Privacy in Paper Boy · Folds
Last updated: October 23, 2026
Who looks after the game
Paper Boy · Folds is made by Cartae Serviços LTDA, a Brazilian company registered under CNPJ 54.245.388/0001-10, based in João Pessoa, Paraíba, Brazil. Cartae is responsible for the data processing described on this page.
You can play without creating an account. The game has no ads, does not ask for your name or email to play, and does not use advertising identifiers or track your activity across other apps and websites. This policy covers the game; visits to this website are covered by a separate policy.
What stays on your device
Your progress, language, sound, control and graphics preferences, and the last known purchase status are stored on your device. The game does not offer an account to sync progress between devices.
Deleting the app may delete this progress. Restoring a purchase unlocks the content you bought, but does not recover completed levels. On iPhone, system backups follow your device settings. On Android, the game disables general cloud backups of app data; direct device-to-device transfers follow the rules of the system and device manufacturer. The RevenueCat identifier may be backed up separately, as described below.
Usage data to improve the game
We use TelemetryDeck to understand where players get stuck and improve the levels and purchase experience. We send events about opening the game, starting levels and their outcomes, play time, counts of moves, hints, restarts, defeats and undos, and actions on the purchase screen and their results. We also record when the game requests a review and when you open the review link; this does not tell us whether the prompt appeared or what rating or comment you left.
Events include the game version, store, level, original activity time, and information about access to paid content and the offer shown, such as price and currency. Random identifiers distinguish the installation, sessions and level attempts. The SDK hashes the installation code before sending it. It is not linked to the RevenueCat purchase identifier. We do not send names, email addresses or advertising identifiers in these events.
Analytics runs automatically; there is no in-game setting to turn it off. When offline, an on-device queue holds up to 200 events. Only events from the past 30 days can be sent when the connection returns; older events are discarded when the queue is next updated. You can keep playing without a connection.
TelemetryDeck states that it does not store IP addresses and has no fixed deletion schedule for archived events. The on-device queue limit is not a server-side deletion deadline.
Purchases and restoring access
The App Store or Google Play processes the one-time purchase of the rest of the game. We use RevenueCat to validate receipts and transactions, unlock content, restore access and view purchase reports. It receives its own random identifier, purchase records and technical information such as operating system and app versions, device type, store language or region and currency. RevenueCat states that the country shown in its reports comes from the transaction or is inferred from the IP address; after determining the country, it discards the IP. The game does not request GPS access.
On iPhone, the SDK also sends the device’s identifier for vendor (IDFV), which is not the advertising identifier.
On Android, RevenueCat may save your random RevenueCat identifier in Google’s Block Store service, with support for cloud backup. This helps recover the purchase association after reinstalling or changing devices; it does not sync your game progress.
We do not provide names, email addresses or advertising attributes to RevenueCat. Cartae and RevenueCat do not receive your full card number. Apple and Google handle payment and store account information under their own rules. Purchasing or restoring requires internet access.
Purposes, sharing and retention
Purchase data is used to fulfill your request and maintain access to content. If you contact support, we use your email address and what you send to respond and follow up. Usage analytics helps us improve the game, without advertising or profiles tied to your name.
We do not sell data. The providers named above and our email provider process the information needed for these services, including outside Brazil. Purchase and support records may be kept as needed to provide the service, meet legal obligations or exercise legal rights. The services have their own retention rules; uninstalling the game does not mean purchase records are deleted.
Cartae processes personal data to fulfill purchase and support requests, meet legal obligations and, where applicable, pursue the legitimate interest of maintaining and improving the game, subject to players’ rights.
Your rights and how to contact us
You may request confirmation of processing and access to personal data handled by Cartae, corrections and information about sharing. Where provided by applicable law, you may also request portability, anonymization, restriction or deletion, object to processing, or withdraw consent where consent is the applicable legal basis.
Email suporte@cartae.com.br. Since the game has no account system, we may need limited information to find a request or purchase and verify your request. Usage events do not contain names or email addresses, so we cannot locate them using those details alone. Do not send passwords or card details. We will explain if a record cannot be located or must be retained to meet legal obligations. You may also contact Brazil’s National Data Protection Authority.
Updates
If our data practices change, we will update this page and the date above.