Bramble Oven

Legal

Privacy Policy

Last updated: 16 September 2026

Template for this brand kit. Before a live TikTok review, replace contact emails with a real mailbox on your domain and have counsel review the text. Do not claim processing you do not actually perform.

Bramble Oven (“Bramble”, “we”, “us”) operates the website on which this policy appears, the mobile game Sugarwake, and the internal tool Sugarwake Ads Desk (together, the “Services”). This policy explains what information we collect and why.

1. Who this covers

2. Information we collect

Website. Standard server logs such as IP address, browser type, pages viewed, and approximate region. If you email us, we keep the contents of that correspondence.

Sugarwake (game). Device and advertising identifiers, coarse location derived from IP, gameplay events, crash logs, purchase tokens processed by the app stores, and settings you choose in the game.

Sugarwake Ads Desk. Work email, hashed password or SSO identifier, role, audit logs, and — after a user connects TikTok through OAuth — the tokens and advertiser identifiers needed to manage campaigns the user is already allowed to access. We do not ask Ads Desk users for their personal TikTok consumer login as a substitute for Business OAuth.

3. How we use information

Ads Desk is an internal product. It is used only by people Bramble Oven has invited. It is used only with Business Center and advertiser accounts those people are authorized to manage.

4. TikTok API for Business

When an authorized marketer connects TikTok, we receive credentials and advertising data solely to list permitted Business Centers and advertiser accounts, create or update campaigns, ad groups and ads, upload approved image and video assets, and display consolidated reports. We do not use those permissions to add Business Center members, create new ad accounts, move funds, build custom audiences, or operate pixels or catalogs unless this policy and the product are updated first.

Users can disconnect TikTok inside Ads Desk. After disconnect we revoke stored tokens and stop calling the API for that connection.

5. Sharing

We share information with infrastructure and analytics providers that process data on our instructions, with advertising platforms the user connects (TikTok, and other networks if added later), and with professional advisers or authorities when the law requires it. We do not sell personal information.

6. Retention

Game telemetry is kept only as long as needed to operate and improve Sugarwake, typically up to 24 months unless a longer period is required for security or accounting. Ads Desk account records last for the life of the employment or contractor relationship plus a short audit window. OAuth tokens are deleted when the user disconnects or the account is closed.

7. Security

Access to Ads Desk is restricted to invited users. Tokens are stored server-side. We use HTTPS on the website and the desk. No method of transmission is perfectly secure; we work to reduce risk.

8. Children

Sugarwake is not directed at children under 13, and Ads Desk is a workplace tool. We do not knowingly collect personal information from children under 13.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Players should start with in-game settings and the store account that processed a purchase. Ads Desk users should ask their workspace admin. Everyone can email the address below.

10. International transfers

We may process information in the country where our team or hosting provider operates. Where required, we use appropriate transfer safeguards.

11. Contact

Privacy requests: replace with privacy@your-domain.com
API / developer contact: replace with api@your-domain.com

If we change this policy in a material way, we will update the date above and post the new version at this URL.