CubeFall – Privacy Policy

Privacy Policy for CubeFall

Last Updated: May 6, 2026

Introduction

CubeFall (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application CubeFall (the “App”).

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you sign in to the App using Apple Sign In or Google Sign In, we collect:

• User ID: A unique identifier provided by Apple or Google

• Email Address: Your email address (may be a privacy-protected relay email from Apple)

• Display Name: Your name as provided by the authentication service

• Authentication Provider: Which service you used to sign in (Apple or Google)

1.2 Game Data

We collect and store the following game-related information:

• Game Progress: Your current game state, including score, level, blocks placed, and board configuration

• High Scores: Your best scores and achievements

• Game Statistics: Number of lines cleared, cubes placed, and game sessions played

• Timestamps: Date and time of your game sessions and score submissions

1.3 Purchase Information

When you make in-app purchases:

• Purchase History: Records of products purchased (e.g., “No Ads” feature)

• Transaction IDs: Unique identifiers for purchase verification

• Purchase Status: Whether purchases are active, expired, or revoked

Note: We do not collect or store your payment information. All payment processing is handled securely by Apple through the App Store.

1.4 Analytics and Usage Data

We automatically collect:

• App Usage: Which features you use and how often

• Game Events: Game start, game over, level progression, and achievements

• Error Reports: Technical information when the app crashes or encounters errors

• Performance Data: App launch times and responsiveness metrics

• Network Status: Whether you’re connected to the internet (to enable offline mode for premium users)

1.5 Device Information

We may collect:

• Device Model: Type of iOS device you’re using

• Operating System Version: iOS version

• App Version: Which version of CubeFall you have installed

• Language Preference: Your selected language in the app

1.6 Information We Do NOT Collect

We do not collect:

• Location data

• Camera or photo library access

• Contacts

• Health data

• Microphone or audio recordings

• Calendar events

• Browsing history outside the app

• Precise device identifiers (IDFA) without your consent

2. How We Use Your Information

2.1 Core Functionality

We use your information to:

• Authenticate Your Account: Verify your identity and maintain your session

• Save Game Progress: Store your game state so you can continue playing across devices

• Display Leaderboards: Show your ranking compared to other players

• Process Purchases: Verify and maintain your in-app purchase status

• Enable Offline Play: Allow premium users to play without an internet connection

2.2 Service Improvement

We use analytics data to:

• Improve Performance: Identify and fix bugs and crashes

• Enhance Features: Understand which features are most popular

• Optimize User Experience: Make the app more enjoyable and intuitive

• Balance Game Difficulty: Adjust game parameters based on player performance

2.3 Communication

We may use your email address (if provided) to:

• Send important service announcements

• Notify you of major updates

• Respond to your support requests

We will never send marketing emails without your explicit consent.

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is stored in:

• Local Device Storage: Cached game data and preferences on your iOS device

• Firebase Cloud Firestore: Secure cloud database operated by Google (Firebase)

• Apple’s Servers: Purchase history and authentication data through iCloud and App Store

3.2 Data Retention

• Active Accounts: We retain your data as long as your account is active

• Deleted Accounts: Data is permanently deleted within 30 days of account deletion

• Inactive Accounts: If you don’t sign in for 3 years, we may delete your data

• High Scores: Leaderboard entries may be retained for historical purposes but will be anonymized

3.3 Security Measures

We implement industry-standard security measures:

• Encryption in Transit: All data transmitted between your device and our servers uses TLS/SSL encryption

• Encryption at Rest: Data stored in Firebase is encrypted at rest

• Authentication: Secure OAuth 2.0 authentication through Apple and Google

• Access Controls: Strict database rules prevent unauthorized access to user data

• No Passwords: We do not store passwords; authentication is handled by Apple and Google

3.4 Data Integrity

• Score Validation: Server-side validation prevents score manipulation

• Immutable Records: High scores cannot be edited after submission

• User-Specific Access: Users can only modify their own data

4. Data Sharing and Third Parties

4.1 Third-Party Services We Use

Firebase (Google LLC)

• Purpose: Cloud database, analytics, and crash reporting

• Data Shared: User ID, game progress, scores, device information

• Privacy Policy: https://firebase.google.com/support/privacy

Apple Sign In (Apple Inc.)

• Purpose: User authentication

• Data Shared: User ID, email (optional), name (optional)

• Privacy Policy: https://www.apple.com/legal/privacy/

Google Sign In (Google LLC) (Optional)

• Purpose: User authentication

• Data Shared: User ID, email, name

• Privacy Policy: https://policies.google.com/privacy

StoreKit (Apple Inc.)

• Purpose: In-app purchase processing

• Data Shared: Purchase transactions, product IDs

• Privacy Policy: https://www.apple.com/legal/privacy/

4.2 Data We Do NOT Share

We do not:

• Sell your personal information to anyone

• Share your data with advertisers

• Use your data for targeted advertising

• Share your data with data brokers

• Provide your information to other apps or games

4.3 Legal Requirements

We may disclose your information if required by law, such as:

• To comply with a court order or legal process

• To protect our legal rights

• To prevent fraud or security threats

• To protect the safety of our users

5. Your Privacy Rights

5.1 Access Your Data

You can access your data at any time:

• View Profile: See your display name and email in the app settings

• View Game Data: Check your scores, levels, and statistics in the app

• Export Data: Request a copy of all your data by contacting support

5.2 Delete Your Data

You can delete your data:

• Delete Game Progress: Use the “Delete Saved Game” option in settings

• Delete Account: Use the “Delete Account” option in settings to permanently remove all your data

• Contact Support: Email us at eray.mutlu@gmail.com for assistance

When you delete your account:

• All game progress is permanently deleted

• All high scores are removed from leaderboards

• Your profile is deleted from our servers

• Purchases are retained by Apple for legal requirements but disconnected from your profile

5.3 Opt-Out of Analytics

You can limit analytics tracking:

• iOS Settings: Settings > Privacy & Security > Analytics & Improvements > Share with App Developers (OFF)

• In-App: Analytics are essential for core functionality and cannot be completely disabled, but we minimize data collection

5.4 Data Portability

You can request a machine-readable copy of your data by contacting support.

5.5 Rights Under GDPR (EU Users)

If you’re in the European Union, you have additional rights:

• Right to access your personal data

• Right to rectification of incorrect data

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent

5.6 Rights Under CCPA (California Users)

If you’re a California resident, you have:

• Right to know what personal information is collected

• Right to know if personal information is sold or disclosed

• Right to opt-out of the sale of personal information (we don’t sell data)

• Right to deletion

• Right to non-discrimination

6. Children’s Privacy

The App is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

If you are between 13 and 18, you should have your parent or guardian review this Privacy Policy before using the App.

7. International Data Transfers

Your data may be transferred to and stored in countries outside your country of residence, including:

• United States: Firebase servers are located in the US

• European Union: Additional Firebase regions available

We ensure that appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)

• Firebase’s compliance with GDPR and Privacy Shield frameworks

• Encryption during transfer and at rest

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be:

• Posted in the app

• Effective immediately upon posting for non-material changes

• Effective 30 days after notification for material changes

• Accompanied by a notification in the app if changes are significant

We encourage you to review this Privacy Policy periodically.

9. Your Consent

By using the App, you consent to:

• The collection and use of information as described in this Privacy Policy

• The transfer of your information to third-party service providers

• The storage of your data in cloud services

You can withdraw your consent at any time by deleting your account.

10. Do Not Track Signals

Our App does not respond to Do Not Track (DNT) signals as there is no industry standard for handling such signals. However, you can control tracking through iOS privacy settings.

11. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of discovery

• Inform you of what data was affected

• Describe the steps we’re taking to address the breach

• Provide recommendations to protect yourself

12. Third-Party Links

The App does not contain links to third-party websites or services, except for authentication with Apple and Google. We are not responsible for the privacy practices of these authentication providers.

13. Cookies and Similar Technologies

The App uses:

• Local Storage: To save preferences and cache game data on your device

• Session Tokens: To maintain your login session

• Firebase SDK: May use cookies or similar technologies for authentication and analytics

We do not use tracking cookies or advertising cookies.

14. California Privacy Rights (“Shine the Light” Law)

California residents can request information about how we share certain categories of personal information with third parties. We do not share personal information with third parties for their direct marketing purposes.

15. Nevada Privacy Rights

Nevada residents can opt-out of the sale of personal information. We do not sell personal information and do not plan to do so in the future.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: eray.mutlu@gmail.com

Website: https://digitalinstitute.com.tr

Address: Feneryolu Mahallesi Hamdibey Sokak No:27 Daire:18 ISTANBUL / TURKIYE

We will respond to your inquiry within 30 days.

17. Compliance and Certifications

We comply with:

• Apple App Store Review Guidelines

• Apple App Tracking Transparency Framework

• General Data Protection Regulation (GDPR)

• California Consumer Privacy Act (CCPA)

• Children’s Online Privacy Protection Act (COPPA)

• Firebase Terms of Service

• Google API Services User Data Policy

18. Data Controller

For GDPR purposes, the data controller is:

ERAY MUTLU

Feneryolu Mahallesi Hamdibey Sokak No:27 Daire:18 ISTANBUL / TURKIYE

eray.mutlu@gmail.com

19. Supervisory Authority

If you’re in the EU and have concerns about how we handle your data, you can contact your local data protection authority.

20. Glossary

• Personal Data: Any information relating to an identified or identifiable person

• Processing: Any operation performed on personal data

• Data Controller: Entity that determines the purposes and means of processing personal data

• Data Processor: Entity that processes personal data on behalf of the controller

• User: Any person who uses the CubeFall app

⸻

Summary for Apple App Store Privacy Nutrition Label

For quick reference, here’s what you need to declare in App Store Connect:

Data Collected and Linked to User:

Contact Info

• Email Address (optional, from sign-in)

• Name (optional, from sign-in)

User Content

• Gameplay Content (scores, progress)

Identifiers

• User ID

Usage Data

• Product Interaction (game events, feature usage)

• Crash Data

• Performance Data

Purchases

• Purchase History

Data Collected but Not Linked to User:

None (all data is linked to authenticated users)

Data Not Collected:

• Location

• Browsing History

• Search History

• Financial Info (payment details)

• Precise Location

• Coarse Location

• Physical Address

• Phone Number

• Other Contact Info

• Photos or Videos

• Audio Data

• Gameplay Content (not collected)

• Customer Support

• Other User Content

• Health & Fitness

• Sensitive Info

Data Used to Track You:

None (we do not use data for tracking across apps/websites)

⸻

By using CubeFall, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.