Privacy Policy - Candy Pop Quest

Last updated: 2026-01-09

Your privacy is important to us. This Privacy Policy explains how data is collected and used inside the game Candy Pop Quest.

1. Information We Collect

The game collects usage and technical data and, if you choose to sign in, account data needed to provide cloud sync.

The data we may collect includes:

• Usage statistics and events through Firebase Analytics.
• Advertising identifiers and ad-related data through Google AdMob.
• Crash reports and technical diagnostics through Firebase Crashlytics.
• Push notification tokens and delivery data through Firebase Messaging (FCM).
• Account data if you sign in (email address or Google account ID, Firebase UID, and display name if provided by Google).
• Cloud save data (game progress, coins, scores, levels, boosters, and purchase flags such as ads removal or welcome pack).

We do NOT intentionally collect:

• Your payment card details (payments are processed by Google Play).
• Your precise GPS location.
• Your physical address or phone number.

2. Regional Differences and User Consent

• In certain regions such as the European Economic Area (EEA) and the United Kingdom, we are required to ask for your consent before using data for analytics and personalized advertising.
• In these regions, we use Google's User Messaging Platform (UMP) to request and store your consent choices.
• Outside the EEA/UK, consent is generally not required and analytics and ads may be enabled by default where allowed by law.
• If UMP cannot be shown in the EEA/UK, analytics and ad requests remain disabled until consent can be collected.

When consent is required, UMP manages the consent flow and your choices inside the app.

3. Advertising (Google AdMob)

This game uses Google AdMob to display ads and keep the game free to play.

• Google may collect usage and technical data (such as advertising identifiers, app usage events, and approximate location) to deliver, measure, and improve ads and to prevent fraud and abuse.
• In regions where consent is required, your choice on the consent screen controls whether ads are personalized or non-personalized (NPA).
• Outside the EEA/UK, ads may be personalized by default where allowed by local law.

Google Ads/AdMob policy: https://policies.google.com/technologies/partner-sites

4. Analytics (Firebase Analytics)

We use Firebase Analytics to understand how players use the game, improve gameplay balance, fix bugs, and enhance the overall experience.

• When analytics is enabled, anonymous usage statistics and events related to gameplay may be collected.
• When you decline consent in regions where consent is required, analytics is disabled and no analytics events are sent from your device.
• Outside the EEA/UK, analytics may be enabled by default where consent is not required.

Firebase Privacy: https://firebase.google.com/support/privacy

5. Crash Reporting (Firebase Crashlytics)

We use Firebase Crashlytics to diagnose crashes and improve app stability. Crash logs may include device and app state information at the time of the crash.

6. Push Notifications (Firebase Messaging)

If you allow notifications, we use Firebase Cloud Messaging (FCM) to deliver them. FCM uses a device token to route notifications to your device.

7. Accounts and Cloud Sync

Signing in is optional and is used only for cloud saving and syncing your progress across devices.

• Sign-in methods supported: email & password or Google account.
• When signed in, your progress is stored in Firebase (Firestore) under your account.
• You can sign out at any time; local data remains on your device unless you reset it.

8. In-App Purchases

Candy Pop Quest offers optional in-app purchases. Payments are processed by Google Play, and we do not receive or store your payment card details.

9. Data Sharing

We do not sell your data.

We may share limited data with the following third-party service providers, strictly for the purposes described above:

• Google AdMob - for displaying and measuring ads.
• Firebase services (such as Analytics, Crashlytics, Messaging, Auth, and Firestore) - for analytics, crash reporting, notifications, sign-in, and cloud save.
• Google Play Billing - for processing in-app purchases.

10. Data Security

All communication between the app and external services uses industry-standard encrypted connections (for example, HTTPS).

We apply reasonable technical measures to protect data against unauthorized access, loss, or misuse.

11. Your Choices and Controls

• You can review and update your ad and analytics consent through Google's User Messaging Platform (UMP) when it is available in the app.
• You can reset your local game data from inside the game settings (if available).
• You can disable notifications from your device settings at any time.

12. Account Deletion

You can delete your account and associated cloud data from inside the app: Settings > Cloud Sync > Delete account.

If you cannot access the app, you can request deletion here:

Account deletion request URL: https://candypopquest.com/delete-account

After verification, we delete cloud save data and your account. Local data can be removed by resetting the game or uninstalling the app. We may retain limited records if required for legal, security, or fraud-prevention purposes. Purchase records are handled by Google Play.

13. Children's Privacy

Candy Pop Quest is a family-friendly game but is not specifically directed at children. We do not knowingly collect personal information from children. If you believe that your child has provided personal information by mistake, please contact us.

14. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page and may also be reflected in the in-app privacy section.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or data usage in Candy Pop Quest, you can contact us at:

Email: waleeddevap@gmail.com