PRIVACY POLICY

Age and offline play
Before account services are initialized, a neutral date-of-birth screen selects the play experience. The entered date is discarded immediately; no birth date or exact age is saved or transmitted. Only the selected local/eligible mode, an under-18 flag for protective advertising settings, and the calendar year of the check are stored on the device. The question is asked again in a later calendar year.
Players under 16 can play all ten worlds in both game modes without an account. Their progress stays on the device; no name, authentication information or scores are sent to Firebase. Google/Apple sign-in, global rankings, payment services and external links are unavailable in this local mode. Unknown-age users cannot initialize online account or payment services. Players aged 16 or over can use the account features described below. The under-16 experience has no advertisements or analytics. Advertising-enabled releases may show contextual banner ads to eligible players aged 16 or over; older closed-test releases do not show ads. Unknown-age players do not request ads. Uninstalling or clearing app data removes local-only progress. Parents may contact the support address for assistance.

1. Developer and contact
Fool's First Step / Yunus Karen ALVER.
Privacy and support: karenalver@gmail.com.

2. Information used
Google or Apple sign-in provides an account identifier, identity provider and authentication credentials to Firebase Authentication. Email or profile information shared by the provider may be held by that authentication service. The game never receives your Google or Apple password.
Firestore stores your chosen username, account identifier, best score and level for each world and game mode, update time, and the versions and acceptance time of the terms and privacy notice. Visiting a world creates a player record even before the first score.
Your board, progress, settings, selected cosmetics and leaderboard cache are stored on the device. Sign-in credentials use Android Keystore or iOS Keychain protection. If you email support, your message and contact information are used to handle your request.

Opening the shop requests product identifiers, local prices and entitlements through Google Play Billing or Apple StoreKit. On Android, signed purchase receipts are stored in the app's private, non-backed-up storage for verification and offline access. The Android checkout sends a one-way hash of the game account identifier to the store, not the raw Firebase identifier. Apple StoreKit provides verified transactions and current entitlements. The game does not receive payment card details. Level-based unlocks and selected cosmetics are stored locally. This version does not upload purchase receipts to Firebase or a separate developer server. Store transaction records follow the provider's policies; deleting the game account does not remove store purchase history.

3. Purpose and visibility
Identity information enables sign-in and separates accounts. Scores enable separate easy/hard rankings and achievement messages based on your actual standing in those lists. Agreement versions record the terms you accepted. Your username, player code, level and scores are accessible to other signed-in players through leaderboard records; your email is not displayed. You do not need to use your real name.
We do not read contacts. A world's player count means accounts with a record there in the selected mode, not people currently online.

4. Providers and security
Authentication uses Google/Apple and Google Firebase Authentication. Shared records use Google Cloud Firestore in a European database region. Authentication, network transit and service operations may involve processing in other countries. Providers may process IP addresses, request times and technical logs for security and operation. Connections use HTTPS and server rules restrict writes to the account owner.
Firebase data protection: https://firebase.google.com/support/privacy
Apple privacy information: https://www.apple.com/legal/privacy/
There is no Google Analytics, contacts access, photo access or GPS location collection. Advertising-enabled releases use Google AdMob as described below; advertising and technical measurement data is shared with Google. We do not send your game username, Firebase account identifier, scores or date of birth to AdMob.

5. Retention and deletion
Account and leaderboard records remain while your account is open. Start permanent deletion inside Menu > Support > Delete Account. You may be asked to authenticate again. Successful completion removes the Firebase account, profile, username reservation, rankings for both modes across all ten launch worlds, including legacy records, and that account's local saves and cache on this device. Apple authorization is revoked for Apple sign-in accounts.
A network or service failure is not reported as successful deletion; retry is required. Offline copies on other devices cannot be remotely erased from this device; you can remove application data on those devices. Provider security logs and backups follow their respective retention processes. Uninstalling the app alone does not delete the server account.
If you cannot access the app, email karenalver@gmail.com with the subject “BLOCK of BLAST: PLANET GAME account deletion”. Include your player code if known, but never a password or sign-in token. Account ownership is verified before removing the account and associated records and notifying you. Support correspondence is retained for as long as needed to handle your request; you can also request its deletion.

6. Your rights
Contact the developer to exercise applicable rights of access, correction, erasure, objection and other data protection rights. Deletion is permanent removal, not account freezing. We do not knowingly request personal information from children. Contact us to request removal if you believe a child has shared such information.

7. Changes
Material changes to data use will be reflected in a new notice and surfaced in sign-in/profile onboarding. Advertising or new collection would require updated disclosures and any necessary separate permissions.

8. Banner advertisements and privacy choices
In advertising-enabled releases, Google AdMob can process IP address (including approximate location inferred from it), device or app-scoped identifiers, advertising impressions and interactions, and diagnostic/performance information for ad delivery, measurement and fraud prevention. Data may be processed outside your country. Ad requests are configured as non-personalized and use the general-audience content rating; 16–17-year-old players receive teen protections. Android advertising ID access is removed, publisher first-party ID is disabled, and we do not request Apple tracking permission or use IDFA. These settings do not mean that advertising collects no data.
Google's User Messaging Platform checks applicable privacy choices and presents a consent or opt-out message where required before ads are requested. You can revisit applicable choices through the Ad privacy choices button at the bottom of the game menu. Refusing optional consent does not prevent playing; where permitted, Google may serve limited or non-personalized ads, or no ad. Payment is not required to make privacy choices. Google controls its own retention and rights handling: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.
Ads are not requested in under-16 mode, before age selection, or for a verified Remove Ads purchase. A one-time Remove Ads purchase is separate from cosmetic packs. Restore it using the same store account on the same platform. Removing ads stops future banner requests in this app; it does not itself erase data already held by Google. Store purchase verification does not send your receipt to AdMob.