Chroma Bankshot is developed by Stanislav Moseyko (“we”, “us”).
This Privacy Policy explains what data is processed when you use the Game on Android devices.
Last updated: 2025-12-25
Published URL: https://sites.google.com/view/chromabankshot/privacy-policy
The Game can be played offline, but some features require network access, such as online leaderboards, advertising, in-app purchases, and optional account synchronization.
We do not ask you to create a separate account or provide payment details directly to us.
Some data is processed by third-party services such as Google Firebase, Google AdMob, Google Play Billing, and Cloudflare.
We do not use analytics or tracking SDKs for user behavior analysis. Firebase Analytics is disabled.
The Game stores certain data locally on your device using local storage and WebView APIs, including:
Game progress and completed levels
Energy state and last update timestamps
Audio settings (music and sound effects preferences)
A randomly generated device identifier used to associate online features with the same device
Player nickname (if set)
Local high scores per level
Debug or developer flags
Developer/editor-only data (not used in production gameplay):
Custom levels imported into the level editor
Editor session state
Advertising consent:
Google UMP SDK may store consent state locally to determine whether personalized or non-personalized ads can be requested
The Game does not store a separate copy of UMP consent decisions
The Game may offer optional sign-in with a Google Account via Firebase Authentication to enable cross-device synchronization.
If you choose to sign in:
Data processed:
Firebase user identifier (UID)
Email address (only if provided by Google)
Purpose:
Securely associate game progress, scores, and purchases with your account
Restore progress and entitlements on other devices
Important notes:
Authentication is handled by Google Firebase; we do not receive or store your Google password
Firebase Analytics is disabled and not used
Signing in is optional; the Game can be played without an account
When using online leaderboards, the Game may send the following data to our backend hosted on Cloudflare:
Player nickname
Level number and score
Device identifier or Firebase UID (if signed in)
Optional Play Integrity attestation tokens
Purpose:
Provide leaderboard functionality, prevent abuse, and maintain fair rankings.
Storage:
Player and score data is stored in a Cloudflare D1 database
Rate-limiting and abuse-prevention metadata may be stored in Cloudflare KV
Retention:
Leaderboard data is stored until deletion is requested by the user. Automatic expiration is not currently implemented.
Purchases are processed by Google Play Billing. We do not collect or store your payment card details.
For purchase verification, the Game may send to our backend:
Product ID
Google Play purchase token
Optional device identifier or Firebase UID
Optional Play Integrity attestation tokens
Purpose:
Verify purchase ownership and unlock content (such as seasons, Remove Ads, or Pro features).
Storage:
Purchase tokens are verified with Google Play and are not stored long-term, except as required to restore entitlements. Server logs may temporarily contain request metadata for security and troubleshooting.
The Game may display banner, interstitial, and rewarded ads via Google AdMob.
AdMob may process data such as:
Advertising ID
Approximate location derived from IP address
Ad interaction events
Diagnostic and fraud-prevention data
Consent:
Ad personalization and consent are handled via the Google UMP SDK.
You can review or change your ad-related choices using the privacy options entry point provided in the app.
Ad removal:
“Remove Ads” disables banner and interstitial ads
“Pro” disables all ads and removes the energy system
Rewarded ads are optional and shown only by user choice
The Game may request a Play Integrity token from Google Play Services.
Purpose:
Verify that the app is Play-recognized
Detect tampering, emulators, or abuse
Protect leaderboards and purchase validation
The token is decoded and validated on our backend. It is not used for advertising or tracking.
Depending on enabled features, the Game may use the following third-party services:
Google Firebase (Authentication only; Analytics disabled)
Google AdMob (advertising)
Google Play Billing (in-app purchases)
Google Play Integrity API (security attestation)
Cloudflare (backend hosting and APIs)
These services process data according to their own privacy policies.
The Game is not intended for children under the age required by local laws to consent to personal data processing.
We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time.
The “Last updated” date will reflect the most recent changes.
You have the right to request deletion of your personal data stored on our servers, including:
Player nickname
Device identifier or Firebase UID
Associated leaderboard scores
How to request deletion:
Send an email to chromabankshot@gmail.com
Include your player nickname and device identifier or Firebase UID (if known)
Clearly state that you request deletion of your personal data
We will process deletion requests within 30 days.
Data not controlled by us:
Data processed by Google AdMob or Google Play is handled according to Google’s own policies
Aggregated, non-identifiable statistics may remain
If you have questions about this Privacy Policy, contact:
Email: chromabankshot@gmail.com
Personal info: player nickname, Firebase UID (optional)
App activity: game progress, scores, leaderboard submissions
Device or other IDs: device identifier, Advertising ID, Play Integrity token
Financial info: handled by Google Play; purchase tokens processed for verification
Diagnostics: AdMob/UMP and Cloudflare request metadata