← Nazford

Pondiful and Koi Sort privacy policy

Last updated: 2 November 2026

Nazford ("we") makes Pondiful and Koi Sort, two puzzle games. This policy explains what information the games use and why. Where a section says "the game", it means both; Koi Sort has no duels, Leagues or seed boards.

What we collect

Game progress, kept on your device. Your scores, runs, Petals, koi, decorations, streak, Pond Pass progress, Koi Club membership dates, duel history and settings are stored on your device only. We don't require an account, and we don't ask for your name, email or phone number.

Gameplay analytics. The game records events such as starting or finishing a run, the score, clearing a tutorial step, or buying a decoration. Unless you turn off Settings › Share anonymous usage data, these events are sent to our own server with a random install identifier (created on your device, not linked to your name or advertising ID), the app's version, your device platform and the app's language. We use them to balance the game and fix problems, and to train the models described below. Turning the switch off stops sending and deletes events still waiting on your device.

Google Analytics for Firebase and Firebase Performance Monitoring. The same gameplay events also go to Google's Firebase, which helps us see how the game is played and how quickly it starts and draws its screens. Firebase receives an identifier it creates for this installation, your device model and operating system, the app version, approximate country (from your IP address), and timings. Firebase is switched off for players under 13 and whenever Share anonymous usage data is off, and information about players under 18 is never used for ad personalization. Google processes this data for us; how it does so is explained at https://policies.google.com/technologies/partner-sites.

Crash reports. If the game crashes or hits an error, it sends the error message and technical stack trace, the app version, your platform and the install identifier to our server and to Firebase Crashlytics (Google), so we can fix it. Crashlytics also records your device model, operating system and the app's state at the time of the crash, such as free memory. Reports contain no game progress or personal details.

How the game adapts (the "Intelligence Engine"). The game keeps a few counts on your device (for example sessions per week, runs, how often you take optional rewarded ads, and whether you leave right after an ad) and uses them to make ads lighter for players who find them disruptive, to offer a "welcome back" gift, or to show a Remove Ads suggestion. It never changes the pieces, the levels' contents or your scores, and it never makes ads heavier than the standard rules. 5% of players always get the standard rules, so we can check this helps. A snapshot of these counts is part of the analytics above. None of this applies to players under 18 (see Children).

Your age. The first time you play, the game asks for your year of birth, or uses the age range Apple (Declared Age Range) or Google Play (Age Signals) shares, if you allow it. It keeps only your age group on your device (under 13, 13 to 17, or 18 and over), never the year, and the group is recorded with the analytics above. The group decides how ads are shown and which features are on (see Children).

Attribution (iOS). On iOS the game updates Apple's SKAdNetwork "conversion value", a number from 0 to 63 based on how active you've been and how valuable the game predicts your play to be. Apple passes it to the ad network that showed you an ad for the game, without revealing who you are.

Advertising. The games show ads through Google AdMob, which may let other advertisers and ad networks bid for each ad through Google. Players under 18 only get ads that aren't personalized, and children get ads suitable for families. To show and measure ads and to prevent fraud, Google and these advertisers may collect: - your device's advertising identifier, but only if you allow it; - IP address and approximate location; - device and app information, and ad interactions.

In the EEA, UK and Switzerland we ask for your consent first. On iOS, we ask Apple's App Tracking Transparency question before your activity can be used for tracking. Your answers never change the game.

Purchases and subscriptions. Purchases, including the Pond Pass and the Koi Club subscription, are handled by Apple or Google. We receive confirmation of what you bought, and for the Koi Club when it renews, so we can deliver it. We never see your payment details. You manage or cancel the Koi Club in your App Store or Google Play account settings. To confirm each purchase with the store and to know when the Koi Club renews, lapses or is refunded, purchase receipts and the random install identifier are sent to RevenueCat, which checks them with Apple or Google for us. RevenueCat receives no name, email or payment details from us.

Duels. When you send a duel, the link contains the duel's seed, your moves and the duel name you chose (or "A friend"). It goes only to the people you share it with, through the app you choose. Anyone who has the link can see that name and replay your moves.

Leagues and seed leaderboards (Pondiful, only if you join). Joining a League, or adding a score to a seed code's leaderboard, signs your installation in to Firebase Authentication anonymously: no name, email or password, just an identifier Firebase creates, which our server checks before accepting a score. The data below is stored in Google Cloud Firestore. We then store your duel name, the scores you submit (with the moves, so we can check them by replaying) and your league standing. Players in your League group see your duel name and league points; anyone who opens a seed code sees the names and scores on its leaderboard. If you win a duel while in a League, both duel codes are sent so the win can be checked. To delete this data, write to support@nazford.com with your League name.

Friends and invites (Pondiful, only if you use them). Opening Friends or adding a friend's code creates the same anonymous account and gives you an invite code. When you add a friend by their code, or join with someone's invite, the two of you become friends on our server: each of you can then see the other's duel name and today's Daily score, and the server keeps your Daily scores for the last 14 days so friends can compare them. Remove a friend at any time from the Friends screen. On Android, if you installed the game from a friend's invite page, the game reads the invite code that Google Play passes along (the "install referrer") once, to fill it in for you; nothing else from it is used.

Ghost matches (Pondiful). When you finish a duel, its code (the seed, your moves and your duel name) is sent to our server so other players can race your run as a "ghost". They see your duel name and your score. Turn this off in Settings › Share my duels as ghosts; ghosts already sent stay in a pool of the newest 500 and age out from there, or write to us and we'll remove yours.

Names and reports (Pondiful). Names you choose are checked against a list of rude words before they're saved or shown. If you report another player's name, our server records the name, where you saw it and your anonymous account, so we can review it; when several players report the same name, it's removed.

Experiments. To compare small changes (for example how far apart ads are, or how many Bonus Chests a day there are), each install is placed in a test group based on its random install identifier. The group is recorded with the analytics above. Tests never change the pieces, levels or scores.

Game Center and Google Play Games (if enabled). If you're signed in to Game Center (iOS) or Play Games (Android), the game submits your Classic best and Daily scores to their leaderboards and unlocks achievements. Apple or Google handle that data under their own policies.

Store review prompt. The game may ask Apple or Google to show their review prompt after a good moment. Whether it appears, and what you write, is handled by the store; we receive nothing from it.

The web Daily. If you play the Daily in a browser, your progress and streak are kept in that browser's storage. It shows no ads, and it loads everything from our own website.

Firebase Remote Config and A/B Testing. The game downloads its settings (for example how far apart ads are) from Firebase, using the same installation identifier, and Firebase may place your installation in a test group so we can compare two versions of a setting. Tests never change the pieces, levels or scores. Players under 13 don't take part.

Notifications. If you turn on the Daily reminder, the game schedules one local notification a day on your device; no data is sent anywhere for this. If you also allow notifications and leave Settings › News and events on, we may occasionally send a message about something new (a season, an event, an update) through Firebase Cloud Messaging, which gives your installation a push address. We never send these to players under 13. Turn them off in Settings › News and events or in your phone's notification settings.

How we use information

We use it to run the game and keep your progress, to show and measure ads, to deliver purchases, to understand and improve the game, and to prevent fraud. We do not sell your personal information. We don't use it to change the game's difficulty, pieces or scores.

Children

Neither game is directed at children under 13. Because children may still find them, each game asks every player's age the same way, without suggesting an answer, and adjusts:

If you think a child has provided personal information, contact us and we will delete it.

Your choices

Depending on where you live (for example the EU, UK, California or India), you may have rights to access, correct, delete or port your data, and to object to or restrict processing. Contact us to use them.

Data retention and security

Progress stays on your device until you delete it. Analytics events and crash reports are kept on our server for up to 24 months and used in aggregate; League, leaderboard, friends and ghost data is kept while you use these features (friends' Daily scores for 14 days); write to us and we'll delete it. Our server and database run on Google Cloud (Cloud Run and Firestore) in Iowa, United States, and our website on Firebase Hosting. If you live elsewhere, your information is processed in the United States and in the other countries where Google and RevenueCat operate, under their data-protection terms, which use the European Commission's Standard Contractual Clauses for data from the EU, UK and Switzerland. Our partners keep data according to their own policies. Google explains how it uses information from apps that use its services at https://policies.google.com/technologies/partner-sites.

Contact

Nazford Games, Mumbai, Maharashtra, India. Email: support@nazford.com. Website: https://nazford.com