Market Pop Privacy Policy

Last updated: 30 September 2026

Market Pop is a free-to-play match-3 puzzle game made by Innoedge Technologies Limited, for the web, iOS, Android and Discord. This page explains what we collect, why, and what say you have over it — including if you're a parent of a player under 13.

Who we are and how to contact us

Market Pop is published by Innoedge Technologies Limited ("Innoedge", "we", "us", "our"), of 12 Parakou Street, Wuse 2, Abuja, Nigeria.

For anything about this policy or your data, email [email protected]. That is also our contact point for data protection requests, which Innoedge Technologies Limited handles at the address above.

What we collect, and why

We don't ask for your real name, and we don't store your IP address. Players are identified by a random account ID. What we collect:

Your account

An account ID, the birth year you give us for the age check and the "under 13" flag it sets, your country (read from a network header, not your IP address), locale, platform, your chosen shop and team display names, your in-app settings, and your consent choices. Basis: performing the contract you asked for (running your account) and, for consent choices, your consent.

Sign-in

If you link an email address, we store it. If you sign in with Apple, Google or Discord, we store an identifier from that provider, and an email address too if the provider shares one with us. Market Pop has no passwords. Basis: contract.

Device

A device identifier and platform, so your guest account can be restored on the same device and to keep your sessions secure. Basis: contract.

Gameplay and progress

Levels, stars, in-game currency and its history, inventory, shop decorations, and similar records of you playing — the normal save data for the game. Basis: contract.

Social features

If you use them: friends, team membership and messages (preset messages only — see Acceptable Use in our Terms), trades, gifts and likes, only involving the other players you actually interact with. Basis: contract.

Purchases

What you bought, its price, the store's transaction ID, and refund or void status. Basis: contract, and legal obligation for tax and accounting records.

Ads

A record of ads you were shown or watched — which slot, and whether it was personalised — so rewards can be capped and proven. Basis: contract.

Analytics

Gameplay events, only if you say yes when asked. We never ask a player in COPPA mode (see below). Basis: consent.

Push notifications

A push token or endpoint and its encryption keys, only if you turn notifications on. Basis: consent.

Crash and error reports

If the app crashes or hits an error: a message, a stack trace, and a truncated device description, plus your account ID if you were signed in. Basis: our legitimate interest in fixing bugs.

Anti-cheat and security

Server-side replay logs of rounds you play, and flags raised by our anti-cheat checks. Basis: contract, and our legitimate interest in keeping the game fair and secure.

How we use it

To run your account and the game; save and sync your progress when you sign in on a new device; process purchases and rewarded ads; keep Market Pop fair and secure (anti-cheat, rate-limiting, audit logs); fix bugs using crash reports; where you've said yes, understand and improve the game with analytics; and contact you about your account — for example, if a sign-in method is added or removed, or to handle a parental-consent request.

Ads and personalisation

Market Pop shows rewarded ads, which you always choose to watch in exchange for something in-game, and, from level 15 onward, occasional ads between rounds. Those are frequency-capped, and you won't see them at all once you've ever bought something in the game. Ads on iOS and Android are delivered by Google AdMob; on the web, by Google H5 Games Ads. Ad networks operate under their own privacy policies for the ad-delivery data they process.

Whether an ad is personalised to you depends on your age and your choice:

We record your consent choice, its version and your region as proof, and every single ad is served according to the answer on file for you at that moment.

Purchases

Market Pop is free to play. You can optionally buy gem packs, a starter pack, or a market bundle, or spend gems you already own on cosmetic costumes. There are no subscriptions and no passes: Market Pop does not sell one, and nothing brings one back without an app update. Purchases on iOS go through Apple's App Store; on Android, through Google Play; on the web, through Stripe. We store the store's transaction ID, the product, the price and its status — never your card details, which the store or Stripe holds directly. If your account is in COPPA mode, purchases are switched off until a parent verifies (see Children's Privacy below).

Sign-in providers

You can play as a guest, tied to your device, or link a sign-in — Apple, Google, Discord, or a one-time emailed link — to reach the same account from anywhere. We store which provider(s) you've linked and the identifier or email each one gives us.

Sharing and processors

We don't sell your data. We share it only with the service providers who help us run Market Pop, each for that purpose only:

We may also disclose data where the law requires it, or to investigate abuse, cheating or a security incident.

International transfers

Our servers are in the United States. If you're using Market Pop from the EU, the UK, or anywhere else, your data is transferred to and processed there. We protect these transfers with the European Commission's Standard Contractual Clauses (and the UK Addendum to them) and, for players in Nigeria, the safeguards the Nigeria Data Protection Act 2023 requires.

Retention

WhatHow long
Guest accounts (never signed in)Deleted after 400 days of inactivity
Signed-in accountsDeleted after 1,095 days (about 3 years) of inactivity
Round-replay and anti-cheat logsUp to 365 days
Ad-view and crash records90 days
Analytics events (with consent only)395 days (13 months)
Purchase and refund records7 years, for tax and accounting; anonymised once your account is deleted
Backups7 days; a restore is followed immediately by re-running any deletion it undid
Everything else tied to your accountDeleted within 30 days of a deletion request

Your rights

Wherever you are, you can ask us to access, correct, delete or export your data, and to object to or restrict how we use it. We don't sell personal data, so there's nothing to opt out of there.

Delete your account. In the app: Settings → Delete Account. Your account is scheduled for deletion, and everything about it is erased within 30 days — progress, purchase history, social connections, all of it. A few records (like purchase receipts) are kept but stripped of anything that identifies you, for tax and accounting reasons. If you'd signed in with Apple, that authorization is revoked at the same time.

Export your data. Email [email protected] and ask for a copy of your data; we'll send you everything we hold about you.

If you're in the EU or UK, you can also lodge a complaint with your local supervisory authority. If you're a California resident, you have rights under the CCPA/CPRA, including the right to know and delete; contact us to exercise them.

Children's privacy

Market Pop is for a general audience, and we know children play it. The first time you play, we ask for your birth year to run an age check. If that makes the player under 13, the account automatically switches to COPPA mode, and:

Verifiable parental consent. Before a player under 13 can buy anything, we need a parent's verifiable consent, using the "email plus" method the FTC's COPPA rule allows:

  1. The app asks the child for a parent's email address, and we send that address a one-time link, valid for 48 hours.
  2. When the parent opens it, purchases are switched on for that account, and we send the parent a second email confirming that — with a link to withdraw consent whenever they choose.
  3. Opening the withdrawal link switches purchases back off immediately. A parent can also write to us at [email protected] to review, correct, delete, or stop our further collection of their child's information at any time — the same email handles that request even without the link.

We don't knowingly collect more from a child than this policy describes, and we don't show a child's age or COPPA status to other players.

Security

We encrypt traffic in transit, encrypt sensitive stored values such as Sign in with Apple's refresh token, store sign-in tokens only as one-way hashes, and never log passwords, tokens, card numbers, IP addresses, or message bodies. Every request is checked against your account, and administrative access is limited, key-based and logged. We've reviewed Market Pop's backend against the OWASP Application Security Verification Standard (Level 1); an external penetration test is planned before our global launch. No system is completely secure and we can't guarantee otherwise, but we work to protect your data and will tell you if something happens that affects you, as the law requires.

Changes

We may update this policy as Market Pop changes. We'll update the date at the top when we do, and if a change is significant, we'll tell you in the app.

Contact

Questions, requests or concerns about your privacy: [email protected].

Innoedge Technologies Limited, 12 Parakou Street, Wuse 2, Abuja, Nigeria.