Privacy Policy

Data we process

Game and device data

TrapGrid stores progress such as levels, scores, moves, streaks, coins, XP, gear, settings, and challenge state locally on your device. It also creates a random installation player ID and default player name when you play as a guest.

Optional account data

If you choose Google or Apple sign-in, Firebase Authentication processes your provider user ID, display name, email address, sign-in tokens, and related security information. Apple may provide a private relay email instead of your regular address. TrapGrid uses your Firebase user ID as the connected player ID.

Profile and leaderboard data

Our API processes your player ID, chosen or provider-derived display name, best score, shell reached, moves, run counts, premium status, and timestamps. Leaderboards publicly show the player name and game results you submit. Do not use a name that reveals information you do not want other players to see.

Purchase and subscription data

Apple or Google processes payment details. TrapGrid does not receive your full card number. RevenueCat processes your TrapGrid app user ID, device and app details, store receipt or purchase token, purchase history, subscription state, product, entitlement, and virtual-currency balance so purchases can be validated, restored, and connected across devices.

Advertising and consent data

For players without an active ad-free entitlement, Google AdMob may process IP address and approximate location, ad or device identifiers, app interactions such as launches, taps and video views, and diagnostic information for advertising, measurement, security, and fraud prevention. On supported iOS devices, TrapGrid asks for tracking permission. Where required, Google's consent platform presents privacy choices before ads are requested.

How we use data

• run the game, save progress, identify a player, and provide daily challenges;
• authenticate optional accounts and connect play across devices;
• publish and protect leaderboards and prevent cheating or abuse;
• validate purchases, grant coins, restore access, and determine ad-free status;
• show, measure, and control ads for non-subscribers with appropriate consent;
• diagnose failures, secure the service, enforce our Terms, and comply with law.

When data is shared

We use service providers only as needed to deliver TrapGrid:

• Google Firebase for optional Google/Apple authentication;
• RevenueCat for purchase validation, subscriptions, entitlements, and coin balances;
• Google AdMob and its advertising partners for consent, ads, measurement, and fraud prevention;
• Apple App Store and Google Play for app distribution, billing, subscription management, and refunds; and
• infrastructure providers that host the TrapGrid API and these legal pages.

We may also disclose data if required by law, to protect rights and safety, investigate fraud or abuse, or as part of a business transfer with appropriate safeguards. We do not sell your directly identifying account data. Advertising providers may process data as described in their own notices and according to your available consent choices.

Legal bases and your choices

Depending on where you live, processing is based on performing our contract with you, our legitimate interests in operating and securing TrapGrid, compliance with legal obligations, or your consent. You can:

• play as a guest instead of signing in;
• decline iOS tracking permission or change it in device settings;
• revisit available Google privacy options from TrapGrid;
• reset or limit advertising identifiers through device settings;
• cancel a subscription in Apple App Store or Google Play settings; and
• request access, correction, deletion, restriction, or portability where applicable.

Retention and deletion

Local game data remains on your device until you clear TrapGrid data or uninstall the game, subject to device backup behavior. Guest IDs and local progress are not recoverable by us if they exist only on your device.

Server profiles, submitted scores, and entitlement state are kept while needed to operate TrapGrid, maintain leaderboards and purchases, prevent abuse, or meet legal obligations. Purchase processors and app stores retain transaction records under their own policies. When a valid deletion request is completed, we delete or de-identify the associated TrapGrid account and server data unless retention is required for legal, security, fraud-prevention, or transaction-record purposes.

See the TrapGrid account deletion guide for the external request path and what information to provide.

Security and international processing

We use reasonable technical and organizational measures designed to protect data, including encrypted network transport where supported, access controls, and limited service-provider access. No method of storage or transmission is completely secure.

TrapGrid's providers may process data in countries other than yours, including the United States. Where required, transfers rely on contractual or other legally recognized safeguards.

Children

TrapGrid is not directed to children under 13, or the higher minimum age required for independent consent in their country. We do not knowingly collect personal data from a child below that age. A parent or guardian who believes a child provided account data should contact us so it can be reviewed and deleted.

Third-party notices

Provider practices are described in their current notices:

• Google Privacy Policy (Firebase, Google Play, and AdMob)
• Apple Privacy Policy
• RevenueCat Privacy Policy

Changes and contact

We may update this Policy as TrapGrid, law, or provider practices change. The latest version will remain at this URL with a revised effective date.

Parama is the operator responsible for TrapGrid. For a privacy inquiry or rights request, use the public contact route at parama.dev or message Parama on LinkedIn. Identify your request as relating to TrapGrid. We may need to verify your identity before acting on account data.