All policies

Number Dropulse — Privacy Policy

Effective date: October 6, 2026
Developer: Indea Games
App: Number Dropulse (package com.indeagames.numberdropulse)
Platforms: Android and iOS

1.Introduction

Indea Games (“we”, “us”, “our”) is an independent mobile game studio. This privacy policy covers the mobile game Number Dropulse (package name com.indeagames.numberdropulse) on Android and iOS. It explains what data is processed when you play, why, and the choices you have. It applies only to this app — our other games have their own policies at indeagames.com/privacy.

2.Data We Collect

Number Dropulse is a falling-number merge puzzle. No name, email, password or user account is required to play, and the game does not ask for your contact details. Levels, records, saved boards, coins, gems, boosters, cosmetics and preferences are stored on your device. The third-party services built into the game do, however, process some technical data: Firebase measurement is off until you enable it in Settings, advertising software may process device and advertising data when advertising is enabled, and RevenueCat processes purchase information. Some of that data counts as personal data under laws such as the GDPR, and the rest of this policy explains how it is handled.

Local progress

Levels, records, saved boards, coins, gems, boosters, cosmetics and preferences are stored on your device. Cloud progress synchronization is not provided. Removing the app or clearing its data can erase local progress. Platform backups follow your device settings.

Optional game measurement

Firebase Analytics and Crashlytics collection starts disabled. You may enable game measurement in Settings and disable it there again. Analytics processes a pseudonymous app-instance identifier, app and device information, language, event times, game modes, results, scores, durations and return visits. Crashlytics processes crash traces and device and app information with limited game context. Our custom game events do not include your name, email, saved board or purchase receipt. Pseudonymous information can still be personal data. Advertising storage, advertising user data, advertising personalization and advertising-ID collection are disabled for our Firebase measurement configuration; advertising partners have separate controls.

Our custom events are not queued before permission. Turning measurement off clears the game's pending custom-event queue. Firebase SDKs have their own transport and local retention behavior; switching off does not delete information already sent. Crashlytics collection changes may require a subsequent launch to take full effect. Locally stored crash reports may be sent after collection is enabled later. Daily exports to BigQuery may be used for analysis in the configured EU export region; this is not a promise that all service data is processed only in the EU.

Advertising

When configured and enabled, Yodo1 MAS mediates interstitial and optional rewarded ads. Its active partners may include Google AdMob, AppLovin, Meta, Unity and ironSource and other integrated networks. The active network roster depends on mediation configuration. These services may process advertising and device identifiers, IP address and approximate region, device and app information, ad interactions and diagnostics for ads, measurement, security and fraud prevention. Precise GPS access is not requested. An included adapter does not imply that every partner receives every ad request.

Required regional consent and Google UMP are handled by the advertising service; on iOS, tracking requires the system ATT permission where applicable. Declining optional tracking does not block core play. Advertising preferences are available in Settings when the service is ready. Rewarded videos start only after the player selects them; rewards require completion confirmation. The remove-ads product removes forced interstitial ads, while voluntary rewarded videos remain optional. In the initial build advertising is disabled until genuine publisher identifiers and legal links are configured.

Purchases

Google Play or Apple handles payment. RevenueCat processes store purchase and entitlement information, product and transaction identifiers, purchase status and technical identifiers. We do not receive your full card number, banking password or card security code. In this version, consumable rewards are delivered locally only from a successful store purchase callback, using its transaction identifier to prevent repeat delivery. No developer-operated server delivery or verification service is used. Local data loss can erase this delivery record and remaining balances.

Permanent ad removal can be synchronized or restored through the store and RevenueCat. Restore never grants consumable packs. In this version the ad-removal product is hidden while advertising is disabled. Reinstall does not recover spent or remaining consumable balances. Store refunds follow store rules; this version does not automatically adjust consumable balances after a refund. No subscription is sold in this version.

Local reminders and permissions

Reminders are optional and scheduled on your device. An explanatory card precedes the operating-system permission prompt. Android 13+ notification permission and iOS alert, badge and sound authorization are requested only after enabling reminders. No remote marketing notification or FCM push service is used. You may disable reminders in the app or system settings.

The game does not request camera, microphone, contacts, exact location or photo or video library access. Internet and network access, store billing, vibration and notifications support their corresponding features. Advertising ID permission is used only when configured advertising requires it.

Support, purposes and service providers

If you email support, your email address and the information you choose to provide are used to answer your request. Do not send credentials or full payment-card details. Data supports gameplay, product delivery and restore, diagnostics, optional analysis, advertising, fraud prevention and support. Legal bases depend on the activity and jurisdiction, including contract performance, legal obligations, permitted legitimate interests and consent where required. This document is not itself tracking consent.

Data may be processed by stores, purchase validation and delivery providers, Firebase and Google, advertising partners, infrastructure and support providers and legally required authorities. We do not operate a direct data-sale business. Certain advertising disclosures may qualify as sharing or sale under regional law; applicable consent and objection mechanisms must be respected.

Security

Service connections use HTTPS. No transmission or storage method provides an absolute security guarantee.

Rights and deletion

Depending on your location you may have rights to access, correct, delete, restrict, object to processing, obtain portability and withdraw consent. Contact indeagamesstudio@gmail.com with the subject "Number Dropulse privacy request". Proportionate verification and an app-instance or purchase-support identifier may be required to locate pseudonymous records. Some transaction records may need to remain for legal or fraud-prevention purposes. Clearing local app data does not automatically delete store transactions or third-party records. You may also contact the relevant service provider or data protection authority. There is no player-account creation or deletion screen because no player login exists.

Audience and international processing

The intended audience is 13 and older; the game is not marketed as a children's product. Advertising age and consent controls remain necessary and a stated target audience does not prove a user's age. Providers can process data outside your country; applicable contractual and technical protections govern transfers. External links and advertisers' sites have their own policies.

3.Third-Party SDKs

Number Dropulse is free to play. When advertising is configured and enabled, ads (interstitial and optional rewarded) are delivered through the Yodo1 MAS mediation platform; optional in-app purchases are handled by RevenueCat, Google Play and the Apple App Store. To do this, the app includes the third-party SDKs listed below. Each SDK collects the data shown on its card directly from your device, which means that data is shared with the vendor named on the card, and each vendor processes it under its own privacy policy, linked there. The same disclosures are reflected in the app’s Google Play Data Safety section and Apple App Privacy label. Mediation means Yodo1 passes each ad request on to a number of partner ad networks and serves whichever one fills it, so the data on the Yodo1 card is also received by the network that ultimately shows you the ad. Yodo1 maintains the current list of those partners, and each of them processes data under its own privacy policy; the Yodo1 policy linked below is the authoritative starting point for that list.

Yodo1 MAS

Yodo1 Ltd.ad mediation

Data this SDK may collect:

ThinkingData (in Yodo1 MAS)

ThinkingData, Inc., on behalf of Yodo1 Ltd.ad and SDK performance measurement for Yodo1 MAS

Data this SDK may collect:

AppHarbr (in Yodo1 MAS)

Five Media Marketing Limited (GeoEdge)ad quality and safety monitoring

Data this SDK may collect:

Google AdMob

Google LLCadvertising

Data this SDK may collect:

AppLovin

AppLovin Corporationadvertising

Data this SDK may collect:

Meta Audience Network

Meta Platforms, Inc.advertising

Data this SDK may collect:

Pangle

ByteDance Pte. Ltd.advertising

Data this SDK may collect:

Mintegral

Mintegral International Limitedadvertising

Data this SDK may collect:

Vungle (Liftoff)

Liftoff Mobile, Inc.advertising

Data this SDK may collect:

Unity Ads

Unity Technologiesadvertising

Data this SDK may collect:

Unity LevelPlay (ironSource)

Unity Technologies (ironSource Ltd.)advertising and ad mediation

Data this SDK may collect:

Digital Turbine (Fyber)

Digital Turbine, Inc.advertising

Data this SDK may collect:

Moloco

Moloco, Inc.advertising

Data this SDK may collect:

BidMachine

BidMachine Inc.advertising

Data this SDK may collect:

TopOn (AnyThink)

TopOn Pte. Ltd.ad mediation

Data this SDK may collect:

InMobi

InMobi Pte. Ltd.advertising

Data this SDK may collect:

BIGO Ads

BIGO Technology Pte. Ltd.advertising

Data this SDK may collect:

Firebase Analytics

Google LLCanalytics

Data this SDK may collect:

Firebase Crashlytics

Google LLCcrash reporting

Data this SDK may collect:

RevenueCat

RevenueCat, Inc.in-app purchase validation and restore

Data this SDK may collect:

4.Advertising & Advertising ID

Ads in Number Dropulse may be personalized (chosen using your advertising ID and inferred interests) or non-personalized (chosen only from context, such as the game you are playing and your approximate region). Where the law requires it — for example under the GDPR — personalized ads are only shown with your consent, and declining consent means you see non-personalized ads instead; the game itself stays fully playable either way.

Your device’s advertising ID is a resettable identifier that ad networks use for frequency capping, fraud prevention, measurement and personalization (with your consent where the law requires it). You are in control of it:

5.Analytics

We use Firebase Analytics and Firebase Crashlytics to understand how the game is played — for example which levels are too hard, where crashes happen, and which features players enjoy. This data is tied to a device or app instance, not to your real-world identity: we see counts and patterns, never your name or contact details, and we use it only to improve the game. Details for each tool are in section 3.

6.App Permissions

Number Dropulse requests only the permissions it needs to work:

7.Children’s Privacy

Number Dropulse is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal information, contact us at indeagamesstudio@gmail.com and we will take steps to delete it.

8.Your Rights

Depending on where you live, you may have legal rights over your personal data, including the following.

If you are in the EU/EEA or UK (GDPR): you have the right to access, rectify, erase and receive a portable copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Our legal bases are your consent (personalized advertising and optional game measurement, where the law requires consent), performance of our contract with you (processing and restoring your in-app purchases), our legitimate interests (non-personalized ads, analytics, crash reporting and fraud prevention) and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident (CCPA/CPRA): you have the right to know what personal information is collected about you, to request its deletion, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. Showing personalized ads can, however, count as “sharing” (and in some cases a “sale”) as the CPRA defines those terms broadly; you can opt out by limiting ad tracking on your device (see section 4) or by using the vendor opt-out links in section 3. We will never discriminate against you for exercising these rights.

Because most data described in this policy is collected directly by the SDK vendors in section 3, requests about that data are fastest through the vendor’s own privacy page. For anything else — or if you would like our help — email us at indeagamesstudio@gmail.com and we will respond within the time required by law.

9.Data Retention & Security

Local information may remain until it is deleted or the app is removed. Transaction and delivery records are retained as needed for fulfillment, duplicate prevention, refunds, security and legal obligations. Provider retention and processing follow their own service settings and policies; unnecessary information should be deleted or de-identified. Support correspondence is retained for handling the request and associated disputes. Data collected by third-party SDKs is retained by those vendors according to their own published retention periods, as described in their privacy policies. The SDK vendors protect data with industry-standard safeguards such as encryption in transit, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10.International Transfers

The SDK vendors listed in section 3 operate globally, so data they collect may be processed in the United States and other countries outside your own. Where data leaves the EU/EEA or UK, the vendors rely on recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (for example the EU–U.S. Data Privacy Framework, where the vendor is certified). Details are in each vendor’s privacy policy.

11.Changes to This Policy

If we add an SDK, remove one, or change how data is handled, we will update this page and change the effective date at the top; where required, we will also give additional notice. The current version always lives at indeagames.com/privacy/numberdropulse.

12.Contact

Questions, concerns, or a privacy request? We are a small team and we actually read our email: indeagamesstudio@gmail.com.