Cozy Cafe Together Privacy Policy

Two ways to play

• As a guest: everything stays on your phone only; nothing is sent to any server.
• Signed in with Apple: your cafes and profile are backed up to the cloud so you can share a cafe with your partner and pick up where you left off on a new phone.

Sign in with Apple

We do not request your name or email address. Apple gives us only an anonymous identifier unique to you, which is used to create an account on Google Firebase Authentication.

Stored in the cloud

Only if you sign in with Apple. Data is stored on Google Firebase (Cloud Firestore, European region):

• Account: your Firebase account identifier.
• Profile: your character’s look, unlocked cosmetics (including purchased sets) and settings (language, sound, notifications).
• Cafe saves: the cafe’s name, items, level, till and tips, recipe book, garden, trophies, duel record, the notes the partners leave for each other, the menu board drawing and note report records; which accounts the cafe belongs to (founder and invitee).
• Invite codes: the 6-letter code created when you invite a partner; it expires after 48 hours.
• Session info: while you play together, who is hosting the cafe right now and a connection code, removed when the session ends.

Stored on your phone

Your settings, the phone’s copy of your cloud saves, guest cafes, the cafe pictures shown on the cafe cards and the photos in your memory albums. These stay on your phone and are never sent to us; they may be part of your phone’s own backup. A cafe’s album is deleted with the cafe or when the partnership ends.

Playing together over the internet

When you play with your partner over the internet, game traffic is relayed between the two phones by Unity Relay (Unity Technologies). For this, Unity creates an anonymous player identifier, processes your IP address during the connection (to pick the nearest server region, which is an approximate location) and collects basic usage and crash data to operate its service. No game data is stored at Unity. Playing alone never connects to Unity.

Photos, notifications and microphone

• Photos: cafe photos you take are created on your phone and kept in that cafe’s memory album on your phone (up to 36 photos). “Share” sends a photo to the app you pick in the iOS share sheet; “Save Image” asks for add-only access to your photo library, which is never read.
• Notifications (for example “Your slow delivery arrived”) are scheduled on your phone; no notification server is used. You can turn them off in the menu.
• Microphone: used on the phone only in the candle-blowing mini game, to measure how hard you blow. Nothing is recorded or sent anywhere. Without permission, the game is played by tapping.

Purchases

Cosmetic sets are sold through the App Store. Payment details stay with Apple and we never see them; only which sets are unlocked is kept in your profile.

Notes and reporting

Notes are visible only to the two partners of a cafe. You can hide an inappropriate note with “Report”. You can remove your partner from the cafe or leave the partnership; when a partnership ends, notes are deleted and the leaving player’s tips, trophies and duel record are removed.

Service providers

• Google Firebase: account and save storage.
• Unity Relay: network relay while playing together.
• Apple: sign-in and purchases.

These services process data under their own privacy policies, in some cases outside Türkiye (for example in the European Union or the United States).

Retention and deletion

Data is kept until you delete it. Delete account in the main menu permanently deletes your cloud account, your profile and the cafes that belong only to you; a shared cafe passes to your partner (your notes, tips and trophies are removed). It also revokes the Sign in with Apple authorization and deletes all saves, settings and photos on this phone.

If you no longer have the game installed and want your cloud data deleted, write to us and we will help. We answer within 30 days.

Children

The game does not ask for personal information such as name, email or location, and does not knowingly collect data from children under 13.

Your rights

Depending on where you live (for example under the GDPR or Türkiye’s KVKK), you can ask to access, correct or delete data about you, object to its use, or withdraw consent. You can also complain to your data protection authority.

Changes

If this policy changes, you will be told in the game, and this page and the date at the top are updated.