Privacy Policy

1) Who we are

Prism Mosaic: Gem Sorting is operated by Suntof Solutions. For privacy, support, or deletion requests, contact suntof.apps@gmail.com.

2) Scope of this policy

This policy covers the iOS, Android, and web builds of Prism Mosaic. The exact SDK and ad configuration can vary by release; material changes to collection or sharing will be reflected here before distribution. Recovery accounts and private cloud backup are available only in releases that display Cloud Backup in Settings. Older releases without this control do not upload private game backups.

3) Information processed by the current build

• Local game progress: completed levels, active puzzle state, moves, coins, boosters, gallery pieces, pack rewards, achievements, daily quest state, and weekly event claims.
• Local settings: sound effects, music, haptics, language, and advertising privacy choices.
• Android backup: cloud backup and device-to-device transfer through Android's system backup are disabled for local game data. The optional in-game backup described below is separate.
• Optional recovery account and private game backup: if you choose to link an email and password to your game identity, Firebase Authentication processes your email address, private user ID, and authentication/security data. You must verify the email and explicitly start the first backup. The private backup contains completed campaign progress, earned stars and records, coins, tools, daily progress, and studio state. It excludes the unfinished puzzle board, local QA events, and advertising identifiers. The password is not stored in the game save or shown in rankings.
• Local diagnostics: limited gameplay diagnostics used by test builds remain on the device unless you explicitly share diagnostic information with support.
• Optional ranking account and profile: after you accept the ranking terms, we process a private authentication identifier, random player code, player-chosen display name, avatar, optional country selected by you, ranking scores, completed-level results, season results, and related timestamps.
• Ranking safety choices: if you use player safety controls, we process hidden-player choices, report reasons, and any optional details you submit with a report.
• Advertising and SDK data: in mobile releases, Google Mobile Ads may collect an IP-derived approximate location, device identifiers, product and ad interactions, advertising data, crash data, performance data, and other diagnostic data.
• Support communications: if you email us, we receive the email address and information you include in your message.
• Optional store purchase: releases that offer Remove Automatic Ads use store-provided transaction information to verify and restore this entitlement. Android keeps a verified purchase receipt and signature in the app's private on-device storage; the receipt may include a purchase token and order information. iOS uses verified StoreKit transactions and entitlements without writing a separate app receipt file. Receipt, token and order information are not added to game backups, public rankings, or automatic issue reports.

4) SDKs and network services

The iOS and Android apps use Capacitor and may show banner and interstitial ads, plus rewarded ads that the player chooses to start, through Google Mobile Ads. Before ad requests, Google's User Messaging Platform checks whether consent or a privacy-options entry point is required. On iOS, App Tracking Transparency permission is requested before data that requires tracking permission is accessed. Google may process device identifiers, IP address, approximate location derived from IP, product and ad interactions, advertising data, crash data, performance data, and other diagnostics to deliver, secure, limit, personalize, and measure ads according to the user's choices and Google's policies.

• No login is required for core gameplay; online ranking participation is optional.
• Firebase Authentication, App Check, and Firestore support account identity, abuse protection, remote rankings, and optional private game backups.
• Cloudflare routes and protects ranking and private-backup service traffic and may process IP addresses and request-security information under its policies.
• Banner and interstitial ads may appear during normal mobile gameplay at configured placements.
• Rewarded ads are optional and are requested only after the player chooses an ad-labelled reward.
• Some releases offer an optional one-time Remove Automatic Ads purchase through Apple App Store or Google Play. Releases without the purchase control do not offer this purchase in the app.
• No first-party remote gameplay analytics is active. Private game progress is uploaded only after you verify a recovery email and opt in to cloud backup; ranking results are separate.
• No precise location permission, contacts, camera, microphone, or files access is required for core gameplay.
• The Android release denies cleartext HTTP traffic.

Where the user's consent, device settings, and applicable law allow, Google may link device identifiers, approximate location, interactions, advertising data, performance data, and other diagnostics to a device and use them for cross-app or cross-site advertising measurement or personalization. If tracking permission or consent is denied, the app does not override that choice; ads may still be delivered using limited, contextual, or non-personalized data as permitted by Google and law. Crash data may also be processed without being linked to the user's identity for diagnostics and app functionality.

4a) Optional purchase and restoration

The one-time purchase removes automatic banner and level-transition interstitial ads. Optional player-initiated rewarded ads remain; purchasing does not mean that all advertising SDK processing stops. Apple App Store or Google Play processes payment. The game does not receive your card details, bank details, or store password.

Store purchase information is used for entitlement verification and restoration, not for advertising targeting. In the current purchase implementation, our ranking and backup servers do not receive purchase receipts or tokens; entitlement verification uses the store and native on-device code. The stores process transaction and security information under their own policies. An authoritative store result may remove an entitlement after a refund or revocation; an offline device may not learn about this immediately.

Restore Purchases uses the same store account on the same platform. A recovery email or game-progress backup does not grant or transfer the purchase, and Android-to-iOS purchase transfer is not supported. Android's app-private purchase cache is removed when app data is cleared or the app is uninstalled, but the store may retain its transaction records. Deleting a game or recovery account does not erase the store's payment records or automatically request a refund. Refund requests are handled through the relevant store.

5) How information is used

• To run the game, save progress, and remember settings on your device.
• When you opt in, to authenticate your recovery account, store a private backup after eligible level completions, and restore it on another device only after your choice.
• To create and manage an optional ranking profile, calculate world and country rankings, and operate recurring league seasons.
• To validate submitted results, prevent manipulation, investigate reports, hide reported players, and keep the ranking service secure.
• To support local QA and debugging in test builds.
• When the purchase is available, to verify and restore the store entitlement to remove automatic ads.
• To deliver, secure, limit, personalize, and measure advertising according to your consent and device choices.
• To respond to support, privacy, and deletion requests.

6) Sharing and third parties

A local game save is not uploaded unless you opt in to private cloud backup. If you do, the selected progress snapshot is sent through our protected gateway and stored using Google Firebase, linked to your private user ID. Joining rankings separately sends ranking profile and result data to the ranking service. Requests are routed through Cloudflare. These providers process information according to their own terms and privacy policies. If you choose to share screenshots or diagnostic information with support, the communication service you use may also process that information.

When you choose to join rankings, your player code, display name, avatar, chosen country, and ranking results can be visible to other players. Your recovery email and private backup are not displayed there or provided by the game to advertising services.

When ads are enabled, Google and its advertising partners process data for ad delivery, consent, measurement, fraud prevention, and related purposes. Review Google's Privacy Policy and use the in-app Ad privacy choices control when it is available. On iOS, you can also change tracking permission in the device's Privacy & Security settings. This policy page is hosted on GitHub Pages. GitHub may process basic technical web logs when this page is visited.

7) Retention and deletion

• Local game data remains on your device until you clear browser/app data or uninstall the app. Android backup and device-to-device transfer are disabled for the Android release.
• Clearing local data can permanently remove progress unless an optional private cloud backup was completed and is still available. Cloud backup is not continuous or guaranteed real-time sync.
• In Settings you can delete only the cloud backup. This removes its gameplay payload, leaves local progress, and retains a minimal revision marker so an older delayed upload cannot recreate the backup. Starting another backup requires a new choice.
• Settings also offers full recovery-account deletion after password confirmation. This removes the recovery identity and private backup; any public ranking profile disappears immediately and associated ranking records may finish deleting through a bounded background process. Local progress remains on this device.
• After backup deletion, a technical record keyed by the private user ID retains only the revision number and deletion time; full recovery-account deletion also records an account-deleted flag. It contains no gameplay payload, email address, or password, but remains identifier-linked rather than anonymous. It prevents delayed requests from recreating deleted data and is not used for advertising or public rankings. For a deleted recovery account, the record becomes eligible for automatic cleanup after 30 days; the server periodically confirms that the authentication account no longer exists before removing the record. Temporary service failures are retried. If only the backup is deleted and the recovery account remains active, the revision marker remains until a new backup replaces it or the recovery account is deleted.
• Ranking data remains until you delete the ranking account or it is removed under our safety, legal, or operational retention rules.
• You can permanently delete your ranking profile, scores, submissions, league entries, hidden-player choices, and associated reports from the in-app ranking account screen. If you linked a recovery email, deleting only the ranking profile keeps that recovery identity and its private backup. Neither action deletes the separate local game save.
• You can export a copy of your ranking data from the same in-app account screen.
• If you send information to us by email, follow the steps on our Data Deletion page to request deletion.

8) Children

Prism Mosaic is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will take appropriate action.

9) Security

Ranking and private-backup traffic is encrypted in transit, access is authenticated, and submitted results are checked on the server. We also use reasonable safeguards for support emails. No method of storage or transmission is perfectly secure, so please avoid sending sensitive personal information in support messages or attachments.

10) Changes

We may update this policy when the game changes. Significant data-flow changes, such as purchases, remote analytics, crash reporting, additional account options, or cloud features, will be reflected in this policy and the applicable store disclosures.