🔐 Data Privacy and Security Policy

📌 Overview

TileSync Fusion ("we," "us," "our," or the "Application") respects your privacy and is committed to protecting your personal data. This Data Privacy and Security Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

We collect minimal information necessary to provide an engaging game experience, enable cross-device synchronization, and maintain your game progress safely in the cloud.

📊 What Data Do We Collect?

Account Information (Required for Login)

Game Progress & Statistics

• Current Level: Which level you're playing
• Unlocked Levels: Which levels you've completed
• Level Progress: Per-level performance data
• Best Score: Your highest single-game score
• Stars Earned: Star ratings achieved on levels
• Total Lifetime Score: Sum of all scores earned
• Games Played: Total number of games played
• Win Rate: Percentage of levels completed
• Last Level Played: Your most recent game

Game Features & Inventory

• Power-Ups: Bombs, color bombs, shuffles (count and usage)
• Special Gems: Count of special gems created and used
• Obstacles Cleared: Total obstacles destroyed
• Combo Multiplier: Current and highest combo level achieved
• Total Coins: In-game currency balance

Daily Engagement

• Login Streak: Current consecutive days logged in
• Total Login Days: Lifetime number of days logged in
• Last Login Date: Timestamp of most recent login
• Last Played Time: When you last played a game

Achievements

• Achievement Status: Which achievements you've unlocked
• Achievement Progress: Progress toward each achievement
• Unlock Timestamps: When you earned each achievement

Leaderboard Data

• Display Name: Public leaderboard ranking
• High Score: Your best score shown on leaderboard
• Rank Position: Your placement on global leaderboard

What We Don't Collect

• ❌ Location data
• ❌ Contacts or phone number
• ❌ Photos or images from your device
• ❌ Call logs or messaging data
• ❌ Device identifiers (IMEI, MAC address)
• ❌ Health or medical information
• ❌ Financial information beyond in-game currency

🔐 Authentication & Credentials

How Passwords Are Handled

Password Security Process

1. Entry: You enter your password securely in the app
2. Transmission: Your password is sent to Firebase over HTTPS encryption
3. Storage: Firebase uses industry-standard bcrypt encryption and salting
4. Hashing: Passwords are irreversibly hashed - they cannot be retrieved
5. Our Access: We receive only a security token (UID), never the password

Password Requirements

• Minimum Length: 6 characters (Firebase requirement)
• Recommended: 8+ characters with uppercase, lowercase, numbers, and symbols
• Example Strong Password: MyGame2024! or SecureP@ss123

Session Management

When you log in, Firebase creates a secure session token. This token:

• Expires after a period of inactivity
• Is stored securely on your device
• Can be revoked at any time
• Allows you to stay logged in across sessions

Multi-Device Access

You can log into TileSync Fusion from multiple devices using the same email and password. Your game progress automatically synchronizes across all devices through the cloud.

☁️ Cloud Storage & Synchronization

Cloud Infrastructure

We use Google Firebase and Firestore for secure cloud storage of your game data. These services provide:

• Enterprise-grade encryption at rest and in transit
• Automatic backups and redundancy
• Geographic data distribution for reliability
• Compliance with international security standards

What Data Is Synced to the Cloud

Cloud Data Structure

Your data in the cloud is organized as:

Within this folder, your information is organized into categories:

• Basic Info: Email, display name, account creation date
• Progression: Current level, unlocked levels, level-specific progress
• Statistics: Scores, combos, special gems, obstacles
• Inventory: Power-ups (bombs, color bombs, shuffles)
• Daily System: Login streak, last login date
• Achievements: All achievement unlocks and progress

Cross-Device Synchronization

When you log in on a new device or app reinstall:

1. You enter your email and password
2. Firebase verifies your identity
3. All cloud data is automatically restored to your device
4. You resume exactly where you left off

Automatic Sync During Play

While playing:

• Local data is stored immediately on your device
• Cloud sync happens in the background without interrupting gameplay
• If connection is lost, data is queued and synced when reconnected
• No data is ever lost due to connectivity issues

💾 Local Device Storage

What Data Is Stored Locally

The following data is cached on your device for faster gameplay and offline capability:

• Game preferences and settings
• Current session data
• Display name (for quick leaderboard loading)
• Cached statistics (synced with cloud)
• Local achievement progress
• Session authentication token

Storage Method

Local data is stored in Android's secure SharedPreferences system in the file:

This storage is:

• Private to TileSync Fusion only (other apps cannot access it)
• Persistent across app launches
• Automatically restored when you reopen the app
• Synchronized with cloud on next login

When You Uninstall the App

When you uninstall TileSync Fusion:

• ✓ All local device data is deleted
• ✓ Your cloud data remains safe and accessible
• ✓ You can reinstall and restore everything by logging in
• ✓ No data is permanently lost

🛡️ Security Measures

Encryption

Authentication & Access Control

• Firebase Security Rules: Only authenticated users can access their own data
• UID-Based Access: Each user can only see and modify their own records
• Session Tokens: Limited lifetime, automatically expire
• No Backdoor Access: Not even administrators can view user data

Data Minimization

We follow the principle of data minimization:

• We collect only what's necessary to provide the game
• We don't collect unnecessary personal information
• We don't sell or share your data with third parties
• We delete data when no longer needed

Security Monitoring

• Continuous monitoring for unauthorized access attempts
• Automatic alerting on suspicious activities
• Regular security audits
• Compliance with industry security standards

Account Security

👤 Your Rights & Data Control

Access Your Data

You can access all your data at any time by logging into your account. You can view:

• Your profile information (email, display name)
• All your game progress and statistics
• Your achievement list
• Your leaderboard ranking
• Your power-up inventory

Modify Your Data

You can edit:

• Your display name (used on leaderboards)
• Your profile information
• Game preferences and settings

Export Your Data

For data portability, you can request all your game data in a standard format. Contact us for this request.

Delete Your Account

You have the right to delete your account at any time. When you request account deletion:

1. Your account is deactivated immediately
2. All personal identifying information is deleted
3. Game progress data is retained anonymously for 90 days (for recovery option)
4. After 90 days, all data is permanently deleted
5. You cannot recover your account after deletion

Opt-Out of Features

• You can disable leaderboard participation (your scores won't be displayed)
• You can limit achievement tracking
• You can disable push notifications
• You can opt out of performance analytics

Data Retention Policy

🔗 Third-Party Services

Services We Use

Google Firebase

• Purpose: Authentication and cloud database
• Data Shared: Account credentials, game data
• Security: Enterprise-grade encryption
• Privacy Policy: Google Firebase Privacy

Google Firestore

• Purpose: Real-time cloud database
• Data Stored: Game progress, statistics, achievements
• Geographic Redundancy: Automatic backups in multiple locations
• Privacy Policy: Google Cloud Privacy

AdMob (Google Ads)

• Purpose: In-game advertising (optional to watch)
• Data Collected: Advertising identifiers, view statistics
• No Personal Data: Your personal information is NOT shared with AdMob
• Privacy Policy: Google Privacy Policy

What We Don't Do

• ❌ Sell your data to third parties
• ❌ Share your email address with advertisers
• ❌ Share your game progress with other players without consent
• ❌ Use your data for purposes other than gaming
• ❌ Create user profiles for profiling or targeting

Ad-Related Data

When you watch an optional advertisement to earn rewards:

• ✓ Your personal data is NOT shared
• ✓ Only anonymous view data is recorded
• ✓ The ad provider cannot identify you
• ✓ You have full control over watching ads

📧 Contact Us

If you have questions about this Data Privacy and Security Policy, concerns about your data, or requests regarding your personal information, please contact us:

Changes to This Policy

We may update this policy periodically to reflect changes in our practices, technology, or other factors. We will notify you of significant changes by:

• Posting a new version with an updated date
• Sending an in-app notification
• Requesting your consent if changes are substantial

Your continued use of TileSync Fusion after changes means you accept the updated policy.