Privacy policy

Last updated: 20 October 2026 · applies to the game “Stone Pop Tour” (Android, iOS) and this website. The German version is authoritative: Datenschutzerklärung.

1. Controller and contact

The controller within the meaning of the GDPR is Pixeltrend GmbH & Co KG, Industriezeile 35, 4020 Linz, Austria (register number FN 478882 p, Landesgericht Linz, VAT ID ATU72612416), under the brand good space.. The brand good space. is operated jointly by Pixeltrend GmbH & Co KG and candybytes GmbH, Sophiengutstraße 20, 4020 Linz, Austria (see Imprint).

Privacy enquiries: support@goodspace.at.

2. Summary

• You can play Stone Pop Tour without registering. The app automatically creates an anonymous game account so that your progress can be saved and verified.
• Personalised advertising (Google AdMob), analytics data with identifiers (Firebase) and the full measurement of our ad campaigns (Singular, Meta) happen only with your consent in the consent dialog; you can change it any time in the app under Settings → Privacy → Privacy options.
• Without consent, the app sends Google Analytics only measurement signals without advertising ID and without app instance ID (section 4.7). Crash reports (section 4.8) and a limited campaign measurement without advertising ID by Singular (section 4.13) are based on our legitimate interest; you can object to them at any time under Settings → Privacy (switches “Send crash reports” and “Campaign measurement”).
• Optional website analytics with Google Analytics 4 starts only after your explicit consent. Without consent, no Analytics scripts load, no Analytics requests are sent and no Analytics cookies are set. You can change your choice at any time using the privacy settings in the footer (section 3.2). Download links independently use Singular (section 3.5).
• You can delete your account and data any time: Delete account.

3. This website

3.1 Access data and server logs

This website is delivered by Firebase Hosting (Google Cloud EMEA Limited / Google LLC). When you visit it, technically necessary access data is processed (requested page/file, date and time, amount of data, success status, browser type and version, operating system, referrer URL, IP address and requesting provider). The log data is used for operation, security and troubleshooting. Legal basis: our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). We do not combine it with other data; we do not store or analyse these logs ourselves. The hosting provider deletes them under its standard retention periods, as a rule after 30 days at the latest.

3.2 Optional website analytics and your choice

With your explicit consent, we use Google Analytics 4 in the web data stream of our Firebase web app to improve this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with processing also by Google LLC in the USA. We use Basic Consent Mode v2: before consent and when you decline, the Google tag does not load and no cookieless Analytics pings are sent. Advertising, remarketing, Google Signals and use of analytics data for personalised advertising are disabled for this website. Fonts, images and videos are served from our own hosting.

Data and purpose when analytics is enabled: After consent, we measure page views, viewed page sections and scroll depth, plus actions in the small matching game, videos and download links. We also use Google Analytics enhanced measurement: automatic page views and scroll events, outbound link clicks, file downloads and, where present and technically supported, search, video and form interactions. This may process technical metadata such as page/link URLs, link text, file or video titles, form IDs and search terms from URL parameters. This website currently has no search feature. The Google tag does not load on the account-deletion page; that form is entirely excluded from website analytics. This also involves pseudonymous cookie identifiers, timestamps, browser, device and operating system information, and general information about the source of the visit. Google processes your IP address when connecting and derives an approximate location; according to Google, Google Analytics 4 does not log or store IP addresses. Form-field contents, recovery codes and support messages are not collected as Analytics event data; we also do not pass personal email addresses or other directly identifying information to our own measurement functions. Please do not put personal data in page addresses or search parameters. The data is used for statistical website analysis, not advertising profiles. Transfers to the USA are possible (section 6).

Storage when analytics is enabled: After consent, Google Analytics sets first-party cookies (_ga and _ga_*) to recognise visits and sessions. They are configured to expire within 180 days of being set or updated; your browser may delete them sooner. Retention of event data already transmitted follows the retention setting configured in Google Analytics and is separate from the cookie lifetime.

Choice and withdrawal: The legal basis for analytics and Analytics cookies is your consent (Art. 6(1)(a) GDPR, Sec. 165(3) Austrian TKG 2021). You can decline and continue using the website. You can change your choice at any time through Privacy settings in the footer. Withdrawal stops further analytics and deletes the Analytics cookies set by this website. It does not automatically erase data that was lawfully processed before withdrawal. Further information: Google privacy policy and How Google uses data from partner websites.

Necessary browser storage: To respect your choice without asking on every visit, we store the choice and its timestamp in your browser’s localStorage for no more than 180 days. Dismissing the mobile download notice is remembered in sessionStorage for the browser tab’s session. These functional entries are not used for analytics and are not sent to Google Analytics. The basis is storage for the website functions you selected (Sec. 165(3) Austrian TKG 2021; Art. 6(1)(f) GDPR). goodspace.at has its own cookie and privacy notices.

3.3 Contacting us

If you email us, we store your details to handle the request and for follow-up questions (Art. 6(1)(b) or (f) GDPR). We do not pass them on without your consent.

3.4 Account deletion form

On the page Delete account you enter your recovery code. It is sent over an encrypted connection to our backend (Firebase Authentication and Cloud Functions, region europe-west1) to carry out the deletion (Art. 6(1)(b) and (c) GDPR). A short-lived anonymous sign-in token is created for this; the recovery code and sign-in token are not stored persistently in your browser. Website preferences and optional analytics are described in section 3.2.

3.5 Links and liability

Our download links use Singular (Singular Labs, Inc.). The service routes you to the appropriate app store depending on your device and measures the click to attribute app downloads to our website. Only when you deliberately open a download link does your browser transmit technical request data to Singular, including your IP address, browser/device information (User-Agent) and the time of the request. This redirect is independent of your consent to optional website analytics. Simply visiting this website sends no request to Singular; this website uses neither a Singular SDK nor Singular cookies. Processing by Singular and the app store you subsequently open is covered by their respective privacy notices: Singular privacy policy.

All information was checked carefully but may contain errors; the operators of linked websites are solely responsible for their content. When you follow external links (e.g. app stores), their operators receive your IP address; we have no influence on that.

4. The app “Stone Pop Tour”

The following describes what data the app processes, based on the services actually integrated (state at the app release date).

4.1 Game account and save data (Firebase Authentication, Cloud Firestore, Cloud Functions)

Data: randomly generated user ID (UID) of the anonymous account, game progress (levels, stars, coins, boosters, settings, objectives, daily challenges and gifts), per-level statistics, an optional display name you choose, timestamps and technical metadata (app version, language). The app also keeps a local backup on your device.

Purpose: providing the game, saving and syncing progress, server-side verification (protection against tampering and fraud), leaderboards. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest in tamper protection (point (f)).

Location: Google Cloud Firestore in the EU (region europe-west1, Belgium); Cloud Functions also run in europe-west1. Retention: until you delete the account (see section 8). Inactive accounts are currently not deleted automatically. If we introduce this, we will announce it in advance in the app and in this policy. Purely technical helper data (e.g. request replay protection, abuse-prevention counters, expired recovery codes) is deleted automatically after a short time.

4.2 Optional Google or Apple sign-in and recovery code

You may optionally link your account to a Google or Apple account or create a recovery code to move your progress to a new device. When linking, Google or Apple provides an account identifier and possibly your email address (Apple may provide a relay address); we use it solely for sign-in and recovery. The recovery code is stored only as a non-reversible hash. Linking is voluntary; legal basis is your consent or performance of the contract (Art. 6(1)(a)/(b) GDPR). The link is removed when you delete the account.

4.3 Leaderboards and display name

If you set a display name, it is publicly visible together with your score to other players in the leaderboards. Do not choose a name that identifies you. Your entries are removed when you delete the account (published rankings refresh within a few minutes). Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

4.4 In-app purchases (Google Play Billing / Apple StoreKit)

In-app purchases are handled entirely by Google Play or the Apple App Store. We do not receive payment data (card details, billing address). To unlock items, our backend verifies the purchase receipt with Google or Apple and stores product, time, order number and a hash of the receipt to prevent double redemption. Legal basis: performance of the contract (Art. 6(1)(b) GDPR), statutory retention duties (point (c)) and fraud prevention (point (f)). When you delete the account, the link to you is removed from the receipt; the receipt itself (without name or email) is kept as long as tax and commercial law require (in Austria 7 years, Sec. 132 BAO).

4.5 Consent management (Google UMP / IAB TCF)

On first launch (and when requirements change), the app shows a consent dialog of the Google User Messaging Platform (UMP), supporting the IAB Transparency & Consent Framework (TCF), in the EU/EEA, the UK and Switzerland. Before the first dialog, a page of the app explains once why the game is free and where you can change your choice later; you make no decision there, it only leads to the dialog with “Continue”. Your choice is stored on your device (including the TC string) and controls whether ads are personalised, whether analytics data with identifiers is collected (section 4.7) and whether our partners for measuring ad campaigns (Singular, Meta; section 4.13) receive data in full. Legal basis: consent (Art. 6(1)(a) GDPR, Sec. 165(3) Austrian TKG 2021). Withdrawal: any time in the app under Settings → Privacy → Privacy options, with effect for the future. Processing carried out until then remains lawful.

iOS – App Tracking Transparency (ATT): on iPhone and iPad, after the consent dialog – and only if you agreed to the use for advertising there – the app asks with Apple’s system prompt whether it may track you across apps. If you choose “Ask App Not to Track”, the advertising ID (IDFA) is not used (not by Singular and Meta either, section 4.13) and analytics data is not used for advertising. You can change this at any time in the iOS settings under Privacy & Security → Tracking.

4.6 Advertising (Google AdMob)

Stone Pop Tour is free and shows ads (banner, interstitial, rewarded video) from Google AdMob (Google Ireland Limited / Google LLC). For ad delivery, frequency capping, fraud detection and billing, AdMob processes, among other things, IP address, device and app information, approximate location (derived from the IP address, not GPS) and the advertising ID (Android: Advertising ID; iOS: IDFA, only if you allow the App Tracking Transparency prompt). With your consent, ads are personalised; without consent you receive non-personalised ads or only ads permitted without consent. Google processes this data as an independent controller under its own terms (policies.google.com/technologies/partner-sites). Legal basis for access to device identifiers and personalised ads: consent (Art. 6(1)(a) GDPR); for non-personalised ads: legitimate interest in financing the free game (point (f)), where permitted. You can reset or delete the advertising ID in your device settings. To get the best price for every ad slot, AdMob also passes ad requests to further ad networks (“mediation”). They receive the same kinds of data as AdMob for an ad request (IP address, device and app information, approximate location, advertising ID only with your consent or, on iOS, after you allow tracking) and process it as independent controllers: AppLovin Corp. (USA), Meta Platforms Ireland Ltd. (Meta Audience Network), Liftoff Mobile, Inc. (Liftoff Monetize, USA), Unity Technologies (Unity Ads, USA), Digital Turbine (IL) Ltd. (DT Exchange, Israel), InMobi Technology Services Pte. Ltd. (Singapore) and Mintegral International Limited (Hong Kong/China). Your choice in the consent dialog applies to all of these partners (they are listed there individually); without consent they do not receive consent for personalised ads. Players in US states can opt out of the “sale/sharing” of their data; we pass that choice on to every partner. Partner privacy notices: applovin.com/privacy, facebook.com/about/privacy/update, liftoff.ai/privacy-policy, unity.com/legal/game-player-and-app-user-privacy-policy, digitalturbine.com/privacy-policy, advertising.inmobi.com/privacy-policy, mintegral.com/en/privacy.

4.7 Analytics and measurement of our ad campaigns (Firebase Analytics / Google Analytics for Firebase)

If you agree in the consent dialog (purposes “Store and/or access information on a device” and “Measure content performance”), the app uses Firebase Analytics to measure how the game is used: e.g. levels started, completed and abandoned (with score, stars, duration, moves and boosters used), game sections and milestones reached, tutorial steps, screen views, sessions and returning on certain days after installation, changed settings (e.g. language, sound, appearance), earning and spending of the game currencies, purchase flows (product and result; the purchase price is reported to Firebase by Google Play or the App Store themselves) and ads shown. For this, Firebase uses the app instance ID, device and app information (model, operating system, app version, language) and the approximate location (country/region from the IP address; the IP address is not stored). We do not send names, e-mail addresses, free text, club names or a user ID to Firebase Analytics.

Only if you also agree to the use for advertising (TCF purposes “Create a personalised ads profile”, “Select personalised ads” and “Measure advertising performance”, and Google as a partner) – on iOS also to the ATT prompt (section 4.5) – may this data be used via the link between Firebase and Google Ads to measure our own ad campaigns (e.g. whether an installation followed an ad and whether the game was played afterwards) and to build audiences for our advertising (“Google Consent Mode”). Without this consent the data is not used for advertising. On iOS, Google Ads also receives aggregated campaign results from Apple via SKAdNetwork that cannot be related to you.

Without consent (you chose “Do not consent” or deselected the purposes above), the app uses Google’s “advanced” Consent Mode: Firebase Analytics then receives the status “denied” for all purposes and sends only measurement signals – which event happened when (e.g. app start, level completed, answer in the consent dialog), the consent status, app version, device model, operating system, language, time zone, technical session counters of the SDK and the country derived from the IP address (the IP address is not stored). These signals contain no app instance ID and no advertising ID; technically the Firebase installation ID is sent along (the same one Remote Config uses, section 4.9), and the app sets no user properties of its own. Google evaluates the signals only in aggregate to estimate gaps in our statistics and the effect of our advertising (“modelling”), not for advertising profiles. Before you decide in the dialog, the app sends no analytics data. Legal basis for these signals: our legitimate interest in data-minimised overall statistics and in measuring our advertising (Art. 6(1)(f) GDPR). If you give consent later, the paragraphs above apply from then on.

Purpose: improving game balance, stability and offering, and measuring and steering our advertising. Legal basis with consent: Art. 6(1)(a) GDPR, Sec. 165(3) Austrian TKG 2021. If you change your choice under Settings → Privacy → Privacy options, it applies immediately. When you delete your account, the analytics data on your device is reset (new app instance ID). Retention of event data (Google Analytics / Firebase Analytics): 14 months, after which it is deleted automatically.

4.8 Crash reports (Firebase Crashlytics)

Firebase Crashlytics sends technical reports on crashes and program errors (stack trace or error message, device model, OS version, app version, memory/battery state, time, an installation UUID, possibly the game account UID and the technical log of the last game steps, section 4.11). The reports contain no advertising ID and are not used for advertising or profiles. The app also reports when the game froze (no response for several seconds): the duration, whether it recovered, and the screen and level where it happened.

Purpose: fixing bugs and keeping the game stable. Legal basis: our legitimate interest in a stable, error-free game for all players (Art. 6(1)(f) GDPR); no consent is needed for this. Objection: you can object at any time by switching off Send crash reports in the app under Settings → Privacy. From then on the app sends no crash or freeze reports, reports not yet sent are deleted from the device, and the setting is kept. Retention: generally 90 days.

4.9 Remote Config

The app fetches game parameters (e.g. balancing, feature switches) via Firebase Remote Config. Technically this transmits IP address, Firebase installation ID, app version, language and platform. Purpose: controlling and fixing the game without an app update. This is technically necessary configuration without profiling or personalisation; no consent is required for it. Legal basis: legitimate interest in stable, error-free operation of the game (Art. 6(1)(f) GDPR) or performance of the contract.

4.10 Notifications (local; Firebase Cloud Messaging)

The app can remind you with local notifications (e.g. daily gift, daily challenge, only during the configured hours of the day). They are scheduled on the device; no data is sent to us for this. The permission (Android 13+ POST_NOTIFICATIONS, iOS) is requested only after you reach a certain progress in the game and can be revoked at any time in the system or game settings. We also send notices to all players of a language via Firebase Cloud Messaging (Google’s push service), e.g. about the daily challenge, tournaments or events. Only once you have granted the permission and notifications are switched on in the game settings does the app send your device’s push token, platform, language, time zone (UTC offset) and the chosen topics to our backend (Firestore, EU) and subscribe the device to these topics; if you switch them off or delete your account, the subscription is removed. Legal basis: consent through the permission or the setting (Art. 6(1)(a) GDPR).

4.11 Locally stored data, touch, vibration

Save data and settings are stored in a file in the app’s private storage. The app does not access contacts, photos, microphone, camera, location (GPS) or phone identifiers. Haptic feedback (vibration) is triggered locally.

For troubleshooting, the app keeps a short technical log of the last game steps (e.g. screens opened, start and end of a level, ad and purchase steps, connection errors; at most 50 entries, without names or free text) in your device’s memory, and a small file with the installation day, the number of sessions and the milestones reached. This data does not leave your device by itself. While crash reports are switched on (section 4.8), the log is attached to a crash report; if you send a problem report yourself (section 4.12), it is part of that report.

4.12 Problem reports from the app (“Report a problem”)

Under Settings → Help & info → Report a problem you can report a problem to us. Data is only sent when you tap Send: your choice (e.g. “Game freezes”) and your text (both optional, at most 300 characters; email addresses and long digit sequences such as phone numbers are removed automatically), device model, operating system and app version, language, where you are in the game (screen, level), the latest entries of the technical log (section 4.11), a summary of the last freeze (section 4.8) and the anonymous ID of your game account. Please do not enter personal data in the text. Storage: Google Cloud Firestore in the EU (europe-west1). Purpose: handling your report and fixing bugs. Legal basis: your request as part of using the game, or our legitimate interest in fixing bugs (Art. 6(1)(b) or (f) GDPR). Retention: 180 days, then deleted automatically; when you delete your account, your reports are deleted at once. This feature does not provide a reply – for questions please write to us by email.

4.13 Measurement of our ad campaigns by partners (Singular, Meta)

We also promote Stone Pop Tour with ads in other apps and services (e.g. Google, Meta with Facebook and Instagram, TikTok). To see which campaign led to an installation and whether it pays off, we use two services: Singular in full with your consent and, without consent, in a strongly limited form without advertising ID (below), and Meta App Events only with your consent in the consent dialog (section 4.5). If you switch off Campaign measurement in the app under Settings → Privacy, both services are stopped at once, whatever you chose in the dialog.

Singular (Singular Labs, Inc., USA; singular.net/privacy-policy) processes on our behalf: time of installation and app starts, device and app information (model, operating system, language, app version), IP address, the advertising ID (Android: Advertising ID; iOS: IDFA only if you allow the ATT prompt) and app-scoped device identifiers (Android: App Set ID; iOS: identifier for vendor, IDFV), the installation source from Google Play (“install referrer”), selected game events (level milestones reached, returning on certain days after installation, regular play, completing the introductory tutorial, linking the account, the first avalanche, the first purchase, the first rewarded video, the first daily challenge, the 10th and 50th full-screen ad), in-app purchases (product, price, currency and the store receipt to verify authenticity) and the ad revenue per ad shown. Singular attributes installations to campaigns and reports the results (installation, these events, revenue) to the advertising platform whose ad you came from, so that it can measure and steer the campaign. On iOS, Singular also manages Apple’s campaign measurement SKAdNetwork, whose results cannot be related to you. Names, e-mail addresses and free text are not transmitted; we do not set a user ID. If a US state privacy law applies to you and you opted out of the sale or sharing of your data, data sharing is limited (“Limit Data Sharing”); the same applies in the EU if you did not agree to personalised advertising.

Singular without consent (EU/EEA, UK, Switzerland; you did not consent in the dialog or did not select Singular): Singular then receives only the time of installation and app starts, device and app information (model, manufacturer, operating system, language, app version), the IP address, the installation source from Google Play (“install referrer”), an app-scoped device identifier (Android: App Set ID; iOS: IDFV) and the result of Google Play’s licence check (fraud prevention for installations). Not transmitted: the advertising ID (the app switches its collection off in Singular, on iOS even if tracking is allowed), game events, purchases, ad revenue and a user ID; sharing with advertising platforms is limited (“Limit Data Sharing”). Purpose: aggregated evaluation of how many installations a campaign brought, on iOS via SKAdNetwork. Legal basis: our legitimate interest in measuring our own advertising (Art. 6(1)(f) GDPR). Objection: any time with the switch Campaign measurement under Settings → Privacy; Singular is then stopped at once and not started again on later launches.

Meta App Events (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; facebook.com/privacy/policy): only if you also agreed to personalised advertising (TCF purposes “Store and/or access information on a device”, “Create a personalised ads profile”, “Select personalised ads”, “Measure advertising performance”, and Meta as a partner), the app sends to Meta: app installation and start, level milestones reached, completing the introductory tutorial, account linking and in-app purchases (product, price, currency), together with device and app information, the IP address and – on iOS only if you allow the ATT prompt – the advertising ID. Meta uses this data to measure and deliver our advertising on Facebook and Instagram and may link it with data from a Meta account. We do not use “advanced matching” (e-mail address, phone number, name). For the collection and transmission of the data to Meta for delivering and optimising ads we are joint controllers with Meta (Art. 26 GDPR; Meta provides the essence of the arrangement at facebook.com/legal/controller_addendum); for measurement Meta processes the data on our behalf; Meta alone is responsible for any further processing. If you chose “Ask App Not to Track” on iOS, Meta receives no IDFA and the events are sent with the flag that tracking is not allowed. For people in US states who opted out of sale or sharing, Meta’s “Limited Data Use” applies.

Legal basis: for Meta and for Singular in full, your consent (Art. 6(1)(a) GDPR, Sec. 165(3) Austrian TKG 2021); for Singular without consent, our legitimate interest (Art. 6(1)(f) GDPR, see above). Singular is our processor (Art. 28 GDPR). Retention: at Singular 24 months at most, at Meta according to Meta’s periods. We forward erasure requests to Singular and Meta; as both store data only per device, please give us your device’s advertising ID for this. You can also reset or delete the advertising ID in your device settings at any time.

4.14 Downloading tile sets (Cloud Storage for Firebase)

Some tile sets are not included in the app. If you buy or select such a tile set, if your saved progress restores it on a new device, or if it is missing on your device, the app downloads its image files from Cloud Storage for Firebase (Google Cloud EMEA Limited or Google LLC) and stores them on your device. Only technically necessary connection data is processed (IP address, time, file requested, amount of data transferred, technical details of the connection). The request contains no user ID, no advertising ID and no information about your game account. Purpose: providing the game content you bought or selected, with a smaller app size. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We do not analyse this data; Google processes it as a processor and deletes any logs according to its standard periods. The files remain on your device until you delete the app data or uninstall the app.

5. Recipients and processors

We do not sell your data or pass it on for other purposes.

6. Transfers to third countries

Game account data is stored in the EU. Google, Apple, Meta and Singular are companies or belong to groups headquartered in the USA; for analytics, crash reports, advertising, campaign measurement and payment handling, data (e.g. IP address, identifiers) may be transferred to the USA and other third countries. The basis is the European Commission’s adequacy decision on the EU-US Data Privacy Framework (where the recipient is certified; Google LLC, Apple Inc. and Meta Platforms, Inc. are certified under the Data Privacy Framework, see dataprivacyframework.gov) or standard contractual clauses (Art. 46 GDPR) and, where required, your consent (Art. 49(1)(a) GDPR). For ad mediation (section 4.6), data may also be transferred to Israel (EU adequacy decision), Singapore and Hong Kong/China (standard contractual clauses).

7. Retention overview

8. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21) to processing based on legitimate interests – for crash reports and the limited campaign measurement directly in the app under Settings → Privacy (switches Send crash reports and Campaign measurement, effective at once), otherwise by email to support@goodspace.at. You can withdraw consent at any time with effect for the future (in the app under Settings → Privacy → Privacy options; notifications in the system settings). There is no automated decision-making with legal effect.

Delete your account and data: in the app under Settings → Account → Delete account, or on the page Delete account. Send requests for access, rectification and portability to support@goodspace.at (include your recovery code so that we can identify your account; analytics and advertising data cannot be attributed without a device identifier).

You also have the right to lodge a complaint with a supervisory authority: the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at, or the authority at your place of residence.

9. Obligation to provide data, children

The anonymous game account is required for the online features (saving, leaderboards, purchases); without consent to advertising and analytics you can still use the game with non-personalised ads. Stone Pop Tour is not directed at children under 14, and we do not knowingly collect data from children. If you believe a child has submitted data, please contact us.

10. Security and changes

Data is transmitted exclusively encrypted (HTTPS/TLS). Access to game accounts is protected by Firebase Authentication and server-side rules; the client does not write to the database directly. We update this policy when the app or the legal situation changes; the date above shows the current version.