Privacy Policy — Kvant Puzzle

The data controller is Adrian Kopciński Soft-Craft, os. Kościuszkowskie 6/264, 31-858 Kraków, Poland.

• We create no accounts and never ask for your name, e-mail or phone number. We do not require you to sign in to Play Games — the game works fully without it. If you already have a Play Games account on your phone, however, sign-in happens automatically at start-up; section 5 explains this.
• Rewarded ads only — shown when you ask for a reward yourself. No in-app purchases.
• We do not sell your data. To serve ads we share your advertising ID with Google, based on your consent, which you can withdraw at any time in the game settings.
• Your game progress stays on your device. If you sign in to Play Games, your scores are additionally sent to a leaderboard run by Google — see section 5.
• We use Google tools that collect technical data about how the game runs.

This never leaves your phone and is removed when you uninstall the game:

• campaign progress and best level times,
• lives and undo credits,
• collected crystals,
• settings: sound, music, language, in-game prompt choices,
• a local player label (e.g. Player123), randomly generated on the device and not linked to any account,
• a local measurement file telemetry.csv which is never uploaded.

Leaderboards shown without signing in contain generated opponents. They are not real players and there is no server behind them.

The world leaderboard is the exception: once you sign in to Play Games, your scores are no longer local only and are sent to Google. Section 5 describes this.

The game has no server of its own and sends nothing directly to us. It does include Google tools that send data to Google.

How Google processes this data is described in the Google Privacy Policy and in Firebase privacy information.

We neither require nor ask for a Play Games sign-in. Without signing in, nothing in this section happens — the game is fully playable and your scores stay on the device.

⚠️ If your phone already has a Play Games account, sign-in happens automatically when the game starts. We do not ask separately, because Play Games provides no such prompt inside a game. You make that choice at the level of your Google account, not in our game — the end of this section explains how to control it.

Once you sign in, the following data is involved:

The world leaderboard publishes data. Your Play Games display name, avatar and score are visible to other players — a separate purpose and a separate category of recipients from everything in section 4. If you do not want to be visible, do not sign in — and if you already are, change your profile visibility or sign out in the Google Play Games app. There is no way to do it inside the game itself.

Google acts in a different role here than in section 4. With Firebase, Google processes data on our instructions and according to our settings. With Play Games, Google is a separate controller: it runs the player profile and the leaderboards on its own behalf and on its own terms, described in the Google Privacy Policy. We do not entrust this data to Google — it comes into being on Google's side.

We do not use Play Games data for advertising. The player identifier, display name, avatar and scores never reach any advertising tool and are not used to select or target ads. The Play Games Services Terms forbid it, and we treat that as a boundary in the code, not merely a statement in a document.

The game may send notifications (for example, that your lives are back). They are created and scheduled locally on the device — there is no server behind them and no data is sent. You can withdraw permission in Android settings or in the game's settings.

The game has no server of its own, so security comes down to four things here — and we prefer to name them plainly:

• Transmission is encrypted. Everything the game sends to Google's servers travels over an encrypted (TLS) connection. The game sends no data over an unencrypted connection.
• On-device data sits in the app's private directory, which other apps cannot read. It is gone when you uninstall the game or clear its data.
• We run no database of our own. There is no data set on our side that could leak — we only ever look at the data in Google's consoles, as aggregate reports.
• Access to the Google consoles (Firebase, Google Play Console, AdMob) is limited to the controller named in section 1, and that account is protected by two-step verification.

No safeguard is absolute. If we learn of a breach that may put players' rights at risk, we will report it to the Polish supervisory authority and, where the risk is high, tell players inside the game as well.

Providing data is neither a statutory nor a contractual requirement. Uninstalling the game ends analytics collection, and everything based on consent is optional and can be turned off without losing access to the gameplay.

In Google Analytics we keep data tied to identifiers for:

The period for user data is rolling: it counts from your last activity, so as long as you keep playing, your installation identifier is kept. It is deleted after 14 months without opening the game.

Play Games leaderboard scores are kept by Google, as a separate controller and on its own terms. We set no period for them and cannot delete them for you — see sections 5 and 11.

Aggregate reports are built from aggregated data and contain no information about individual devices. Data stored on the device is removed when you uninstall the game.

You have the right to access, rectify, erase and restrict processing of your data, and to object to processing based on legitimate interest. Where the basis is consent, you also have the right to data portability and to withdraw consent at any time — without affecting the lawfulness of processing carried out before. Write to the address in section 1 — we reply within one month.

You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

The fastest way to stop all collection is to uninstall the game. Section 11. Data deletion on request describes the steps, and exactly what is deleted and what is kept.

Here is how to request deletion of the data collected by Kvant Puzzle (com.kvantcode.kvantpuzzle).

The game is not directed at children. On Google Play we declare it for players aged 13 and over, and we do not knowingly collect data from anyone younger. If you believe a child has provided us with data, contact us and we will delete it.

⚠️ In Poland and some other European countries, you can only give consent to online data processing on your own from the age of 16. If you are between 13 and 15, consent to personalised ads — the one in the dialog we show at your first reward — should be given by your parent or guardian. Refusing blocks nothing: the game works in full, and ads are then non-personalised or absent altogether.

Google also processes data on servers outside the European Economic Area, primarily in the United States.

Google LLC is certified under the EU-US Data Privacy Framework. By its decision of 10 July 2023 the European Commission found that this framework ensures a level of data protection equivalent to the European one, so a transfer to a certified recipient needs no further authorisation.

Where that framework does not reach — for example transfers to countries other than the United States — the basis is the European Commission's standard contractual clauses.

We provide a copy of these safeguards on request — write to the address in section 1.

Changes are published on this page with a new date at the top.

We will actively notify you of significant changes — a new purpose, a new category of recipients or a new legal basis — with a message inside the game the first time you open it after the update. We do not consider a changed date on this page, or asking you to check back regularly, to be enough.

Minor changes — wording fixes and clarifications that do not alter the scope or purpose of processing — are announced by publishing the new version alone.