Privacy Policy
Last updated: 23 October 2026
This privacy policy applies to the apps published by Mochi Moon Games, currently Pizzumi (Android), and to the website mochimoongames.com.
In short: You don't need an account, and we don't know who you are. Your progress stays on your device. Data only leaves your device for advertising and, if you buy it, for the “Ad-free” purchase. Details below.
1. Who is responsible
Isabel Pfohlmann
Mochi Moon Games
Lange Rötterstraße 18-20, 68167 Mannheim, Germany
Email: contact@mochimoongames.com
2. The Pizzumi app
2.1 Progress and settings – stored on your device only
Pizzumi stores your progress (unlocked levels, stars, hints), your settings (e.g. music, sounds, vibration, language) and whether you bought “Ad-free” only locally on your device. This data is never sent to us, and we cannot see it. Deleting the app deletes this data (it may be included in your device backup, which is handled by Google or Apple).
The app does not request access to your location, camera, microphone, contacts or photos. There is no user account and no sign-in.
2.2 Advertising (Google AdMob)
Pizzumi is free and funded by ads, served by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Ads appear as full-screen ads between puzzles and as optional rewarded videos that give you extra hints. After buying “Ad-free”, you will no longer see full-screen ads.
Data processed by Google to deliver an ad includes: IP address, your device's advertising ID (Android Advertising ID, or Apple's IDFA only if you allow it), device model, operating system, language, approximate location derived from the IP address, app name and version, and your interactions with ads (viewed, tapped, video completed).
Consent: On first launch, a Google consent dialog asks whether you allow personalised ads. If you agree, the legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can change or withdraw your choice at any time in the app under “Privacy settings”.
If you decline, Google shows non-personalised or limited ads. Technically necessary data (such as IP address and device information) is still processed to deliver ads, cap how often they are shown and prevent fraud, based on our legitimate interest in offering the app free of charge (Art. 6(1)(f) GDPR).
On iPhone, the app also asks via Apple's App Tracking Transparency prompt whether it may track you across other companies' apps. Without your permission, Google does not receive the IDFA.
Reset your advertising ID: Android: Settings → Google → Ads. iPhone: Settings → Privacy & Security → Tracking.
Transfers to the USA: Google may process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection (Art. 45 GDPR).
More: policies.google.com/privacy and policies.google.com/technologies/ads
2.3 “Ad-free” purchase (Google Play, App Store, RevenueCat)
You can buy “Ad-free” once inside the app. Purchase and payment are handled entirely by Google Play or the Apple App Store; we never receive your payment details. Their privacy policies apply.
To recognise your purchase and restore it on a new device, we use RevenueCat, a service of RevenueCat, Inc., USA. RevenueCat receives: a random anonymous user ID generated by the app, the store's purchase receipt (product, time, price, country/currency, transaction ID), device model, operating system, app version and IP address. We do not share your name or email address with RevenueCat.
Legal basis: performance of the purchase contract (Art. 6(1)(b) GDPR). Transfers to the USA are covered by EU Standard Contractual Clauses (Art. 46 GDPR).
More: www.revenuecat.com/privacy
2.4 App stores
When you download Pizzumi from Google Play or the App Store, Google or Apple process data about the download and your account under their own responsibility. We only receive aggregated statistics (e.g. downloads per country) and, if you have agreed, anonymous crash reports. We cannot identify you from them.
2.5 Children
Pizzumi is not directed at children under 13. We do not knowingly collect personal data from children. Parents who believe their child has provided us with data can contact us at contact@mochimoongames.com.
3. The website mochimoongames.com
Hosting and server logs: Our website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA (“Netlify”), which delivers it through a worldwide server network. Each visit is automatically logged with IP address, date and time, page requested, amount of data transferred, referring page, browser and operating system. This is necessary to deliver the website and protect it from attacks (Art. 6(1)(f) GDPR). Netlify decides itself how long these logs are kept; we cannot change this. According to Netlify's contract documents, logs are kept available for 90 days and then archived for security purposes for up to one year. We have a data processing agreement with Netlify (Art. 28 GDPR), which is part of Netlify's terms. Netlify also processes data in the USA. Netlify, Inc. is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection (Art. 45 GDPR); in addition, EU Standard Contractual Clauses (Art. 46 GDPR) are agreed in the contract with Netlify and apply if the Data Privacy Framework ceases to apply. More: www.netlify.com/privacy/
No cookies, no tracking: Our website sets no cookies, uses no analytics and loads no third-party content.
Email and contact form: If you email us or use the contact form, we use your email address, your name (if given), the topic you chose and your message only to reply (Art. 6(1)(b) or (f) GDPR). Our mailbox is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, with whom we have a data processing agreement (Art. 28 GDPR). The contact form runs on Netlify Forms: Netlify receives your details and the language of the page, stores them in our Netlify account together with date and time, your IP address, your browser and the page you sent the form from, and notifies us by email. To filter out spam, Netlify checks every submission with Akismet, a service of Automattic, Inc., USA, which Netlify uses as a sub-processor; the form also contains a hidden field that only spam bots fill in. The legal basis for spam protection is our legitimate interest in a spam-free contact channel (Art. 6(1)(f) GDPR); transfers to the USA are covered as described for hosting above. We delete the submission in our Netlify account once your request is resolved, at the latest 30 days after it arrives. We delete the emails in our mailbox once your request is resolved, at the latest after 2 years, unless we are legally required to keep them.
4. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw consent at any time with effect for the future (Art. 7(3)), e.g. in the app under “Privacy settings”.
To exercise these rights, email contact@mochimoongames.com. Because the app has no accounts, we often cannot link data held by Google or RevenueCat to a specific person; in that case please also contact the provider directly (links above).
You also have the right to lodge a complaint with a data protection supervisory authority. Ours is: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Heilbronner Straße 35, 70191 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de
5. Changes
If we add new features (for example an online leaderboard), we will update this policy. The current version is always available at mochimoongames.com/en/privacy.
If this English version differs from the German version, the German version prevails.