Privacy policy

Privacy policy

Last updated 2026-10-07

Merge 2048 is operated by TLM Software Design, Inc., a Michigan corporation with offices at 27280 Haggerty Road, Ste C-6, Farmington Hills, MI 48331, USA ("we", "us", "our"). This policy describes what the app collects, why, where it goes, and the choices you have.

What the app stores on your device

The following is kept in the platform's app-private key-value storage (SharedPreferences on Android, NSUserDefaults on iOS). None of it is sent to us, to the ad network or to any other third party. The usage events described under Google Firebase below are the only gameplay information that leaves the device.

• Settings: language, theme, selected board size, the sound, music and vibration switches, and the usage-data switch.
• Statistics: for each board size, your best score, best tile, games played and games won, plus a timeline of personal bests.
• Daily challenge: your best score for each of the last thirty days, and your current streak of days played.
• Achievements: which achievements you have unlocked, and when.

A game in progress is held in memory only and is not written to storage. There is no cloud sync and no backup we control; uninstalling the app removes everything listed above.

Network behaviour

Moves, merges, scoring, the daily challenge and every statistic are computed on the device. The daily board is generated from the date, so no server is contacted to fetch it. Only three external services receive traffic:

• Google AdMob: to load an interstitial ad between games, and a rewarded ad when you choose to watch one for an extra undo. Not contacted once Premium is active.
• RevenueCat: when you buy or restore Premium, and to confirm the purchase on launch.
• Google Firebase: Crashlytics sends a report when the app crashes or hits an unexpected error; Analytics records app-launch and session events and the short list of game events below. Both can be turned off in Settings.

If the device is offline, the game works normally. No ad is shown, a rewarded ad for an extra undo is reported as unavailable, and crash reports wait until a connection returns.

Permissions

The app requests no access to your camera, microphone, location, contacts, photos, files or calendar. On Android it uses:

• android.permission.VIBRATE, for the haptic tap on each merge, which you can turn off in Settings;
• android.permission.INTERNET and android.permission.ACCESS_NETWORK_STATE, for the ad network, the purchase service, and crash reports and analytics;
• com.google.android.gms.permission.AD_ID, declared by the Google Mobile Ads SDK rather than by the app itself, which lets the ad network use your resettable advertising ID.

On iOS the app does not ask for App Tracking Transparency permission, so the ad network cannot read the advertising identifier (IDFA).

Advertising: Google AdMob

The free tier shows an interstitial ad between games from the second game onward, never while a game is being played. After the one free undo per game, you may choose to watch a rewarded ad to earn one more; this is never forced. AdMob receives device and ad-interaction data such as the advertising ID (on Android), IP address (from which an approximate location can be inferred), ad interactions, device model and operating-system version to deliver ads, measure them and prevent fraud.

Whether ads are personalized is governed by your consent where the law requires it (for example in the EEA and the UK), by your device's ad settings, and by Google's policies. See Google's privacy policy and how Google uses information from apps that use its services.

The Premium purchase: RevenueCat

Premium is a one-time, non-consumable in-app purchase managed by RevenueCat. When you buy or restore it, RevenueCat receives a random, app-generated user ID and the store receipt so it can confirm the entitlement. Payment is handled entirely by the App Store or Google Play; neither we nor RevenueCat see your payment method.

Crash reports and analytics: Google Firebase

Firebase Crashlytics records the stack trace, device model, operating-system version, app version and a Firebase installation ID when the app crashes, and when a purchase or restore fails in an unexpected way. Firebase Analytics records app-launch and session events tied to the same installation ID, plus these game events:

• a game started: the board size, and whether it is the daily challenge;
• a game finished: the board size, the mode, whether it was won, lost or ended early, and the highest tile reached;
• an undo used: whether it was the free undo, one earned by watching an ad, or a Premium undo;
• a rewarded ad: whether it was watched to the end, closed early, unavailable or failed;
• Premium: when the Premium screen opens, and whether a purchase or restore went through, was cancelled or failed.

Neither service receives your board, your scores, your statistics or your other settings, and Firebase Analytics does not collect the advertising ID on either platform. Only release builds send anything. Analytics data is retained for up to 14 months; crash reports are retained for 90 days.

To stop both, turn off Settings → Privacy → Share anonymous usage data and crash reports. Nothing is sent from that device while it is off, and crash reports from that period are deleted rather than sent later.

Children

Merge 2048 is made for a general audience and is not directed at children under 13 (16 in the EU and the UK). We do not knowingly collect personal data from children. If you believe a child's data has reached us, write to privacy@swtlm.com and we will delete it.

Your rights and choices

We hold no account or profile about you, so the data the app keeps is under your control: uninstalling the app deletes it. You can reset or limit your advertising ID in your device settings, buying Premium stops all ad requests, and the usage-data switch in Settings stops crash reports and analytics. For data held by Google, see Google's privacy controls.

Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA), you may have the right to access, correct, delete or object to the processing of your personal data. To exercise any of these rights, email privacy@swtlm.com; we answer within 30 days. We do not sell personal data.

This website

These pages (apps.swtlm.com/merge-2048-game) are static and hosted on Amazon Web Services (S3 and CloudFront). The site uses Google Analytics to count visits: pages viewed, sessions and referral source. Analytics cookies (_ga, _ga_*) are set only after you accept them in the cookie banner; if you decline, no analytics script loads and no cookie is set. You can withdraw consent at any time by clearing this site's local storage in your browser. AWS records standard access logs (IP address, time, requested URL), which are never joined to any in-app identifier.

apps.swtlm.com is one website: this page and every app page on it share a single analytics property and a single consent choice, so accepting or declining once applies everywhere on the domain. That is the analytics only. This privacy policy covers Merge 2048 and its pages, and nothing else — every other app on apps.swtlm.com has its own policy, because every app handles different data.

Service providers

• Google AdMob: in-app advertising on the free tier.
• RevenueCat: Premium purchase management and entitlement verification.
• Google Firebase: Crashlytics and Analytics.
• Google Analytics (GA4): aggregate visitor analytics for this website, loaded only after consent.
• Amazon Web Services (S3 and CloudFront): hosting for this website.

Changes to this policy

We will post material changes on this page and update the date at the top.

Contact

Privacy questions: privacy@swtlm.com. General support: info@swtlm.com.

← Back to Merge 2048