Privacy Policy — Combo Comet
Last updated: [DATE]
This Privacy Policy explains how [YOUR COMPANY / DEVELOPER NAME] ("we", "us") collects, uses and shares information when you play Combo Comet (the "App"). Contact: [support@example.com].
1. Summary
- You can play without creating an account. A random guest ID is created so online features work.
- We store your game progress (levels, scores, coins, items, friends, duels, league results) to sync it across devices.
- The App shows ads through Google AdMob. AdMob may collect device identifiers and usage data to serve and measure ads, and — only with your consent where required — to personalise them.
- You can delete your account and data at any time from Settings → Delete account.
2. Information we collect
Information you provide
- Account details if you sign up: email address (email sign-up), or the name/email shared by Sign in with Google or Sign in with Apple (Apple lets you hide your email).
- Username and avatar you choose (shown publicly on leaderboards, leagues, duels and to friends).
- Invite / friend codes you enter.
Information created when you play
- A user ID (also for guests), game progress and settings, scores, Daily Puzzle results, duel results, weekly league XP, Season Pass progress, friend connections and referral records.
- Basic technical data needed to run the service (e.g. IP address in server logs, app version, timestamps).
Information collected by advertising partners (Google AdMob)
- Device advertising identifier (Android Advertising ID / Apple IDFA — IDFA only if you allow tracking in the iOS App Tracking Transparency prompt), IP address, approximate location derived from IP, device and OS information, and ad interaction data (impressions, clicks).
- Google's use of this data is described at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy.
On-device only
- Sound, music, haptics, language preferences and an offline copy of your progress are stored on your device.
- Adaptive difficulty. In Endless, Adventure and Zen the game adjusts which pieces it deals based on your own play history on this device: how long your recent games lasted, your recent and best scores, how many games you have played and whether you lost several games quickly in a row. This history stays on your device. It is never based on your device model, location or country, purchases, or ad revenue. It never changes your score, and the Daily Puzzle and Duels never adapt (every player gets the same pieces).
- Experiments. To tune ad frequency and difficulty, players are split into test groups (for example A or B) by a hash of your user ID. The group is included in the game events described above.
- Reminder notifications are scheduled locally on your device only if you turn them on. We do not use push-notification servers.
We do not collect precise location, contacts, photos, microphone audio or payment card data. The App does not include third-party analytics SDKs by default.
3. How we use information
- To provide the game, save and sync your progress, and run leaderboards, leagues, duels, friends, referrals and events.
- To prevent cheating and abuse (e.g. server-side checks on scores, rewards and referral codes).
- To show ads that keep the App free, and to measure ad performance.
- To respond to support requests and meet legal obligations.
Legal bases (EEA/UK users): performance of a contract (providing the game), legitimate interests (security, anti-cheat, improving the game), and consent (personalised advertising, collected through Google's consent form).
4. Consent and your ad choices
- In the EEA, UK and Switzerland we show Google's certified consent form (Google User Messaging Platform) before personalised ads. You can change your choice anytime in Settings → Ad privacy options.
- On iOS, the App asks permission to track via Apple's App Tracking Transparency. If you decline, the IDFA is not shared.
- On Android you can reset or delete your Advertising ID in your device settings.
- Rewarded ads are always optional.
5. Sharing
We do not sell your personal information. We share data only with service providers that process it for us:
- Supabase (database, authentication and server functions hosting) — stores account and game data.
- Google AdMob (advertising) — as described above.
- Google and Apple — only if you choose to sign in with them.
- Authorities, when required by law.
Your username, avatar and scores are visible to other players.
6. International transfers
Our providers may process data outside your country (for example in the USA, EU or India). Where required we rely on appropriate safeguards such as Standard Contractual Clauses.
7. Retention
We keep account and game data while your account exists. Daily Puzzle scores, league history and duels may be kept up to 24 months for leaderboards and anti-cheat, unless you delete your account. Server logs are kept for a short period by our providers.
8. Account deletion
- In the App: Settings → Delete account (permanent; deletes your account and associated cloud data).
- By email: write to [support@example.com] from your account email, or include your friend code. We will process the request within 30 days.
- Deleting the App alone does not delete cloud data. A public web page for deletion requests: [https://YOUR-DOMAIN/delete-account].
9. Your rights
Depending on where you live (e.g. GDPR in the EEA/UK, CCPA/CPRA in California, the Digital Personal Data Protection Act 2023 in India), you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent. Contact us to exercise these rights. You may also complain to your local data-protection authority.
10. Children
The App is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child provided us data, contact us and we will delete it.
11. Security
We use encryption in transit (HTTPS), row-level security on our database so users can only access their own private data, and server-side validation of rewards. No method is 100% secure.
12. Changes
We may update this policy. We will change the "Last updated" date and, for material changes, notify you in the App.
13. Contact
[YOUR COMPANY / DEVELOPER NAME], [ADDRESS] — [support@example.com]