Connect Merge
Privacy Policy
This policy explains what information Connect Merge collects, why, and how it is protected.
1. Information We Collect
- Game data. Puzzle progress, scores, and streak history are stored locally on your device and synced to our backend to power leaderboards and cross-device continuity.
- Contact hashes. With your permission, we read your device contacts and store only a one-way cryptographic hash (SHA-256) of each phone number — never the raw number or name — to discover which contacts also play Connect Merge.
- Advertising identifiers. Google Mobile Ads may collect your device's advertising ID to serve and measure ads. You can reset or opt out of ad personalisation in your device settings.
- Local notifications. If you grant permission, we send daily reminders. No notification data leaves your device.
- Diagnostic data. Basic crash and error information (OS version, app version) may be collected to fix bugs.
2. How We Use Your Information
- Display global and friends leaderboards.
- Restore your progress when you reinstall or switch devices.
- Match you with friends who also play (via hashed contacts only).
- Show advertising to keep the app free.
- Diagnose crashes and improve the game.
3. Data Sharing
We do not sell your personal information. Data is shared only with:
- Supabase — database and auth infrastructure.
- Google Mobile Ads — advertising network. See Google's privacy policy.
4. Data Retention
Server-side data (scores, hashed contacts) is retained while your account is active. You may request deletion at any time using the Delete My Data page. For linked-account edge cases that cannot be resolved by Google sign-in, we may retain a deletion support request for up to 90 days solely to verify and complete that request, after which it is deleted.
Older anonymous accounts created before recovery codes were introduced cannot be verified after the app has been uninstalled. Those accounts contain a random identifier, display name, scores, and contact hashes, but no verified email or raw contact data. We do not delete an account based on a public display name or Player ID.
5. Children's Privacy
Connect Merge is not directed at children under 13. We do not knowingly collect personal information from children under 13.
6. Your Rights
You may request access to, correction of, or deletion of your data at any time. You can revoke contacts permission at any time in your device settings.
7. Changes to This Policy
We may update this policy occasionally. The effective date at the top will reflect any changes. Continued use of the app constitutes acceptance of the updated policy.