# Mystellan Privacy Policy
**Last updated:** May 27, 2026
**Developer:** Selçuk Korkusuz
**App:** Mystellan (iOS / Android)
**Contact:** mazellangames@gmail.com
---
## Summary
Mystellan is a mystery-box collection app. We collect only what is needed to run the app: account info, gameplay data, and optional photos you upload for custom boxes. We do not sell your personal data.
---
## 1. Who we are
This app is published by **Mazellan** (“we”, “us”). Mystellan is the user-facing product name. The app may appear under bundle ID `com.mazellan.unboxly` on device stores.
---
## 2. Information we collect
### Account & identity
- **Anonymous guest accounts** — Firebase Authentication may assign a random user ID without email or name.
- **Apple Sign-In** — If you choose Apple, we receive an Apple user identifier and, if you allow it, your name and email from Apple.
- **Google Sign-In** — If you choose Google, we receive your Google account identifier, display name, and email.
### Profile & gameplay
- Display name you set in the app
- Boxes you create (title, description, items, probabilities, optional images)
- Inventory of items you “won” from opening boxes
- Open history, daily open limits, streak counters, pity counters
- App preferences (language, sound, haptics) stored on your device
### Content you upload
- Cover and item images you pick from your photo library or camera are uploaded to **Firebase Storage** under your user account.
### Technical & usage
- Aggregated daily usage metrics (e.g. open counts) stored in Firestore for product improvement
- Error logs may be written to Firestore when something fails in the app
We do **not** intentionally collect precise location, contacts, or health data.
---
## 3. How we use information
We use your data to:
- Provide core features (open boxes, inventory, create/share boxes)
- Authenticate you and sync progress across devices when you sign in
- Enforce daily limits and prevent abuse
- Improve stability and understand aggregate usage
- Respond to support requests
We do **not** use your data for third-party advertising profiles.
---
## 4. Legal bases (EEA / UK users)
Where applicable, we rely on:
- **Contract** — to deliver the app you requested
- **Legitimate interests** — security, analytics, and product improvement
- **Consent** — optional sign-in providers and photo access (you can deny photo permission and still use catalog boxes)
---
## 5. Third-party services
We use **Google Firebase** (Authentication, Cloud Firestore, Cloud Storage), operated by Google LLC. Data is processed according to [Google’s Privacy Policy](https://policies.google.com/privacy) and Firebase terms.
Sign-in providers (Apple, Google) process data under their own policies when you use those buttons.
---
## 6. Data retention
- Account and gameplay data remain until you **delete your account** in Settings or ask us to delete it.
- Anonymous guest data may be orphaned if you never sign in; we may purge inactive guest accounts periodically.
- Aggregated metrics may be kept in anonymized form.
---
## 7. Your rights & choices
You can:
- Edit your display name in the app
- Sign out and continue as a new guest
- **Delete your account** in Settings — this removes your profile, inventory, opens, and boxes you created (subject to technical retention backups for a limited time)
- Deny camera/photo permissions (custom box images will not work)
- Contact us at **mazellangames@gmail.com** for access, correction, or deletion requests
---
## 8. Children
Mystellan is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. Contact us if you believe a child provided personal data.
---
## 9. Security
We use industry-standard practices via Firebase (encrypted transport, access rules). No method is 100% secure; please use a strong Apple/Google account and keep your device updated.
---
## 10. International transfers
Firebase may process data in the United States and other countries where Google operates. Appropriate safeguards apply under Google’s data processing terms.
---
## 11. Changes
We may update this policy. The “Last updated” date will change. Continued use after updates means you accept the revised policy.
---
## 12. Contact
**Email:** mazellangames@gmail.com
**App:** Mystellan by Mazellan
---