WobbleMe Privacy Policy
Version 1.1. Effective and last updated: 3 October 2026.
This Privacy Policy explains how WebDeliveryLab ("we", "us", "our"), collects, uses, shares and protects personal data when you use WobbleMe (the "Service"): the website playwobble.me and its subdomains, the WobbleMe web game, the WobbleMe Android app (com.webdeliverylab.wobbleme) and any iOS app, WobbleMe on third-party game portals, the WobbleMe Telegram Mini App and bot, and the WobbleMe API.
We decide why and how your personal data is processed for the Service. Platforms you use to play (Google, Apple, Telegram, game portals) also collect data under their own privacy policies, as noted below.
Our Terms of Use also apply. Questions: privacy@playwobble.me.
1. Summary
- The game needs no account. Your progress, Coins and settings are stored on your device.
- Website: we use Cloudflare Web Analytics, which is cookie-free and does not track you across sites.
- Android: crash reports (Google Firebase Crashlytics) are on by default so we can fix bugs, and you can turn them off in Settings. There are no ads and no in-app purchases in version 1.
- Telegram Mini App: we receive your Telegram user ID and basic profile data from Telegram, and keep your WOBBLE balance and purchase records on our server.
- Photo avatars (16+ only, consent required, where available): a photo you choose is used only to create your game avatar. We keep the photo and the files made from it until you delete them. We do not use your photos to identify you or to train AI models.
- We do not sell your personal data.
- You can ask us to access, correct or delete your data at any time by email: privacy@playwobble.me. See How to delete your data.
2. Data we collect
| Source | Data |
|---|---|
| You, directly | Messages you send us (for example support or deletion requests, with your email address); photos you upload to create an avatar, avatar names and your consent records (Telegram Mini App) |
| Telegram | Telegram user ID, first name, username (if set), language code, Premium flag, and whether you allowed the bot to message you (Telegram Mini App only) |
| Our Service | WOBBLE balance and transaction history, avatar creation records, the avatars created for you, timestamps |
| Payment platforms | Payment confirmations (for example a Telegram Stars charge ID, amount and pack). We never receive card or bank details |
| Your device, automatically | IP address and basic request data (browser or device type, time) in hosting and security logs; game progress and settings stored locally on your device; crash and diagnostic data on Android (see §3.3) |
We do not collect your precise location, contacts, microphone recordings or payment card numbers.
3. Data by platform
3.1 Website and web game
- No account and no sign-in. The web game saves your progress (levels, Coins, cosmetics, missions, settings) in your browser's local storage. It stays on your device; we do not receive it.
- Hosting and security. Cloudflare hosts the website and its media files and processes your IP address and request data to deliver pages and protect against abuse.
- Analytics. The website uses Cloudflare Web Analytics to count visits and measure page performance. It does not use cookies, does not use local storage for tracking, and does not build a profile of you.
3.2 Game portals
When you play WobbleMe on a third-party game portal, the portal runs the game and is responsible for its own data collection (including any ads, accounts and consent prompts) under its own privacy policy. The portal build of WobbleMe has no WobbleMe account and no trackers of our own; it saves progress in your browser.
3.3 Android and iOS apps
- Crash reports. The app uses Google Firebase Crashlytics to receive crash and error reports (device model, OS version, app version, app state at the time of the crash, and an installation identifier). It is on by default and you can switch it off in the app's Settings. Firebase Analytics is off.
- No ads and no in-app purchases in version 1. When we add ads (Google AdMob) or purchases (Google Play Billing, Apple In-App Purchase) in a later version, we will update this policy first, and ads will only be personalised with your consent where the law requires it. AdMob would then receive your device's advertising ID, IP address, device information and ad interactions to show and measure ads and prevent fraud.
- The apps ask for no camera, photo, contacts or location permission. Game progress is stored on your device.
- Google Play and the Apple App Store process your download and any store account data under their own policies.
3.4 Telegram Mini App and bot
- Sign-in. When you open the Mini App, Telegram passes signed launch data to us. We check Telegram's signature and use your Telegram user ID to recognise you. We store your Telegram user ID, first name, username, language code and Premium flag.
- Wallet and purchases. We store your WOBBLE balance, a history of top-ups, avatar charges, refunds and promotional grants, and Telegram Stars payment records. Payments are handled by Telegram and the store or seller you bought Stars from.
- Bot messages. If you allow it, the bot may message you, for example when your avatar is ready. You can turn this off in Telegram.
- Telegram Cloud Storage. The Mini App may keep a small copy of your game progress in Telegram's Cloud Storage for your account, so it survives a change of device.
- Telemetry. If you allow it, the Mini App sends anonymous gameplay events (for example "avatar creation started"). They contain no photos and no free-text personal data.
- Telegram's own processing is covered by the Telegram Privacy Policy.
4. Photo avatars
This section applies only if you choose to create a personalised avatar from a photo, where the feature is available (the Telegram Mini App). It is optional; the rest of the game works without it.
- Who may use it. You must be 16 or older, and the photo must be of you, or of someone who has given you permission. Photos of anyone under 16 are not allowed.
- Consent first. A consent screen explains the feature before you choose a photo. Nothing is uploaded until you accept it. We record your consent (version, date and time, and your age and permission confirmations).
- What we keep. The photo you choose, the files generated from it (images, 3D files and the finished game character) and the creation record (status, timestamps, price charged and any refund).
- How we use it. Only to create your avatar, to retry a creation that failed, and to keep your avatar available to you in the game. Automated moderation may reject a photo (for example, one with no person or with prohibited content); the WOBBLE is then returned.
- What we never do. We do not use your photo or face to identify you or anyone else, match faces, verify identity, or estimate age, gender or emotion. We do not use your photos or avatars to train AI models, we do not sell them, we do not use them in marketing, and we do not show them to other users.
- How long we keep it. Until you delete it. Nothing is deleted on a timer, so a failed step can be retried and your avatar stays yours.
- How to delete it. In the Mini App, delete a single avatar (this deletes its photo and files) or use "Delete all my data" in Settings. You can also email us. Deletion is permanent and does not refund WOBBLE.
- Photos of you uploaded by someone else. Contact us at privacy@playwobble.me and we will investigate and remove them.
Your uploads and your responsibility
In short: you decide what to upload. Upload only photos of yourself, or of someone who has explicitly agreed. Uploading someone else's photo without consent, or a celebrity's, is not allowed and is your responsibility. You can delete your uploads at any time.
- You choose what to upload. We process the photo you upload, on your behalf, only to create your game character and keep it available to you.
- Other people's photos. Uploading a photo of another person without their explicit consent, of a child, or of a celebrity, public figure or influencer is prohibited by our Terms of Use and is your responsibility, not ours.
- No advance review. Avatars are created automatically; we do not look at uploads before they are processed. Content found to break the rules may be removed, together with the character made from it.
- Deleting. Delete a single avatar or "Delete all my data" in the Mini App, or see How to delete your data.
- Concerns about a photo of you. Write to privacy@playwobble.me; we will review the report and remove the content where appropriate.
5. Service providers and sub-processors
We use these providers to run the Service. They process personal data on our behalf, under contract, only to provide their service to us.
| Provider | What it does for WobbleMe |
|---|---|
| fal.ai (Features & Labels, Inc.) | AI image generation for the photo-avatar feature |
| Tripo and Meshy | AI model providers used for the photo-avatar feature (sub-processors) |
| DigitalOcean | Cloud storage for avatar files (private storage) |
| Cloudflare | Website hosting, content delivery, media storage (R2), security, and cookie-free web analytics |
| Firebase Crashlytics crash reports (Android), Google AdMob ads when enabled, Google Play distribution | |
| Telegram | Mini App platform, sign-in data, bot messages, Stars payments, Cloud Storage |
| Apple | App Store distribution (iOS) |
We may change providers. We will update this list before a new provider receives personal data.
6. Why we use data (legal bases)
Where the EU/EEA or UK GDPR or similar laws apply, we rely on:
| Purpose | Legal basis |
|---|---|
| Running the game, the Mini App, your wallet and purchases | Performance of our contract with you (the Terms of Use) |
| Creating your photo avatar | Your consent, which you can withdraw at any time |
| Crash reports, website analytics, security and abuse prevention, hosting logs | Our legitimate interests in keeping the Service working, safe and fast |
| Keeping payment records | Legal obligation (tax and accounting) |
| Answering your messages and requests | Contract or legitimate interests |
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
7. Cookies and local storage
We do not use advertising or analytics cookies on our own website, so we do not show a cookie banner. The web game and the Mini App use local storage on your device to save your progress and settings. Cloudflare may set strictly necessary security cookies. Game portals may set their own cookies under their own policies.
8. How long we keep data
| Data | How long |
|---|---|
| Progress stored on your device | Until you clear it or uninstall; we never hold it |
| Photos, generated files and avatars | Until you delete them |
| Telegram profile data | While you use the Mini App; deleted when you ask us to delete your data |
| Consent records | As long as needed to show valid consent, including after deletion |
| WOBBLE and payment records | As long as tax and accounting law requires; anonymised after a deletion request |
| Hosting and security logs | A limited period, normally no longer than 30 days, unless needed to investigate abuse |
| Crash reports | Per Google Firebase Crashlytics retention (currently 90 days) |
| Support and deletion emails | As long as needed to handle your request, then up to 2 years |
9. Your rights
Depending on where you live (for example the EU/EEA, the UK, California and other US states), you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, to withdraw consent at any time, and to complain to your data-protection authority. We do not sell or share personal data for cross-context behavioural advertising.
To use any of these rights, email privacy@playwobble.me. We will answer within 30 days (or sooner if the law requires) and may ask you for information to confirm the request comes from you (for example your Telegram user ID or the email address you used). We will not treat you differently for using your rights.
10. How to delete your data
- Email: send a deletion request to privacy@playwobble.me. Full instructions, what is deleted and the timelines are on How to delete your data.
- In the app, where available: use "Delete all my data" in Settings (Telegram Mini App), or delete a single avatar.
- Data on your device: clear your browser's site data or uninstall the app.
11. Children
WobbleMe is a casual cartoon game for a general audience. It is not directed at children, and you must be 13 or older to use it (or older where your country requires). The photo-avatar feature is 16+ only. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us at privacy@playwobble.me and we will delete it.
12. International transfers
We and our providers operate in several countries, including Vietnam, the United States, Singapore and the European Union, so your data may be processed outside your country. Where the law requires, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or our providers' equivalent commitments.
13. Security
We use reasonable technical and organisational measures, including encryption in transit (HTTPS), verification of Telegram sign-in data on our server, private storage for photos and intermediate files, access controls and rate limits, and keeping provider keys on the server only. No system is completely secure. If a breach affects your personal data, we will notify you and the authorities where the law requires.
14. Changes to this policy
We may update this policy, for example when we enable a feature or add a provider. We will post the new version at https://playwobble.me/privacy with a new version number and date. For material changes, especially to how photos are used, we will tell you in the Service and, where required, ask for your consent again.
15. Contact
- Operator: WebDeliveryLab (WobbleMe)
- Privacy and data requests: privacy@playwobble.me
- Telegram payment support:
/paysupportin the WobbleMe bot