**Last updated:** November 3, 2026
**Developer:** Selçuk Korkusuz
**App:** Mystellan (iOS)
**Contact:** mazellangames@gmail.com
---
## Summary
Mystellan is a mystery-box collection app. We collect only what is needed to run the app: account info, gameplay data, and optional photos you upload for custom boxes. We do not sell your personal data.
---
## 1. Who we are
This app is published by **Mazellan** (“we”, “us”). Mystellan is the user-facing product name. The app may appear under bundle ID `com.mazellan.unboxly` on device stores.
---
## 2. Information we collect
### Account & identity
- **Anonymous guest accounts** — Firebase Authentication may assign a random user ID without email or name.
- **Apple Sign-In** — If you choose Apple, we receive an Apple user identifier and, if you allow it, your name and email from Apple.
- **Google Sign-In** — If you choose Google, we receive your Google account identifier, display name, and email.
### Profile & gameplay
- Display name you set in the app
- Boxes you create (title, description, items, probabilities, optional images)
- Inventory of items you “won” from opening boxes
- Open history, streak counters, pity counters
- App preferences (language, sound, haptics, daily reminder) stored on your device
### Content you upload
- Cover and item images you pick from your photo library or camera are uploaded to **Firebase Storage** under your user account.
### Technical & usage
- Aggregated daily usage counters (e.g. sessions, boxes created) stored in Firestore for product improvement
- Error logs may be written to Firestore when something fails in the app
- **Google Analytics for Firebase**: app usage events (e.g. screens viewed, boxes opened, shares, purchases completed) linked to a random app-instance ID. We do **not** collect the advertising identifier (IDFA), do not request location access, and do not track you across other companies' apps or websites.
### Purchases
- **Mystellan Plus** is an optional one-time in-app purchase processed entirely by **Apple** (App Store). We never receive your payment card or billing details.
- The app checks on your device, through Apple's StoreKit, whether your Apple ID owns Plus. We record an analytics event when a purchase is completed (product and the screen it was bought from), without payment details.
### Pull Replay videos
- Replay videos are recorded and stored only on your device. They are uploaded nowhere unless you choose to share them through the iOS share sheet.
### Notifications
- If you allow notifications, the app occasionally schedules a local reminder on your device (e.g. to save a long streak), never more than one every few days. You can turn it off in Settings or in iOS Settings at any time.
We do **not** intentionally collect precise location, contacts, or health data.
---
## 3. How we use information
We use your data to:
- Provide core features (open boxes, inventory, create/share boxes)
- Authenticate you and sync progress across devices when you sign in
- Unlock Mystellan Plus features you purchased
- Prevent abuse
- Improve stability and understand aggregate usage
- Respond to support requests
We do **not** use your data for third-party advertising profiles.
---
## 4. Legal bases (EEA / UK users)
Where applicable, we rely on:
- **Contract** — to deliver the app you requested
- **Legitimate interests** — security, analytics, and product improvement
- **Consent** — optional sign-in providers and photo access (you can deny photo permission and still use catalog boxes)
---
## 5. Third-party services
We use **Google Firebase** (Authentication, Cloud Firestore, Cloud Storage, Google Analytics for Firebase), operated by Google LLC. In-app purchases are handled by **Apple** under [Apple's Privacy Policy](https://www.apple.com/legal/privacy/). Data is processed according to [Google’s Privacy Policy](https://policies.google.com/privacy) and Firebase terms.
Sign-in providers (Apple, Google) process data under their own policies when you use those buttons.
---
## 6. Data retention
- Account and gameplay data remain until you **delete your account** in Settings or ask us to delete it.
- Anonymous guest data may be orphaned if you never sign in; we may purge inactive guest accounts periodically.
- Aggregated metrics may be kept in anonymized form.
---
## 7. Your rights & choices
You can:
- Edit your display name in the app
- Sign out and continue as a new guest
- **Delete your account** in Settings — this removes your profile, inventory, opens, and boxes you created (subject to technical retention backups for a limited time). If you signed in with Apple, we also revoke the app's Sign in with Apple authorization.
- Deny camera/photo permissions (custom box images will not work)
- Contact us at **mazellangames@gmail.com** for access, correction, or deletion requests
---
## 8. Children
Mystellan is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. Contact us if you believe a child provided personal data.
---
## 9. Security
We use industry-standard practices via Firebase (encrypted transport, access rules). No method is 100% secure; please use a strong Apple/Google account and keep your device updated.
---
## 10. International transfers
Firebase may process data in the United States and other countries where Google operates. Appropriate safeguards apply under Google’s data processing terms.
---
## 11. Changes
We may update this policy. The “Last updated” date will change. Continued use after updates means you accept the revised policy.
---
## 12. Contact
**Email:** mazellangames@gmail.com
**App:** Mystellan by Mazellan
---