Sudoku: GridRush is a mobile Sudoku game operated by Quadb Technologies ("we", "us", or "our"). This policy explains what information the app and its service providers process, why it is used, and the choices available to you.
Information We Process
Local gameplay data
The app stores puzzle progress, notes, times, mistakes, hints, streaks, XP, achievements, preferences, and similar gameplay information on your device. You can play the core game without creating an account.
Account and cloud-save data
If you choose cloud save, Firebase Authentication may provide your user ID, email address, display name, and sign-in provider. We store your gameplay state in Firebase Cloud Firestore so it can be restored across supported devices.
Daily Board and community-safety data
Signed-in players may join the Daily Board. We process the public player name, daily puzzle, completion time, mistakes, hints, XP result, ranking, and account identifier needed to maintain the board. Other signed-in players can see the public name and ranked result, but not the account email address.
Players can report an inappropriate public name or block another player. Reports include the reporter, reported account, displayed name, date, reason, and review status. Block lists are private to the player who created them.
Advertising data
When ads are enabled, Google AdMob and its advertising partners may process approximate location, device or advertising identifiers, app interactions, advertising data, consent choices, and diagnostic information to provide ads, measure performance, limit fraud, and comply with law. GridRush requests non-personalized ads by default and does not request Apple's App Tracking Transparency permission, but advertising SDK disclosures may still classify some device-identifier use as tracking.
Rewarded ads are shown only when you request a hint or mistake recovery. The app may also show a banner during gameplay and a limited fullscreen ad after a completed puzzle. The one-time Remove Ads purchase disables these placements.
Purchases
Apple or Google processes in-app purchases. We do not receive full payment-card details. Purchase receipts, product identifiers, transaction state, device information, and limited support or fraud-prevention data may be processed by the app stores and Iaptic to validate, restore, refund, or revoke the Remove Ads entitlement. Store receipts, not cloud-save data, are the authority for paid access.
Security, diagnostics, and service logs
Firebase App Check processes app-integrity tokens and related device signals to distinguish genuine app installations from automated abuse. Firebase Crashlytics processes crash, performance, app version, device, and operating-system information to help us diagnose failures. GridRush does not attach your Firebase account ID to new Crashlytics reports.
Firebase and cloud infrastructure may create security and operational logs containing request times, account identifiers, IP-derived information, function status, or integrity status. Gameplay analytics created directly by GridRush remain on your device in the current release; service providers may independently process the information described above.
How We Use Information
- Provide gameplay, cloud save, sign-in, Daily Board rankings, achievements, and support
- Validate purchases and restore or revoke paid access
- Provide ads and rewarded gameplay actions
- Detect abuse, moderate public names, prevent fraud, and secure backend services
- Diagnose crashes, improve reliability, and balance gameplay
- Meet legal, accounting, platform, and store obligations
Service Providers
- Google Firebase Authentication, Cloud Firestore, Cloud Functions, App Check, and Crashlytics
- Google AdMob and the Google User Messaging Platform
- Iaptic for in-app purchase validation
- Google Play services and Google Play Billing
- Apple Sign in with Apple, App Attest, App Store, and StoreKit services
These providers process information under their own terms and privacy notices and may process it in countries other than yours.
Choices and Controls
- Account creation and cloud save are optional.
- Public Daily Board participation requires sign-in.
- Settings > Privacy Choices opens the available Google consent controls where required.
- Device and store settings may provide additional advertising choices.
- Settings > Account > Manage lets you sign out or delete the cloud account.
- The dedicated deletion page explains both in-app and email request paths.
Account and Data Deletion
An authenticated in-app deletion revokes the current Sign in with Apple token when applicable, then removes the Firebase Authentication account, cloud-save document and subcollections, public leaderboard profile and entries, ranked-session data, private block list, references from other block lists, reports submitted by the account, security-rate-limit state, and active leaderboard ban state.
Reports made against the deleted account are anonymized so the former account and name are no longer present, then automatically deleted within 90 days. Security and function logs may remain for up to 30 days unless a longer period is required for fraud prevention, legal compliance, or an active investigation. Apple, Google, AdMob, Iaptic, or other processors may retain transaction, advertising, consent, diagnostic, or legal records under their own retention obligations.
Deleting the cloud account does not erase local gameplay on the device. Clear the app's storage or uninstall the app to remove local data. You may also follow the public account-deletion instructions.
Retention
Cloud gameplay and account data remains while the account is active. Daily Board results remain until the account is deleted or a moderation action removes them. Open moderation reports are retained while needed for review; anonymized reports concerning a deleted player are purged within 90 days. Operational logs are normally retained for no more than 30 days. Purchase and provider-controlled data follows the relevant provider's retention requirements.
Children's Privacy
GridRush is intended for a general audience aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.
Security
We use access controls, authenticated backend functions, encryption in transit, app-integrity checks, rate limits, receipt validation, and reasonable organizational safeguards. No transmission or storage system is completely secure.
Changes
We may update this policy when the app or its providers change. We will publish the revised policy and update the effective date.
Contact
Quadb Technologies