Our hosting provider automatically records basic technical details of each visit (IP address, browser type, date and time, and the page requested) to keep the site running and secure.
Spam protection. To stop repeated automated submissions, our contact form keeps a one-way scrambled (hashed) form of your IP address for a short time. It cannot be turned back into your IP address and is deleted within an hour.
Cookies. This website does not set any cookies and we do not use analytics, advertising or social media tracking on the site itself. See our Cookie Policy for details.
4. How we use information
- To run our games and website, and to keep them secure and working.
- To show ads, process purchases and prevent fraud (through the services in section 2).
- To reply to your enquiries and prepare anything you ask for, such as a store audit or a quote.
- To manage a project or contract if we work together.
- To meet our legal and accounting obligations.
Where the law of your country requires a legal basis, we rely on your consent (for personalised ads), the performance of a contract (purchases and projects), our legitimate interests (security, fixing bugs, replying to you) and legal obligations.
5. Sharing
We do not sell your personal information. Data is processed for us or collected directly by service providers such as Google (advertising, purchases, email), Unity (in-app purchasing component) and Firebase (analytics and crash reporting, where used), and by our web hosting provider (Hostinger). We share information with anyone else only when it is needed to deliver work you asked for, or when the law requires it.
6. International transfers
We are based in Pakistan and our service providers operate globally, so information may be processed in countries other than yours. Those providers apply their own safeguards, described in their policies.
7. How long we keep information
Game data stays on your device until you uninstall the game or clear its data. Enquiries are kept as long as we need them to reply to you and, if we work together, for the length of the project and as long as our legal and accounting obligations require. Data held by Google, Unity or Firebase is kept according to their policies.
8. Your rights and deleting your data
Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal information, to object to certain processing, to withdraw consent, and to complain to your data protection authority. To use any of these rights, or to ask us to delete data we hold about you (for example an enquiry), email hello@kurlybrackets.com. We do not hold your game progress on our servers: to remove it, uninstall the game or clear its data in your device settings. For data held by Google (such as your advertising ID or ads data) use your Google account and device settings.
California residents: we do not sell personal information, and we do not share it for cross-context behavioural advertising except as described for Google AdMob in section 2.2. You can opt out of ad personalisation in your device settings.
9. Children
Our games are intended for a general audience and are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we will delete it.
10. Security
Our website is served over an encrypted connection (HTTPS), and the services in section 2 transmit data over encrypted connections. We use reasonable technical and organisational measures to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Other websites and services
Our pages and games link to other sites and services, such as app stores and WhatsApp. When you follow such a link, that service's own privacy policy applies.
12. Changes to this policy
We may update this policy from time to time, for example when we add a game or a service. The date at the top shows when it was last revised.
13. Contact
Kurly Brackets (SMC-Private) Limited
Rawalpindi, Pakistan
Email: hello@kurlybrackets.com