Lotus Blocks

Privacy Policy

Last updated: 20 May 2026

1. Who We Are

Lotus Blocks (the "Game", "App") is developed and published by Mindoria ("we", "us", "our"). For any privacy-related question you can reach us at ekinnuzunyayla@gmail.com.

2. Scope

This Privacy Policy describes how we collect, use, and share information when you use Lotus Blocks on iOS or Android, or visit this website (ekinuzunyayla.github.io/lotusblocks). By using the Game you agree to the practices described here.

3. Information We Collect

Lotus Blocks is designed to collect the minimum data needed to operate the game, deliver advertising, and improve gameplay balancing. The categories below cover everything we actually collect:

(a) Anonymous user identifier — when you first open the Game, our backend (Supabase) automatically issues an anonymous UUID stored locally in the device's secure storage (iOS Keychain / Android EncryptedSharedPreferences). This UUID is used solely to associate gameplay telemetry with your install. It is not linked to any personal information such as your name, email, phone number, or device IDFA/AAID. You do not create or see this identifier.

(b) Advertising identifier — Apple IDFA on iOS and Android Advertising ID (AAID), used only with your consent. On iOS we request consent through the standard App Tracking Transparency (ATT) prompt before any personalised advertising is enabled. If you decline, you still see advertisements, but they are not personalised.

(c) Gameplay telemetry — a small set of non-personal events (piece-placement timing, ability use, run length, mastery level reached, tutorial completion, rewarded-ad views) is transmitted to our Supabase backend to help us tune difficulty pacing and detect balance issues. Events never include personally identifying information; they are keyed by the anonymous UUID described in (a).

(d) Crash diagnostics (Firebase Crashlytics) — when the Game crashes, anonymized crash reports are sent automatically to Firebase Crashlytics so we can identify and fix bugs. Reports contain device model, OS version, app version, and stack traces. They do not include personally identifying information. Crash collection is keyed to a Firebase-managed anonymous Installation ID, not your IDFA/AAID or any account.

(e) Anonymous analytics (Firebase Analytics) — opt-in, off by default. When you enable "Analytics" in Settings → Privacy, a small set of anonymous events (screen views, ability uses, store visits, achievement unlocks, purchase completions) is sent to Firebase Analytics to help us understand which features players actually use. Events are keyed by the anonymous Firebase Installation ID and do not include personally identifying information. You can revoke consent at any time in Settings; event transmission stops immediately.

(f) Purchase records (RevenueCat) — when you make an in-app purchase, the transaction (product ID, purchase date, store environment, locale-formatted price, anonymous RevenueCat customer ID) is processed by RevenueCat to validate the receipt with Apple App Store or Google Play and credit the purchased Gems to your in-game wallet. The RevenueCat customer ID is anonymous and tied to your device install; we do not link it to your name, email, payment information, or any other personal identifier. Payment data itself (credit card numbers, billing address) is handled exclusively by Apple or Google and never reaches our servers.

4. Information That Stays on Your Device

The following data is stored locally and is never transmitted to our servers: your player progression, Gem and Star balances, theme and avatar ownership, skill tree state, stamp collection, audio/haptic preferences, and chosen language. This data lives in your device's SQLDelight database and AndroidX DataStore preferences and is removed when you uninstall the Game.

5. No Sign-Up Required

Lotus Blocks does not require you to create an account, log in, or provide any personal identifier such as email, phone number, or name to play. The Game uses the anonymous UUID described in Section 3(a) for technical purposes only — there is no profile, no social features, and no way for us to identify you as a person.

6. Third-Party Services

The Game integrates the following third-party services. Each provider processes data under its own privacy policy:

7. Children

Lotus Blocks is rated for a general audience and is not directed at children under the age of 13 (or the equivalent age in your jurisdiction). We do not knowingly collect personal information from children. Advertising delivered inside the Game is configured to comply with Google AdMob's tag-for-child-directed-treatment (TFCD) and tag-for-users-under-age-of-consent (TFUA) when applicable. If you are a parent or guardian and believe your child has provided us with information, please contact us so we can delete it.

8. Advertising Consent

Advertisements are delivered by Google AdMob. On iOS we always show the App Tracking Transparency prompt before any tracking-based personalised advertising is enabled. If you decline tracking, you still see ads, but they are not personalised. EU/EEA/UK GDPR consent collection through Google's User Messaging Platform (UMP) will be added in a future version; until then, ads served in these regions default to non-personalised.

9. Your Rights

Depending on your jurisdiction you may have the following rights regarding your personal data:

To exercise any of these rights, email ekinnuzunyayla@gmail.com with a description of your request. Because we hold no personally identifying information, we will ask you to provide the anonymous UUID from the in-game Settings → About screen so we can locate the matching telemetry rows. We will respond within the time period required by applicable law (typically 30 days under GDPR/KVKK).

10. Data Retention

Gameplay telemetry rows in our Supabase backend are retained for 12 months from collection, after which they are aggregated into anonymous statistics and the row-level records are deleted. Firebase Crashlytics retains anonymized crash reports for 90 days (Google default). Firebase Analytics retains anonymous event-level records for 14 months (the default GA4 retention window). RevenueCat retains purchase receipts for the lifetime of the anonymous customer ID, which is required to validate purchases and restore non-consumable entitlements across reinstalls; consumable items such as Gems are not restored under Apple App Store Review Guideline 3.1.1. The anonymous UUID is retained for as long as the Game remains installed on your device; uninstalling the Game removes the local UUID, and you may also request server-side deletion as described in Section 9. Locally stored progression (including unspent Gems and Stars) remains on your device until you uninstall the Game.

11. International Transfers

Because we use Google and Apple cloud services, your data may be processed in countries other than your own, including in data centres located in the European Union and the United States. Where applicable, transfers from the EU/EEA rely on Standard Contractual Clauses (SCCs) provided by our service providers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced inside the Game and reflected by an updated "Last updated" date above. Continued use of the Game after a change indicates acceptance of the updated Policy.

13. Contact

Questions, requests, or complaints related to this Privacy Policy: ekinnuzunyayla@gmail.com.

← Back to home