Effective September 21, 2026
This policy covers the Vineyard Vibes iOS game, including TestFlight versions, and this website. Older versions use local saves; wallet-enabled versions also connect to our service. Features and data handling differ as explained below.
Who is responsible
WINTERHILL MEDIA LLC, Massachusetts, USA, operates Vineyard Vibes and is responsible for the personal information we process. Contact hello@winterhill.studio for support or privacy requests.
The short version
- No separate username or password is required. Connected wallets use verified Apple app transactions to recognize an account-derived identifier.
- We operate a backend for balances, inventory, purchase delivery, recovery, and gameplay verification. These records are not anonymous merely because they contain no name.
- Apple processes payments. We do not receive payment-card details or your Apple Account password.
- Advertising, analytics, diagnostics, and purchase providers process information. Tracking permission is optional and is not a condition of playing or earning rewards.
Game saves and connected wallets
The app keeps a local save and settings on your device. Wallet-enabled versions use our Google Cloud Run and Firebase Firestore service for authoritative balances, boosters, lives and timers, relevant progress, operation identifiers, and purchase/refund records. Installation identifiers and gameplay records, including moves and level configuration, support migration, interrupted-operation recovery, reward validation, and fraud prevention.
Signed Apple transaction information and Firebase App Check attestation authenticate wallet requests. Network infrastructure processes request information such as IP addresses and timing. Application error logs are designed not to include signed proofs or App Check tokens. Our wallet does not use these records for advertising. Test and production wallets are separate.
Wallet-backed play and wallet changes require an internet connection. Apple iCloud can separately synchronize completed levels, earned stars, and claimed landmark chests; it is not the authority for spendable currency. Uninstalling or turning off iCloud does not delete the connected wallet or provider records.
Purchases and RevenueCat
Apple handles checkout. RevenueCat processes purchase history, transaction information, entitlement status, and app/device information to manage purchases such as No Ads. It may initially assign an installation identifier; after wallet connection, the app uses the wallet's account-derived identifier. This is a pseudonymous linked identifier, not anonymous data. Our wallet independently verifies purchases before crediting coins and reconciles verified refunds.
RevenueCat privacy policy · Apple privacy policy
Advertising and choices
Google AdMob supplies optional rewarded videos and occasional automatic interstitial ads. No Ads removes automatic interstitials; optional rewarded videos remain. We request a general-audience ad-content rating, and Settings lets you report inappropriate ads.
Ad services can process IP-derived general location, device/app identifiers, ad views and interactions, and diagnostics for ad delivery, measurement, and fraud prevention. With required permissions and consent, information may also support personalized advertising and cross-app measurement. The app requests iOS tracking permission before accessing the advertising identifier. Refusing permission does not stop all advertising or network processing.
- Use Settings → Privacy Options in the game, when available, to review Google's consent choices.
- Use iOS Settings → Privacy & Security → Tracking to change tracking permission.
- Declining tracking does not increase prices or remove access to levels or earned rewards.
Google privacy policy · Google advertising information
Analytics, diagnostics, and remote settings
Firebase Analytics helps us understand gameplay and improve the game. Events can describe level starts/results, boosters, ads, and purchases, with app, device, and network metadata. Current wallet-enabled builds enable collection while setting Firebase's analytics-storage and advertising-related consent signals to denied. That is not a claim that no information is transmitted; earlier versions and consent-mode behavior may differ.
Firebase Crashlytics processes crash traces, diagnostics, app/device details, and installation identifiers to help fix faults, not for our advertising. Remote Config delivers game settings and processes app, device, and installation information. App Check verifies requests from the genuine app.
Firebase privacy and service-specific data practices
Game Center, notifications, and support
If enabled, Apple Game Center handles achievements and the app can associate them with a Game Center player identifier. Reminders are local notifications scheduled on the device, not messages from a developer push server. Disable them in the game or iOS Settings.
When you email support or report an ad, we and our email provider receive your address, message, and chosen attachments to respond and investigate. Do not send passwords, payment-card information, or unrelated sensitive information. Playing does not require access to contacts, the photo library, microphone, or precise device location.
This website
Vercel hosts this website and processes request information such as IP address, browser details, requested pages, and security logs to serve and protect it. The site application code does not include advertising or analytics scripts. External links open services with their own data practices.
Retention and deletion
Connected wallet and transaction records currently persist without automatic expiry to keep balances, delivery history, refunds, and duplicate-credit protections consistent. Uninstalling does not erase them. Request access, correction, or deletion at hello@winterhill.studio. We verify ownership before disclosing or changing wallet data and explain the outcome, including records retained for a specific legal obligation. A deletion request does not itself refund an Apple purchase. This contact route does not claim that older builds have automated in-app deletion.
Local saves remain until removed from the device. iCloud copies are controlled separately through your Apple Account; disabling sync alone does not necessarily remove them. Support correspondence is kept while needed to resolve the matter and meet applicable obligations; you can request deletion.
Our Google Cloud project currently retains ordinary Cloud Logging records for 30 days and required audit logs for 400 days. Firestore point-in-time recovery and scheduled backups are not enabled. Google describes a 90-day Crashlytics retention period before removal begins. Other provider records follow their service policies and applicable settings; we do not promise immediate erasure of all provider data when a local save is deleted.
Your rights
We process information to deliver the game and purchases, protect the service, respond to support, improve reliability, comply with law, and provide advertising subject to required consent. Where applicable, legal bases include contract performance, legitimate interests, consent, and legal obligations, depending on the processing. Withdrawing consent does not affect earlier lawful processing.
Depending on your location, you may have rights to access, correct, delete, receive a portable copy, restrict or object to processing, or appeal a request decision. You may complain to a local data-protection authority. Contact our privacy email to exercise rights or appeal a decision. We do not charge more or deny ordinary gameplay for exercising privacy rights.
We do not sell information for money. Sharing identifiers or ad interactions for targeted advertising may count as a sale or sharing under some US privacy laws. Use the advertising controls above to opt out where available, or contact us for help. Providers may process information in the United States and other countries under applicable contractual safeguards and data-protection arrangements.
Children and updates
Vineyard Vibes is intended for a general audience, not directed at children under 13. Contact us if you believe a child has provided personal information so we can investigate and handle deletion with the relevant providers. An App Store content rating does not mean ads process no data.
We update this page and its effective date when practices change and provide additional notice or request consent when required. Questions: hello@winterhill.studio.