Privacy Policy

Pocket Pie Games Ltd. values your privacy. This privacy policy (“Policy”) describes how Pocket Pie Ltd. (“Pocket Pie”, “we”, “us”, “our”) processes Personal Data (as defined below) which we receive or collect in relation to your access and use of our websites,or other website we operate, and their subdomains (collectively, “Website”) and our mobile software application, “Pocket Sandbox - Legends”, and other applications we may offer (collectively, “App”), and other products and services we offer (the Website and App, products and services, all together “Services”) and from our business contacts (such as representatives of customers and suppliers) and other third parties who provide us with Personal Data. 

The term, “Personal Data”, as used in this Policy means information relating to an identified or identifiable natural person.

The term, “processing”, as used in this Policy means any action taken in respect of the data.

We may change this Policy from time to time in order to keep you apprised of our data collection and use practices. We encourage you to regularly visit and review this Policy to stay informed of such practices.  

Table of Contents

  1. The Personal Data we Collect and How we use it
  1. When you access and use our App or interact with our Services (automatically collected data)
  2. When you visit and use our Website (automatically collected data)
  3. When you interact with our social media accounts
  4. When you sign up for our newsletter or to receive updates or other communications from us 
  5. When you contact us (including for support)
  6. When you make a payment or enter payment information on the Services
  7. When you submit CV during your recruiting process with us 
  1. Automatically Collected Information: SDKs and Opt-Out Mechanism
  2. How (and with whom) we Share Personal Data
  1. Cloud and Hosting Services
  2. Law Enforcement or Other Government Entities 
  3. With your Consent 
  4. Disputes and Legal Advice
  5. Mergers and Acquisitions
  6. Affiliates
  7. Additional Information on our Service Providers
  1. How Long we Retain Personal Data
  2. Your GDPR Rights
  3. Transfers of Personal Data to other Countries outside the EU or EEA
  4. Your California Privacy Rights 
  1. Disclosure of Direct Marketing Practices (“Shine the Light”)
  2. Removal of Public Information of Minors
  1. California Do Not Track Notice
  2. Third Party Websites, Services & Data Collection
  3. Personal Data of Children
  4. Anonymous Information
  5. Our Contact Information

  1. The Personal Data We Collect and How We Use It.

We collect and receive Personal Data from outside our company and affiliates, such as from users of our products and services as described in the table below. Certain Personal Data is collected automatically, while other Personal Data is provided by you voluntarily, for example, when you contact us. The description in the table may be supplemented by additional information in other parts of this Policy. For example, you may find for more information on third-parties to whom your information may be transferred in Section 3 below.

When we Collect Data

Type of Personal Data we Collect

Purposes of Processing the Data

Retention Period (How long we store the data)*

Legal Basis under the GDPR

Third Parties with Whom We Share your Personal Data**

Consequences of not Providing the Personal Data

1.1 When you access and use our App (automatically collected data)

  • SDKs, including third party’s SDKs.
  • Google, Amplitude, Android and Apple Advertiser IDs
  • country
  • city
  • region
  • device details (including model, brand, carrier, family, manufacturer, device ID)
  • operation system name and version
  • user behavior in-app 
  • User ID
  • Direct Memory Access
  • Universally unique Identifiers
  • Platform
  • Start Version
  • operating, providing, maintaining, protecting, managing, customizing and improving our Services; 
  • analysis of traffic, user and visitor;
  • improving our products and services;
  • display and personalization of advertisements in the Services.

For a period of three (3) years.  

  • Your consent
  • Legitimate interest (e.g. essential cookies)
  • Google
  • Apple
  • Mongo DB (Atlas)
  • Appsflyer
  • Sagement
  • Firebase
  • Unity
  • Logshero (
  • Appsflyer
  • PostgreSQL
  • Amazon Web Services
  • Amplitude
  • You cannot access and use the App;

1.2 When you visit  our Website

(automatically collected data)

  • IP address
  • Geolocation
  • Operation system
  • Browser 
  • Device Type
  • enable Website functionality
  • Track user activity on the Website and Website views. 

For a period of 12 months.

  • Your consent
  • Legitimate interest 
  • Webflow
  • Google Analytics
  • Mongo DB (Atlas)
  • Appsflyer
  • Sagement
  • Firebase
  • Unity
  • Logshero (
  • Appsflyer
  • PostgreSQL
  • Amazon Web Services
  • Amplitude
  • Depending on the cookie Type you may not be able to access or use the Website. Please see section 2 below for more information.

1.3 When you sign up for our newsletter or to receive updates or other communications from us (such as Push Notifications)

  • Name
  • Email address
  • User ID

Send you our marketing communications, based on your profile, intent and behavior.

When a user unsubscribe from the services.

  • Your consent

  • Mongo DB (Atlas)
  • Appsflyer
  • Sagement
  • Firebase
  • Unity
  • Logshero (
  • Appsflyer
  • PostgreSQL
  • Amazon Web Services
  • Braze
  • Amplitude
  • We will not be able to send you communications.

1.4 When you interact with our social media accounts

  • Placement of cookies, including third party cookies
  • Data provided to us by the applicable third-party platform (i.e., Facebook, TikTok, etc.), such as your email, name, mobile identifier.
  • Improve our Services;
  • Develop marketing strategies.
  • Verify your identity;
  • Provide our Services to you;
  • Create and log you into your account and user profile;
  • Personalize your experience.

For a period of 12 months.

  • Your consent
  • Google 
  • Facebook
  • TikTok 
  • Snapchat
  • Appsflyer
  • Apple
  • We would not be able to login to the social media accounts.

1.5 When you contact us (including for support)

  • Full name
  • Email address
  • User ID
  • Any other information you provide
  • Verify your identity, process your request and respond to or contact you regarding your request; 
  • Present this information to you as part of your account history
  • To display and contact you with information that is relevant to you in the future, and to assist you with further requests for support; 
  • Improve our customer support and communication practices; 

For a period of 24 months.

  • Your Consent 
  • Our legitimate interest.
  • Gsuit (Google)
  • We may not be able to provide you support or respond to your request. 

1.6 When you make a payment or enter payment information on the Services

  • Name
  • ID
  • Credit card number
  • Billing address
  • Email
  • Verify your identity and process your request.

For a period of 24 months.

  • Your Consent 
  • Our legitimate interest.
  • Google pay
  • Apple pay

We may not be able to provide you with the Services.

1.7 When you submit CV during your recruiting process with us

  • Name
  • Address
  • Phone
  • Email
  • ID
  • Other information you provide in your CV. 
  • To have a recruiting process with you. 

3 years after receiving the CV.

  • Your consent;
  • Legitimate interest.
  • Gsuit (Google)

  • We would be unable to conduct a recruitment process with you.

*Please see Section 4  for more information on how long we retain data we collect.

**Please see Section 3.7 below for more information about third parties listed in this column.

In addition to any methods or third parties with whom we may share your Personal Data described above, we share Personal Data in the following manner: 

  1. Automatically Collected Information: SDKs and Opt-Out Mechanism

Software Development Kits (shorten as SDKs) are programming packages that allow us to develop the App and designed it to work on or with a specific platform. The Analytics SDK will allow us or our third parties to track and measure certain data about the way users interact with our App. 

Analytics SDKs collect information about our App usage including data about how many users are using the app, the number of sessions running on an app and how long each session is, from where in the world these users are logged in from, how many times an app is crashing, what operating systems and devices are running the app, the amount of money spent within apps by users, and how many times certain app features are used. By seeing how an app is used with the information gathered through an Analytics SDK, which is anonymized, an app can be accordingly improved (please review other purposes in the table above).

Most devices will allow you to erase SDKs and block acceptance of SDKs. You may remove SDKs by following the instructions in your device preferences and through the Opt-out instructions below:

  1. How (and with whom) we Share Personal Data

  1. Cloud and Hosting Services. We use cloud storage providers to host the Services and store all information we collect. We currently engage Amazon Web Services, Appsflyer, Amplitude, and Firebase, for such services and in addition to the third parties listed in Section ‎1 above, copies of all data we collect are stored on their servers.   

  1. Law Enforcement or Other Government Entities. Where required by law or government or court order, we will disclose Personal Data relating to you to the extent we believe we are required by law. 

  1. With your Consent. In the event that you have requested or have consented to the transfer of Personal Data relating to you to a third party (such as by checking a box to signify your agreement) we will transfer Personal Data to the relevant third party.

  1. Disputes and Legal Advice. In case of any dispute or request with, by or concerning you, we may disclose Personal Data relating to you with our legal counsel, professional advisors and service providers, the relevant court or other tribunal and other third parties as needed in order to resolve the dispute, defend ourselves against any claims, or enforce our rights.

  1. Mergers and Acquisitions. In the event that we, or a part of our business, are sold to a third party, or if we are merged with another entity, or in the event of bankruptcy or a similar event, we will transfer information about the relevant portions of our business as well as relevant customers and users and other personal data, to the purchaser or the entity with which we are merged. We may also transfer personal data to a potential acquirer, their legal counsel or service providers as part of an evaluation or due diligence review of our company in anticipation of an investment, acquisition or merger, though such transfers do not typically include personal data and are subject to obligations of confidentiality.

  1. Affiliates. We share personal data with our affiliates, who assist us in processing personal data and providing our Services. 

  1. Additional information on our Service Providers (listed in Section 1).

To help you understand where data about you is transferred, here is more information about the service providers listed above whom we engage to process Personal Data that we collect. Where such service providers have made available information about their data security or processing practices which we think is relevant to you, we have provided links to such information. We take no responsibility for information found on their websites, including, without limitation, whether it is accurate or up-to-date. 

  • Amazon Web Services is a provider of cloud services, which we used to host the backend of our Services and store data that we collect. For more information about how Amazon Web Services handles data stored on behalf of its customers like us, visit
  • Amplitude, is a provider of a cloud service and platform which we use for analytics. For more information regarding how Amplitude handles data, please visit
  • Apple, Inc., provides us with information necessary for you to login by using AppleID, and  payment services (Apply Pay and Google Pay) which use to enable you to make payments within our Services. You can find out more about how Apple handles data you provide when using Apply Pay here:
  • Appsflyer Ltd., is a provider of a mobile marketing analytics and attribution platform which we use to determine the track user interaction with advertisements on our Services and analyze user behavior on our Services. For more information on how Appsflyer handles end user data, please see its Services Privacy Policy:
  • Braze, Inc., is a provider of a customer engagement platform which we use to deliver messages to App Users (push notifications). You can find out more information about Braze at
  • Facebook, Inc., provides us login features known as “Facebook Connect”. This allows us to receive information in connection with your Facebook profile in order to build a profile for you on the App. We also use a tool called “Facebook App Events” to track events and activity within the App. When you use the App, Facebook receives information about your use of the App. You can find out more about how Facebook uses Personal data at  
  • Firebase, provide us with a development platform which we use to macro analyzing data to improve our Service and to store data. Firebase is an affiliate of Google and as such, Google's terms and policies govern Firebase too. You can read more about Google’s policies in connection with data received from its customers at:
  • Google LLC and its affiliates provide us with email and business suite (G Suite), cloud (Google Cloud), advertising (Google Ads) database (Firebase). You can read more about Google’s policies in connection with data received from its customers at:
  •, provides us with a platform to collect and analyze logs, metrics, and traces to improve troubleshooting and reduce response time. For more information about how handles data stored on behalf of its customers like us, visit:
  • MongoDB, is a provider of a database platform.  For more information about how MongoDB handles data stored on behalf of its customers, visit
  • PostgreSQL, is a provider of an open-source relational database management system (API). For more information about Postgress privacy policy, visit 
  • TikTok, is a social media platform, hosting short-form videos which we use for advertising and marketing. For more information about how TikTok handles data stored on behalf of its customers like us, visit
  • Unity, is a provider of a platform for creating and operating interactive, real-time 3D (RT3D) content. For more information about how Unity handles data stored on behalf of its customers, visit

  1. How Long We Retain Personal Data

We may store Personal Data for longer periods of time than stated in Section ‎1 above: (i) where we believe we are required to do so to comply with laws or in connection with legal proceedings; (ii) to resolve disputes; (iii) to enforce agreements between us and others; (iv) when the information is related to a potential or actual legal dispute. 

  1. Your GDPR Rights. 

Subject to certain exceptions and exclusions, the following rights apply to individuals who are located in an EU member states or otherwise protected by the EU General Data Protection Regulation (“GDPR”), as further described below. If you are such a person, then:


  • Right of Access. You may request that we confirm to you whether or not we store Personal Data about you and to receive a copy of the Personal Data we maintain about you and information about: (a) the purposes of the processing of the Personal Data; (b) the categories of Personal Data being processed; (c) the names of the recipients or the categories of recipients to whom the Personal Data have been or will be disclosed, in particular recipients in third countries or international organizations; (d) if possible, the period we believe we will store the Personal Data, or the criteria we use to determine that period; (e) the sources of the Personal Data, if not collected from you; and (f) whether we use automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.


  • Right to Rectify. You may request that we correct any Personal Data about you that we maintain that is incorrect. Depending on the purpose for which the data is used, you may also request to complete incomplete Personal Data we maintain.


  • Right to Erasure (“Right to be Forgotten”). You may request that we erase or suppress Personal Data that relates to you in the following cases: the data is no longer needed by us; the data was collected and is used on the basis of your consent and you withdraw that consent; when you have a right to object to our use of the data (as described below under, “Right to Object”); we are not lawfully processing the data; or we are otherwise required by law to delete the data. However, there may be circumstances in which we may retain your data or we may refuse your request, for example, when we review the data to defend ourselves or make legal claims or exercise are own rights. In addition, this right may not apply to the display or access of your Personal Data outside of the European Union. 


  • Right to Restrict Processing. You may request that we restrict our use or processing of your Personal Data if: you claim the Personal Data is inaccurate, during the time we investigate your claim; our processing of the Personal Data was unlawful; we no longer require the Personal Data; we processed the Personal Data for our legitimate interests and you object to this use (as you are permitted to do under Article 21(1) of the GDPR), during the time that we investigate whether our legitimate interests override your request. However, there may be circumstances in which we are legally entitled to refuse your request.


  • Right to Data Portability. You may request that we provide you with your Personal Data that we process based on your consent or to fulfill a contract with you or that we process using automated means, in a structured, commonly used and machine-readable format, and to transfer your Personal Data to another entity or have us transfer it directly to such entity.


  • Right to Object. You may, based on reasons specifically relating to you, object to our processing of your Personal Data, when: (i) the data is used for our legitimate interests and our interests in processing the data does not override your interests, rights and freedoms and we do not require use of the data for the establishment, exercise or defense of our legal claims or rights; and (ii) we use the data for direct marketing purposes or profiling for direct marketing purposes. 


  • Right to Object to Automated Decision Making. You may request that you will not to be subject to a decision based solely on automated processing, including profiling, when the decision produces legal effects concerning you or significantly affects you.


  • Right to Withdraw Consent. Where we process Personal Data relating to you based on your consent (such as by clicking a check box adjacent to a statement of consent), you may withdraw your consent and request that we cease using your Personal Data for the purpose for which you have your consent, or altogether, depending on the situation. 


  • Right to Make a Complaint. You may file a complaint regarding our practices with the data protection authority in your place of habitual residence, place or work, or the place of the alleged infringement. For a list of data protection authorities in the European Economic Area, please see here:   

You can exercise your rights that apply to us by contacting us by email at We may be permitted by law (including the GDPR and local national laws) to refuse or limit the extent to which we comply with your request. We may also require additional information in order to comply with your request, including information needed to locate the information requested or to verify your identity or the legality of your request. To the extent permitted by applicable law, we may charge an appropriate fee to comply with your request.

  1. Transfers of Personal Data to other Countries outside the EU or EEA 

We transfer Personal Data we receive in or from the European Union (and other locations) to the following countries outside the EU and European Economic Area. If Personal Data from the EU is transferred outside the EU to our affiliates or to third-party service providers, to countries which the European Commission has not determined to adequately protect Personal Data, we take steps to ensure that such Personal Data receives the same level of protection as if it remained within the EU. This includes entering into data transfer agreements and using the European Commission approved Standard Contractual Clauses.

  • The United States, where Amazon Web Services, Google, Firebase, Facebook, Apple, Mongo DB, TikTok, and PostgreSQL, Amplitude store information on our behalf. 

If you are an individual protected by the GDPR, you may contact us in order to obtain additional information regarding the basis for the transfer of Personal Data relating to you to countries outside the European Economic Area. Please note that information or copies of documents we may provide to you in connection with such requests may be limited or redacted in order to protect the rights of third parties or to comply with contractual obligations we may have (such as obligations of confidentiality).

  1. Your California Privacy Rights 

If you are a California resident you have the right under California law to make certain requests in connection with our use of Personal Data relating to you, as described below. To make such a request, please contact us by email at Please note that certain exceptions may apply.

  1. Disclosure of Direct Marketing Practices (“Shine the Light”). Under California Civil Code Section 1798.83, one time per year you may request the following information regarding our disclosure of your Personal Data to third parties for their direct marketing purposes: a list of the categories of the personal information disclosed to such parties during the preceding calendar year, the names and addresses of such third parties, and if the nature of the parties’ businesses is not clear from their names, examples of the products or services marketed by such third parties. This right only applies if our relationship is primarily for your personal, family or household purposes and related to the purchase of our products and services.
  2. Removal of Public Information of Minors. If you are under the age of 18 and have an account with us, under California Business and Professions Code Section 22581, you may request the removal of content or information you have publicly posted on our services that is identified with you or your account. Please be aware that certain exceptions may apply and we may not be able to completely remove all such information.

  1. California Do Not Track Notice.

We do not track individuals’ online activities over time and across third-party websites or online services (though we do receive information about the webpage you visited prior to access our Websites, products and services such as our Website, the App, and advertisement landing pages. We do permit third-parties to track individuals’ online activities on our Website and App, this includes Google and Facebook which provide us with the analytics and tracking services described above. We do not respond to Web browser “do not track” signals or similar mechanisms. You can find out more information about do not track signals at:

  1. Third Party Websites, Services & Data Collection

Our Services may contain links to other websites, products or services offered by third parties (“Third Party Services”). This Policy does not apply to data collected by or on behalf of such third parties, whose privacy practices may differ from ours and who are not under our control. We are not responsible for the actions of such third parties or their data practices. Please review the privacy policies of any such third parties before you interact with them or provide them with Personal Data. 

Furthermore, we are not responsible for the accuracy of information contained on Third Party Services linked to in this privacy policy or from our Services. We refer to such websites for your convenience only.

  1. Personal Data of Children. 

Our Services are not intended for, and we do not knowingly collect Personal Data from persons under the age of eighteen (18). If you believe that a person under the age of eighteen (18) has provided us with Personal Data, or if we have received the Personal Data of such person, please contact us at

  1. Anonymous Information. 

We do not treat information we collect or receive which is not or cannot reasonably be connected to any particular person or which is anonymized or aggregated such that it can no longer be connected to or used to identify any particular person as “Personal Data”, even if it was originally linked to or stored with Personal Data. Such anonymous information is not subject to this Policy and we may use it for a variety of purposes, may share it with third parties or even publish it for any reason.

  1. Our Contact Information

For inquiries regarding this Policy, you may contact us as follows:

Address: Pocket Pie Games Ltd.

45 Rothschild St. 

Tel Aviv, Israel