Last updated: 2 October 2026
This Privacy Policy explains what information WebmateDigital OÜ (“we”, “us”) collects when you use our mobile apps and games, why we collect it, and what you can do about it.
It applies to the apps and games we publish that are supported by advertising — under the developer names WebMate Digital and RexGround on Google Play, and under WebmateDigital OÜ on the Apple App Store (together, the “Apps”). Every store listing that links to this page is covered by it.
A few of our other apps are not advertising-supported and collect different data, so this policy would not describe them honestly. Each of those links its own policy from its own store listing.
We are the data controller for the processing described here. WebmateDigital OÜ is a company registered in Estonia under registry code 14215106. You can reach us at privacy@webmatedigital.com or by post at Tuukri tn 19-216, Tallinn 10120, Estonia.
1. The short version
- We do not ask for your name, e-mail address or phone number, and we have no accounts.
- We show advertising, and advertising is what makes the Apps free. Ads use a device advertising identifier.
- We measure how the Apps are used so we can fix crashes and make them better.
- In the EEA, the UK and Switzerland we ask for your consent before using your data for personalised advertising, and you can take that consent back (§6).
2. What we collect
We do not collect information that directly identifies you. We do collect the following, automatically, while you use an App:
Device and technical data. Device model, operating system version, language, country, screen size, mobile network and carrier, time zone, IP address (used to derive approximate country and then discarded by our providers), and crash diagnostics (stack traces, memory state at the moment of a crash).
Identifiers. The advertising identifier provided by your operating system (Google Advertising ID on Android, Identifier for Advertisers on iOS), an app instance identifier generated by our analytics tools, and the Google Play install referrer. These identifiers are resettable by you in your device settings.
Android Privacy Sandbox signals. On Android devices that support it, the Google Mobile Ads SDK in our Apps may use the Topics API and the Attribution Reporting API. These are operating-system features: the topics of interest are derived by Android itself from the apps you use and are shared with advertisers only in coarse form, and attribution is measured by Android without the advertiser learning who you are. You control both in Settings → Google → Ads → Ad privacy on your device, independently of the choice you make in our consent form.
Usage data. Sessions, screens viewed, levels or tasks started, completed and failed, settings you change, features you use, and events related to advertising (an ad was requested, shown, closed, or rewarded you).
Purchase data. If you buy something in an App, the store (Google Play or Apple App Store) processes the payment and tells us that a purchase succeeded, what was bought and when. We never receive your card number, bank details or billing address.
Attribution data. Where an install came from (which advertising campaign, if any), so that we can tell which of our own adverts work.
We do not collect your contacts, photos, files, precise location, microphone or camera data. The Apps request no permissions that would allow it.
3. Why we use it, and on what legal basis
| What we do | Why | Legal basis (GDPR) |
|---|---|---|
| Run the App, remember your progress and settings | So the App works at all | Contract (Art. 6(1)(b)) |
| Show advertising that is not personalised | To keep the App free when you have not consented | Legitimate interest (Art. 6(1)(f)) |
| Show personalised advertising and measure it | Advertising paid per relevance funds development | Your consent (Art. 6(1)(a)) |
| Analytics: sessions, levels, retention | To see where people get stuck and improve the App | Legitimate interest (Art. 6(1)(f)) |
| Crash reporting and stability | To find and fix defects | Legitimate interest (Art. 6(1)(f)) |
| Attribution of installs to campaigns | To spend our advertising budget sensibly | Legitimate interest (Art. 6(1)(f)) |
| Processing a purchase | To deliver what you paid for | Contract (Art. 6(1)(b)) |
Where we rely on consent, you may withdraw it at any time (see §6). Withdrawing consent does not make past processing unlawful, and it does not remove advertising from the App — it makes the advertising non-personalised.
4. Who else processes your data
We use the providers below. Each acts under its own privacy policy, and each is listed so that you can read it. The set is not the same in every App: one App contains some of these and not others.
| Provider | What it does in the App | Privacy policy |
|---|---|---|
| Google AdMob (Google Ireland Ltd / Google LLC) | Serves the adverts and measures them, including through the Android Topics and Attribution Reporting APIs | https://policies.google.com/privacy |
| Google User Messaging Platform | Shows the consent form and stores your choice | https://policies.google.com/privacy |
| Google Firebase: Analytics, Crashlytics, Remote Config, Installations | Usage analytics, crash reports, feature configuration | https://firebase.google.com/support/privacy |
| Google Play Billing | Processes in-app purchases | https://policies.google.com/privacy |
| AppLovin | Advertising demand through AdMob mediation | https://www.applovin.com/privacy/ |
| Meta Audience Network | Advertising demand through AdMob mediation | https://www.facebook.com/privacy/policy/ |
| Unity Ads and ironSource (Unity Technologies) | Serves adverts and mediates demand between ad networks | https://unity.com/legal/privacy-policy |
| Appodeal | Mediates advertising demand between ad networks | https://www.appodeal.com/privacy-policy/ |
| CAS.ai (Clever Ads Solutions) | Mediates advertising demand between ad networks | https://cleveradssolutions.com/privacy-policy |
| Adjust GmbH | Attribution of installs to advertising campaigns | https://www.adjust.com/terms/privacy-policy/ |
| AppMetrica (YANDEX LLC) | Usage analytics | https://yandex.com/legal/confidential/ |
Mediation. The providers marked as mediating demand pass an advert request on to other ad networks and return the best-paying answer. This means an advert you see may come from a network not named in the table, and the set of those networks changes without us editing this page. What such a network receives is exactly what §2 describes — a device advertising identifier, coarse technical data and the advertising events — and never your name, e-mail address or phone number. The current list for Google AdMob is published at https://support.google.com/admob/answer/9012903, and each mediator named above publishes its own in the policy linked beside it.
Advertising partners may use the data they receive to build an interest profile and to show you adverts in other apps. That is what “personalised advertising” means, and that is the processing you are asked to consent to.
We do not sell your data for money.
5. Where your data goes
Our providers operate globally, and your data may be processed outside your country, including in the United States. Transfers out of the EEA, the UK and Switzerland rely on the European Commission’s Standard Contractual Clauses, or on an adequacy decision where one applies. You may request a copy of the safeguards from us at privacy@webmatedigital.com.
6. Your choices
The consent form. In the EEA, the UK and Switzerland, the App asks for your consent before personalised advertising on first launch. To change your answer afterwards: where the App has a privacy or consent item in its own settings, open it there. Where it does not, the choice is stored on your device only and is cleared when you clear the App’s data (Android: Settings → Apps → the App → Storage → Clear data) or reinstall the App — the form then appears again on the next launch.
Your advertising identifier. Android: Settings → Google → Ads → Reset advertising ID or Delete advertising ID. iOS: Settings → Privacy & Security → Tracking, where you can withdraw permission for the App to track.
Android ad privacy. Settings → Google → Ads → Ad privacy turns off the Topics API and app-suggested advertising for every app on the device, ours included.
Analytics. Write to us at privacy@webmatedigital.com and we will exclude your app instance from analytics. To do it yourself, delete the App — the app instance identifier is deleted with it.
7. Your rights
If you are in the EEA, the UK or Switzerland, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent. If you are in California, you have the right to know what is collected, to delete it, to correct it, and to opt out of “sharing” for cross-context behavioural advertising — the consent control in §6 is that opt-out.
Write to privacy@webmatedigital.com to exercise any of these, naming the App you are asking about. We answer within one month, and we will never ask you for a document that identifies you.
One limit, stated plainly: we hold no account and no name, so the only thing that links data to you is the app instance identifier generated by our analytics tools. Where the App shows that identifier in its settings, send it and we can act on your request. Where it does not, we have no way to tell your data apart from anybody else’s, and Article 11 GDPR applies — we will tell you that rather than guess. Deleting the App deletes the identifier with it, and the analytics data expires on the schedule in §8.
You also have the right to complain to your data protection authority. In the EEA you may contact the authority of your country of residence; in the UK, the Information Commissioner’s Office.
8. How long we keep it
Analytics events are kept for 14 months and then deleted automatically. Crash reports are kept for 90 days. Advertising data retention is governed by each advertising partner’s own policy, linked in §4. Purchase records are kept for as long as tax law requires us to keep them, which is normally 7 years.
9. Children
Our Apps are general-audience products. They are not directed to children under 13 (or under 16 in the EEA, where that is the applicable age), and we do not knowingly collect data from them.
Where an App is distributed in a store category for children or families, the store listing of that App says so, and for that App we treat all users as children: advertising is never personalised, the advertising identifier is not used for advertising purposes, and no interest profile is built.
If you believe a child has used an App and we hold their data, write to privacy@webmatedigital.com and we will delete it.
10. Security
Data in transit is encrypted with TLS. Access to analytics and advertising dashboards is limited to the people who need it and protected by two-factor authentication.
11. Changes
We will update this page when the Apps change. The date at the top is the date of the last change. If a change affects what we do with your data in a material way, we will ask again for your consent inside the App.
12. Contact
- WebmateDigital OÜ (registry code 14215106)
- Tuukri tn 19-216, Tallinn 10120, Estonia
- privacy@webmatedigital.com