legal/privacy.md

Privacy Policy

Last updated: 30 July 2026 · Foxy: The Balance of Radiance

1. Scope and contact

Foxy: The Balance of Radiance (“Foxy”) is developed by Flutech — Orkun Dayı. Data controller and privacy contact: orkundayi@flutech.org.

  • Foxy can be played as a guest without creating an account.
  • We do not sell your personal data. We do not use account or gameplay data for advertising, marketing, or user tracking.
  • In guest mode, no account data or gameplay progress is uploaded to the cloud. Advertising, app-security, and crash-diagnostics services may still process the limited technical data described below.
  • The game contains family-safe, non-personalized ads. There are no in-app payments.

2. Technical data that may be processed for all users

The following services may operate even if you do not create an account:

  • Advertising and usage data: Google AdMob may process an IP address (to estimate a general country or region), app/device identifiers, ads viewed, advertising and product interactions, performance data, crash data, and other diagnostics. These are used for ad delivery, frequency capping, fraud prevention, security, and service performance.
  • Crash diagnostics: In release builds, Firebase Crashlytics may process installation identifiers, app version, device model, operating system, crash time, app state, stack traces, and developer-recorded technical error messages. Foxy does not attach your email address, display name, or Firebase account ID to these reports.
  • App integrity and server security: Firebase App Check, Apple App Attest/DeviceCheck, and Cloud Functions may process attestation objects or tokens, IP address, app version, and request metadata to prevent fake clients, abuse, and cheating.
  • Privacy choices: Google User Messaging Platform (UMP) may request and apply privacy choices required in your region.

Foxy does not request precise GPS location and does not access your contacts, camera, microphone, photo/video library, or health data.

3. Data processed if you create an optional account

An account is required only for additional features such as cloud backup and the online leaderboard. If you create one:

  • Email and password: Processed by Firebase Authentication for account creation, sign-in, verification, and password reset. Firebase protects your password; Flutech cannot view it in plain text.
  • Account information: A Firebase user ID, email-verification status, and your chosen display name are stored to manage your account and records.
  • Gameplay progress: Level progress, in-game currency, store/costume selections, records, and related save-version information are backed up in Firebase so you can continue on another device.
  • Leaderboard: If your Endless Mode best score reaches the top 20, your display name and score are visible to other players. The leaderboard record also contains your pseudonymous Firebase user ID and score time for consistent ranking and deletion; your email address and private cloud save are not made public.

Foxy has no friends, messaging, or duel feature and collects no data for those purposes.

4. Why we process data

Data is processed only to:

  • create, authenticate, verify, and recover accounts;
  • provide cloud backup, costume preferences, and continuity across devices;
  • operate the top-20 leaderboard and prevent cheating or abuse;
  • check supported app versions and secure server access;
  • find and fix crashes and technical problems;
  • serve and measure family-safe, non-personalized advertising.

We do not use account or gameplay data for third-party ad targeting, data brokering, or marketing profiles.

5. Advertising and your choices

Ads are served by Google AdMob. Every ad request is configured for child-directed treatment and a maximum G content rating; interest-based ads and remarketing are disabled. Foxy does not send gameplay or account data to AdMob for ad targeting.

UMP may show a privacy form where required by law. Ads are loaded only when the Google SDK says requests are permitted. Where required in your region, you can reopen your choice under Settings → Privacy → Advertising Preferences.

Google privacy practices: policies.google.com/privacy

6. Service providers and processing locations

We use data only with service providers required to operate the app:

  • Google Firebase: Authentication, Firestore, Cloud Functions, App Check, and Crashlytics;
  • Google AdMob and UMP: ad delivery and regional privacy choices;
  • Apple App Attest/DeviceCheck: iOS app-integrity verification.

Foxy's primary gameplay database and Cloud Functions resources are configured in Europe (europe-west1, Belgium). Firebase Authentication operates in the United States; other Google services such as Crashlytics, App Check, and AdMob may process data on global infrastructure. Your data may therefore be processed outside your country. Each provider's privacy and data-protection terms apply.

Firebase privacy information: firebase.google.com/support/privacy

7. Retention and deletion

  • Your account, profile, private cloud backup, costume preference, and leaderboard record are kept while your account remains open or until you delete it.
  • Delete Account in the app deletes your Firebase Authentication account, profile, cloud records, and leaderboard records from the server.
  • Firebase may take up to 180 days to complete removal of deleted Authentication data from backup systems.
  • Crashlytics reports and related installation identifiers, which are not linked to your account by Foxy, are retained for 90 days under Google's policy before deletion begins. They cannot be matched to an account-deletion request.
  • AdMob data and other necessary technical logs follow Google's retention rules.
  • Records may be retained where necessary for legal obligations, security, or dispute resolution.

8. Delete your account and data

Open the game → tap the account icon in the top-right of the main menu → sign in → tap Delete Account and confirm with your password.

Your server account and account-linked data are deleted. Your local game save remains on the device, so you may continue as a guest.

If you cannot access the app, follow the steps on the account deletion page. You may use the same address for access, correction, deletion, or objection requests under applicable privacy law.

9. Support and external links

If you email us, your address and message are processed to answer your request and keep records where necessary.

The Support button opens Buy Me a Coffee in your browser. Foxy does not receive payment information, and a payment grants no in-game content, feature, currency, costume, or leaderboard advantage. Once the site opens, Buy Me a Coffee's own privacy policy applies.

10. Children

Foxy is not listed in Apple's Kids Category and does not request age or official identity data. Nevertheless, every ad request is conservatively configured for child-directed treatment. If you believe a child's account was created without appropriate permission, contact orkundayi@flutech.org to request deletion.

11. Changes

If this policy changes, the date and text on this page will be updated. Material changes may also be announced in the app where appropriate.