Privacy Policy
This policy explains what personal data the QuickClash mobile game ("the app") uses, why, and what choices you have. QuickClash is published by Valtteri Rinne, an individual developer based in Finland, who is the data controller. Contact: support.quickclash@gmail.com.
1. Data we collect
Account
- Your email address, and a securely hashed password if you sign up with email.
- If you sign in with Google: your email address, name and Google account identifier, as shared by Google.
- Your username, the avatar you pick from the app's presets, and your time zone (used to reset daily bonuses at the right time).
Gameplay
- Match results and history: opponents, scores, the minigames played and who won each.
- Progress: medals and rank, level and XP, in-game currencies (tickets and gems), season pass progress, specialists and shards, win streaks and per-game statistics.
- Your friends list, friend requests and match invitations. Your friends can see whether you are online or in a match.
- During a match, your moves are sent through our game server to your opponent. In Doodle Dash, your drawing strokes are sent live to your opponent; drawings are recognized on your device and are not stored.
Purchases
- Payments are handled by Google Play. We never see your card or payment details.
- We receive and store the purchase token or transaction ID, the product bought, the time of purchase and whether it was a test purchase, so we can verify the purchase with Google and deliver what you bought exactly once.
Advertising
- The free version shows ads from Google AdMob. AdMob may collect your device's advertising ID, IP address, device and app information, and how you interact with ads.
- In the EEA, the UK and Switzerland, the app asks for your consent through Google's consent form before ads use personal data. Without consent, only limited or non-personalized ads are shown. You can reset your advertising ID or opt out of ads personalization in your device's settings.
- We record when you last watched a rewarded ad, to grant its reward.
Technical data
- Your IP address and connection data, which our servers need to communicate with the app, and server logs used to keep the service working and secure.
- Your settings (music, sound effects, haptics) are stored only on your device.
We do not sell your personal data, and we do not use analytics or crash-reporting SDKs.
2. Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, running matches, matchmaking, friends, progress and leaderboards | Performance of our contract with you (the Terms of Service) |
| Verifying and delivering purchases, preventing purchase fraud | Contract; legal obligations (bookkeeping) |
| Showing ads that fund the free game | Legitimate interest; your consent for personalized ads where the law requires it |
| Keeping the service secure, preventing cheating and abuse, fixing problems | Legitimate interest |
3. Who we share it with
- Supabase: database, authentication and server functions.
- Our game server hosting provider: runs the real-time match server.
- Google: Google Sign-In, Google Play billing and purchase verification, and AdMob advertising. See Google's Privacy Policy and how Google uses data from apps that use its services.
- Other players see your username, avatar, rank, level, selected specialist, statistics and match results, and your friends see your online status.
Some of these providers process data outside the European Economic Area. Where they do, the transfer is protected by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. We may also disclose data where the law requires it.
4. How long we keep it
- Account and gameplay data: until you delete your account.
- Match history: when you delete your account, your identity is removed from past matches. The anonymous result stays in your former opponents' history.
- Purchase records: kept without your account link after deletion, for as long as bookkeeping law and fraud prevention require (normally up to 6 years).
- Live match data, including Doodle Dash drawings, is held in server memory only while the match runs.
5. Deleting your account
In the app, open Settings → Delete Account and confirm. Your account, profile, statistics, progress, specialists, currencies and friendships are deleted immediately and permanently. If you can no longer open the app, email support.quickclash@gmail.com from the address on your account and we will delete it within 30 days. Unspent gems, tickets and active purchases are lost when the account is deleted.
6. Your rights
Under the GDPR you can ask for access to your data, a copy of it in a portable format, correction, deletion, or restriction of its use, and you can object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time. To use these rights, email support.quickclash@gmail.com. You can also complain to a data protection authority; in Finland that is the Office of the Data Protection Ombudsman.
7. Children
QuickClash is intended for players aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
8. Security
Data is sent over encrypted connections, passwords are stored only as hashes, and database access is limited by per-user access rules. No system is perfectly secure, but we work to protect your data.
9. Changes
If we change this policy, we will update the date at the top. If the changes are significant, we will tell you in the app.