Privacy Policy

This Privacy Policy describes how your information is collected, used, and protected when you download, install, and play BFDI Merge (the "App" or "Game"), developed and published by Appylux ("we", "us", or "our"). By installing, accessing, or playing the Game, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect 1.1 Optional Google Account Information (Player Profile & Leaderboard) You can play the core puzzle game entirely offline without creating an account or signing in. However, if you choose to participate in the online daily global rankings and synchronize your high scores, you may sign in using Google Sign-In (powered by Google Firebase Authentication): • Profile Data Collected Upon Sign-In: When you sign in with your Google account, we collect and store: - Display Name: Your public Google account name (used to identify you on the daily leaderboard). - Profile Picture URL: Your Google account avatar (displayed next to your ranking on the leaderboard). - Email Address: Associated with your Google account (used solely for account identification and authentication). - User Identifier (UID): A unique identifier generated by Google to link your scores securely to your account. - Game Scores: Your daily high score and all-time highest score achieved in the Game. • Storage Location: This profile and score data is securely transmitted over encrypted HTTPS connections to our cloud database. 1.2 Local Device Storage & Offline Data To ensure instant loading and smooth offline gameplay: • Local Scores & Game Settings: The Game stores your local high scores, sound effect settings, background music preferences, and booster inventory directly on your device using local storage (localStorage). • Offline Play: You do not need an active internet connection or account to play the Game. Local scores remain on your device even if you never connect to the internet. 1.3 Permissions We DO NOT Request We respect your privacy and adhere to the principle of data minimization: • We do not request or access your device location (GPS or network location). • We do not access, scan, or upload your private photos, media, contacts, documents, or personal storage files. • We do not request camera, microphone, or SMS permissions. 1.4 Automatically Collected Diagnostics & Technical Information When you play the Game, certain non-personally identifiable technical information is automatically collected through integrated Google services to ensure stability, prevent crashes, and improve gameplay performance: • Crash Reporting & Diagnostics (Google Firebase Crashlytics): If the Game encounters an error or crash, Firebase Crashlytics collects technical diagnostics, including device model, operating system version, memory state, and error stack traces. This data is used solely to identify and resolve bugs. • Usage Statistics (Google Firebase Analytics): We collect anonymous, aggregated usage statistics to understand player engagement (such as game sessions started, character merge milestones achieved, booster usage, and leaderboard views). • Google Advertising ID (AD_ID): In compliance with Google Play Developer Policies, the Game declares the Google Advertising ID permission (com.google.android.gms.permission.AD_ID). This identifier is used exclusively by integrated Google Firebase SDKs for aggregated analytics attribution, diagnostic metrics, and performance measurement.

2. How We Use Collected Information We use the collected information strictly for the following purposes: • To maintain, update, and display the official Daily Global Leaderboard (which resets every 24 hours at 00:00 UTC). • To synchronize and preserve your high scores across game sessions when signed in. • To detect, investigate, and fix technical bugs, glitches, and application crashes. • To analyze general gameplay metrics to balance puzzle mechanics and improve the user experience. We do not sell, rent, monetize, or trade any personal information, user profiles, or gameplay records to data brokers or advertising networks.

3. Public Display of Leaderboard Information If you choose to sign in with Google and achieve a qualifying score for the daily leaderboard: • Your Display Name, Profile Picture, and Score will be publicly visible to other players on the in-game Top 100 Daily Leaderboard. • The daily leaderboard resets automatically every day at 00:00 UTC. • If you do not wish for your profile or score to be publicly displayed, you can play the Game without signing in.

4. Third-Party Services The Game integrates third-party SDKs provided by Google that collect technical and diagnostic information governed by their respective privacy policies: • Google Play Services: https://policies.google.com/privacy • Google Firebase Authentication: https://firebase.google.com/support/privacy • Google Firebase Analytics: https://firebase.google.com/policies/analytics • Google Firebase Crashlytics: https://firebase.google.com/support/privacy

5. Intellectual Property & Attribution Notice • The Battle For Dream Island is owned by jacknjellify. • BFDI Merge is an independent, non-commercial fan-made tribute puzzle game created for the community. All characters, names, and original assets belong to their respective creators at jacknjellify.

6. Data Retention, Control, and Deletion Rights 6.1 On-Device Data You can delete all locally stored game scores, preferences, and cached assets at any time by clearing the App's data through your Android device settings: Settings > Apps > BFDI Merge > Storage > Clear Data / Clear Cache 6.2 Account & Server Data Deletion (Google Play Compliance) Under Google Play Developer Policies and global privacy regulations (GDPR / CCPA), you have the right to request the complete deletion of your account, profile data, and leaderboard records from our servers. To request deletion of your account and all associated leaderboard scores: 1. Send an email to support@appylux.org with the subject line: "Account Deletion Request - BFDI Merge". 2. Include the Google account email address or Display Name associated with your in-game profile. 3. Upon verification, all your profile records, high scores, and database entries will be permanently deleted from our servers within thirty (30) business days.

7. Children's Privacy (COPPA Compliance) BFDI Merge is designed as a family-friendly casual puzzle game suitable for general audiences of all ages. • The core game can be played fully offline without providing any personal information. • Online features (such as Google Sign-In and daily leaderboard ranking) require an eligible Google account, subject to Google's standard account age requirements (typically 13 years or older, depending on local jurisdiction). • We do not knowingly collect personally identifiable information from children under the age of 13. If we discover that a child under 13 has provided personal information without verified parental consent, we will take immediate steps to delete such data from our servers. Parents or guardians may contact us at support@appylux.org to review or request deletion of their child's data.

8. Data Security We implement industry-standard security measures to protect your information: • All network communications between the Game and our backend servers are encrypted using Transport Layer Security (TLS/HTTPS). • Our database is isolated on an internal network and is not directly exposed to the public internet. • While no method of digital transmission or electronic storage is 100% secure, we continuously maintain and monitor our systems to protect your data against unauthorized access, alteration, or destruction.

9. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect updates in game features, legal requirements, or Google Play developer policies. Any changes will be posted with an updated "Last Updated" date at the top of this document. We encourage you to review this page periodically.