Privacy Policy

1. Information we handle

Guest play uses a randomly assigned Firebase account identifier. We handle game progress, scores, stars, inventory, currency balances, settings, and records needed to provide and restore supported game features. Some data is stored on your device and some is stored by our backend. Guest access can be lost if you uninstall the app, erase browser data, or change devices without linking an account or completing a supported transfer.

If you choose Google or Apple sign-in, we receive the provider's account identifier and information it makes available for authentication, which may include an email address, display name, or profile image. We do not receive your Google or Apple password. Apple may provide a private relay email address.

Your chosen in-game nickname, avatar, equipped cosmetics, scores, rankings, and event contributions may be visible to other players through profiles, leaderboards, and cooperative events. Your showcase displays the picture and one completed raid record you choose, including its completion date, contribution and commemorative plaque. Your other raid memories remain private. Your sign-in email and payment details are not displayed as your public profile.

For supported purchases, we handle product identifiers, transaction or receipt references, purchase status, and fulfillment records. Apple, Google, and RevenueCat help process and verify purchases. We do not receive your full payment-card number.

Technical records may include app and device information, network or IP information, error reports, requests, and security logs. Challenge and event validation can include move sequences, session records, and checkpoints needed to verify fair play. If you contact support, we receive the information you send. Please do not send passwords, authentication codes, or full card details.

When you accept the Terms and acknowledge the Privacy Policy, we store the policy version, your acceptance and acknowledgement, and the relevant timestamps on this device and with your game account. Historical records from earlier versions may also contain a minimum-age declaration. Such records are not verified dates of birth and do not enable optional analytics, advertising consent, or promotional notifications.

2. Why we use this information

We use information to operate the game; save and synchronize supported progress; manage accounts, transfers, inventories, and purchases; run leaderboards and cooperative events; respond to support requests; prevent duplicate rewards, cheating, fraud, and abuse; and maintain reliability and security.

Where a legal basis is required, this processing relies on providing the service you request, our legitimate interests in a safe and reliable game where those interests are not overridden by your rights, compliance with legal obligations, or your consent where required. Optional usage analytics relies on a separate choice. Accepting the Terms or signing in does not enable optional analytics.

3. Optional usage analytics and local storage

Optional Firebase Analytics is off by default in this version. You can enable or disable it in Settings → Privacy. If enabled, it measures game usage and technical interactions to help improve the game. We do not enable advertising personalization or Google signals through this setting. You can withdraw this choice at any time; withdrawal stops future optional collection but does not undo processing already performed.

The app uses device storage for game saves, account sessions, settings, language preferences, and your privacy choice. These are needed for the relevant features. In the web version, optional analytics may also use analytics cookies when you opt in. Turning analytics off also clears the analytics cookies that this app can access. Browser settings can block or clear local storage, but doing so may remove settings or guest access.

Optional promotional game notifications

Native iOS and Android apps can offer optional promotional push notifications about raids and returning to your adventure. These notifications are off by default. After your first clears, the game may invite you to opt in; choosing Not now does not limit gameplay. The notification choice is separate from accepting the Terms, linking Google or Apple, optional analytics, rewarded ads, and purchases. Device permission alone is not promotional consent. Guest players can make the same notification choice as linked accounts. The initial notification service is available only to players who confirm that they are at least 16 and select a supported service region; this does not change the game's minimum age.

If you opt in and grant the device permission, our notification system handles a device installation identifier and public verification key, a notification registration reference, the current game account identifier, platform and app build, chosen language and service region, device time zone, notification categories and consent version, limited recent activity and raid-visit timestamps, stage-clear count, and send/open status needed to route an alert safely and prevent duplicate or excessive messages. Your installation signing secret remains in the device's protected storage. The service region may initially be suggested from your device’s regional settings, language tag or an unambiguous time-zone mapping, and you can change it before agreeing or later in Settings. Notification times follow the receiving device’s local time zone, including daylight-saving changes. These features do not use GPS or collect precise location. We do not put your sign-in email, payment information, or currency balance in notification content.

We use Firebase Cloud Messaging, Google Cloud, and Apple Push Notification service to provide these notifications. We upload a registration reference to our game notification server only after the optional in-game choice is confirmed. Device permission alone does not subscribe your account. Notification routing and send-limit records support the feature; they do not turn on optional usage analytics.

In Settings → Notifications, you can withdraw promotional notification consent for the account across its devices. Account-wide withdrawal needs an online connection; if unavailable, this device stays off and the app saves the request and retries when this account reconnects. Tapping a notification also opens a direct option to turn notifications off on this device, even without signing in or after the event has expired. Linking a guest to the same account preserves its choice. Switching to a different account or logging out turns this device off until you make a separate choice. A notification already accepted by a delivery provider cannot always be recalled.

Inactive registration and limited notification activity records become ineligible after 30 days and are scheduled for deletion. Delivery records are kept for up to 30 days, short command replay records for two days, and rate-limit records for up to eight days, subject to asynchronous deletion. Notification consent history is scheduled for deletion after two years; the current account preference and minimum version record remain while needed to honor your choice or until account deletion. Account deletion removes account-linked notification preferences, activity, queued candidates and delivery history and detaches the installation; a temporary unbound installation record contains no account owner or registration reference.

We record that the optional invitation was shown so we do not repeatedly interrupt play. This invitation record does not grant notification consent and is removed with the game account. You may change your choice later in Settings → Notifications.

App Store and Google Play feedback

After a meaningful gameplay milestone, we may ask the app store to show its optional rating interface. You can continue playing without rating the game. The store controls whether the interface appears and processes any rating or written review under its own policies. The game does not receive your selected star rating, review text, store credentials, or confirmation that a review was submitted.

To avoid repeated requests, we keep a small request history linked to your game account, including the app version, milestone and up to three recent request timestamps and a command reference. We remove the account-linked record when the game account is deleted. This device also keeps a short local request history to limit repetition when accounts change; reinstalling the app clears the app’s local history. Store feedback requests do not enable optional analytics or promotional notifications, and do not affect game rewards.

4. Service providers and sharing

We use Google Firebase and Google Cloud for authentication, storage, backend services, hosting, security, and optional analytics. We use RevenueCat for supported purchase verification and entitlement or transaction management. Google Play and Apple App Store process purchases under their own terms and privacy policies. Google and Apple process their sign-in services under their own policies.

Providers receive information needed for their services. We may disclose information where legally required, to protect players and the service, or as part of a lawful business transfer with appropriate safeguards. Optional analytics does not enable cross-app advertising tracking. The native mobile app also uses Google AdMob for optional rewarded ads, as explained below.

Rewarded ads and your choices

The native iOS and Android apps offer optional Google AdMob rewarded ads. Google may process device and app information, IP address, approximate location derived from network information, advertising or other device identifiers where available and permitted, diagnostics, ad interactions, and reward-verification records to deliver and measure ads, prevent fraud, and operate its services. Read Google Privacy Policy.

We request non-personalized ads. This does not mean that the ad service processes no device information or requires no consent. Before requesting an ad, we update consent information and show the Google consent form when required and available. We only request an ad when the consent SDK permits it. The app does not request Apple tracking permission. You can open Settings → Ad privacy choices to access available consent controls and change the locally saved age range. Optional analytics and advertising choices are separate.

Before the first ad, you choose an age range: under 14, 14–15, or 16 and over. We save only this range on your device, not your date of birth, and do not upload this choice to your game profile. Ads are disabled for the under-14 range. For ages 14–15, we configure the ad SDK as under the age of consent. Choosing a range does not waive higher local age or parental-permission requirements.

Ads are initiated by your choice. Availability is not guaranteed. A reward requires the ad provider to confirm completion, and relevant daily or per-level limits still apply. Closing an ad before its required completion does not earn a reward.

5. International processing and security

Our service providers operate internationally, so information may be processed outside your country. Where applicable law requires transfer safeguards, we rely on the relevant lawful arrangements with providers. You can contact us for information about safeguards relevant to your request.

We use access controls, authenticated requests, and other technical and organizational measures appropriate to the service. No system is completely secure. Keep your sign-in account and transfer codes private. A transfer code is temporary and is intended for a single transfer.

6. How long we retain information

We retain active account and game information for as long as needed to provide the service and the purposes described here. Temporary sessions, transfer records, and event records may have shorter operational lifetimes. Retention also depends on support needs, unresolved disputes, security, applicable law, and provider retention settings.

Deleting an account removes the game account and associated profile, save, ranking, and event records through our deletion process. Limited purchase, fulfillment, fraud-prevention, and deletion records may be retained with direct account links removed or replaced where practicable. Deletion markers help prevent an erased account or purchase from being restored or credited again. These records are not all automatically erased immediately; some remain while needed for legal, accounting, security, or dispute purposes. Aggregate event totals may remain without your public profile.

7. Your choices and rights

You can change optional analytics in Settings → Privacy, manage supported account-linking features in Settings, and request account deletion in Settings → Data → Delete Account. See Delete Your Account for the steps and a contact option if you cannot access the app.

Depending on your location and the applicable law, you may have rights to access or obtain a copy of your information, correct it, request deletion, restrict processing, object to processing, withdraw consent, or receive portable information. Contact leafappwebs@gmail.com to exercise these rights. We may need proportionate information to verify your request and protect accounts. We will respond within the period required by applicable law. You may also complain to the competent privacy regulator.

8. Age and younger players

Twinkle Crush is a general-audience puzzle game. Applicable age and parental or guardian permission requirements depend on your region and the relevant feature or processing. Where the law requires parental or guardian consent for a child’s personal information, that consent must be obtained before the relevant processing. A parent or guardian can contact leafappwebs@gmail.com for assistance with a child’s information, including access or deletion requests. A store content rating does not replace these requirements.

9. Changes and contact

We may update this policy as the game or legal requirements change. We will update the effective date and provide additional notice or obtain a new choice when required. The operator is Leaf. Apps. Privacy and support contact: leafappwebs@gmail.com. See also Terms of Service.