Puck Rush — Privacy Policy

Mobile skill-shot game — official privacy policy

Last updated: July 11, 2026

This Privacy Policy explains how we collect, process, store, share, and protect personal and sensitive user data when you use the Puck Rush mobile game (the “App” or “Game”).

1. Data controller

Data controller: Puck Rush developer.
Contact: hakandas71@gmail.com

2. Data we collect

Data type	Examples	How collected
Account identifiers	Firebase user ID (UID), Google or Apple sign-in identifier	When you sign in with Google or Apple
Personal information	Email address, provider display name, profile photo URL, display name you choose (up to 12 characters), optional profile photo you upload	Sign-in provider and profile setup
Game data	Story progress, lives, inventory, coins/gems, arena stats, MMR, friends list, chat messages, daily quests	While you play and when data is saved to the cloud
Purchase data	In-app purchase transaction IDs, product/receipt information	When you buy items through Google Play or the App Store
Device & usage data	Device model, OS version, app version, session events, performance and error logs, analytics events	While the App is running (Firebase Analytics and similar services)
Ad data	Rewarded ad impressions and interactions (may be processed by ad networks)	When you optionally watch rewarded ads (Unity LevelPlay)

We do not knowingly collect precise location, contacts, SMS, call logs, or microphone/camera recordings for core gameplay. Optional profile photos are uploaded only if you choose to add one.

3. Why we process data

Account creation, authentication, and session management
Syncing game progress across devices
Arena matchmaking, ranking, and fair-play security
Server-side validation of shop, inventory, loot crates, and community marketplace actions
Friends list and social features
Processing in-app purchases and customer support
Error detection, performance measurement, and product improvement (analytics)
Fraud, cheating, and abuse prevention
Compliance with legal obligations

4. Legal bases

Contract performance: processing needed to provide the Game
Legitimate interests: security, anti-cheat, analytics, and service improvement
Consent: in-app terms acceptance and permission-based features where required
Legal obligation: store, tax, or security record-keeping where applicable

5. Data processing and security

We protect personal and sensitive user data using the following procedures:

Encrypted communication: all network traffic between the App and our servers is encrypted using HTTPS/TLS.
Authentication: user sessions are managed with Firebase Authentication; server-side actions require a valid session token.
Access control: our cloud database (Google Cloud Firestore) is protected by security rules; users can access only their own account data. Economy, marketplace, and loot-crate actions are validated on the server.
Data minimization: we collect and process only data needed to operate the service.
Third-party infrastructure: data is hosted on Google Firebase, Google Cloud, and store platforms (Google Play / Apple), which apply industry-standard physical and logical security measures.
Limited internal access: production data is accessed only by authorized personnel with a legitimate operational need.
Account deletion: when you delete your account, your authentication account and related cloud records are permanently removed. Details: account-deletion.html

6. Third-party sharing

We share data only as needed to operate the Game:

Google Firebase / Google Cloud: authentication, database, storage, analytics, cloud functions
Google Sign-In / Apple Sign-In: account sign-in
Google Play / Apple App Store: in-app purchase processing
Unity LevelPlay (IronSource): rewarded ads (subject to the ad network’s own policies)

We do not sell your personal data and do not share it with third parties for cross-app advertising profiling.

7. International transfers

Data may be processed on Google Cloud servers outside your country, including outside the EEA. Google’s data processing and transfer safeguards apply. Where required, appropriate contractual safeguards (such as Standard Contractual Clauses) may apply.

8. Retention

Game and profile data are kept while your account is active.
When you delete your account, related cloud data is permanently removed (see account deletion page).
Store purchase records may be retained under Google Play / App Store policies.
Anonymous or aggregated analytics may be kept in a form that cannot identify you.
Minimum records required by law or security may be retained for the required period.

9. Your rights

Depending on your location, you may have the right to:

Access and receive a copy of your data
Request correction of inaccurate data
Request deletion of your account and data (account deletion)
Object to or restrict processing where applicable by law
Data portability where technically feasible

Privacy requests: hakandas71@gmail.com

10. Children

The App is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child provided personal data, contact us and we will take appropriate steps.

11. Changes

We may update this policy. Material changes will be posted on this page. The App may also ask you to accept updated terms or privacy notices.

12. Contact

Privacy questions, data requests, and support:
hakandas71@gmail.com
support.html