Doner Days
Privacy Policy
Last updated: 23 October 2026
Doner Days is a cooking game for iPhone and iPad. This policy explains what data the game collects, why it is collected, who processes it, and how long it is kept. MFO Works is the data controller.
The short version. Every player gets a game account: a guest account the game creates for you, which you can link to Sign in with Apple if you like. Your restaurant is saved on your device and a copy is kept with your account on Google Cloud servers, together with a record of your DC purchases, so your progress and purchases are not lost. You can delete your account in the game at any time. The game also collects usage statistics and crash reports to improve the game, and shows rewarded ads only when you choose to watch one. Those ads are not personalised, the game does not ask to track you, and it does not read your device's advertising identifier. We do not sell your data.
1. Data we collect
Your game account
The first time you open the game you choose to play as a guest or to sign in with Apple. A guest account is created with Firebase Authentication without asking you for anything: it is a random account identifier, and the game keeps its sign-in on your device. If you choose Play as guest while offline, the account is created the next time you are online.
If you use Sign in with Apple, Apple tells us only a stable identifier for your Apple Account. The game does not ask Apple for your name or your email address. Apple handles your sign-in under its own privacy policy.
For each account our server also stores a random purchase token (see Purchases below), when the account was created and whether it is a guest or an Apple account. The first 8 characters of your account identifier are shown in the game as your Player ID (Settings → Account).
Your game save
Your day, money and DC, stock, unlocks, equipment, statistics and the identifiers of purchases and account corrections already applied are stored in a file on your device. After each save the game copies this file to your account in Google Cloud Firestore, together with a random identifier for this installation of the game, the time it was saved, a revision number, and your current day and money. Only your own account can read or write this copy. It is used to restore your progress when you sign in with Apple on another device or reinstall the game.
Usage statistics
With Google Analytics for Firebase the game records how it is used: when it is opened, how long sessions last, and game events such as a day ending, a purchase attempt and its result, a rewarded ad being finished, or a feedback form being sent. Each event comes with the app version, device model, operating system version, language and approximate country, and with a random identifier Firebase generates for this installation of the game. It is not linked to your game account, name, email or Apple Account.
In the European Economic Area and the UK, usage statistics are only stored if you allow it in the consent form; elsewhere they are on by default. Advertising storage and ad personalisation are always off in the game's Firebase settings.
Purchases
DC packs are bought through Apple. We never receive your payment card or billing details. Each purchase carries a random token tied to your game account, so Apple and our server know which account it belongs to. When a purchase completes, the game records the transaction identifier, the pack, the App Store country, and the price and currency, so we can count revenue and detect refunds.
The game also sends Apple's signed receipt for the purchase to our server, and Apple sends our server App Store Server Notifications about purchases, refunds and refund reversals. From these the server keeps a purchase record: the transaction identifier, the pack, the amount of DC, the purchase date, whether it was a real or a test purchase, whether it was refunded, and the account it belongs to. This record is how lost DC is restored and how refunds are applied to your balance.
Refund requests
Refunds are decided by Apple. When you ask Apple to refund a DC pack, Apple may ask us for information about the purchase. We may then tell Apple, for that transaction, whether the DC was delivered to your game, what share of it has been used, and that no free sample was provided. We work this out from your purchase records and your game save. We do not send your name, contact details or anything about how you play.
Account corrections
When Apple refunds a DC pack, reverses a refund, or our support team adds DC for you, the server stores a correction on your account: the amount of DC, the reason, the transaction it relates to, the time, and for support corrections a short internal note. The game reads it and applies it to your balance.
Crash and error reports
When the game crashes or hits a serious error, Firebase Crashlytics sends a report with the device model, operating system version, app version, a random installation identifier and the technical details of the error. Reports do not contain your name or contact details.
Ads
Rewarded ads are served by Google AdMob and only load after the consent form allows it. Every ad request asks for non-personalised ads. The game does not show Apple's tracking permission prompt and does not read your advertising identifier (IDFA). To show an ad, count it and prevent fraud, Google still processes technical data such as your IP address, device type, operating system and app version. See how Google uses information from apps that use its services.
Game Center
If you are signed in to Game Center, the game sends your scores and achievements to Apple. Apple handles your Game Center profile under its own privacy policy; we see only what Game Center shows on leaderboards.
In-game feedback
If you send feedback from Settings, we receive the topic, the optional star rating and the message you write, together with the app version, operating system version, game language, device model, the game day and which kitchens are open. Feedback also carries your account identifier, so we can look up your account if the feedback needs it. It contains no contact details, so we cannot reply to it. If you want an answer, use the support form.
Support requests
If you contact us through the support form or by email, we receive the category and message you write and, if you give one, your email address so we can reply. If you give us your Player ID, we use it to find your account and look at your game save, purchase records and corrections to solve the problem.
2. Why we use it
- To run the game and deliver purchases. Legal basis: performance of a contract.
- To keep your game account, back up your progress, restore it on another device and keep your purchases with your account. Legal basis: performance of a contract.
- To apply refunds to your DC balance and answer Apple's questions about refund requests. Legal basis: legitimate interest in handling refunds fairly and preventing refund abuse.
- To understand how the game is played and balance it. Legal basis: your consent in the EEA and the UK; legitimate interest elsewhere.
- To fix crashes and defects. Legal basis: legitimate interest in a working game.
- To show rewarded ads you ask for. Legal basis: your consent in the EEA and the UK; performance of a contract elsewhere.
- To answer your feedback and support requests. Legal basis: legitimate interest in helping you.
We do not use your data for personalised advertising, profiling, or automated decision-making.
3. Who else processes it
We use the following processors. Each is bound by its own contract and processes data only on our instructions, except Google AdMob and Apple, which also act under their own terms for the services they provide.
| Processor | What it handles |
|---|---|
| Google Analytics for Firebase | Usage statistics and purchase events |
| Google Firebase Crashlytics | Crash and error reports |
| Google Firebase Authentication | Game accounts (guest and Sign in with Apple) |
| Google Cloud Firestore | Cloud copy of your game save, purchase records, account corrections and in-game feedback |
| Google Cloud Functions (Belgium, europe-west1) | Purchase checks, App Store notifications, refund requests and account deletion |
| Google AdMob and User Messaging Platform | Rewarded ads and the consent form |
| Apple | Sign in with Apple, App Store purchases, refunds and Game Center |
| Cloudflare | This website and the support form |
These providers operate servers in the United States and the European Union, so your data may be transferred outside your country. Transfers out of the EEA and the UK rely on the European Commission's Standard Contractual Clauses.
We do not sell your personal data and we do not share it with third parties for their own advertising.
4. How long we keep it
- Your game save stays on your device until you reset your progress, sign out, delete your account or delete the game.
- Your game account, its cloud save and its corrections are kept until you delete your account.
- Purchase records are kept after you delete your account, without any link to it, because Apple can still send refund notifications for those purchases; we keep them as long as needed to handle refunds and for our financial records.
- Usage statistics are kept for the retention period set in Google Analytics, at most 14 months, and only aggregated reports after that.
- Crash reports are retained by Crashlytics for up to 90 days.
- Feedback and support messages are kept for as long as they are useful for improving the game or answering you, then deleted. Deleting your account does not delete feedback you sent; ask us with your Player ID and we will delete it.
5. Your choices
- In the EEA and the UK, open Settings from the start screen and tap Privacy to change your consent at any time.
- Rewarded ads are optional. The game never shows one without your tap.
- You can sign out of Game Center in the Settings app on your device.
- Reset progress in the game's Settings starts your restaurant over; the new game also replaces the copy on your account when it syncs.
- Sign out (Settings → Account, Apple accounts only) starts a new game on this device. Your progress and purchases stay with your account and come back when you sign in again. If you stop using Sign in with Apple for Doner Days in your Apple Account settings, the game signs you out the same way.
Deleting your account
Open Settings from the start screen, tap Account, then Delete account, and confirm twice. You need an internet connection; with an Apple account, Apple asks you to confirm it is you. This deletes your game account, the cloud copy of your save and your account corrections, and revokes the game's Sign in with Apple access. Purchase records stay, without any link to you, as described above. Feedback you sent is kept as described above unless you ask us to delete it. A new game then starts on your device. Deleting the game from your device does not delete your account.
6. Your rights
Depending on where you live, you have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. Under the GDPR you may also lodge a complaint with your local supervisory authority. Under Turkey's KVKK you have the equivalent rights under Article 11 and may apply to the Turkish Data Protection Authority. You can delete your account yourself in the game. For any other request about your account data, including feedback you sent, contact us with your Player ID. Usage statistics and crash reports are not linked to your account, so we can only find them if you give us the identifiers involved. We respond within 30 days.
7. Security
All traffic between the game and the services above is encrypted with TLS. Data is encrypted at rest by the providers. Your cloud save can only be read and written by your own account. Purchase records and account corrections are written only by our server. Feedback can only be written by the game; nobody can read it back through the game or the public API.
8. Children
Doner Days is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
9. Changes to this policy
If this policy changes materially, we will update the date at the top of this page and, where the change affects how we use your data, tell you in the game.
10. Contact
Questions about this policy or about your data: email [email protected] or use the support form.