1. Introduction and Scope

📌 Plain-Language Summary

This Privacy Policy explains what information Water Ball: Merge Game collects, how it is used, and what rights you have over your personal data. We provide anonymous guest play by default, but we collect basic device and gameplay data to support cloud saves, anti-cheat features, and ads that keep the game free.

Welcome to Water Ball: Merge Game ("the Game", "the Application", "we", "us", or "our"). This Privacy Policy applies to all users ("you" or "User") who download, install, access, or play Water Ball: Merge Game on mobile (Android/iOS) or web platforms.

This document governs our collection, storage, processing, and protection of your personal information, technical identifiers, and gameplay metrics in compliance with international privacy legislation, including the General Data Protection Regulation (GDPR / UK GDPR), the California Consumer Privacy Act (CCPA / CPRA), the Children's Online Privacy Protection Act (COPPA), and Google Play Store Console Developer Policies.

By installing or playing the Game, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please uninstall the Application from your device.

2. In-Game Virtual Economy & Simulated Wallet Disclosures

📌 Plain-Language Summary

Every coin, dollar amount ($), gem, gas fee, and wallet prompt in this game is part of a fictional simulation. You cannot make real money playing this game. Entering a crypto wallet address on the profile screen only advances an in-game story quest and will never interact with real cryptocurrency or banks.

2.1 Fictional Arcade Scoring & Dollar Prefix Formatting

Throughout the Game's user interface, scores and virtual token rewards are formatted with a dollar sign prefix and three decimal places (e.g., format_money(val) -> "$%.3f", presenting values such as $0.050, $25.000, $100.000, or $500.000). You are explicitly notified that:

  • Zero Real-World Value: In-game points, balances, and gems are 100% fictional virtual entertainment tokens with zero real-world cash or monetary value ($0.00).
  • No Banking Services: The Application is not a financial institution, bank, money services business (MSB), cryptocurrency exchange, custodial wallet, or investment vehicle.
  • No Redemption: Virtual balances cannot under any circumstances be redeemed, exchanged, or cashed out for legal tender, cryptocurrencies, gift cards, or physical goods.

2.2 Simulated Cryptocurrency Wallet Address Storage

In the game's Profile Screen, players can enter an optional cryptocurrency wallet address string (e.g., Ethereum or Solana address format):

  • Technical Storage: The string is stored locally in user://jelly_data.json and synchronized to the cloud table public.player_backups.wallet_address.
  • Zero Blockchain Interaction: The Game contains zero Web3 libraries, zero cryptographic RPC nodes, zero private keys, and zero connectivity to any blockchain network.
  • Arcade Quest Milestone: The wallet input serves exclusively as an interactive milestone for an in-game progression quest.
  • Celebration Rewards: Completing the simulated 48-hour processing queue activates claim_simulation_rewards(), granting purely in-game digital perks: 30 days of ad-free gameplay, a permanent 2X VIP multiplier, and 100 of each consumable power-up (Bombs, Shakes, Doubles, Shields). Zero real-world money or cryptocurrency is disbursed.

3. Data We Collect and How We Collect It

📌 Plain-Language Summary

We collect two types of data: (1) what you create or provide (guest ID, optional username/email, high scores, merge stats, and booster inventory), and (2) technical details sent automatically by your phone (device model, Android OS version, IP address, and Google Advertising ID). We never collect credit cards or real home addresses.

3.1 Anonymous Guest Mode Data (Default)

By default, the Game does not require account creation or personal login credentials:

  • Guest Account Identifier: Format guest_WATER-XXXXXX, generated algorithmically via client-side XOR hashing of random integers and system timestamp entropy.
  • Referral Code: A 12-character string (e.g., WATER-XXXXXX) assigned to your device to facilitate optional friend referrals.
  • Guest Cloud Saves: Guest progress is backed up to our cloud database under this anonymous guest ID without requiring email verification.

3.2 Optional Registered Account Data (Supabase Auth)

If you choose to create a registered account or link your profile via our optional authentication screen:

  • Email Address: Stored securely in Supabase GoTrue authentication servers (auth.users) and mirrored in player_backups.email.
  • Password: Salted and hashed using secure bcrypt algorithms on the backend. We never see, log, or store plaintext passwords.
  • Custom Username: Player-selected public display name (e.g., "Jelly Champion"), indexed uniquely in the database.

3.3 In-Game Progression and Virtual Inventory Data

To provide continuous gameplay across sessions and devices, the Game synchronizes:

  • Scores & Progress: Virtual score balance (high_score), single-game record (top_score), merge count (total_merges), and rounds played (games_played).
  • Booster Inventories: Counts of Jelly Bombs (bomb_count), Container Shakes (shake_count), Double Multipliers (double_count), and Danger Line Shields (shield_count).
  • VIP Status: Active duration timer (vip_timer) providing in-game multiplier privileges.
  • Quest Metrics: Validation Gems collected (validation_gems), daily tasks (daily_tasks), stage objectives (stage_tasks), gas fee status (gas_fee_paid), rewarded ad counts (validation_ads_watched), and withdrawal simulation timestamps (withdrawal_requested_at, ad_free_until, is_simulation_completed).
  • Social Referral Data: Inviter referral code (referred_by_code), friend count (referral_count), and referral bonus points (referral_earnings).
  • Full Game State Snapshot: A complete JSON backup payload stored in player_backups.save_data.

3.4 Technical Identifiers, Device Specs & Advertising IDs

When the Game communicates with cloud servers and ad networks, the following technical data is processed:

  • Device Hardware: Manufacturer, model, CPU architecture (arm64-v8a), screen resolution, and available RAM.
  • Operating System: Platform (Android, iOS, Web), OS version, and API level (Android API 24 to 36).
  • Google Advertising ID (GAID / AD_ID): Resettable 32-character advertising identifier used for ad attribution, fraud prevention, and personalization.
  • Google Play App Set ID: Scoped identifier used for cross-app analytics within our developer account.
  • Network State & IP: Connection type (Wi-Fi/Cellular) and client IP address, used to infer coarse location (city/country).

3.5 Push Notification Tokens

If you grant notification permissions (android.permission.POST_NOTIFICATIONS), your Firebase Cloud Messaging (FCM) registration token is stored in public.user_push_tokens alongside your user_id, device platform, and app version to deliver retention reminders (2h, 24h, 48h) and remote gift broadcasts.

3.6 Local Sandboxed Storage

Local files are strictly sandboxed within user:// (/data/data/com.water.ball.merge.game/files):

  • user://jelly_data.json: Local JSON file of game state, scores, and quest milestones.
  • user://supabase_auth.json: Active session JWT tokens.
  • user://seen_notifications.json: History of viewed announcement IDs.
  • user://jelly_highscore.save: Legacy binary score file.
Data Category Specific Data Points Collection Method Storage Location
Account Identity Guest ID (guest_WATER-XXXXXX), referral code, username Algorithmic generation or user entry Local sandbox & public.player_backups
Credentials Email address, bcrypt-hashed password Optional user registration Supabase Auth (auth.users)
Gameplay & Inventory High scores, merges, boosters, VIP timer, quest progress Automated gameplay events Local sandbox & public.player_backups
Simulated Quest Wallet address string, gas fee paid flag, gem count User input & quest actions Local sandbox & public.player_backups
Device & Network Device model, OS version, IP address, Wi-Fi status Automated system queries Server connection logs & ad SDKs
Advertising IDs Google Advertising ID (GAID), App Set ID Google Play Services / Ad SDKs Ad mediation partner servers
Notifications FCM push token, platform, build version Push registration prompt public.user_push_tokens

4. Purposes and Legal Bases for Data Processing (GDPR Art. 6)

📌 Plain-Language Summary

Under European privacy laws, we need a valid legal reason for every piece of data we process. We process your data to: (1) let you play and save your game progress across devices (Contract); (2) show ads and send notifications if you agree (Consent); and (3) protect against cheating, hacking, and device clock tampering (Legitimate Interests).

In accordance with Article 6 of the General Data Protection Regulation (GDPR), we process your personal data under the following legal bases:

Purpose of Processing Data Categories Legal Basis (GDPR Art. 6) Operational Details
Core Gameplay & Cloud Backups Scores, merges, boosters, guest ID, email, username Contractual Necessity (Art. 6(1)(b)) Saving progress, synchronizing game state across devices, and restoring profiles.
Anti-Cheat & Server Clock Sync HTTP HEAD timestamps, monotonic ticks, network state Legitimate Interests (Art. 6(1)(f)) Verifying authoritative server time to prevent clock manipulation, quest skipping, and cheating.
Ad Delivery & Mediation GAID, IP address, device specs, ad engagement logs Consent (Art. 6(1)(a)) / Legitimate Interests (Art. 6(1)(f)) Serving banner, interstitial, and rewarded ads. Personalized ads are delivered only with affirmative consent via Google UMP.
Push Notifications FCM push token, platform, app version Consent (Art. 6(1)(a)) Sending retention reminders and free gift alerts, revocable anytime in device OS settings.
Fraud Prevention & Security Client IP, unique referral codes, username index Legitimate Interests (Art. 6(1)(f)) Preventing duplicate referral abuse, botting, and unauthorized database writes.
Legal Compliance Audit timestamps (created_at, updated_at), consent logs Legal Obligation (Art. 6(1)(c)) Complying with statutory audits, accounting laws, and user rights requests.

5. Third-Party Integrations, Processors & Ad Mediation Networks

📌 Plain-Language Summary

We work with trusted partners to run our game. Supabase provides cloud database hosting for your saves. Google AdMob, ironSource LevelPlay, Unity Ads, and Meta Audience Network deliver the ads that support our free game. These ad networks use your Advertising ID and device specs to display and measure ads.

The Application integrates with several third-party software development kits (SDKs) and cloud services. Depending on their role, these third parties act as Data Processors or Independent Data Controllers governed by their own privacy policies:

5.1 Supabase Cloud Backend & Database

  • Provider: Supabase Inc. (AWS cloud infrastructure).
  • Service URL: https://rfgrhblsblxazrrpnnhi.supabase.co
  • Purpose: Cloud database storage (player_backups, user_push_tokens, app_config, app_notifications), authentication, and server-time anti-cheat sync.
  • Data Shared: User IDs, emails, hashed passwords, game state JSON payloads, wallet address strings, IP addresses.
  • Privacy Policy: https://supabase.com/privacy

5.2 Google Mobile Ads (AdMob) & Google Play Services

  • Provider: Google LLC (Mountain View, CA, USA).
  • App ID: ca-app-pub-5813591814140967~5857673708
  • Unit IDs: App Open (7297824443), Banner (3115036854), Interstitial (1176192665), Rewarded (1207982253).
  • Purpose: Displaying contextual and personalized ads; fraud detection; ad attribution.
  • Consent: Google User Messaging Platform (UMP) SDK is integrated for GDPR/ePrivacy consent handling.
  • Privacy Policy: https://policies.google.com/technologies/ads

5.3 ironSource LevelPlay (Mediation Host)

  • Provider: ironSource Mobile Ltd. / Unity Technologies.
  • App Key: 2881cc10d
  • Placements: Rewarded Video (25380201), Interstitial (25380203), Banner (25380206).
  • Purpose: Multi-network mediation, programmatic bidding, and ad caching.
  • Privacy Policy: https://www.is.com/privacy-policy/

5.4 Unity Ads

  • Provider: Unity Technologies SF (San Francisco, CA, USA).
  • Game ID / Org Core ID: 800388526 / 13469964865788
  • Placements: BP_Rewarded_Android, BP_Interstitial_Android, BP_Banner_Android.
  • Purpose: Video ad delivery and rewarded engagement metrics.
  • Privacy Policy: https://unity.com/legal/privacy-policy

5.5 Meta Audience Network

  • Provider: Meta Platforms, Inc. (Menlo Park, CA, USA).
  • App ID: 1720805139015786
  • Placements: Rewarded (1720805139015786_1720806865682280), Interstitial (1720805139015786_1720806262349007), Banner (1720805139015786_1720805925682374).
  • Purpose: Bidding ad mediation and interest-based ad matching.
  • Privacy Policy: https://www.facebook.com/privacy/policy/

5.6 Network Connectivity Verification Endpoints

The Game pings Google (connectivitycheck.gstatic.com/generate_204) and Cloudflare (1.1.1.1) every 12 seconds to ensure active connectivity prior to dropping balls or requesting ads. Client IP addresses are logged in routine server access logs.

6. Data Storage, Retention and Security Architecture

📌 Plain-Language Summary

Your game backup is stored indefinitely on cloud servers so you never lose your high score or items when upgrading your phone. We do not automatically purge old data after a set period. If you want your account and cloud backup permanently deleted, you can request it by email, and our team will erase it within 30 days.

6.1 Cloud Hosting and Encryption

Cloud records are stored in enterprise-grade data centers managed by Supabase Inc. on Amazon Web Services (AWS). All communication between the Game client and backend servers is encrypted using Transport Layer Security (TLS 1.2 / TLS 1.3).

6.2 Indefinite Retention Policy

  • No Automated TTL: The database does not implement automated row expiration or background purge cron jobs.
  • Indefinite Storage: Player records in public.player_backups, scores, booster inventories, wallet strings, and referral data are retained indefinitely to enable players to restore their progress at any time.
  • Push Tokens: Retained in public.user_push_tokens until invalidated by Firebase Cloud Messaging or updated on a new device session.
  • Local Data: Retained in the application sandbox until you clear app data via device settings or uninstall the Game.

6.3 Technical Safeguards

We enforce PostgreSQL Row Level Security (RLS) policies on cloud tables, bcrypt password hashing via Supabase GoTrue, and protected local application sandboxing with allowBackup=false to prevent unauthorized access.

7. User Privacy Rights and Account Deletion Protocol

📌 Plain-Language Summary

You have full legal rights to access, copy, correct, or delete your data. Because the game does not currently have an in-app "Delete" button, you can request complete deletion of your account and cloud backups by emailing privacy@waterballmerge.com with your Player ID or Referral Code. We will fulfill your request within 30 days, free of charge.

7.1 European (GDPR) and UK User Rights

Under Articles 12 through 23 of the GDPR, European and UK players hold the following rights:

  • Right of Access (Art. 15): Request a copy of all stored personal data and cloud backup records.
  • Right to Rectification (Art. 16): Correct inaccurate usernames or profile information.
  • Right to Erasure (Art. 17): Request permanent deletion of all cloud backup records and account data.
  • Right to Data Portability (Art. 20): Receive your game data in structured, machine-readable JSON format.
  • Right to Restrict or Object (Art. 18 & 21): Object to processing based on legitimate interests or personalized advertising.
  • Right to Withdraw Consent: Revoke ad personalization or notification consent at any time.

7.2 International Data Transfers

When data is transferred outside the European Economic Area (e.g., to servers in the United States), transfers are safeguarded under European Commission Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.

7.3 Mandatory Account Deletion Protocol (Manual Support Fulfillment)

To comply with Google Play User Data policies and statutory erasure regulations:

  1. Notice of In-App Limitations: The current version of Water Ball: Merge Game does not provide an automated in-app self-service "Delete Account" button. Logging out or uninstalling the app removes local files but does not delete cloud records in public.player_backups.
  2. How to Request Deletion:
    • Locate your Player ID (e.g., guest_WATER-XXXXXX or registered email) or your Referral Code on your in-game Profile Screen.
    • Send an email to: privacy@waterballmerge.com with the subject line Data Deletion Request - Water Ball Merge.
    • Include your Player ID, referral code, and username to help us locate your record.
  3. Processing Timeline: A database administrator will manually purge your records from player_backups, user_push_tokens, and auth.users within thirty (30) calendar days of verified receipt. You will receive a written confirmation email once completed.

8. California Privacy Rights (CCPA / CPRA Disclosures)

📌 Plain-Language Summary

California residents have specific privacy rights under the CCPA/CPRA. We do not sell your personal data for money. However, sharing your Advertising ID with ad networks for tailored ads may count as "sharing" or "selling" under California law. You can opt out at any time in your phone's Android settings (Settings > Google > Ads > Delete advertising ID).

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, California consumers are entitled to disclosures regarding their Personal Information (PI) collected over the preceding 12 months:

CCPA Category Specific Data Collected Business Purpose Disclosed to Third Parties?
Identifiers IP address, GAID, Supabase UUID, Guest ID, referral code, username, email Authentication, cloud saves, ad delivery, fraud prevention Yes (Supabase, AdMob, ironSource, Unity, Meta)
Personal Records Email address, user-entered wallet address string Account management, simulated quest tracking Yes (Supabase cloud storage)
Commercial Info Virtual balances, booster counts, VIP timer, gas fee status Core gameplay balance, economy management Yes (Supabase cloud storage)
Network Activity Merge counts, session durations, ad views, app launches Anti-cheat verification, ad mediation, server health Yes (Ad mediation partner networks)
Geolocation Coarse, non-precise location (country/city derived from IP) Ad regionalization, server routing Yes (Cloud hosts & ad networks)

8.1 "Do Not Sell or Share My Personal Information"

We do not sell personal information for money. However, providing device advertising identifiers (GAID) to third-party ad networks to serve interest-based ads is classified as "sharing" or a statutory "sale" under California law. You may opt out at any time:

  • Android Settings: Open Settings ➔ Google ➔ Ads ➔ Delete advertising ID (or toggle "Opt out of Ads Personalization"). Once deleted, ad networks receive zeroed strings.
  • iOS Settings: Open Settings ➔ Privacy & Security ➔ Tracking and disable tracking for Water Ball Merge.
  • Written Opt-Out: Email privacy@waterballmerge.com with the subject line "CCPA Do Not Sell/Share Request".

8.2 Non-Discrimination

In accordance with Cal. Civ. Code § 1798.125, we will never discriminate against you for exercising your CCPA rights. We will not deny you access, alter game physics or difficulty, or degrade your gameplay experience.

9. Children's Privacy Protection (COPPA & Global Age Limits)

📌 Plain-Language Summary

This game is NOT intended for children under 13 (or under 16 in Europe/UK). We do not knowingly collect personal data from children. If you believe your child has shared personal information or created an account, please email us, and we will delete their data immediately.

Water Ball: Merge Game is designed and published as a general audience casual arcade puzzle game. The Application is strictly not directed to, marketed towards, or intended for children under the age of thirteen (13) in the United States, or under sixteen (16) in the European Economic Area and the United Kingdom.

  • No Knowing Collection: We do not knowingly solicit, collect, or store personal information (including persistent device advertising identifiers) from children under 13 without verifiable parental consent.
  • Ad Compliance: Ad mediation requests comply with general audience standards, and predatory or age-inappropriate ads are prohibited.
  • Parental Deletion Rights: If a parent or guardian discovers that a child has provided personal information or has an active cloud record, please contact us immediately at privacy@waterballmerge.com. We will permanently purge the record from our database upon verification.

10. Device Permissions and Hardware Access

📌 Plain-Language Summary

The game asks only for standard technical permissions needed to connect to the internet, display ads, schedule local reminders, and save your progress. We never access your contacts, camera, microphone, GPS location, or photos.

Permission Type Operational Justification Revocation Method
android.permission.INTERNET Normal Communicates with Supabase cloud backend and ad mediation networks. Required for online features.
android.permission.ACCESS_NETWORK_STATE Normal Monitors connectivity via NetworkManager.gd to prevent offline desync. Managed by OS.
android.permission.ACCESS_WIFI_STATE Normal Optimizes ad video preloading when connected to Wi-Fi. Managed by OS.
android.permission.POST_NOTIFICATIONS Runtime (API 33+) Displays local reminder notifications (2h, 24h, 48h) and remote gift announcements. Revocable in Settings ➔ Apps ➔ Water Ball Merge ➔ Notifications.
android.permission.SCHEDULE_EXACT_ALARM System (API 31+) Delivers precise local retention reminder alarms. Revocable in Settings ➔ Special App Access ➔ Alarms & Reminders.
com.google.android.gms.permission.AD_ID Normal (Google Play) Enables Advertising ID access for ad mediation and attribution. Revocable in Settings ➔ Google ➔ Ads ➔ Delete Advertising ID.

11. Amendments & Policy Updates

📌 Plain-Language Summary

We may update this Privacy Policy from time to time. When we make important changes, we will update the date at the top and notify you through an in-game announcement.

We reserve the right to amend or update this Privacy Policy to reflect changes in our data practices, new game features, or updated statutory requirements. When revisions occur, we will update the "Last Updated" date at the top of this document.

For material modifications, we will provide conspicuous notice via an in-game broadcast popup (via Supabase app_notifications) or via Google Play Store release notes. Your continued use of the Application after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Information & Data Protection Inquiries

📌 Plain-Language Summary

If you have any questions about this policy or want to request account deletion, reach out to our privacy team at privacy@waterballmerge.com.

For data protection inquiries, statutory rights requests (GDPR access/erasure, CCPA opt-outs), or questions regarding this Privacy Policy, please contact our Data Protection Coordinator:

Supervisory Authority Complaints (EEA / UK)

If you reside in the EEA or the UK and believe our data processing violates applicable data protection regulations, you have the right to lodge a complaint with your local Data Protection Authority: