Indea Games (“we”, “us”, “our”) is an independent mobile game studio. This privacy policy covers the mobile game Flappy Merge (package name com.indeagames.flappymerge) on Android and iOS. It explains what data is processed when you play, why, and the choices you have. It applies only to this app — our other games have their own policies at indeagames.com/privacy.
Flappy Merge has no accounts, no sign-in, no chat and no user-generated content. We do not ask for your name, email address, phone number, contacts, photos or precise location. Your game progress (levels, coins, settings, couriers) is saved on your device only, and we do not run a server that stores it. The third-party services built into the game do, however, collect some technical data from your device — such as your advertising ID, IP address and approximate location — to show and measure ads, purchase and device information to complete purchases, and, through Google Firebase, usage events and crash reports tied to a random installation ID (you can switch this off in Settings > Analytics). Some of that data counts as personal data under laws such as the GDPR, and the rest of this policy explains how it is handled.
Yodo1 MAS provides ad mediation for rewarded videos and interstitial ads. The ad networks reached through Yodo1 are AppLovin, Google AdMob and Yodo1's own ad network. Yodo1 MAS also ships AppHarbr, which checks ads for quality and security, and support libraries for networking and analytics; they are covered by the Yodo1 privacy policy, https://policy.yodo1.com/website/en/privacy.html, and the AppHarbr privacy policy, https://www.appharbr.com/privacy-policy. Google User Messaging Platform shows the consent form where it is required. Ad networks can change over time. The services named in this policy are the set built into the current version of the game. Privacy policy links: Google AdMob, https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy; Google User Messaging Platform, https://policies.google.com/privacy.
RevenueCat provides in-app purchases, entitlements and restoring purchases. The Apple App Store and Google Play provide payment and store services; payment details are handled only by Apple or Google, never by us. Privacy policy links: Apple, https://www.apple.com/legal/privacy/; Google, https://policies.google.com/privacy.
On Android the game uses Google Play In-App Review, which lets the system ask you to rate the game; it is handled by Google Play and the game receives no personal data. On iOS the game uses the system review prompt. Google's privacy policy: https://policies.google.com/privacy.
We use Google's Firebase Analytics and Firebase Crashlytics. They give us usage statistics and crash reports tied to a random installation ID, not to your name or contact details; we do not ask for any. When Settings > Analytics is off, the game stops sending usage events and crash reports to Firebase. The advertising and purchase services described in the Third-Party SDKs section may collect crash and performance diagnostics for themselves under their own policies. Platform stores (Apple, Google) may give us aggregated, non-identifying reports about installs and crashes.
We do not sell your personal information. Data is shared only as needed with the providers described in this policy so that ads, purchases and rewards work. We choose providers that commit to the same or an equivalent level of protection for your data as described in this policy and required by applicable law. Each provider is responsible for its own handling under its privacy policy.
We may update this policy. The date at the top shows the latest version. Material changes will be reflected in the store listing or in the game.
Flappy Merge is free to play and is funded by ads and optional in-app purchases, delivered through the Yodo1 MAS mediation platform. To do this, the app includes the third-party SDKs listed below. Each SDK collects the data shown on its card directly from your device, which means that data is shared with the vendor named on the card, and each vendor processes it under its own privacy policy, linked there. The same disclosures are reflected in the app’s Google Play Data Safety section and Apple App Privacy label. Mediation means Yodo1 passes each ad request on to a number of partner ad networks and serves whichever one fills it, so the data on the Yodo1 card is also received by the network that ultimately shows you the ad. Yodo1 maintains the current list of those partners, and each of them processes data under its own privacy policy; the Yodo1 policy linked below is the authoritative starting point for that list.
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Ads in Flappy Merge may be personalized (chosen using your advertising ID and inferred interests) or non-personalized (chosen only from context, such as the game you are playing and your approximate region). Where the law requires it — for example under the GDPR — personalized ads are only shown with your consent, and declining consent means you see non-personalized ads instead; the game itself stays fully playable either way.
Your device’s advertising ID is a resettable identifier that ad networks use for frequency capping, fraud prevention, measurement and personalization (with your consent where the law requires it). You are in control of it:
We use Firebase Analytics and Firebase Crashlytics to understand how the game is played — for example which levels are too hard, where crashes happen, and which features players enjoy. This data is tied to a device or app instance, not to your real-world identity: we see counts and patterns, never your name or contact details, and we use it only to improve the game. Details for each tool are in section 3.
Flappy Merge requests only the permissions it needs to work:
Flappy Merge is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal information, contact us at indeagamesstudio@gmail.com and we will take steps to delete it.
Depending on where you live, you may have legal rights over your personal data, including the following.
If you are in the EU/EEA or UK (GDPR): you have the right to access, rectify, erase and receive a portable copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Our legal bases are your consent (personalized advertising), performance of our contract with you (processing and restoring your in-app purchases), our legitimate interests (non-personalized ads, analytics, crash reporting and fraud prevention) and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.
If you are a California resident (CCPA/CPRA): you have the right to know what personal information is collected about you, to request its deletion, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. Showing personalized ads can, however, count as “sharing” (and in some cases a “sale”) as the CPRA defines those terms broadly; you can opt out by limiting ad tracking on your device (see section 4) or by using the vendor opt-out links in section 3. We will never discriminate against you for exercising these rights.
Because most data described in this policy is collected directly by the SDK vendors in section 3, requests about that data are fastest through the vendor’s own privacy page. For anything else — or if you would like our help — email us at indeagamesstudio@gmail.com and we will respond within the time required by law.
We do not run a server that stores your game data, so we hold no profile about you. Game data stays on your device until you delete the app or clear its data; uninstalling removes it. Firebase keeps usage events and crash reports for a limited period (no longer than 14 months) and then deletes them automatically. Ad and purchase providers keep data for the periods in their own policies (for example, AppLovin's privacy policy says it retains information collected through its services for limited periods, typically up to two years, and often less for data tied to a device; see https://legal.applovin.com/privacy/). Data collected by third-party SDKs is retained by those vendors according to their own published retention periods, as described in their privacy policies. The SDK vendors protect data with industry-standard safeguards such as encryption in transit, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The SDK vendors listed in section 3 operate globally, so data they collect may be processed in the United States and other countries outside your own. Where data leaves the EU/EEA or UK, the vendors rely on recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (for example the EU–U.S. Data Privacy Framework, where the vendor is certified). Details are in each vendor’s privacy policy.
If we add an SDK, remove one, or change how data is handled, we will update this page and change the effective date at the top; where required, we will also give additional notice. The current version always lives at indeagames.com/privacy/flappymerge.
Questions, concerns, or a privacy request? We are a small team and we actually read our email: indeagamesstudio@gmail.com.