Privacy Policy – MalborMerge
Last Updated: July 19, 2026
Introduction
This Privacy Policy describes how MalborMerge ("we," "our," or "the game") handles information when you play our game. MalborMerge is developed and published by Averion Interactive. Your account also works on our companion website, AverionHub (averioninteractive.com), where you can view your profile, achievements, and game history.
Information We Collect
MalborMerge offers an optional account system. If you choose to create an account, we collect and store the following information on our servers:
Username: The display name you choose when registering
Email Address: Used to create and log in to your account, and to send a one-time verification code when you register
Password: Stored securely (hashed) — we never store your plain-text password
Game Save Data: If you are logged in, your game progress is periodically synced to our servers to enable cloud saves and cross-device continuity
Leaderboard Scores: If you are logged in, your username and score may be submitted to our monthly leaderboards and shown publicly to other players
Account creation is entirely optional. You can play MalborMerge without registering or logging in. If you do not create an account, we do not collect any personal information from you, and your scores are never submitted to any leaderboard.
MalborMerge also uses the Yodo1 Mobile Ads SDK (Yodo1 MAS) to display banner and rewarded video advertisements. Yodo1 MAS is a mediation platform that may serve ads through Google AdMob, AppLovin, and other third-party ad networks (which can include Unity Ads, Meta Audience Network, IronSource, Tapjoy, Mintegral, Yandex, and Chartboost). See the Advertising section below for details.
Local Data Storage
MalborMerge stores the following data locally on your device:
Game Progress: Gold, crafted items, quest history, and kingdom progress
Board State: Items and generators on your game board
Discovered Items: Your Collection Codex records
Upgrade History: Generator upgrades and purchase records
Kingdom Buildings: Building levels and milestone records
Quest Timers: Active quest countdown data
Auth Token: If you are logged in, a session token is stored locally in user://auth.json to keep you signed in between sessions
Cloud Saves (Optional — Logged-In Users Only)
If you are logged in, your game save data is automatically synced to our servers (averioninteractive.com) approximately every 60 seconds. This enables you to resume your progress on any device. The save data includes your game progress, board state, inventory, quest history, and other gameplay data listed above.
As part of this sync, your account may also receive gold or diamonds credited to it from purchases made in the AverionHub web shop (averioninteractive.com). Payment processing for web shop purchases is handled by AverionHub and is covered under its own terms — MalborMerge only receives the resulting in-game currency grant.
Cloud saves are only active when you are logged in. Guest players' save data remains entirely on-device and is never transmitted to our servers. You can log out at any time to stop cloud sync, and delete your account to permanently remove all cloud save data from our servers.
Leaderboards
If you are logged in, MalborMerge lets you submit your scores to monthly, category-based leaderboards. Your username and score are visible to other players on these leaderboards, along with your rank. Leaderboard participation requires an account; guest players are never shown on or submitted to leaderboards.
Unified Account (Game + Website)
Your MalborMerge account is shared with AverionHub (averioninteractive.com). This means:
An account created in the game can be used to log in on the website, and vice versa
Your profile, achievements, and games played are visible on the AverionHub website
Other users can view your public profile (username, achievements, and games played)
User Accounts (Optional)
If you choose to create an account:
Your username, email address, and game save data are transmitted to and stored on our servers over an encrypted HTTPS connection
We send a one-time verification code to your email address to confirm it during registration
Your password is never stored in plain text — it is hashed before storage
Your public profile (username, games played, achievements) is visible to other AverionHub users
We do not sell your data to any third parties
You can delete your account at any time from within the app (Account → Delete Account), which permanently removes your username, email, and all cloud save data from our servers
You can log out at any time, which stops cloud sync and removes your local auth token
In-App Purchases
MalborMerge offers optional in-app purchases of virtual currency (Diamonds) through Google Play's billing system. All payment processing — including your payment method, card details, and billing address — is handled directly by Google Play. MalborMerge never receives or stores this information.
When you complete a purchase, Google Play Billing provides us with the product purchased and a purchase confirmation token, which we use only to credit the corresponding amount of Diamonds to your game. We do not receive your name, payment method, or any other billing details.
Purchase history is retained by Google Play under its own privacy policy. For billing issues, refunds, or disputed charges, please contact Google Play support directly — MalborMerge cannot process refunds itself.
In-app purchases are entirely optional and are not required to play or progress through the game.
Advertising
MalborMerge displays banner and rewarded video advertisements through the Yodo1 Mobile Ads SDK (Yodo1 MAS), a mediation service that connects our game to multiple third-party ad networks, which may include Google AdMob, AppLovin, Unity Ads, Meta Audience Network, IronSource, Tapjoy, Mintegral, Yandex, and Chartboost. The specific networks active at any time depend on our Yodo1 mediation configuration and may change without requiring an app update.
When an ad is loaded or shown, Yodo1 and its mediated ad networks may collect:
Advertising ID (GAID)
Device information (model, OS version, screen size)
IP address (approximate location)
Ad impression and interaction events
Network connection type
This data is collected and processed by Yodo1 and its mediated ad networks under their own privacy policies. We do not receive or store any of this data ourselves.
Yodo1 MAS includes Google's User Messaging Platform (UMP) to support GDPR consent management, and supports CCPA opt-out preferences for U.S. users.
You can opt out of personalized advertising via: Settings → Google → Ads → Delete advertising ID (Android 12+).
Third-Party Services
Yodo1 Mobile Ads SDK (Advertising) See the Advertising section above. Yodo1's privacy practices are governed by its own privacy policy.
Google Play Billing (In-App Purchases) — Processes optional purchases of in-game currency. Google Play handles all payment information; we never receive or store payment details. Subject to Google Play's Privacy Policy.
Discord (External Link) MalborMerge contains a button that opens our Discord community server. No data is transmitted by MalborMerge when you tap this button. Subject to Discord's Privacy Policy (https://discord.com/privacy).
Permissions
INTERNET: Required for Yodo1 ad serving, the optional account system, and cloud save sync
ACCESS_NETWORK_STATE: Required for Yodo1 to check connectivity before loading ads, and before making account/cloud-save requests
com.google.android.gms.permission.AD_ID: Required to use the advertising identifier for ad serving and measurement
We do not request access to your camera, microphone, contacts, location, or storage.
com.android.vending.BILLING: Required to process in-app purchases through Google Play's billing system
Children's Privacy
MalborMerge is suitable for general audiences. We do not knowingly collect personal information from children under 13. The optional account system requires an email address — if you believe your child has created an account, contact us at the email below to have it removed.
Data Retention and Deletion
Account & cloud save data: Stored as long as your account exists. Permanently deleted immediately when you delete your account from within the app.
Local data: Deleted when you uninstall the game.
Advertising data: Managed via https://myaccount.google.com/data-and-privacy and the respective privacy policies of Yodo1's mediated ad networks.
Your Rights (GDPR)
If you are in the EEA:
Right of access: Contact us for a copy of your personal data
Right to erasure: Delete your account directly in the app at any time
Right to rectification: Contact us to correct account information
Opt out of personalized ads: Via your device's advertising settings, or the in-app consent prompt (UMP)
California Privacy Rights (CCPA)
We do not sell personal information. Account data (username, email, save data, leaderboard scores) is used solely for app functionality. Advertising data is governed by Yodo1's and its ad networks' privacy practices.
Data Security
All communication with our servers uses HTTPS encryption. Passwords are hashed and never stored or transmitted in plain text.
Changes to This Policy
We may update this policy from time to time. Changes will be posted with a new "Last Updated" date. Continued use after changes constitutes acceptance.
Contact Us
Email: Nayeemdewan007@gmail.com
Developer: Averion Interactive
Discord: https://discord.gg/EWRfXG3Bnn
Compliance
This policy is designed to comply with Google Play Developer Program Policies, Google AdMob Publisher Policies, GDPR, COPPA, CCPA, and applicable privacy laws.