Privacy Policy

01 Information We Collect

Automatically collected when you play

• check_circleAnonymous account ID — Firebase Authentication creates a random user ID to keep your progress. We do not ask for your name, email, or phone number.
• check_circleDevice recovery identifier — a random value the app generates on first launch and keeps in the iOS Keychain or Android app-private storage, so you can recover your account if you reinstall on the same device. On the Toss (Apps in Toss) channel we use the per-game user key issued by Toss for this purpose instead of a value we generate. Either way it is not your advertising identifier, iOS Vendor ID, or Android ID; it is never shown to other players and never shared with advertisers. (App versions released before September 2026 used the platform-provided iOS Vendor ID or Android ID for this instead, until you update.)
• check_circleGame data — stages cleared, scores, your coin balance and the record of coins earned and spent, hearts, purchases, and chosen settings (theme, control mode, language, nickname).
• check_circleDiagnostic data — when the app hits an unhandled error we send the error type, where it happened (file name, line number) and the message trimmed to 90 characters, as a Firebase Analytics event. Before sending, we strip URLs, email addresses, long numbers and token-shaped strings. We do not embed a separate crash-reporting SDK; device model and OS version are collected by the Firebase Analytics SDK, and native crashes are collected by App Store Connect and Google Play Console at the platform level.
• check_circleUsage analytics — aggregate gameplay events (game started, stage cleared, ad watched, purchase completed) sent to Google Firebase Analytics, tagged with your app version, platform, and coarse region taken from your device language setting. These events carry no nickname, email, or advertising identifier.
• check_circleIP address — automatically logged by Firebase and AdMob for security and abuse prevention. Not shown to other users.
• check_circleWhether our other games are installed — the «More games» list in Settings asks your device whether our sibling games are already installed (via URL scheme on iOS, package name on Android). We never enumerate apps other than our own. If you claim an install reward, which game it was is recorded on your user document.

You provide directly

• check_circleNickname — used on the global leaderboard and visible to other players. We filter inappropriate nicknames using a blocklist and AI moderation before saving.

From Apple / Google when you make a purchase

• check_circleTransaction receipts — Apple App Store or Google Play sends us a signed receipt to verify your purchase. We do not see your credit card number, billing address, or Apple/Google account details.

Ad personalization and your consent

• check_circleAd consent (EEA, United Kingdom, Switzerland) — the first time you open the game in these regions, we show a Google-certified consent form (Google User Messaging Platform) asking whether ads may use your data. Your answer is stored by Google on your device. You can review or change it at any time inside the game: Settings → Ad Privacy Options → Open privacy options. If you decline, you will still see ads, but non-personalized ones.
• check_circleRewarded-ad verification — so our server can confirm you actually watched a rewarded ad, we pass your anonymous account ID and the reward type (for example coin, revive) to Google (AdMob) when the ad is shown. Google returns those values to our server once the ad completes, and we use them to make sure the same ad is not rewarded twice.
• check_circleAdvertising identifier — we do not show an App Tracking Transparency prompt, and every ad request we make is flagged as non-personalized. On iOS this means your IDFA is not passed to advertisers. The Android app declares the advertising ID permission (AD_ID); you can reset or delete that identifier in Settings → Google → Ads.