Layton Labs AB
Gem Jam privacy policy
Last updated 20 October 2026
This policy explains how personal data is handled when you play Gem Jam, our colour-block puzzle game for iPhone, iPad and Android. In short: you can play without an account and your progress stays on your device; if you sign in with a Layton Account (from version 1.6.10 the game can do this for you with Game Center or Google Play Games), we keep a cloud save and let you play with friends and other players. Ads are shown by Google AdMob. We also advertise the game on TikTok, Facebook and Instagram, so the game tells TikTok and Meta when it is installed (in the EEA, UK and Switzerland only with your consent). Purchases go through Apple or Google Play and are managed by RevenueCat. The game sends us anonymous game stats, which you can switch off. We never sell your data.
For our website, Layton Account and our other games, see our general privacy policy.
Who is responsible for your data
The data controller is Layton Labs AB, Swedish company registration number 559590-8202, based in Stockholm, Sweden. If you have questions about how we handle your data, reach us at jean@laytonlabs.se.
Data that stays on your device
Gem Jam stores your game progress on your device: levels and stars, coins, lives, boosters, settings such as sound and music, and whether you have bought Remove Ads. If you play without signing in, your progress is not sent to us (apart from the anonymous game stats described below). It is deleted when you delete the app. (Purchases are the exception: see below.)
Layton Account (optional)
You can sign in with a Layton Account, our own account service, using your email address (we email you a one-time code), Sign in with Apple or Google, or, from version 1.6.10, automatically with Game Center or Google Play Games (see below). With Apple or Google we receive an account identifier and the email address they share with us (with Apple this can be a private relay address), and never your password. If you sign in, we store your email address (if you sign in with email, Apple or Google); your Game Center or Google Play Games player ID (if you use them); the display name and avatar you choose; your friend code; your Gem Jam cloud save (the progress listed above); your game statistics (the highest level you have reached, your total stars, your XP and your best result on each level); your Ranked points, wins and losses and the best league you reached each season; your weekly league groups and the XP you earned each week; the league and season rewards you have collected; your friends, friend requests, blocks and any reports you make or receive; lives you give to or ask from friends; and the technical data needed to keep you signed in securely (session tokens, your device model and, in server logs, your IP address).
Your friends can see your display name, avatar, player level, highest level, total stars, Ranked points and league, your best result on the levels they play and the day you were last active. They never see your email address. Someone becomes your friend only through a friend code that you choose to share, and you can remove, block or report anyone at any time. We review reports within 24 hours and can reset an inappropriate name or suspend an account.
You can sign out whenever you like and keep playing on your device. You can delete your account in the game under Settings, then Account, then Delete account: this immediately removes your account, cloud save, statistics, Ranked and weekly league results, friends, requests and gifts, and the link to your Game Center or Google Play Games player ID. Reports that involve you are kept only without anything that identifies you. The progress on your device stays.
Game Center and Google Play Games
If you are signed in to Apple's Game Center on your iPhone or iPad, or to Google Play Games on Android, Gem Jam sends them your achievements and, from version 1.6.10, your scores for their leaderboards: your total stars, your XP and your Ranked points. Other players can see these as your Game Center or Play Games settings allow. Apple and Google handle this data under their own terms, described in Apple's privacy policy and Google's privacy policy. If you sign out of Game Center or Google Play Games, the game sends them nothing.
Automatic sign-in (from version 1.6.10). If you are signed in to Game Center or Google Play Games and have not signed out of your Layton Account in the game, Gem Jam signs you in to your Layton Account automatically, and creates one for you, with a generated display name that you can change, if you don't have one yet. If you are already signed in, the game adds your Game Center or Play Games ID to your account, so that you are signed in automatically next time, for example on a new phone. For this we receive and store only your player ID: from Game Center, the ID that Apple gives you for Layton Labs' games, with Apple's signature confirming it, which we check with Apple's public key; from Google Play Games, your Play Games player ID, which our server gets from Google with a one-time code from the game. We do not store your Game Center or Play Games nickname, and we never receive your email address, friends or password through them. To stop it, sign out of your Layton Account in the game (the game then no longer signs you in automatically on that device until you sign in yourself again), sign out of Game Center or Google Play Games, or delete your account.
Playing online (Quick Match and Ranked)
Online matches need a Layton Account. When you play one, our match server receives your account identifier (from your sign-in), your display name, avatar, highest level reached and Ranked points, and the list of players you have blocked, so that it never matches you with them. It checks every move you make in a race and keeps a log of the match (the moves and their times) for 30 days, to keep races fair and to look into reports. It also keeps a few counts: your paid wins and the matches you left in the last days (for 7 days and 1 day), the best Ranked league you have reached, and how long races took (for up to 180 days, so that the practice bots, Rocco and Ember, race at a human pace). These are stored under a one-way code made from your account identifier, and removed within an hour when you delete your account.
Your opponent sees your display name, avatar and, in Ranked, your league. There is no chat: players can only send a few preset messages such as “Good luck!”, and you can mute them. You can report or block a player from the result screen.
Recorded runs (only from version 1.6.10). So that there is always someone to race, the match server records some of your runs when you are signed in: your races in Quick Match and Ranked, and your plays on the map of the levels used in races, when you play them without boosters (the game sends these to the match server, which checks them by replaying the moves). A recorded run holds the level, your moves and when you made them, the result and how long it took, with your display name, avatar and the highest level you had reached. Other players, including your friends from the Friends screen, can then race against your run: they see it as a recorded rival with your display name and avatar, making your moves at your pace. When you race someone's recorded run, that player later sees your display name, avatar, the level and who won, and you see the same when someone races yours (we keep your last 30 of these notes). We keep your best and your latest run on each level for up to 60 days. Runs and notes are stored under the same one-way code as above and deleted within an hour when you delete your account.
Weekly leagues. Every week (Monday to Monday, UTC), each signed-in player who earns XP is placed in a league group of up to 30 players in the same tier: Stone, Copper, Silver, Gold or Crystal. The players in your group see your display name, avatar and the XP you earned that week, and at the end of the week the players at the top move up a tier and those at the bottom move down. Your groups, weekly XP, tier and rewards are kept with your Layton Account until you delete it.
Ranked seasons and leaderboards. Ranked runs in monthly seasons. We keep your Ranked points, wins and losses with your Layton Account and, at the end of each season, a record of your points, wins, losses and the best league you reached, for the season reward. The Ranked top 100 is public and shows the display names, avatars, leagues and points of the players on it. In the game you also see your own place when you are not in the top 100.
Anonymous game stats
To see which levels are too hard, where players stop playing and which errors happen, the game sends anonymous game statistics to our own server. They contain a random ID that the game creates on your device (not your Layton Account, and not your device's or advertising identifier) and what happens in the game: levels started, won, failed or left and how long they took, boosters used, coins earned and spent, rewarded ads watched, shop visits and purchases (the product, never payment details), whether you watched the intro, daily gifts and puzzles, free boosters, Gem Vault levels, areas cleared, new game mechanics shown, XP and player levels reached, whether the rating prompt was shown, how you use Versus (opening it, the sign-in or level it asks for, searching for an opponent and how long you waited, the kind of opponent found, leaderboards and weekly leagues you open, rewards you collect and races against recorded runs), online match results, sign-ins (the method, such as email, Apple, Google, Game Center or Google Play Games, whether it was automatic, and whether it worked or made a new account), how long you play, error reports from the game's code, and the app version, platform (iOS or Android), the game's language and the highest level you have reached. They never contain your name, email address or anything you type, and we do not link them to your Layton Account. Our server receives your IP address when the game sends the statistics, but does not store it.
The statistics are stored in our database at Cloudflare, in the EU. The individual events are deleted after 90 days. We keep daily totals, which no longer contain your ID, for longer, and the days you played and the highest level you have reached until 400 days after you last played.
You can switch the statistics off at any time in the game under Settings, then Privacy Policy, then Game stats. The game then stops sending them and deletes any it has not sent yet.
Advertising (Google AdMob)
Gem Jam is free and shows ads (banners, full-screen ads between levels, and rewarded videos that you choose to watch) through Google AdMob, a service of Google. To show ads, measure them, limit how often you see the same ad and prevent fraud, Google's software in the app collects:
- your IP address, from which Google may estimate an approximate (coarse) location;
- device and app information, such as device model, operating system, language and app version;
- identifiers set by Google's software and, only if you allow tracking, your device's advertising identifier;
- how you interact with ads, and performance and diagnostic data about ad loading.
Consent in the EEA, UK and Switzerland. If you are in one of these regions, the game shows Google's consent message before personalised ads are used. You can accept, reject, or choose purposes, and you can change your choice at any time under Privacy choices in the game's settings. If you do not consent, Google shows non-personalised or limited ads.
Tracking request on iPhone and iPad. On the first launch, Gem Jam asks for permission to track you across other companies' apps and websites (Apple's App Tracking Transparency). Only if you choose Allow is your device's advertising identifier made available for ads. You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.
Ads in Gem Jam are limited to content suitable for all ages. Google processes this data under its own terms; read how at How Google uses information from sites or apps that use our services and in Google's privacy policy.
Advertising Gem Jam on TikTok, Facebook and Instagram
We advertise Gem Jam on TikTok and on Meta's Facebook and Instagram. So that they can tell us how many people installed the game after seeing one of our ads, the app contains TikTok's App Events SDK, a service of TikTok Technology Limited (Ireland), and Meta's SDK, a service of Meta Platforms Ireland Limited. When the game is installed and when it is opened, it tells TikTok and Meta so, together with:
- your IP address;
- device and app information, such as device model, operating system, language and app version;
- identifiers for the app on your device (such as a random ID created by their software) and your device's advertising identifier: on Android unless you have deleted it in Android's settings, and on iPhone and iPad (TikTok only) if you allow tracking.
It does not send your name, email address, purchases or what you do in the game.
Consent in the EEA, UK and Switzerland. This only happens if you consent in Google's consent message, where TikTok and Meta are listed among our ad partners. You can withdraw your consent at any time under Privacy choices in the game's settings; the game then stops sending them anything.
Tracking request on iPhone and iPad. On iPhone and iPad, TikTok's and Meta's software only runs if you choose Allow when Gem Jam asks for permission to track you (Apple's App Tracking Transparency). If you choose Ask App Not to Track, the game sends them nothing, and they count installs from their ads only through Apple's SKAdNetwork, which does not identify you.
TikTok and Meta process this data under their own terms; read how in the TikTok Business Products (Data) Terms, TikTok's privacy policy and Meta's privacy policy.
In-app purchases (Apple and Google Play)
Purchases such as Remove Ads, bundles and coin packs are made through Apple's App Store on iPhone and iPad, and through Google Play on Android. Apple or Google handles the payment; we never see your payment details, your Apple ID or your Google account. The game receives confirmation of the purchase from the store, such as the product and a transaction reference, so that it can deliver what you bought, and you can restore Remove Ads on a new device with Restore Purchases. Apple's and Google's handling of your data is described in Apple's privacy policy and Google's privacy policy.
We use RevenueCat, a purchase-management service, to check that purchases are valid, deliver and restore them, and show us purchase statistics. For this, RevenueCat receives a random, anonymous player ID created by the game, or, if you are signed in with a Layton Account, your account identifier so that purchases follow your account (never your Apple ID, Google account, name or email), your purchase and transaction history in Gem Jam, and basic device and app information such as operating system, app version, language and App Store or Google Play country. RevenueCat does not use this to track you or show you ads. Read more in RevenueCat's privacy policy.
Other software in the game
- Unity: Gem Jam is built with the Unity game engine. We have switched off Unity's analytics services, so the game does not send gameplay analytics to Unity.
- Unity Ads: the app contains Unity's advertising software, but it is not activated and does not collect data. If we ever activate it, we will update this policy first.
- Haptics: vibration feedback runs entirely on your device.
What we do not collect
Gem Jam does not collect your real name, contacts, photos, precise location, microphone or camera, and it only collects your email address if you sign in with a Layton Account. We do not build an advertising profile of you.
Why we process your data, and the legal basis
- Personalised ads (EEA, UK, Switzerland): your consent, which you can withdraw at any time under Privacy choices.
- Non-personalised ads, ad measurement and fraud prevention: our legitimate interest in funding a free game, and Google's legitimate interest in protecting its services.
- Measuring our ads on TikTok, Facebook and Instagram: in the EEA, UK and Switzerland, your consent, which you can withdraw at any time under Privacy choices; elsewhere, our legitimate interest in knowing which of our ads work.
- Delivering and restoring purchases: performance of our agreement with you.
- Purchase statistics: our legitimate interest in understanding which offers work.
- Anonymous game stats: our legitimate interest in making the game better and fixing errors. You can object at any time by switching them off.
- Layton Account, cloud save and friends: performance of our agreement with you, when you choose to create an account.
- Security and preventing abuse (sign-in protection, rate limits, blocks and reports): our legitimate interest in keeping the service safe.
- Online matches, recorded runs, weekly leagues, Ranked seasons, the Ranked top 100 and fair play: performance of our agreement with you when you use the game's online features, and our legitimate interest in always having someone for you to race, in fair matches and in preventing cheating and abuse.
- Automatic sign-in with Game Center or Google Play Games: our legitimate interest in keeping your progress safe and letting you play online without extra steps. You can object at any time by signing out; the game then no longer signs you in automatically.
- Game Center and Google Play Games achievements and leaderboards: our legitimate interest in offering them to players who use these services; nothing is sent to them unless you are signed in to them.
Who we share data with
- Google (Google Ireland Ltd and Google LLC): ads through AdMob, as described above, and on Android, Google Play purchases and app distribution.
- Apple: App Store purchases and app distribution.
- RevenueCat (RevenueCat, Inc., United States): validating, delivering and restoring purchases, and purchase statistics.
- TikTok (TikTok Technology Limited, Ireland): measuring our ads on TikTok, as described above.
- Meta (Meta Platforms Ireland Limited): measuring our ads on Facebook and Instagram, as described above.
- Cloudflare (Cloudflare, Inc.): runs Layton Account and its database for us, sends the sign-in emails and stores the anonymous game stats (in the EU).
- Apple and Google: to confirm who you are when you sign in with them or automatically with Game Center or Google Play Games, and, when you are signed in to Game Center or Google Play Games, for your achievements and leaderboard scores.
- Hetzner (Hetzner Online GmbH, Germany): hosts our match server, on servers in Finland.
- Other players: as described above, your friends, your opponents, the players in your weekly league group and the players who race your recorded runs see your display name and avatar with your results, and the Ranked top 100 is public.
Apart from measuring our ads on TikTok, Facebook and Instagram, as described above, we do not share your data for our own marketing, and we never sell it. Where data is processed outside the EU/EEA, for example by Google, RevenueCat, Cloudflare, TikTok or Meta in the United States, it is done under appropriate safeguards, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
How long we keep it
Game data stays on your device until you delete the app. Google, TikTok and Meta keep ad data according to their own retention policies, and Apple keeps purchase records according to its policies. RevenueCat keeps purchase records for as long as we use the service, and we can have them deleted on request. If you sign in, we keep your Layton Account data until you delete your account, which removes it immediately; server logs are kept only briefly, for security. Match logs are kept for 30 days, recorded runs for up to 60 days and race times for up to 180 days (see Playing online). Anonymous game stats are kept as described under Anonymous game stats.
Children
Gem Jam is suitable for all ages but is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has shared personal data through the game, contact us and we will help.
Your rights
You have the right to request access to your data, to have it corrected or erased, to object to or restrict processing, to receive your data (data portability), and to withdraw your consent at any time. You can erase the data on your device by deleting the app, and your Layton Account data by deleting your account in the game (Settings, then Account, then Delete account). For data held by Google or Apple, you can also use their own privacy tools. Get in touch at jean@laytonlabs.se and we will help you.
If you are unhappy with how we handle your data, you have the right to complain to the Swedish Authority for Privacy Protection, IMY.
Changes to this policy
If we change this policy, we update the date at the top of the page.