Privacy policy

This Privacy Policy explains how Hopstone ("we", "us", or "our") collects, uses, and protects information when you use the Bubble Splash mobile game (the "App"). By installing or using the App, you agree to the practices described here. If you do not agree, please do not use the App.

Bubble Splash is a casual arcade game. You can play the entire game as a guest without creating an account. Creating an account is optional and is only required to buy coins (real-money in-app purchases) and to sync your progress across devices. The App displays ads and offers optional in-app purchases.

Information you provide (account holders only)

You can play without an account. If you choose to sign in, you do so with Google Sign-In. We never see or store a password. For a signed-in account we hold:

• Email address, received from Google when you sign in.
• Display name, received from Google. It is shown to other players on the leaderboard.
• Country. When you sign in, we derive an approximate country from the IP address of your request, so we can show you a country leaderboard. We do not use device location, we do not ask for location permission, and you cannot set this yourself. We store only a two-letter country code: never your IP address, and never a precise location.

Game data

To run the game and its progression system, we store gameplay data such as:

• High score, total bubbles popped, experience points (XP) and level.
• Coin balance, lives balance, and achievement progress.

For guests this data is stored locally on your device only. For signed-in accounts it is also synced to our backend so your progress follows your account across devices.

Purchase information

In-app purchases (coin packs) are processed by Google Play Billing and validated through RevenueCat. Payment is handled entirely by Google: we never receive or store your credit-card or payment details. We (and RevenueCat) receive a purchase receipt / transaction record confirming that a purchase was made, so coins can be granted to your account.

Advertising data

The App shows ads through Google AdMob. To serve and measure ads, AdMob and its partners may collect and process the device's Advertising ID, IP address, and limited device/usage information, and may use it to show personalized or non-personalized ads in accordance with Google's policies and your device settings.

Automatically collected technical data

Our service providers may automatically receive standard technical information (device type, operating-system version, app version, coarse region, crash/diagnostic signals) needed to deliver, secure, and troubleshoot their services.

Crash and diagnostic data

The App uses Firebase Crashlytics, a Google service, to report crashes and stability problems. When the App crashes or hits a serious error, a report is sent to Google containing a stack trace, the device model, the operating-system version, the app version, device state at the time (such as available memory and whether the device is rooted), and a randomly generated Crashlytics installation identifier.

Analytics data

The App also uses Firebase Analytics, a Google service, to understand how players use the game. It records in-app events such as screens viewed and rounds played: which screens are opened and in what order (Home, Gameplay, Profile, Leaderboard, Shop), how many rounds you play and how they end, together with app-usage events collected automatically: app opens, session length, app version, device model, operating-system version, and country or region.

This data is tied to a Firebase-generated app instance identifier, a pseudonymous ID that is not your name or your email address, and Google processes it on our behalf. We use it to understand how the game is used so we can improve it, not to identify you personally. It is not used to identify individual players, and it is not sold.

Public information

Your display name and its four-digit tag, your country, and your scores are shown to other players on in-app leaderboards. Your email address is never shown to other players.

Reports and blocks

If you report or block another player, we store the accounts involved and the reason selected so we can review it. Blocking is private: the blocked player is not notified.

• To provide and operate the game and its progression, lives, and leaderboard features.
• To create and manage your account and sync progress across devices (account holders).
• To process and validate in-app purchases and grant purchased coins.
• To display advertising and reward you for watching optional rewarded ads.
• To maintain security, prevent fraud/abuse, and fix bugs.
• To detect, diagnose, and fix crashes and stability problems.
• To understand how the game is used, in aggregate, so we can improve it.
• To comply with legal obligations.

We rely on the third-party services below. Each processes data under its own privacy policy; we encourage you to review them.

• Google AdMob, advertising (rewarded ads). Privacy policy: policies.google.com/privacy
• Google Play Billing, in-app purchase payment processing. Privacy policy: policies.google.com/privacy
• Firebase Crashlytics, crash and stability reporting (Google). Privacy policy: policies.google.com/privacy
• Firebase Analytics, screen-view and app-usage analytics (Google). Privacy policy: policies.google.com/privacy
• RevenueCat, purchase validation & management. Privacy policy: revenuecat.com/privacy
• Supabase, account authentication & data storage. Privacy policy: supabase.com/privacy

You can limit ad personalization at any time through your device settings: Settings → Google → Ads on Android, where you can reset your Advertising ID or opt out of ad personalization. Ads may still appear, but will be less tailored.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before any advertising or analytics identifier is stored on your device. The request uses Google's consent form, shown inside the App, and nothing is stored until you answer it.

You can change your answer at any time from Profile › Account › Privacy options.

Account and game data are retained for as long as your account is active. Locally stored guest data remains on your device until you clear the app's data or uninstall the App. Purchase records are retained as required for financial and legal record-keeping.

Crash reports are held by Firebase Crashlytics under Google's own retention schedule, which keeps a crash report for 90 days from the date it is received. In Firebase Analytics, event data is retained for 14 months and user data is retained for 14 months, after which both are deleted automatically by Google.

• Play without an account: use the App as a guest; no personal information required.
• Access / correction: signed-in users can view and edit their display name and avatar in-app.
• Deletion: you can delete your account and its server-side data yourself, inside the App, or ask us to do it. See Deleting your account below. Uninstalling the App or clearing its data removes local data from your device.
• Depending on your region (e.g. EEA/UK GDPR, California CCPA), you may have additional rights to access, correct, delete, or restrict processing of your personal data. Contact us to exercise them.

You can delete your account from inside the App: Profile › Account › Delete account. The App asks you to confirm twice, and then permanently removes the account.

You can also request deletion by email, writing to the address at the foot of this page from the address the account was created with, so we can be sure the request comes from the account holder.

What is deleted

• Your sign-in credentials.
• Your display name and country.
• Your level, XP, high score, and total bubbles popped.
• Your coin balance and life balance.
• Your leaderboard entry.

Game data stored on your device is removed at the same time.

What is kept, and why

Records of coin purchases are kept to meet tax and accounting obligations. The account identifier is stripped from them, so they are no longer linked to you. Crash reports are not linked to your account and cannot be deleted individually.

The App is not directed to children under the age required by your local law (generally under 13, or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We and our providers use industry-standard safeguards (encrypted transport, access controls) to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our service providers may process and store data on servers located in countries other than yours. Where required, such transfers are carried out with appropriate safeguards.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or your data, contact us at: