← Back to Parkly

Privacy Policy

Last updated: September 11, 2026

1. Introduction

Parkly ("we," "our," or "us") is an iOS parking simulator game. This Privacy Policy explains what the game stores, what it doesn't, and how the little data there is moves between your device, our backend (Firebase), the purchase service (RevenueCat) and the ad network (Google AdMob).

Parkly is a game about driving into a parking bay. It has no camera, no microphone, no location, no contacts, no messaging and no social features, so there is very little about you for it to hold. What it does hold is your progress: coins, which cars you own, and your best result on each level.

Parkly does show ads, and that is the part of this policy worth actually reading. Section 4 covers it in full.

2. How Your Data Flows

• Device → your own storage: Your progress is written to a file on your phone first, every time. The game is fully playable with no network at all, and the cloud copy below is a backup rather than the source of truth.
• Device ↔ Firebase Authentication: On first launch the game signs you in anonymously. That creates an account with a random user ID (a "UID") and nothing else, no email, no name, nothing you typed. It exists so your progress has an owner and can be backed up. You are never asked for anything to get it.
• Device ↔ Cloud Firestore (your progress): Your save is stored as a single document at players/{your UID}. It holds one block of game data (coins, the cars you own, your best stars, time and accuracy per level, and your settings) plus the time it was last written. Security rules allow that document to be read and written only by the signed-in account whose UID names it. Nobody else can reach it, including other players.
• Device ↔ Apple / Google (optional sign-in): If you choose to sign in with Apple or Google, the provider authenticates you and hands a token to Firebase, which attaches that identity to the anonymous account you already had, so nothing you earned is lost. We never see your Apple or Google password. This step is entirely optional and the game is complete without it.
• Device ↔ RevenueCat ↔ Apple: If you buy Full Garage or a coin pack, Apple processes the payment. RevenueCat sits between the game and Apple and tells the game what you own. RevenueCat receives your Firebase UID and the receipt data Apple returns. We never see your Apple ID or your payment method.
• Device ↔ Google AdMob: Unless you own Full Garage, the game requests ads from Google AdMob. Google receives the technical information it needs to serve and measure an ad, which may include your device's advertising identifier if you have allowed it. See section 4.

3. Information We Collect

Account information

• A Firebase Authentication user ID (UID), generated automatically on first launch
• If, and only if, you choose to sign in: the identity your provider returns. Apple typically supplies a private relay email and, on the very first authorisation only, a display name. Google supplies the email and name on the Google account you pick.

Game progress (created by playing)

• Your coin balance
• Which cars you own and which one is selected
• Per level: best stars, best time, best parking accuracy, and how many attempts you have made
• Your settings (music, sound, haptics, camera view, steering scheme, sensitivity, guide lines)
• The time the save was last written, used to decide which copy is newer

That is the entire contents of the save. There is no free text field anywhere in Parkly, so there is nothing in it you have written.

Purchase state

• Whether your Full Garage entitlement is active, as reported by RevenueCat and Apple
• Coins added by a coin pack, which become part of the balance above

Advertising

• Your answer to the consent form, where one is required, stored on your device by Google's consent SDK
• Your answer to the iOS tracking prompt, held by iOS itself
• Whatever Google AdMob collects to serve and measure an ad, described in section 4
• Counters kept on your device for how many rewarded videos you have watched today, so the daily cap works

What we do NOT collect

• No product analytics of any kind. There is no PostHog, no Google Analytics, no Firebase Analytics, no Mixpanel, no crash SDK
• No location, contacts, calendar, camera, photo library, microphone or health data
• No address book, no friend graph, no leaderboard, no chat
• No name or email unless you actively sign in, and even then only what the provider hands over
• No session recording or screen replay
• Nothing at all is sold. We do not sell or share personal information

4. Ads, Tracking & the Permission Prompts

This is the honest section. Parkly is free, the whole campaign is free, and ads are how a free game pays for itself.

Where the ads are. There are exactly three placements, and no banners anywhere:

• A full screen ad on the way out of the results screen, never on top of it, and never after a failed attempt
• An optional video you can watch to double the coins a run just paid
• An optional video in the store worth a fixed number of coins, capped at five a day

The two videos are opt-in: nothing in Parkly requires watching an ad to continue, and you are never blocked from playing by one.

The tracking prompt. On iOS, before any ad is requested, the game shows Apple's App Tracking Transparency prompt. If you allow it, your device's advertising identifier (IDFA) may be used by Google and its ad partners to personalise and measure ads, which can involve activity in other companies' apps and sites. If you decline, no advertising identifier is used and you still get ads, just non-personalised ones. Declining costs you nothing in the game.

The consent form. If you are in the EEA, the UK, or a US state with an applicable privacy law, Google's consent SDK shows a form before ads begin, listing Google and its ad partners and letting you accept, refuse, or manage individual vendors. Your choice is stored on your device by that SDK and can be changed later.

What buying Full Garage actually does. If you own Full Garage the ad SDK is never started at all. Not started and told to stay quiet, not initialised and then skipped: the game does not load it, does not request an advertising identifier, does not show the consent form and does not contact Google's ad servers. That is a deliberate design decision and it is the difference between not being shown ads and not being profiled for them.

5. Third-Party Services

The game relies on the following services, each with their own privacy policies:

• Google Firebase (Authentication, Cloud Firestore): holds your anonymous or signed-in account and your progress document. Firestore data for Parkly is stored in Google Cloud's eur3 multi-region (Europe).
• Apple: App Store distribution, in-app purchase billing, and Sign in with Apple if you use it.
• Google Identity: Sign in with Google, if you use it.
• RevenueCat: reports what you have bought to the game. Receives your Firebase UID and Apple's receipt data. Processes data in the United States.
• Google AdMob and Google's User Messaging Platform: serve the ads and collect your consent choice. Not used at all for players who own Full Garage. Google's handling of ad data is described in its own privacy policy and its "How Google uses information from sites or apps that use our services" page.

6. Playing Without an Account

You never have to sign in. The anonymous account in section 2 is created for you and needs nothing from you. The trade-off is the honest one: an anonymous account lives with that installation, so deleting the app or changing phones loses the progress attached to it. Signing in with Apple or Google is what makes progress survive a reinstall, and it is the only reason the option exists.

7. Data Retention & Deletion

Your progress document stays in Firestore so you can come back to it. There is nothing in it but game state.

Signing out from the account screen returns the device to a fresh anonymous account and clears the local save on that device, so the next person to pick up the phone does not inherit your garage. Your account's own copy is untouched and comes back when you sign in again.

Deleting your account and its data: open the account screen, tap "Delete account," and confirm. That removes your progress document from Firestore, the save on your device, and your Firebase authentication record. It happens immediately, it is irreversible, and nothing is retained afterwards.

The order matters and the game does it deliberately: your saved progress is deleted first, while you are still signed in, because the rule protecting that document checks your user ID against it. If the progress cannot be deleted, the account is left alone and you are told, rather than leaving a save in the cloud that no longer has an owner who could ever reach it.

This is available to guests as well as signed-in players, since an anonymous account has a document in the cloud exactly like any other.

Purchases are not affected. Anything you bought belongs to your Apple ID rather than to this account, so it survives deletion and comes back with Restore Purchases. Deleting your account is not a refund, and refunds are handled by Apple.

Deleting the app from your phone removes the local save immediately, but does not by itself remove the cloud copy. Use the in-game button for that, or write to support@moetalaat.com if you no longer have the app installed.

8. Legal Basis for Processing (GDPR)

If you are in the EEA, United Kingdom, or Switzerland, we process personal data on these bases:

• Contractual necessity (Art. 6(1)(b)): creating the account that owns your progress, storing that progress, and delivering what you have paid for.
• Consent (Art. 6(1)(a)): personalised advertising, and any use of your advertising identifier. This is the choice you make in Google's consent form and in Apple's tracking prompt, and you can change it at any time.
• Legitimate interest (Art. 6(1)(f)): keeping the game working and preventing abuse.

9. International Data Transfers

Firestore data for Parkly is stored in Europe (eur3). Firebase Authentication, RevenueCat and Google AdMob process data in the United States and elsewhere. If you use Parkly from outside those regions your data is transferred accordingly. These providers offer Standard Contractual Clauses for cross-border transfers.

10. Your Rights

You have the right to:

• See what is stored about you, which for Parkly is the progress visible in the game itself
• Have your account and its data deleted, from the account screen in the game or by writing to us
• Request a copy of your data by emailing us
• Change your advertising choices at any time, in the game's consent form and in iOS Settings → Privacy & Security → Tracking

EEA/UK residents (GDPR): you also have the right to data portability, the right to restrict or object to processing, the right to withdraw consent for advertising at any time, and the right to complain to your local data protection authority.

California residents (CCPA/CPRA): you have the right to know what personal information is collected, the right to delete it, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. Personalised advertising can count as "sharing" under the CPRA, and refusing consent in the form described in section 4, or declining the tracking prompt, is how you opt out.

11. Children's Privacy

Parkly is not directed to children under 13 (or 16 in the EEA) and is not listed in the App Store's Kids category. We do not knowingly collect personal information from children. If you believe a child has an account, contact us and we will delete it.

12. Security

All traffic between the game, Firebase and RevenueCat uses HTTPS. Firestore security rules restrict every player's document to their own UID, reject any field the game does not use, and cap its size. The local save is written to a temporary file and then moved into place, so a crash mid-write cannot leave half a save behind. No system is perfectly secure, but there is very little here worth taking.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here and, where significant, noted in the game. Continued use after a change means you accept it.

14. Contact

Questions, deletion requests, or anything else, write to support@moetalaat.com.

15. Summary

In short: Parkly stores your coins, your cars and your best runs, and nothing else, because there is nothing else. It signs you in anonymously so that save has an owner, and only asks for a real identity if you want your progress to survive a new phone. It runs no analytics whatsoever. It does show ads, it asks for your consent before it does, declining costs you nothing in the game, and if you buy Full Garage the ad SDK never starts at all.