Last updated: 23 January 2026
1) Who we are
Panda Cub Studios (“we”, “us”, “our”) is an independent game studio based in the United Kingdom. This Privacy Policy explains how we collect, use, and share information when you play our games (including Scrambled), use related services (like sign-in and support), or visit our website https://pandacubstudios.com.
Data Controller: Panda Cub Studios (UK sole trader)
Privacy contact: privacy@pandacubstudios.com
Support contact: support@pandacubstudios.com
2) What this policy covers
This policy applies to:
- our mobile games on iOS/Android (the “Games”),
- our website (the “Website”), and
- any related services we provide (for example, sign-in, newsletters, customer support).
This policy does not apply to third-party services we don’t control (such as Apple, Google, AdMob, Firebase, or Unity). Those services have their own privacy policies.
3) Information we collect
A) Information you provide to us
We may collect:
- Account/sign-in information: if you choose to sign in using Google Sign-In, Apple Sign-In, or email sign-in, we collect the information needed to create and manage your account. This typically includes an email address and a provider identifier (for example, a Google or Apple user ID).
- Marketing opt-in (optional): if you choose to opt in, we store your email address so we can send you news about our games (new releases, updates, announcements).
- Support communications: if you contact us, we collect your email address and the content of your message.
B) Information collected automatically when you play our Games
When you download or play our Games, we (and our service providers) may collect:
- Device information: device model, operating system version, language, country/region, time zone
- App information: app version, settings, installation identifiers
- Gameplay information: progress, levels completed, session duration, feature usage, in-game events
- Performance and diagnostics: crash logs, error reports, performance metrics
- Identifiers: a device/app identifier and, where available, an advertising identifier (such as Android Advertising ID or Apple IDFA), used for advertising, fraud prevention, and measurement depending on your settings and permissions
C) Information about purchases
If you make in-app purchases, purchases are processed by Apple App Store or Google Play. We do not receive full payment card details. We may receive purchase-related information such as:
- confirmation that a purchase occurred,
- the item purchased, and
- a transaction/receipt identifier (used to validate purchases and provide support).
D) Website information
When you visit our Website, our hosting provider may automatically log:
- IP address, device/browser type, pages visited, and date/time of access (for security and reliability).
The Website does not require visitor accounts.
4) How we use your information
We use information to:
- Provide the Games and services (including account sign-in and linking/syncing progress where supported)
- Maintain and improve the Games (fix bugs, improve performance, balance gameplay)
- Provide customer support
- Process and verify purchases (including restoring purchases and preventing fraud)
- Show ads and measure their performance (AdMob and Unity Ads)
- Understand how players use the Games (analytics)
- Communicate with you
- Support emails (to respond to requests)
- Marketing/news emails (only if you opt in)
5) Legal bases for processing (UK GDPR)
Where UK data protection laws apply, we process personal data under these legal bases:
- Performance of a contract: to provide the Games and requested services (like sign-in, purchase validation, support)
- Legitimate interests: to keep our Games secure, improve performance, prevent fraud/abuse, and understand usage trends
- Consent: where required for certain advertising/analytics activities and for marketing emails (for example, personalised ads or marketing opt-in)
- Legal obligation: where we must comply with applicable laws
6) Advertising (AdMob and Unity Ads)
Our Games may display ads. Ads may be:
- non-personalised/contextual (not based on your profile), or
- personalised/targeted (based on advertising identifiers and activity), depending on your settings and consent choices and where permitted by law.
Ad partners may collect information such as device identifiers, approximate location (derived from IP/region), and ad interaction data to deliver and measure ads.
Your choices:
Where required, we will ask you to choose between personalised and non-personalised ads (and you can change your choice later in the Game settings if available). You can also limit personalised advertising through your device settings, for example:
- Android: Google Settings → Ads / Privacy → reset or limit ad personalisation
- iOS: Privacy & Security → Tracking (and ad-related settings, depending on iOS version)
7) Analytics and crash reporting (Firebase)
We use Firebase Analytics to understand how players use the Games (for example, which features are used and where players get stuck) and Firebase Crashlytics to diagnose crashes and improve stability.
These tools may collect device/app identifiers and performance information. We use this data to improve the Games and reduce crashes.
8) Accounts and sign-in (Google / Apple / Email)
If you sign in using Google, Apple, or email:
- we use your information to create/manage your account, support sign-in, and (where applicable) help you link or sync progress across devices;
- we store your email address associated with your account; and
- we may send account-related emails when necessary (for example, verification or security messages).
Marketing is optional: If you choose to opt in, we may also use your email address to send you studio news (see Section 9).
9) Marketing emails / email list
When you sign in to link or sync your game progress, we collect your email address to provide account functionality (for example, account recovery and progress syncing).
Marketing emails are optional. If you choose to opt in, we may also use your email address to send you studio news such as game updates, new releases, and announcements.
Opt-out: You can unsubscribe at any time using the link in our emails or by contacting privacy@pandacubstudios.com. We will process opt-out requests as soon as reasonably possible.
Account emails vs marketing: Even if you unsubscribe from marketing, we may still send important account-related messages when necessary (for example, sign-in or security messages).
10) Who we share information with
We may share information with trusted third parties who help us operate the Games, including:
- Google Firebase (Analytics and Crashlytics)
- Google AdMob (advertising)
- Unity Ads / Unity Technologies (advertising)
- Apple (App Store services, Sign In with Apple, purchases)
- Google (Google Play services, Google Sign-In, purchases)
- Email delivery/marketing providers (if we use one to send emails/newsletters)
- Hosting providers (for our Website and backend services)
We may also share information if required to comply with law, enforce our rights, or protect players and our services.
We do not sell your personal information.
11) International data transfers
Some of our service providers may process data outside the UK. Where required, we use appropriate safeguards (such as contractual protections) to help ensure your information is protected.
12) Data retention
We keep information only as long as needed for the purposes described:
- Account information: as long as you maintain an account, and for a reasonable period after deletion for security/fraud prevention and legal compliance.
- Analytics and crash data: retained as needed to analyse trends and improve stability.
- Support communications: kept as long as necessary to resolve issues and maintain support history.
- Marketing email list: kept until you unsubscribe or request deletion.
13) Your rights
Depending on where you live, you may have rights to:
- access, correct, or delete your personal data,
- object to or restrict certain processing,
- withdraw consent (where processing is based on consent),
- request data portability (where applicable), and
- complain to a regulator (in the UK, the Information Commissioner’s Office).
To exercise your rights, contact: privacy@pandacubstudios.com.
14) Children
Our Games are not intended to knowingly collect personal data from children in a way that violates applicable laws. If you believe a child has provided us personal data, contact us at privacy@pandacubstudios.com and we will take appropriate steps to delete it.
15) Security
We take reasonable measures to protect your information, including secure hosting and limiting access where possible. No system is completely secure, but we work to protect your data.
16) Contacting us by post
We are a small independent studio and do not publish a personal home address online. If you need to contact us by post for a formal request, email privacy@pandacubstudios.com and we will provide a correspondence address.
17) Changes to this Privacy Policy
We may update this policy from time to time. We will update the “Last updated” date at the top. If changes are material, we may provide additional notice in-game or on our Website.