Last updated:
Who is responsible
Bedtime Buttons is provided by Tommy O'Donnell, trading as Whiz Bang! Games, an Ireland sole trader. Contact playwhizbang@gmail.com about this policy or your personal information. This policy describes the Android, iOS and iPadOS game with purchases, optional rewarded advertising and platform-specific cloud-save features, and our related support service and website.
Information stored on your device
The game remembers your progress, statistics, Zzz balance, rewards, purchases and ownership evidence, collections, room arrangements, chosen profile name, avatar and preferences. These records make the game work and preserve your choices. Local profile names and avatars are not public social profiles. The game does not request access to your contacts, precise GPS location, camera, microphone or photo library.
Cloud saves and Google Play Games
Android cloud recovery uses Google Play Games and its Saved Games service. It associates a saved-game snapshot with the signed-in Play Games identity. A snapshot includes progress, statistics, wallet and completion records, ownership evidence, your chosen name and avatar, room choices and approved preferences. Google processes this information to store and recover the game for the appropriate account. The game checks the account before transferring or applying a snapshot. A local profile is separate from your Google account; Bedtime Buttons does not create a separate Whiz Bang! Games online account.
Apple cloud saves
On iOS and iPadOS, cloud recovery uses Apple iCloud and CloudKit with a private database associated with the signed-in iCloud account. A saved-game snapshot contains progression, statistics, earned currency, ownership evidence, the chosen profile name and avatar, room choices and approved preferences. The game checks an account-specific identifier before reading or writing a snapshot. These records support saving and recovery; they are not public profiles and are not used by the game for advertising. Apple hosts the private database under the user's iCloud account. A local reset or uninstall does not necessarily remove the separate cloud copy.
Purchases
Google Play processes Android payments; Apple processes iOS and iPadOS payments through the App Store. We do not receive your payment-card number or bank credentials. The game uses Unity In-App Purchasing to retrieve products, complete transactions, verify and restore ownership, and handle supported entitlement updates. Product and transaction identifiers, purchase history, receipts and verification evidence are processed for these purposes. Verified ownership evidence is retained with the local game and can be included in a cloud snapshot; restoring a snapshot does not itself prove a new purchase.
Unity IAP also processes purchase events and associated installation, session, device and country information for commerce functionality, analytics and service operation. This is separate from a dedicated gameplay analytics product. A purchase SDK may process information even when you are not starting a new purchase, for example while restoring purchase history. Apple, Google and Unity also process information for their own security, fraud prevention and other purposes described in their privacy notices. The game does not enable a web checkout or third-party direct-to-consumer payment service. The Android purchase integration does not request or supply your email address; this is separate from the Google account used by the store and any email you choose to send to support.
Optional advertising and privacy choices
Bedtime Buttons offers optional rewarded ads through Google AdMob. Watching an ad is not required for ordinary gameplay. Remove Ads owners receive eligible bonuses without watching ads. An unowned player's ad service may prepare an ad before the player selects an offer; choosing not to watch does not by itself mean the SDK has processed no information.
Google Mobile Ads may process IP-derived approximate location, device or account identifiers, interactions with the app and ads, and diagnostic information for advertising, analytics and fraud prevention. The Android and Apple configurations request non-personalized ads. The current Apple build does not request permission for cross-app tracking through App Tracking Transparency and does not obtain an authorized IDFA. Non-personalized ads can still use identifiers or storage for purposes such as security, reporting and frequency management; this is not a promise of anonymous or data-free advertising.
Google's User Messaging Platform manages applicable advertising choices. Where required, the game offers a privacy message and an Ad privacy choices control in the Store. You can return to that control to review or change available choices. Declining optional consent does not prevent ordinary play. The SDK determines what advertising may be requested under the current choices and region. This control concerns Google advertising; it does not erase purchase, cloud or support records or act as a general Unity IAP privacy control.
Support reports
Sending an in-game report is optional. The report contains your message, its category and subject, app version, platform, device model, screen resolution, screen/context and mode, and a randomly generated report ID. The report does not automatically attach your save, purchase receipt, profile name, screenshots or email address. You can review it before sending. Please do not include passwords, payment-card details or sensitive personal information.
Reports are sent over HTTPS through Google Apps Script to our Gmail support mailbox. The relay keeps submission receipt metadata to avoid duplicate delivery and limit abuse; it does not store the message body in those receipt properties. The delivered email contains the report. If you email us directly, we receive your address, message and any attachments you choose to provide. Copy Report only places the report on your clipboard; it does not send it.
Website and service providers
The developer website and policy pages are served by Cloudflare. Visiting them sends ordinary request information, including an IP address, to the hosting service. Google provides advertising/consent, Play purchases and saved games, and Apps Script/Gmail support infrastructure. Apple provides App Store purchasing and the iCloud/CloudKit services used by the Apple version. Unity provides the purchase integration and related commerce processing. We do not use the presence of these SDKs to claim every optional service offered by their providers is enabled. Their own privacy notices describe their processing and international operations: policies.google.com/privacy, unity.com/legal/privacy-policy and cloudflare.com/privacypolicy, and Apple privacy information.
Why information is used
We use game, purchase and cloud information to supply the game and requested features; support information to answer requests, fix problems and consider feedback; and security information to protect these services. Where GDPR applies, processing needed to supply requested features relies on performance of that service/contract; proportionate support, diagnostics and security processing may rely on legitimate interests; applicable advertising consent relies on your choice; and legally required recordkeeping relies on legal obligations. You may object to processing based on legitimate interests. Providers may have separate responsibilities and legal bases for their own processing. Information can be disclosed where a valid legal obligation requires it.
Retention
Local records remain until removed from the device, subject to operating-system backup and restoration. Cloud snapshots are retained in the associated Google or Apple service until replaced or deleted through the relevant service; uninstalling the game does not necessarily remove them. Purchase records and ownership evidence may remain necessary to restore content, prevent duplicate grants and meet applicable recordkeeping duties. Apple, Google and Unity apply their published provider retention rules to records they hold.
Support correspondence is retained for a maximum of 12 months from the last contact, subject to documented legal or operational exceptions. We review resolved cases monthly and remove them in time to allow for Gmail's recovery period within that limit. Active cases and specific legal holds are reviewed separately, with a recorded reason and next review date; we keep only information still needed. A valid deletion request can lead to earlier removal. The relay's duplicate-prevention metadata becomes eligible for cleanup after seven days. Scheduled daily maintenance first makes a restricted recovery copy, then removes the active receipt; the recovery copy becomes eligible for removal after a further seven days. Maintenance failures or invalid records are held for review rather than erased blindly. This receipt process does not read or delete emails. Provider backups and operational logs follow their own retention processes.
Your choices and requests
You can play without sending support reports, open Privacy & your data from Help → Support, use available advertising privacy choices, manage your Play Games data through Google or your iCloud data through Apple, and request access, correction or deletion of information we hold. Depending on the applicable law and circumstances, you may also request restriction or portability or object to certain processing. Withdrawing consent does not invalidate processing already lawfully undertaken.
Email playwhizbang@gmail.com with the subject Bedtime Buttons Data Request. Tell us which information or service your request concerns and enough information to locate it, such as an approximate report date or report ID. Do not send passwords, identity documents, bank details or a complete save file unless a necessary, secure process has first been agreed. We will request only proportionate verification and explain any lawful limits. Where Unity acts as our processor, we must route the verified request to Unity; some provider-controlled data must be requested directly from that provider. This is not an automatic all-provider deletion button.
For GDPR requests we normally respond within one month, explaining any permitted extension within that period. You may complain to Ireland's Data Protection Commission at dataprotection.ie or the appropriate authority where you live. Information is transmitted using encrypted connections, but no service can promise absolute security or immediate erasure from every backup. Providers may process data outside your country; their notices describe the applicable safeguards and how to obtain further information.
Children and changes
The game has no public player chat or public profile service. Parents and guardians should help children avoid sending personal information in support reports and use platform purchase controls. Contact us if you believe a child has provided personal information that should be removed. Store age ratings do not replace applicable privacy requirements. We will update this policy when the game's processing changes and identify the revised date on the published page.