Bubble Popper Bug Blast Privacy Policy

Effective September 25, 2026; updated October 22, 2026
Package: com.bubbleshift.game
Provider: Bubble Shift Studio
Contact: redgravityzeroghost@gmail.com

Data stored on the device

The game stores progress, level stars, scores, rescued-bug totals, tutorial state, sound/music/vibration settings, virtual balances, privacy choices, review-prompt state, and transaction-delivery state in local app storage. This data operates the game and prevents duplicate rewards. Local data remains until normal use changes it, you clear app storage, you uninstall, or Android removes it. The Studio does not operate a cloud save. Android backups may restore some data; manage backups separately in your Google/device settings. Clearing storage removes local progress, settings, balances, and privacy choices.

Google Play Games

On supported Android devices, Google Play Games may automatically sign in under the player's Google settings. The game submits best score, completed-level progress, and achievements and can display Google's leaderboard and achievement screens. It does not request email, contacts, a friends/community list, or a server access token. The full game remains playable if Play Games sign-in is unavailable or declined.

The Play Games SDK can receive the player ID, gamer display name and avatar URL. The Studio does not upload these profile fields to its purchase backend. Google may process gamer identity, game activity, scores, achievements, device information, and related service data. Players control profile visibility and Play Games data in Google Play Games settings. See Google Play Games privacy and settings.

If you create or update a Play Games profile through Google's sign-in flow, Google processes your gamer name and avatar choice. The game does not request photo-library access or upload your photos. Play Games can process automatic service-use and diagnostic information to operate and improve its services even when player sign-in is unavailable or declined. Declining sign-in prevents authenticated score and achievement features; it does not stop every Google service request. Google can associate this service processing with application or device identifiers even when signed out.

Optional Firebase Analytics

Analytics is disabled by default. A player who selects 18 or older can enable or disable it in Privacy & Online Choices. When enabled, Google Analytics for Firebase processes default measurement data such as app opens, sessions, app version, device model, operating system, language, broad geography, and an app-instance identifier. The game also sends limited events for level outcomes, score, stars, bees rescued, tutorial actions, support-link use, perfect-result sharing, and whether an in-app review flow was requested.

The game does not put names, email addresses, support-message contents, precise location, contacts, photos, audio, or purchase tokens in analytics events. Its Android manifest removes the advertising-ID permission. The Android configuration starts Analytics collection disabled before a player makes a choice. An adult opt-in is saved on the device and can enable collection on later launches without another prompt. Turning analytics off stops new game analytics collection and, when Analytics has initialized, resets local Analytics data and its app-instance identifier. It does not send a server-side deletion request or erase information already processed by Google. The configured Google Analytics retention period is controlled in the service settings, separately from this device choice. See Firebase privacy and security.

Optional rewarded videos

Eligible players who select 18 or older can choose Watch Ad. The app refreshes Google User Messaging Platform consent information when adult online features become eligible. For eligible adults, Google’s consent service receives technical app/device information and available privacy-choice signals to determine which privacy message or options apply. This request can occur before you choose to watch a video. Selecting Watch Ad presents any required privacy form before the app requests an ad; Google Mobile Ads initializes and loads a video only if Google reports that ads may be requested. Ads are general-audience-rated and requested as non-personalized ads. Gameplay does not require them. Players can decline Google's choices or skip the video.

Google Mobile Ads may process IP address (which can indicate broad location), app interactions such as launches, taps, and video views, diagnostics, and device or account-related identifiers for delivery, measurement, analytics, and fraud prevention. The advertising-ID permission is removed, but Google may use other permitted identifiers. Non-personalized advertising still involves data processing for delivery, measurement, and fraud prevention. Choosing not to watch prevents a new app ad request; it does not undo processing already started or erase provider records. Where required, Manage Google privacy options revisits Google's consent choices. Analytics remains a separate opt-in. See Google Mobile Ads data disclosure.

Google's consent service also receives network information used to determine applicable regional messages and processes consent-related timing and error information to operate and improve its consent tools. Google handles these records under its own privacy and retention rules. The Studio does not promise immediate deletion or a fixed retention period for Google-controlled consent records. See how Google retains data.

Purchases

Eligible players who select a package or coin bundle start a one-time purchase through Google Play Billing. Google Play handles payment details, displays the purchase confirmation, and applies the account's purchase-approval requirements, including parental approval where configured. The game does not receive payment-card details. Opening the store for an eligible adult starts Firebase Authentication and Play Integrity App Check setup, even if no purchase is completed. For verification, reward delivery, recovery, and fraud prevention, the game uses a pseudonymous Firebase Authentication identity and Play Integrity App Check with its server-side purchase service. That service verifies Google Play's purchase token and product before adding the catalogued rewards to the on-device wallet. No reward is granted from an unverified client receipt. The service records the last authenticated purchase or privacy request time for identity-retention safeguards. Temporary expiry records identify the affected identity and record review and processing state; they are not anonymous data. Purchases require an available Google Play product and service connection, and may be unavailable by account, device, region, or network.

Review, sharing, support, and this website

After at least three successful rounds, the game may ask Google Play to decide whether to show its review flow, no more than once per app version. The game neither asks for a rating first nor receives the rating entered. Share controls open Android's system share sheet with game text, score, stars, level, and the store link; nothing is sent until the player selects a destination. Feedback opens an editable email draft.

This website uses Firebase Hosting without advertising or analytics scripts. Hosting processes request information such as IP addresses for delivery, security, usage analysis, and abuse prevention. Google states that Firebase Hosting retains IP data for a few months; see Firebase privacy and retention information.

Sharing, retention, and security

The Studio does not sell personal information. Rewarded ads are requested as non-personalized; Google Mobile Ads still collects and shares the data described above. Information is processed by Google Play, Google Play Games, Firebase, Google Mobile Ads, and support providers only as needed for the features described, security, fraud prevention, legal compliance, and player support.

Local data remains until changed, cleared, uninstalled, or handled by a platform backup. Google service data follows the applicable Google service settings and retention policies. Support mail includes the email address and any information you choose to send. It is used to answer and troubleshoot your request and handle privacy rights. Ordinary support correspondence is deleted 90 days after a case closes. Records needed for a specific legal obligation, security issue, fraud investigation, or dispute may be retained for that purpose; the response explains any applicable exception. A verified deletion request is reviewed for removal of Studio-controlled correspondence; any necessary retained records and the reason are explained in the response. This does not delete Google Account records or provider-controlled data. See deletion steps and request scope.

Purchase-service retention

Purchase-service retention starts when delivery, Google consumption and reconciliation are complete. Raw purchase tokens and detailed verification data are scheduled for removal within 30 days after that settlement. A smaller record containing a purchase-reference hash, purchase-service user identifier, product, quantity, outcome and settlement/expiry dates remains for up to 12 calendar months after settlement to prevent duplicate grants and handle refunds or revocations. A hash or generated identifier can still be personal data. Retries do not restart the retention period. A verified deletion request can remove linked data earlier, subject to a documented necessary exception.

A purchase-service identity can exist even if no purchase was made. Identities without purchase records or open cases currently remain until a verified deletion request; automatic inactivity expiry is not active. Routine application-owned backend logs expire after 30 days. There are no separate Studio customer-record archives or manual backups; Firestore scheduled backups and point-in-time recovery are not enabled. This does not describe Android backups or Google's separately controlled service records.

Unsettled purchases and specific disputes, fraud or legal holds are reviewed every 30 days. Only necessary records are retained while the documented reason applies. The response to a deletion request explains retained categories, the reason, and an expiry or next review date. Correspondence recording a deletion request and its outcome follows the ordinary 90-day support-mail rule; it is not a permanent audit archive. Google-managed payment history, Play Games, Analytics, advertising and Hosting data follow their own controls and retention policies.

Security safeguards and limits

Progress, settings and privacy choices use Unity PlayerPrefs. The purchase wallet and recovery records also use private files in local app storage. The game does not encrypt this storage and it is not tamper-proof; protection depends on Android, device access controls, and any backups. No password, payment-card details, or support-message contents are stored in these game saves. Secure your device and Google Account.

This public website is delivered over HTTPS and contains no form that collects personal information. The hosting configuration restricts executable content to this site, blocks embedding, and sends no referrer information. Email requests are handled through the existing support mailbox, not a public database or automatic deletion form. Do not email passwords, payment details, authentication credentials, or purchase tokens. Opening an email link only creates a draft; it does not submit or complete deletion. No storage or transmission method is completely secure.

Children

This is a general-audience game. A player who selects under 18 cannot use Firebase Analytics, rewarded videos, or online purchases in the game and can continue playing offline. Google Play's account-level purchase approval and parental controls continue to apply to eligible purchases. Google Play Games support for supervised accounts is controlled by Google and parent or guardian account settings. A parent or guardian who believes a child sent personal information directly to the Studio may contact us for review and deletion where required.

Choices and privacy rights

Depending on location, a player may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data, withdraw consent, or appeal a decision. Email the contact address above to make a request about data controlled by the Studio. Verification may be required.

Changes and international processing

Providers may process information in other countries under their safeguards and applicable law. This policy may change with features or legal requirements. The effective date will be updated and material changes will be presented in the game when appropriate.