Nonogram Pulse Privacy Policy

1. Information we collect and why

• Google or Apple sign-in email and provider identifier: sign-in, account identification, and masked email display
• Country code selected by the user: display of the ranking flag
• Difficulty, completion time, mistakes, correct entries, ranked attempts, and results: statistics, rankings, and abuse prevention
• Product ID, transaction ID, and purchase verification status: ticket grants, ad removal, and purchase restoration. The app stores process payment credentials; we do not store them
• FCM token, platform, language, and notification settings: ticket-full and rank-drop notifications
• Google Mobile Ads and consent SDKs may process device identifiers, IP address, diagnostics, and usage information for advertising, frequency management, fraud prevention, and legal consent

2. Service providers and international processing

We use Supabase for authentication and databases, Google Firebase for push notifications, Google AdMob for advertising and consent, and Apple and Google for sign-in and payments. Data may be processed in countries where these providers operate, under their policies and applicable safeguards.

3. Retention

Account and gameplay data is retained until the account is deleted. Transaction and dispute records may be retained as required by law. Push tokens are removed or invalidated on logout, refresh, or account deletion. De-identified statistics may be retained.

4. Your rights

You may request access, correction, deletion, restriction, or withdrawal of consent by email. Advertising choices may also be changed in the app or device settings.

5. Children, security, and changes

The service is not directed to children, and we do not knowingly collect children's information without required parental consent. We use reasonable safeguards, including access controls and encrypted communications. We update the effective date and provide appropriate notice of material changes.