Indea Games (“we”, “us”, “our”) is an independent mobile game studio. This privacy policy covers the mobile game Glowchain: Number Merge (package name com.indeagames.glowchain) on Android and iOS. It explains what data is processed when you play, why, and the choices you have. It applies only to this app — our other games have their own policies at indeagames.com/privacy.
Glowchain: Number Merge does not require an account. The game stores your progress on your device, and a random pseudonymous installation identifier is generated; it is not your name or email. The third-party services built into the game do, however, process some technical data: Firebase Analytics and Crashlytics only after you enable Share analytics in Settings, advertising software when advertising is enabled, and RevenueCat to verify purchases. Some of that data counts as personal data under laws such as the GDPR, and the rest of this policy explains how it is handled.
This policy describes information processed by Glowchain: Number Merge, including endless play, the campaign, daily puzzles, Light Garden collections, optional advertising and in-app purchases. The intended audience is aged 13 and above. Online features depend on the platform, location and configured services.
The game stores scores, best scores, ongoing boards, campaign progress, stars, gold, boosters, upgrades, themes and styles, garden and collection progress, settings and transaction-delivery records on your device. An account is not required. A random pseudonymous installation identifier is generated; it is not your name or email. Reinstallation or deleting data can create a new identifier and lose local progress.
Limited local event files may record sessions, tutorials, merges, results, gifts, styles, shop and purchase outcomes, opening the share chooser and returning from a notification. Events include time, pseudonymous installation and session identifiers, app version and platform. Technical errors may be represented by a fingerprint rather than their message. When advertising is active, impression revenue, network, currency and precision may be processed. Local event files are size-limited.
The Share analytics setting is optional and is off until you enable it in Settings. Firebase Analytics and Firebase Crashlytics are installed. When you enable measurement, Google and Firebase process game events, app-instance or installation identifiers, app, device and operating-system information, general location inferred from IP, and crash or diagnostic information, including relevant application state, stack traces and limited game context. We do not send your name, email, payment receipts or arbitrary text to game-event analytics. Analytics advertising storage, advertising user data and ad personalization are denied in the game configuration.
Turning measurement off stops future Analytics and Crashlytics collection; it does not automatically erase provider records already sent. Native SDKs may maintain local queues and technical installation records. The Google Analytics account has been configured by the publisher for 14-month user and event retention; resetting retention on new activity is an account setting. A daily BigQuery export in the EU has been requested; creation of its dataset and actual table retention have not been independently verified. Contact us to request information or deletion. An additional analytics or cloud endpoint of our own is not connected in this version. Advertising and payment processing have separate purposes and choices.
When you choose to share, the game creates an image card with your score, highest tile and longest chain, or your garden, and opens the device share chooser. You choose the receiving app, which processes data under its own policy. The game does not access contacts or automatically send messages.
You may export and import local progress with the system document picker. The backup includes supported local progress and balances, and excludes payment receipts, paid entitlement proof, notification permissions and analytics consent. Store permanent purchases must be restored through the store, separately from a progress file. No cloud backup service is connected in this version. Device or store backup services may independently process data under their own policies.
Advertising is disabled in this test package because production application identifiers are not configured. When enabled in a later approved version, Yodo1 MAS and its mediated networks may process advertising or installation identifiers, IP address, device, operating-system, app, language and network details, approximate location inferred from IP, ad interactions and technical diagnostics. Purposes include serving ads, consent, measurement, frequency control, security and fraud prevention. Personalization is subject to applicable consent and other requirements. The game does not request precise location access.
Use the applicable service privacy and age interface and your device advertising settings to manage choices. Remove Ads removes forced interstitials; voluntary rewarded ads are a separate option. An external store or browser opened after an ad click has its own policy. Players are not paid real money for ad revenue. Other enabled networks have their own data practices and policies.
Payments are completed by the device app store. We do not receive your card number or banking password. Google Play or the Apple App Store processes payment, account and refund information under its policies. RevenueCat may process a pseudonymous app user or installation identifier, device and app information, product identifiers, purchase times, receipts or tokens, transaction identifiers and entitlements to verify purchases and restore permanent rights. Prices come from the store.
Permanent Remove Ads and Royal Themes can be restored through supported store accounts. Consumable gold and boosters use a local game wallet. Reinstalling without a usable save can lose that balance; historical consumed purchases are not repeatedly granted. Permanent entitlements can end after a refund or revocation. Consumed local balances do not have automatic server-backed refund reconciliation; contact support about delivery or refund issues. Backup progress does not replace store entitlement verification.
Notifications are optional local reminders scheduled on your device. They may refer to daily content and garden progress. No separate remote push service of ours is used in the current implementation. Disable reminders in game settings or system notification settings. A review invitation may follow a positive play experience; Google Play or the Apple App Store processes a submitted review under its own policy.
If you email us, we process the address, message and diagnostic or transaction information you choose to share to respond. Do not send passwords, card details or secret API keys. Email providers have their own policies.
Information is processed to provide the game, protect progress, deliver purchases, resolve issues, answer requests and provide applicable optional services. Depending on the processing and jurisdiction, applicable grounds may include providing the requested service, legitimate operational and security interests, legal requirements or consent. Optional consent can be withdrawn through relevant settings. Where required, information may be disclosed to comply with law, protect rights or respond to security incidents. Advertising providers may engage in practices described as sale or sharing under some regional laws; applicable controls are provided by the service privacy interfaces.
Configured online services may process information outside your country under applicable provider arrangements and rules. Reasonable security measures are used, but no storage or transmission is guaranteed to be completely secure.
The game is intended for players aged 13 and above, and is not designed for children under 13. Being 13 or older does not necessarily establish independent consent in every country. We do not knowingly request unnecessary personal information from children. Applicable age and country safeguards must be implemented through service privacy and age interfaces and store controls. A parent or guardian may need to assist where local independent-consent requirements apply.
Deleting app data may erase progress and consumable balances. Manage notifications and advertising preferences in app and system settings. Store tools handle applicable purchase and refund requests. Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection, portability or consent withdrawal. Contact indeagamesstudio@gmail.com. We may request limited verification. We may not remotely access local-only records, and third-party deletion can require their process. You may have the right to contact an applicable data protection authority.
Glowchain: Number Merge is free to play. Advertising is disabled in the current test package; when it is enabled in a later approved version, ads are delivered through the Yodo1 MAS mediation platform. Optional in-app purchases are handled by RevenueCat, Google Play and the Apple App Store. To do this, the app includes the third-party SDKs listed below. Each SDK collects the data shown on its card directly from your device, which means that data is shared with the vendor named on the card, and each vendor processes it under its own privacy policy, linked there. The same disclosures are reflected in the app’s Google Play Data Safety section and Apple App Privacy label. Mediation means Yodo1 passes each ad request on to a number of partner ad networks and serves whichever one fills it, so the data on the Yodo1 card is also received by the network that ultimately shows you the ad. Yodo1 maintains the current list of those partners, and each of them processes data under its own privacy policy; the Yodo1 policy linked below is the authoritative starting point for that list.
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Data this SDK may collect:
Ads in Glowchain: Number Merge may be personalized (chosen using your advertising ID and inferred interests) or non-personalized (chosen only from context, such as the game you are playing and your approximate region). Where the law requires it — for example under the GDPR — personalized ads are only shown with your consent, and declining consent means you see non-personalized ads instead; the game itself stays fully playable either way.
Your device’s advertising ID is a resettable identifier that ad networks use for frequency capping, fraud prevention, measurement and personalization (with your consent where the law requires it). You are in control of it:
We use Firebase Analytics and Firebase Crashlytics to understand how the game is played — for example which levels are too hard, where crashes happen, and which features players enjoy. This data is tied to a device or app instance, not to your real-world identity: we see counts and patterns, never your name or contact details, and we use it only to improve the game. Details for each tool are in section 3.
Glowchain: Number Merge requests only the permissions it needs to work:
Glowchain: Number Merge is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal information, contact us at indeagamesstudio@gmail.com and we will take steps to delete it.
Depending on where you live, you may have legal rights over your personal data, including the following.
If you are in the EU/EEA or UK (GDPR): you have the right to access, rectify, erase and receive a portable copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Our legal bases are your consent (personalized advertising and optional analytics, where the law requires consent), performance of our contract with you (processing and restoring your in-app purchases), our legitimate interests (non-personalized ads, analytics, crash reporting and fraud prevention) and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.
If you are a California resident (CCPA/CPRA): you have the right to know what personal information is collected about you, to request its deletion, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. Showing personalized ads can, however, count as “sharing” (and in some cases a “sale”) as the CPRA defines those terms broadly; you can opt out by limiting ad tracking on your device (see section 4) or by using the vendor opt-out links in section 3. We will never discriminate against you for exercising these rights.
Because most data described in this policy is collected directly by the SDK vendors in section 3, requests about that data are fastest through the vendor’s own privacy page. For anything else — or if you would like our help — email us at indeagamesstudio@gmail.com and we will respond within the time required by law.
Local information remains while app data exists; local event files are size-limited. Support records are retained as needed to respond and comply with applicable obligations. Third-party retention and deletion terms apply independently, and deleting local data does not automatically delete their records. Data collected by third-party SDKs is retained by those vendors according to their own published retention periods, as described in their privacy policies. The SDK vendors protect data with industry-standard safeguards such as encryption in transit, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The SDK vendors listed in section 3 operate globally, so data they collect may be processed in the United States and other countries outside your own. Where data leaves the EU/EEA or UK, the vendors rely on recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (for example the EU–U.S. Data Privacy Framework, where the vendor is certified). Details are in each vendor’s privacy policy.
If we add an SDK, remove one, or change how data is handled, we will update this page and change the effective date at the top; where required, we will also give additional notice. The current version always lives at indeagames.com/privacy/glowchain.
Questions, concerns, or a privacy request? We are a small team and we actually read our email: indeagamesstudio@gmail.com.