When & Where

Privacy Policy

Last updated: May 21, 2026

This Privacy Policy describes how IronLlama LLC ("IronLlama," "we," "us," or "our") collects, uses, and shares information when you use the When & Where mobile application and related services (the "Service"). By using the Service you agree to the practices described here.

1. Information we collect

1.1 Account & profile data

When you create or use a profile in the game we may collect a display name, a device-generated player identifier, and authentication tokens. We do not require your real name to play.

1.2 Gameplay data

We collect gameplay information such as scores, leaderboard rankings, badges earned, levels completed, and in-game settings so that we can sync progress across sessions and devices.

1.3 In-app purchases

When you make an in-app purchase, we receive a purchase receipt from Apple App Store or Google Play. We use the receipt to verify the transaction and to grant the corresponding virtual items to your account. We do not receive or store your full payment card or banking information.

1.4 Device & technical data

We collect a limited set of technical data, including device model, operating system version, app version, language, country, IP address, crash reports, and mobile advertising identifiers (IDFA on iOS, AAID on Android) where you have consented to their use.

1.5 Advertising data

The Service shows third-party advertising provided by ad-mediation partners (including Unity LevelPlay / ironSource and the ad networks they mediate). These partners may collect device identifiers, IP address, and ad-interaction data to deliver and measure ads. See "Third-party services" below.

2. How we use information

3. Third-party services

We rely on the following providers to operate the Service. Each provider processes data under its own privacy terms:

4. Children's privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

5. Data retention

We retain account and gameplay data while your account is active and for a reasonable period afterwards to support audit, fraud prevention, and legal obligations. You may request deletion at any time (see Section 7).

6. Your rights

Depending on where you live (for example, the EEA/UK under GDPR, or California under CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain uses. To exercise these rights, contact us at hi@ironllama.com.

7. Data deletion requests

To request deletion of your account and associated data, email hi@ironllama.com from the address associated with your account (or include your in-game player ID). We will respond within a reasonable time and confirm once deletion is complete.

8. International transfers

Your data may be processed in countries other than the one in which you live. Where required by law, we use appropriate safeguards such as standard contractual clauses to protect your information.

9. Security

We use reasonable technical and organizational measures to protect your data, but no system is perfectly secure. You use the Service at your own risk.

10. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the app.

11. Contact

IronLlama LLC
Email: hi@ironllama.com