← Cowcona App Studio Tunis, Tunisia

Privacy Policy

Cowcona builds small Android games and offline-first utilities. Most of what our apps do happens on your device and never reaches us. This page explains the exceptions, in plain terms: what leaves your phone, who receives it, and how to stop it.

Effective 27 July 2026 Version 1.0 Applies to cowcona.com and all com.cowcona apps

Data at a glance

What leaves your device, and what doesn't

This table is the short version of everything below. It mirrors the Data safety declaration on our Google Play listings. Where the two ever disagree, the Play listing for that specific app is the one to trust — individual apps can differ.

Summary of data handled by Cowcona apps and website
Data Status Why Who receives it
Account details (name, email, password) Not collected Our apps have no accounts and no sign-in. Nobody.
Your files — videos, audio, photos, documents Stays on device Conversion and editing run locally on your phone. Nobody. Files are never uploaded to us.
Contacts, SMS, call logs, microphone Not collected Our apps have no feature that needs them. Nobody.
Advertising ID Leaves the device Serving ads, limiting repeats, blocking ad fraud. Google AdMob and its ad partners.
Approximate location, derived from IP address Leaves the device Region-appropriate ads and consent rules. Google AdMob. We never request GPS location.
Device and app info (model, Android version, app version, language) Leaves the device Crash diagnostics and compatibility fixes. Google (Play services, ads, crash reporting).
Crash reports and performance logs Leaves the device Finding and fixing the bug that closed the app. Google Play Console. We see aggregated reports.
Pages you view on cowcona.com Leaves the device Knowing which apps people look for. Our hosting provider and web analytics provider.
Emails you send us Leaves the device Answering your question or your rights request. Our email provider. Kept only as long as needed.
Contents — 14 sections

Contents

What this policy covers

This policy applies to the website at cowcona.com and to every mobile application we publish under the com.cowcona package namespace, on Google Play and on any other store where we distribute them — including Serpent Ball 3D, Shiba Escape, Video Audio Separator and WebP Converter.

It does not cover services that are not ours. Our apps show ads and link to Google Play, and both are governed by their own providers' policies. Once you leave our app or our website, the receiving company's rules apply, not this page.

A few of our apps are simple wrappers around a web game or a local tool. Those follow this same policy. If an individual app ever needs different terms, that app ships its own policy and its Play listing links to it instead of this page.

Who we are

Cowcona App Studio is an independent Android and web development studio based in Tunis, Tunisia. We are the data controller for the information described here.

Write to contact@cowcona.com for anything in this policy — privacy questions, data requests, complaints. One person reads that inbox, so plain English, French or Arabic all work.

Information collected on cowcona.com

The website is a catalog. There is nothing to sign up for and no account to create.

Collected automatically

  • Your IP address, browser type and operating system, recorded in standard server logs by our hosting provider.
  • The page you visited, when, and the page that referred you.
  • Aggregate counts of which app pages get opened, so we know what to build next.

Cookies and similar technologies

We do not use cookies to track you across other websites, and we do not run ad retargeting on the site. Any cookie set is either strictly necessary for the page to work or belongs to an analytics tool that measures visits in aggregate. Your browser settings can block or delete all of them; the site remains fully usable without them.

What you send us

If you email us, we receive your address and whatever you write. We use it to reply, and nothing else. We never add you to a mailing list from a support email.

Information collected by our apps

Our utilities are built to work offline. Conversion, extraction, editing and game state all happen on your device.

Stays on your device, always

  • Every file you open, convert or save — video, audio, images, documents. They are read locally and written back locally. We have no server that could receive them.
  • Game progress, high scores, settings and preferences, stored in the app's private storage.
  • Anything you type into an app.

Uninstalling an app removes this data from your device. We cannot restore it, because we never had a copy.

Sent off the device

  • Ad requests. Apps that show ads send your advertising ID, IP address, device model, Android version, app version and language to Google's ad servers so an ad can be selected and counted. Section 6 covers this in detail.
  • Crash and performance reports. When an app closes unexpectedly, Android may send a crash trace to the Google Play Console. It contains device and app state at the moment of the crash, not your files.
  • Install and update checks. Handled by Google Play itself, not by us.

We never receive your files, your contacts, your messages, your photo library or your precise location. There is no Cowcona account system and no Cowcona server storing your content.

Permissions and why we ask

Android asks for a permission only when a feature needs it, and you can refuse. Below is what we request and what happens if you decline. Any given app uses only the subset it actually needs — check its Play listing for the exact list.

  • Internet and network state. Loads ads and checks whether you are online. Without it, apps with online features stop working; offline utilities keep running.
  • Storage / photos and media access. Opens the file you picked and saves the result to your gallery or Downloads folder. Denying it means the app cannot read or write files, which is the whole point of the converter apps. On newer Android versions we use the system file picker, which grants access to the single file you choose and nothing more.
  • Advertising ID. Required by Google Play for ad-supported apps. Denying or resetting it is covered in section 6.
  • Vibration, wake lock, notifications. Haptic feedback in games, keeping the screen awake during a long conversion, and telling you a job finished. Declining these costs you only that convenience.

If an app ever requests a permission that does not obviously match a feature you can see, treat it as a bug and email us. We would rather fix it than have you guess.

Ads and the advertising ID

Free apps are paid for by advertising. We use Google AdMob to fill the ad slots. When an ad loads, AdMob and the partners bidding on that slot receive your advertising ID, IP address, coarse device information and the app you are in. They use it to pick an ad, avoid showing you the same one repeatedly, and detect fraudulent clicks.

The advertising ID is a resettable identifier controlled by Android, not by us. We cannot link it to your name, your email or any other identifier, because we hold none of those.

Turning off personalised ads

  • Open Settings → Google → Ads on your device (the exact path varies by manufacturer).
  • Choose Delete advertising ID to stop apps receiving it altogether, or Reset advertising ID to start from a clean profile.
  • Or turn on Opt out of ads personalisation to keep seeing ads, but untargeted ones.

Ads will still appear after opting out — they simply become generic. If you would rather see no ads at all, some of our apps offer a paid version; purchases are processed by Google Play, which handles the payment and never gives us your card details.

Consent in Europe

If you are in the European Economic Area, the United Kingdom or Switzerland, our ad-supported apps show a consent message before any personalised ad loads, using Google's User Messaging Platform. Your answer is recorded on your device and passed to our ad partners. You can change it later from the app's settings or privacy screen.

Third-party services

We keep the list of outside services deliberately short. Depending on the app, some or all of these are involved:

We do not sell your data, and we do not share it with data brokers. No Cowcona app contains a social login SDK or a marketing tracker beyond what is listed above.

Why we process data

Under the GDPR and comparable laws, processing needs a lawful basis. Ours are:

  • Consent — personalised advertising where consent is required, and any optional analytics. You can withdraw it at any time, and withdrawal does not affect what happened before.
  • Legitimate interests — keeping the apps stable and secure, fixing crashes, preventing ad fraud, and understanding in aggregate which apps people use. We only rely on this where it does not override your rights.
  • Performance of a contract — delivering the app you installed and any paid feature you bought.
  • Legal obligation — keeping records we are required to keep, or responding to a lawful request.

Sharing and transfers abroad

The only routine sharing is with the service providers named in section 7, and only for the purposes described there. Beyond that, we would disclose information in two situations: when a valid legal request obliges us to, and if the studio or an individual app were ever sold or transferred — in which case this policy travels with it, and we would post a notice here before anything changed.

We are based in Tunisia, and our providers operate servers in the European Union, the United States and elsewhere. Data therefore crosses borders. Where information about people in the EEA or the UK is transferred outside those regions, our providers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep data

  • On-device data — for as long as the app stays installed. You control it; clearing app data or uninstalling erases it.
  • Server logs — kept short, typically a few weeks, then discarded or anonymised.
  • Crash reports — retained by Google Play Console under Google's own schedule; we consult them while the bug is open.
  • Emails — kept while the conversation is useful, then deleted. We do not maintain a marketing database.
  • Aggregate statistics — kept indefinitely, because they no longer identify anyone.

Security

Our apps talk to the outside world over encrypted connections, and this website is served over HTTPS. Release builds are signed with keys held offline, so an app claiming to be ours but installed from outside Google Play may not be ours at all.

The strongest protection here is structural: because your files never leave your device, there is no Cowcona database of user content that could be breached. That said, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach ever affected data we control, we would notify affected users and the competent authority as the law requires.

Children

Our apps are not directed at children under 13 (or the higher age of digital consent in your country, such as 16 in parts of the EEA). We do not knowingly collect personal data from children.

Some of our games are colourful and simple, and children may still find them. Apps we submit to the Google Play Families programme are configured accordingly, including ad settings restricted to child-appropriate content and ad formats.

If you are a parent or guardian and believe a child has provided us with personal data, email contact@cowcona.com and we will delete what we hold. In the meantime, deleting the device's advertising ID (section 6) stops the main flow of data.

Your rights and choices

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent you previously gave.

How to exercise them

  • Email contact@cowcona.com with what you want and which app it concerns.
  • We reply within 30 days. If a request is complex we will tell you and explain the delay.
  • We may ask for enough detail to locate the data. We will not ask for an ID document unless the law requires it.

An honest limitation: because we hold no accounts and no identifiers tied to you, there is usually nothing on our side to retrieve or delete. In those cases the fastest route is the device itself — clear the app's data, or delete your advertising ID.

Region-specific notes

  • EEA and UK. You may lodge a complaint with your national data protection authority. We would appreciate the chance to resolve it first.
  • California. You may request disclosure of the categories of personal information collected and the purposes, request deletion, and opt out of "sale" or "sharing" of personal information. We do not sell personal information for money; where personalised advertising counts as "sharing" under the CCPA/CPRA, opting out of ads personalisation as described in section 6 is the opt-out mechanism. We will not discriminate against you for exercising any of these rights.
  • Tunisia. Processing is carried out in line with Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, and you may contact the Instance Nationale de Protection des Données Personnelles (INPDP).

Changes to this policy

We update this page when our apps change — a new ad partner, a new permission, a service we drop. The effective date at the top always reflects the current version.

For a change that materially affects how your data is handled, we will say so prominently here, and in the app where it applies, before it takes effect. Continuing to use our apps or this website after that date means the updated policy applies to you.

Contact

Cowcona App Studio — Tunis, Tunisia
contact@cowcona.com

Put PRIVACY in the subject line and name the app if your question is about a specific one. It gets to the right place faster.