1. Introduction
Atoll is an Android chain-merge puzzle game set in a tropical lagoon published by an independent developer (hereafter "we" or "the publisher"). This privacy policy describes what data is collected, how it is used, and what rights you have over it.
Contact: mfodevhub@gmail.com
2. Data stored locally on your device
Atoll saves your progress on your device. This data is not sent to our servers (the optional online backup through Google Play Games is described in section 7). It includes:
- Your game in progress, your best scores, your pearl balance, your boosters and your unlocked islands and pebble styles
- Your settings (sound, vibration, reminder, usage statistics and crash reports) and the state of the welcome tutorial
- Your daily challenge results, your streak and the daily rewards already claimed
- Counters needed for optional ads (for example the number of ads watched)
- Whether you own the one-time “Atoll Plus” purchase (last known value, re-checked with Google Play)
The reset option in Settings permanently deletes your progress on the device. Uninstalling the app deletes all of this data.
3. Advertising (Google AdMob)
Atoll shows ads served by Google AdMob: optional rewarded ads (for example a free booster, a second life with the Buoy, a doubled chest or a retry of the daily challenge), which you must explicitly accept to watch, and an occasional interstitial ad between games. Atoll Plus removes the interstitial ads; rewarded ads stay optional and keep their usual limits.
To serve and measure these ads, Google's Mobile Ads SDK may process an advertising identifier and technical data about your device (device model, OS version, coarse location derived from IP, ad interaction data). On first launch, a consent form (Google's User Messaging Platform, "UMP") is shown where applicable under GDPR (European Economic Area, United Kingdom), letting you choose whether to allow personalized advertising; you can change this choice at any time in Settings. See Google's Privacy Policy for details.
4. Purchases (Google Play Billing)
Atoll offers “Atoll Plus” (optional one-time purchase: no interstitial ads, a second free Buoy per game and an exclusive pebble style), as well as optional one-time donations and a monthly supporter subscription, which unlock nothing in the game. They are processed entirely by Google Play Billing. Atoll never sees or stores your payment details (card number, billing address, etc.): these are handled directly by Google Play under its own privacy notice. The app only receives confirmation of whether a purchase is active. It keeps on your device the last known status and re-checks it with Google Play when it starts online. This status is tied to your Google account and is not part of your game save or of the online backup.
The “Support me” screen also contains links that open in your browser or in Google Play (rating the app, Buy Me a Coffee). Those services have their own privacy policies; Atoll sends them no data.
5. Crash reports and usage statistics (Firebase)
To find and fix bugs, Atoll uses Firebase Crashlytics, a service of Google. If the app crashes, a technical report is sent to Google/Firebase. It contains the technical details of the error (stack trace, app state at the time of the crash), your device model, Android version and app version, and a randomly generated Firebase installation identifier that is not linked to your identity. These reports contain no game data and no information that directly identifies you. Nothing is sent in debug builds.
Purpose: correcting bugs and improving stability. Legal basis: our legitimate interest in maintaining a reliable app. Processor: Google / Firebase, under its privacy and security information. Retention: 90 days on Firebase's side. Opt-out: collection is enabled by default and can be turned off at any time in Settings.
Usage statistics (Firebase Analytics). To understand how the game is used and improve it, Atoll also uses Firebase Analytics. It records only categories and ranges, never exact amounts or personal content: game starts (new, resumed or daily challenge), score, biggest pebble and number of moves at the end of a game (in ranges), treasures reached, islands unlocked, boosters used, daily challenge outcome, steps of the welcome tutorial, and ads watched or ad limits reached. These events are tied to a pseudonymous Firebase installation identifier, not to your identity. The advertising purposes of Analytics (ad storage, ad user data, ad personalization) are always disabled.
Consent and opt-out: in the European Economic Area, the United Kingdom and Switzerland, collection only starts if you give your consent in the consent form (UMP, section 3); elsewhere it is enabled by default. In all cases you can turn it off at any time in Settings and change your consent choice in the privacy options. Purpose: improving the game. Processor: Google / Firebase. Retention follows Firebase's settings; you may ask us to delete the data tied to your installation (section 12).
6. Feedback
The feedback button in Settings lets you send us a message. Sending is entirely voluntary and only happens when you press "Send". The message goes to a single Supabase project shared by the publisher's apps (table feedbacks), together with: the text you typed, the app name (Atoll) and version, and your Android version, device model and language. No other information is attached. Please do not put personal information in your message. We use these messages only to improve the app; they are kept only as long as needed for that purpose, and you can ask us to delete yours at any time (see section 12).
7. Google Play Games Services (achievements, leaderboards and online backup)
Atoll uses Google Play Games Services for achievements and leaderboards. Signing in is optional and the game works fully without it. If you are signed in, Google's SDK lets the game recognise your Play Games profile (nickname and avatar), records the achievements you unlock and publishes your best score and biggest pebble on the leaderboards. This data is processed by Google under its Privacy Policy and is not sent to our servers. Your Play Games nickname and avatar may be visible to other players on the leaderboards, according to your Play Games settings. The SDK may also send technical and diagnostic data to Google. You can manage or delete your Play Games data from your Play Games profile or your Google Account.
Online backup (Saved Games). When you are signed in to Play Games, Atoll also stores a copy of your save (scores, pearls, boosters, islands, pebble styles, challenge streak) in your Google account through Google's “Saved Games” feature, so you can resume on another device. The game in progress stays on the device where you play. The copy is kept by Google, not on our servers, and we have no access to it. Without sign-in, the save stays local. You can delete it from your Play Games profile or your Google Account.
8. Audience (18 and over)
Atoll is intended for an audience aged 18 and over. It is not directed at children and we do not knowingly collect personal data concerning minors. The advertising SDK is configured accordingly (no treatment as a child-directed or under-age-of-consent audience).
9. Data we do not collect
Atoll does not collect your name, email address or any directly identifying information, your GPS location, your photos, contacts or media files, or your payment details (handled entirely by Google Play, see section 4). The app has no user account of its own and requires no sign-up. The only data that can leave your device is described in sections 3, 4, 5, 6 and 7.
10. Android permissions used
- INTERNET: needed to serve ads, process the purchase, send crash reports and usage statistics, synchronise Play Games and send the feedback you choose to submit. The game itself works offline.
- ACCESS_NETWORK_STATE (added by the Google and Firebase libraries): used to check network availability.
- VIBRATE: short vibrations during play, which you can turn off at any time.
- POST_NOTIFICATIONS and RECEIVE_BOOT_COMPLETED: for the optional daily reminder, requested only if you enable it in Settings. The notification is scheduled locally on your device (and re-scheduled after a restart); no data is sent.
No other system permission is requested.
11. Communication security and sharing with third parties
All of the app's network communication is carried out exclusively over HTTPS. We do not sell, rent, or share your data with any third party ourselves. The following services process data on our behalf or on their own account, each under its own privacy policy: Google AdMob (ads, section 3), Google Play Billing (purchase, section 4), Google / Firebase (Crashlytics and Analytics, section 5), Supabase (feedback messages, section 6, privacy policy) and Google Play Games Services (section 7). See Google's Privacy Policy.
12. Your rights (GDPR)
We hold no data that directly identifies you. Your game progress stays on your device and you can delete it at any time (section 2). You can stop crash reports and usage statistics at any time in Settings (section 5). You may ask us for access to, or deletion of, the feedback you sent (section 6) or of crash and statistics data tied to your installation, by writing to mfodevhub@gmail.com; since this data is not linked to your identity, we may ask you for details such as the date of sending or your app version to find it. For advertising consent (section 3), purchases (section 4) and your Play Games profile, achievements, leaderboards and online backup (section 7), please use Google's own privacy controls, since we do not control that data ourselves.
13. Data retention
Local data is kept on your device until you reset the game or uninstall the app. Crash reports are kept for 90 days on Firebase's side; usage statistics follow Firebase's retention settings; the online backup is kept by Google until you delete it. Feedback messages are kept only as long as needed to process them and improve the app, unless you ask for earlier deletion.
14. Changes to this policy
We may update this privacy policy. In case of a substantial change, the "last updated" date at the top of this page will be updated. We encourage you to check this page periodically.
15. Contact
For any question about this privacy policy, contact us at mfodevhub@gmail.com