1. Who we are
ECHO MATCH is published by Pankovski P.S.A. We are the controller of personal information processed for the game under this policy. Contact us at wydawnictwopankovski@gmail.com or visit pankovski.dev.
This policy covers the Android game. You can play without creating an account with us. Google Play purchases use your Google account.
2. Information used by the game
Local game data
Unlocked levels, results, the current puzzle and undo history, hints used, tutorial status, sound settings and a locally generated save identifier are stored on your device. The current game does not upload your puzzle history or provide its own cloud progress service. Android may back up app data depending on your device and backup settings.
Purchase and app information
The RevenueCat SDK creates a pseudonymous app user identifier and checks Premium access, including when the game starts. Google Play and RevenueCat process purchase records and verification information, such as the product, purchase token, transaction status and Premium entitlement. Technical details include app and SDK versions, Android version, language/region settings and currency. Network requests also expose an IP address to the receiving service. These checks can occur before you buy Premium.
We do not ask the SDK to collect your name, email address, phone number or advertising identifier. Our game does not receive your payment card number or Google account password.
Advertising information
When ads are requested, Google's Mobile Ads SDK may process IP addresses and approximate location derived from them, app and device identifiers, app/ad interactions such as views and taps, and performance diagnostics. From version 2.1.3, we request protective treatment for all players that prevents transmission of the Android advertising identifier. Earlier versions may also process advertising identifiers, depending on your privacy choices and device settings. These data support ad delivery, measurement, reliability and fraud prevention.
Support messages
If you email us, we receive your email address, message and any information you choose to include. We use these to respond and resolve your request. Please do not send passwords, payment card details or unnecessary identity documents.
3. Ads and your choices
The free game uses Google AdMob for ads between levels and rewarded ads for hints. You can choose whether to request a rewarded hint. Premium removes both types of ads after the purchase is confirmed.
From version 2.1.3, we disable personalised advertising for every player, request ads with the most restrictive general-audience content rating (G), and apply Google's protective under-age-of-consent treatment to all ad requests. This is a publisher-wide privacy setting, not a determination of your age. We do not ask for your age or date of birth. These settings limit advertising data use; they do not mean that no data is processed.
Google's User Messaging Platform checks which privacy requirements apply before ads can be requested. With the protective treatment enabled, a consent form may not be shown. Earlier versions use the privacy choices presented by Google where required; personalised advertising in those versions relies on consent where the law requires it.
Use Settings → Ad privacy in the game when that option is available to review or withdraw your advertising choices. You can also manage advertising IDs and ad privacy in Android settings. Withdrawing consent does not affect processing that was lawful before withdrawal.
Google and its advertising partners may use information to select and measure ads. See Google's Privacy Policy and how Google uses information from apps that use its services. Region-specific advertising opt-out choices are offered where applicable.
5. Purposes and legal bases
Where the GDPR or equivalent law applies, we use the following bases:
- Providing the game and Premium: performance of our contract with you, including purchase verification and restoration.
- Advertising: our legitimate interest in funding the free game through permitted contextual or limited ads, and your consent for device information where required. Version 2.1.3 and later disable personalised advertising for all players. Earlier versions rely on consent for personalised ads where required.
- Support, security and purchase reporting: our legitimate interests in answering requests, preventing misuse and understanding purchases; contract performance when resolving a service issue.
- Legal obligations: necessary transaction records and responses required by applicable law.
Contacting support and purchasing Premium are optional. Information needed to verify a purchase is necessary to provide that paid entitlement. Our game does not make decisions producing legal or similarly significant effects solely through automated processing.
6. Recipients and international transfers
Information is handled by Google for Play billing and AdMob, RevenueCat for purchase management, their relevant infrastructure providers, and our email provider, Google/Gmail, for support. Google may act as an independent controller for its own services. RevenueCat processes game customer information on our behalf under its Data Processing Addendum.
Providers may process information outside your country, including in the United States. Applicable transfer safeguards may include adequacy decisions or standard contractual clauses. You can contact us about the safeguards relevant to your data. See also RevenueCat's privacy information; our policy governs the game data it processes for us.
We may disclose information when required by law or necessary to establish, exercise or defend legal claims.
7. Retention and security
Local progress remains until you reset it, clear app data or remove the app, subject to Android backups. Purchase records are kept for as long as needed to verify and restore the lasting Premium entitlement, handle refunds, prevent fraud and meet legal requirements. Support correspondence is retained for resolving the request, related follow-up and any applicable claims or record-keeping duties.
When reviewing a deletion request, we assess what can be removed and explain any necessary retention. Google controls retention for information processed for its own services under its policies. Deleting local data does not delete provider-held records.
Game saves use Android's app storage. Google and RevenueCat service connections use encrypted transport. We restrict access to service accounts and support information. No storage or transmission method can guarantee absolute security.
8. Your rights and data deletion
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent. These rights have legal conditions and exceptions. You may also complain to your local supervisory authority; in Poland, this is the President of the Personal Data Protection Office (UODO).
To make a privacy or deletion request:
Email wydawnictwopankovski@gmail.com and mention ECHO MATCH. Explain what you want to access, correct or delete. We will help identify the relevant record using only information needed for the request.
The game has no separate player account to close. To remove local progress, use Settings → Reset progress or Android's app data controls. To request removal of information held for us by RevenueCat, contact us so we can review and action the request. If needed, we will explain how to identify your app or purchase record. Anonymous records cannot always be linked to you from an email address alone.
A deletion request does not itself cancel or refund a Google Play transaction. Google account and billing records are managed through Google's privacy and purchase controls. We do not charge a fee for ordinary privacy requests and respond within the time required by applicable law.
9. Younger players
ECHO MATCH is intended for adults aged 18 and over and is not directed to children or teenagers under 18. Our selected target audience is separate from the store's content rating, which describes the game's content. We do not collect an age or date of birth to verify eligibility.
If you believe a child has provided personal information to us without the necessary authorisation, contact us at the address above. We will review the situation and remove information where required.
10. This page and other sites
Opening this page sends a normal web request to the website host, which may receive an IP address, browser information and request logs. This standalone page contains no advertising, analytics scripts or data-entry forms. Following an external link takes you to a service with its own privacy practices.
11. Policy changes
We may update this policy when the game, its providers or relevant requirements change. The current version is available at this address with its update date. We will provide additional notice or request consent when required for a material change.