Shapes Saga Privacy Policy

Shapes Saga is a puzzle game operated by Sembilan Teknologi Solusi("we"). This policy explains what the game and its early-access page collect, why, and the choices you have. We keep it to what the game needs. The game has optional reward videos (ads you choose to watch); we don't sell your data.

What we collect

• A game account for your install. When you first open the game it creates an account with a random player id and a private key that stays on your phone. We store only a scrambled (hashed) copy of the key.
• Your username, if you choose one.
• Your game save: levels unlocked, stars, coins, experience, hearts, boosters, which hints you have seen, and your sound settings.
• Level play: when you start, win, lose or leave a level, with the score, stars and time taken. We use this to see which levels are too hard or too easy.
• Technical details: app version, platform (for example Android), and your country, worked out by our hosting provider from your connection. We do not store your IP address.
• Problem reports you send: the type of problem, your note, the level, device details (phone model, Android version, graphics chip, game quality setting and frame rate) and, if you choose to attach it, a screenshot of the game.
• A notification token from Firebase Cloud Messaging, so we can send news to your phone. You can turn notifications off in the game's settings or your phone's settings.
• Reward videos you watch: which reward you chose and when, so each reward is limited per day.
• Account deletion requests made on our website: the username and the contact details you give.

The game doesn't collect your real name, email address, contacts, precise location or photos (other than a screenshot you choose to attach to a report).

Early-access list

If you join the early-access list on shapessaga.sembilantechnology.com, we collect:

• Your email address and whether you play on Android or iPhone.
• Your consent: which version of the sign-up wording you agreed to and when, and whether you also asked for occasional game news.
• Invite details: your own invite code, the code of the friend who invited you (if any) and the campaign link you came from (if any).
• Your country, worked out by our hosting provider from your connection, and a scrambled (keyed hash) copy of your IP address, used only to stop the same connection signing up many addresses. We don't store your IP address itself.

We use your email to send a confirmation link, then to tell you when test invites open (Google Play testers are invited by the email of their Google account) and when the game launches, including your early-access gift. Game news is sent only if you ticked that box. You must be 16 or older to join. Every email has an unsubscribe link that removes you at once. The page uses Cloudflare Turnstileto check that you're a person and sets no tracking cookies.

Reward videos (ads)

The game never shows ads on its own. A video plays only when you tap a "watch" button to get a reward, such as a free heart, extra coins or a second chance. These videos come from Google AdMob, which collects your device's advertising ID, approximate location (from your IP address), device details and how you interact with the ad, to show the ad, measure it and prevent fraud. See how Google uses data from apps that use its services.

In the European Economic Area, the UK and Switzerland the game asks for your consent before personalised ads, and you can change your choice at any time in Settings → Ad privacy choices. You can also reset or delete your advertising ID in your phone's settings (Settings → Privacy → Ads). Ads are limited to content suitable for teens.

Why we use it

• To save your progress and restore it if you reinstall or move to a new phone (with a transfer code).
• To show your username in the game.
• To find and fix problems you report, and to make levels fairer using level play data.
• To keep the service safe, for example by limiting how often requests can be made.
• To email people on the early-access list about test invites and the launch (see above).

Usernames

Today your username is shown only to you. If we add features such as leaderboards, other players may see it, so please don't use your real name or personal details as your username. We may change or remove usernames that are offensive.

Who processes it

• Cloudflare hosts the game's server, the early-access page and the database, and runs the Turnstile check on that page.
• Resend sends the early-access emails.
• Google AdMob provides the reward videos (see above).
• Firebase Cloud Messaging (Google) delivers notifications.
• Google Play distributes the game. If you sign in to Google Play Games, achievements are handled by Google under the Google Privacy Policy.

How long we keep it

• Your account, username and save: until you delete your account. We keep your last 10 saves so we can restore one if something goes wrong.
• Level play data and problem reports: up to 24 months, then they are deleted.
• Accounts that have not been used for 24 months may be deleted.
• Early-access list: unconfirmed sign-ups are deleted after 7 days; the scrambled IP after 30 days; your email 30 days after you unsubscribe. Otherwise we keep it until you unsubscribe or ask us to delete it.

Deleting your data

In the game, open Settings → Delete my account. This deletes your account, username, saves, level play data and transfer codes from our server straight away. If you no longer have the game, use the account deletion page and we will delete your data within 30 days. To leave the early-access list, use the unsubscribe link in any of our emails, or email us to have your address deleted.

Children

Shapes Saga is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has used the game, contact us and we will delete the account.

Security

Data travels encrypted (HTTPS). Access to the database is limited to our team, behind a login.

Changes

If this policy changes, we will update this page and the date above. For significant changes we will also tell you in the game.

Contact

Questions or requests: [email protected].