Privacy Policy

Last updated: 7 October 2026

Sweet Trail is a casual puzzle game. This policy explains what information the game uses and why, who else receives it, and the choices you have. We have tried to keep it short and plain.

The short version

• You can play without an account. If you choose to create one to keep your progress across devices, we ask for your e-mail address and a password. We never ask for your phone number or real name.
• Your progress is saved on your device. When the game's online features are available, a copy is also kept on our server, as a backup and for events.
• You can use your own photo as your avatar. It is checked automatically, only a small copy is kept on our server, and other players can see it on event leaderboards. You can remove it at any time.
• Ads come from Google AdMob and Unity Ads. Where the law requires it, you choose whether ads may be personalised, and you can change your mind at any time.
• Purchases go through the App Store or Google Play. We never see your payment details.
• Notifications are off until you switch them on. Reminders stay on your device; if you choose news from our team, your device's notification address is kept on our server so that we can reach it.
• In Settings › Privacy you can take a copy of your data at any time, or ask for it to be deleted: it is deleted 30 days later, and you can change your mind until then.
• We do not sell your personal information.

Who we are

Sweet Trail is developed and published by Paaket Games, Accra, Ghana ("we", "us"). We are responsible for the personal data described in this policy. You can reach us at info@paaket.com, or through the support contact on the game's App Store or Google Play page.

What the game keeps on your device

To run the game, Sweet Trail saves the following on your device:

• your progress: levels, stars and scores, coins, boosters, lives, your bakery, recipes and settings;
• your profile: the name you choose (optional) and the avatar you pick, which can be your own photo;
• copies of the profile pictures the game has shown you (your own, and other players' from event leaderboards), so they don't need downloading again;
• a random player ID, shown in Settings as "ST-" followed by letters and numbers, which you can quote if you contact us;
• a simple log of game events, such as levels started and finished, used to look into problems. It stays on your device and is never sent to us or anyone else.

A backup copy of your save is kept alongside it, so that a damaged save can be recovered.

Online features

Some features need our server: the cloud save, and events such as the Weekend Bake-off. When these features are available and your device is online, the game uses the following.

A guest account. The first time the game connects, it creates random identifiers for your installation and a secret key that proves the game on your device is yours. You do not need to sign in, and the account is not linked to your name or e-mail address. We store the secret key only in a scrambled (hashed) form.

Cloud save. A copy of your save is sent to our server automatically while the map is open, at most every two minutes and never during a level. The copy includes your profile name and avatar. It serves as a backup, and if you create an account, it lets you carry your progress to another device.

Your account (optional). You can create an account with your e-mail address and a password to keep your progress across devices. We send a 6-digit code to the address to confirm it is yours, and another if you forget your password. We store your e-mail address and a scrambled (hashed) form of your password, never the password itself, together with the dates the account was created, confirmed and last changed its password. The codes are also stored hashed, for no more than an hour. We use your e-mail address only for your account: to confirm it, to let you sign in and to reset your password. We never show it to other players or send you marketing. On your device, the game keeps only a shortened form of the address (such as "j•••@example.com") to show where your progress is saved. When you sign in on another device, the progress of that device's guest account is merged into your account, and the guest account is deleted. If you sign out, the device starts a new game, and your progress stays in your account. We do not offer sign-in with Apple, Google or other third parties.

Your profile photo (optional). You can use a photo from your device as your avatar. You choose it in your device's own photo picker, and the game receives only that one photo: it never looks through your library, so it doesn't ask for access to it. The game makes the photo smaller on your device and sends it to our server. The server makes a small square picture from it (384 × 384 pixels, without the location, date, camera or other details stored in the photo file) and keeps only that picture: the photo you sent is not kept. The picture is checked automatically against the photo rules in our Terms of Service by OpenAI, our moderation provider; a photo that breaks them is not kept at all. Other players see your picture next to your generated name on event leaderboards. They can report a picture, or hide a player's pictures. A picture reported by several players is hidden until we review it, and we remove pictures that break the rules. Your picture is deleted from our server when you switch back to one of the game's avatars, choose another photo, or delete your data.

Events. When you win a level during an event, the game sends the level, the stars you earned and the difficulty, so that we can keep the leaderboard. Other players see a generated name such as "Baker 4F2A", the avatar you picked or your profile picture, your score and your rank. They never see your profile name.

Purchases. When you buy something with real money, we receive the store's confirmation so that we can check it and deliver what you bought exactly once. We keep the platform (Apple or Google), the product, the transaction number, what was delivered and when. The store's receipt is checked, not kept.

Server logs. Like most online services, our server records each request it receives: the time, the address requested, the result and your device's IP address. We use these logs to keep the service running and to protect it from abuse, for example by limiting how many requests one address can make. We do not use your IP address to work out where you are. Secret keys and receipts are removed from the logs.

When it starts, the game also downloads its current settings and event information.

News, updates and gifts. The game asks our server whether there is news, a maintenance notice, or a newer version you need. To answer, it sends the game's version and your device's platform (such as iOS or Android), and we keep the latest version and platform of each of your devices to plan updates. We may send in-game messages and gifts to all players or to you; you see them in the game, and a gift is added to your progress when you claim it.

Statistics. We use the progress in cloud saves (for example, which levels players reach, how many tries a level takes, and the coins and gems earned and spent in the game) and the times devices connect to our server to make statistics, such as how many players finish each level or come back after a week. The statistics count players together; we use them to balance the game and never to single anyone out. Accounts we use for testing are left out.

Our team. When you contact us, and to keep the game fair, our team can look up the information described here on our server, correct your progress or rewards, or limit an account that breaks our Terms of Service. Access is limited to the people who run the game and protected by two-step sign-in, and every look-up and change is recorded.

Advertising

Sweet Trail shows ads from two ad networks, Google AdMob and Unity Ads (through Unity's LevelPlay ad service). Each ad comes from whichever network has one ready. The ads are:

• rewarded ads, which you choose to watch in return for a reward such as extra moves or a life;
• now and then, a full-screen ad after you win a level. There are none during your first ten levels, at most one every three wins, and at least five minutes apart. The "Remove forced ads" purchase switches these off for good; rewarded ads stay optional.

To show ads and measure how they perform, the network that shows an ad may collect information from your device, such as its advertising ID, IP address and device type, and how you interact with ads. Google uses this information under its own privacy policy (policies.google.com/privacy), and Unity under its own (unity.com/legal/game-player-and-app-user-privacy-policy). Ads are limited to content suitable for a general audience.

Your choices:

• In the EEA, the UK, Switzerland and some US states, the game asks you through Google's consent form whether ads may be personalised. Your answer applies to both ad networks. You can change it at any time in Settings › Privacy › Privacy choices. The button appears wherever this choice applies.
• On iPhone and iPad, the advertising ID is used for tracking only if you allow it when Apple's App Tracking Transparency prompt asks. You can change this in your device's Settings, under Privacy & Security › Tracking.
• On Android, you can reset or delete your advertising ID in your device settings.

Saying no never stops you playing. You may see less relevant ads, and occasionally fewer rewarded ads may be available.

Purchases

Real-money purchases are handled by Apple (App Store) or Google (Google Play), under their own terms and privacy policies. We never receive your card or bank details. The game uses Unity's in-app purchase library to talk to the stores.

Other services we rely on

• Google (AdMob and its consent tools): ads and ad consent, as described above.
• Apple and Google (the app stores): downloads, updates, payments and refunds.
• Apple and Google (their notification services, Apple Push Notification service and Firebase Cloud Messaging): deliver the news, gifts and offers you choose to receive with Events & news. They receive your device's notification address and the notification, and nothing else from the game.
• Resend (our e-mail provider): sends the codes for your account. It receives your e-mail address and the message, and nothing else from the game.
• OpenAI (our moderation provider): checks each profile picture against our photo rules. It receives the small picture and nothing else from the game, and under its terms for businesses it does not use it to train its models and keeps it for no more than 30 days, to detect abuse.
• Unity Technologies (Unity Ads and its LevelPlay ad service): ads, as described above.
• Unity Technologies (the engine the game is built with, and its purchase library): may receive basic technical details, such as your device model, operating system and graphics chip, and an installation ID used by its services.
• Replit (our hosting provider): runs our server, its database and our website, and stores the data of the online features, including profile pictures, on our behalf.

We share only what these services need to do their job. We may also disclose information if the law requires it, or to protect our rights, our players or the public. We do not sell your personal information.

Notifications and your clipboard

Notifications are off until you switch them on, when the game first asks or in Settings › Notifications; your device then asks for your permission. There are two kinds, each with its own switch:

• Reminders, for example when your lives are full, a daily treat is waiting, or after a few days away. They are scheduled on your device, and nothing about them is sent to us.
• Events & news: reminders about the Weekend Bake-off, scheduled on your device in the same way, and news, gifts and offers from our team, which we send from our server. For these, the game sends our server your device's notification address (a push token from Apple or, on Android, from Google's Firebase), its platform and its time-zone offset, so that nothing arrives at night. We keep the address until you switch Events & news off, sign out or delete your data, or until 270 days pass without your device connecting, and a record of which of our notifications went to your device for 30 days.

The game does not send notifications late at night, and you can turn them off in your device's settings at any time.

Clipboard. The game puts text on your clipboard only when you ask it to, when you export your data. Other apps on your device may be able to read your clipboard.

Why we use your information

If you are in the EEA, the UK or Switzerland, the law asks us to name a legal basis for each use. We rely on:

• providing the game you asked for (our Terms of Service): saving your progress, the cloud save, sign-in, events, your profile photo and delivering purchases;
• our legitimate interests: keeping the service secure and working, preventing abuse, checking profile pictures and handling reports so the game stays friendly for everyone, fixing problems, helping you when you contact us, sending news and in-game messages, and making statistics that count players together to balance the game;
• your consent: personalised ads, tracking on iPhone and iPad, and notifications, including the news, gifts and offers our team sends. You can withdraw your consent at any time, as described above;
• legal obligations: where the law requires us to keep or disclose information.

How long we keep information

• On your device: until you delete it (see below) or uninstall the game. Your device's own backups, such as iCloud or Google backups, may keep copies according to your backup settings.
• On our server: your cloud save, your account's e-mail address and password hash, event results and purchase records are kept for as long as your account exists. Your profile picture is kept until you switch back to one of the game's avatars, choose another photo or delete your data; the pictures you reported and the players you hid are kept for as long as your account exists. Codes sent by e-mail are deleted within an hour, and records of when your devices connected about 37 days after they are made. Your device's notification address is kept as described under Notifications. You can ask for all of this to be deleted at any time: in the game, or, if you no longer have it, with the form on our website (sweettrail.paaket.com/delete-account). It is deleted 30 days after your request. We then keep only a short record of the request (its dates, how we checked it was yours, and your player ID) for three years, and our team's log of actions, without your e-mail address or your game data.
• Backups: encrypted copies of our server's data, which we keep to recover from failures, are deleted after 90 days. Until then, a backup may still hold data that was deleted from the server after it was made.
• Server logs: kept for 30 days by our hosting provider, then deleted automatically.

Your rights and choices

Depending on where you live, you have rights over your personal data. They include the right to access it, correct it, delete it and receive it in a portable format, to object to or restrict how it is used, and to withdraw your consent.

The game's Settings › Privacy page lets you:

• Export my data: makes a readable copy (a JSON document) of the game's data on your device and, when the online features are available, of everything our server holds about your account, including your e-mail address and your profile picture. Your password, codes and notification address are never included. The copy is put on your clipboard, and the latest one is also kept on your device.
• Delete my data: asks us to delete your account (including your e-mail address and your profile picture) and everything linked to it on our server. The deletion happens 30 days after your request; until then you can keep playing and change your mind with Keep my account. Other players stop seeing your profile picture as soon as you ask. When it is done, the game also deletes its data on this device the next time it is online, including your progress and anything you have bought. Other devices you played on keep their own copy until you delete the game there. This cannot be undone. If our server cannot be reached, your request isn't sent, and you can try again later.

You can change your profile name and your avatar or photo at any time on your profile. For anything else, contact us; we may need your player ID to find your data. You also have the right to complain to your local data protection authority.

US state privacy rights. Where the law of your state gives you rights to know, delete or correct personal information, or to opt out of its "sale" or "sharing" for targeted advertising, you can use them as described above. Use Privacy choices to opt out of personalised ads where it is offered. We do not sell personal information for money.

Children

Sweet Trail is made for a general audience. It is not directed at children under 13, or under the minimum age for consent in your country. Ads are limited to content suitable for a general audience. We do not knowingly collect personal information from children. Please do not use a real name as your profile name. Photos of children can't be used as profile pictures: the automatic check refuses them, and we remove any that get through. If you believe a child has given us personal information, contact us and we will delete it straight away. You can also ask for everything to be deleted in Settings › Privacy.

Keeping information safe

The game talks to our server over encrypted connections (HTTPS). Secret keys are stored only in hashed form, and access to the server is limited to the people who run it. No system is perfectly secure, but we work hard to protect your information.

International transfers

Our service providers may process information in countries other than yours, including the United States. Where the law requires it, these transfers are protected by safeguards such as the European Commission's standard contractual clauses.

Changes to this policy

We may update this policy when the game changes. The date at the top shows the latest version. If we make important changes, we will tell you in the game before they take effect.

Contact

Paaket Games
Accra, Ghana
E-mail: info@paaket.com