Privacy Policy

1. Who we are

ADV IT Solutions SRL ("we", "us", or "our") provides Mold Loop (the "Game") and is responsible for the processing of personal data described in this policy.

This policy covers the Android Game, this legal website, and communications you send to us about Mold Loop. Google Play and other external services have their own privacy notices.

2. A short explanation for players

3. Information processed and why

Progress stored on your device

The Game stores your current and completed levels, puzzle state and undo history, coins, lives and life-regeneration time, sound and accessibility preferences, and tutorial state. This information is used to resume your game, operate the in-game economy, and remember your settings.

Your save and a recovery backup are stored locally. We do not receive this save through a Mold Loop account or cloud-save service. Your operating system or device-transfer service may separately back up local app data according to your device and account settings.

Gameplay analytics

We use Google Analytics for Firebase to understand how the Game is used and improve its balance and usability. Custom events can include levels started and ended, successful lane moves, puzzle status, move and completed-order counts, virtual coins earned or spent, lives spent, settings changes, app version, platform, and whether a build is a development or release build.

Our custom events do not intentionally include your name, email address, support-message contents, or precise GPS location. Firebase may automatically process information such as app-instance and device identifiers, sessions and app interactions, operating system, device model, app version, general region, first launch, and app updates. See Firebase data collection.

Crash and diagnostic reports

We use Firebase Crashlytics to diagnose errors and improve stability. Reports can include crash traces, Firebase and Crashlytics installation identifiers, device and operating-system details, app and Game-engine versions, and diagnostic context such as the current level, level status, moves, and completed orders. We do not assign your name or email address as a Crashlytics user ID. See Firebase privacy and security information.

Rewarded advertisements

We use Google AdMob to offer optional advertisements in exchange for in-game rewards. The Google Mobile Ads SDK can process and share IP address, general location derived from IP, advertising or other device identifiers where available, app launches, taps, video views, and diagnostic information for ad delivery, measurement, analytics, and fraud prevention.

An ad request and related SDK processing can occur when an advertisement is loaded, before you decide whether to watch it. Declining or closing an advertisement is therefore not a complete privacy opt-out. See Google's partner data explanation and Google Mobile Ads data disclosure.

In-app purchases

Google Play processes payments, and RevenueCat helps validate purchases and manage access to purchased content. This can involve product and transaction information, purchase history, Google purchase tokens or receipts, purchase status, an SDK-generated app user identifier, device type, operating system, and related technical information. We do not receive your complete payment-card details through the Game. See RevenueCat's Privacy Policy and Google's Privacy Policy.

Support messages

If you email us, we process your email address, message, and any information you choose to provide so that we can answer your request. Please do not send passwords, payment-card details, or unnecessary personal information. Our email provider, Google, processes these communications to deliver and store email.

This legal website

This site is hosted using Firebase Hosting. Google may process request information, including IP addresses, to deliver the pages, maintain security, and detect abuse. Firebase states that Hosting retains IP data for a limited period. The site itself does not use advertising cookies, account login, or browser analytics.

4. Purposes and legal grounds

We process local progress and purchase information as necessary to provide the gameplay, paid content, and support you request. Where European data-protection law applies, essential security, fraud prevention, and diagnostic processing may be based on our legitimate interests in operating, protecting, and improving the Game, where those interests are not overridden by your rights. Records required for accounting, tax, or other legal purposes are processed to meet legal obligations.

Analytics or diagnostic processing that requires consent under the law applicable to you must rely on valid consent. Consent can be withdrawn without affecting processing already carried out lawfully. Accepting the Terms of Use or reading this policy does not by itself constitute consent to optional processing.

For advertising, the Game uses Google's User Messaging Platform to present privacy choices where required by its regional configuration. Where the privacy-options entry point is available in the Game, you can reopen it to review or change your choices. Advertising choices do not necessarily control Firebase Analytics, Crashlytics, Google Play transaction processing, or RevenueCat purchase validation.

5. Children

The Game is not specifically directed to children under 13. We do not ask players to provide a name, date of birth, email address, or other account information inside the Game. Firebase services can nevertheless process device, app-instance, usage, and diagnostic information as described above.

If you are a parent or guardian and believe that a child provided personal information to us or that their information was processed contrary to applicable law, contact advitsolutionsro@gmail.com. We will assess the request and take appropriate steps, including deletion where we can identify the relevant records and deletion is required.

6. Who receives information

Google receives information as the provider of Firebase Analytics, Firebase Crashlytics, Google AdMob, Firebase Hosting, Google Play distribution and billing, and our email service. RevenueCat receives purchase and technical information used to validate and manage in-app purchases. Advertising recipients can also depend on the active AdMob mediation and consent configuration.

Information may also be disclosed when required by law, in response to a valid legal request, or where reasonably necessary to protect legal rights and security. We do not sell player records.

7. International processing and security

Google may process information outside your country on global infrastructure, including in the United States. Where required, international transfers of European personal data must use an applicable legal safeguard.

We take reasonable steps to limit custom telemetry to gameplay and technical information. No storage or transmission method is completely secure. Protect your device and store account, and do not use support messages or local game saves to store confidential information.

8. Retention and deletion

Local progress remains on your device until it is removed or replaced. You can clear the Game's local data through Android settings or uninstall the Game. Operating-system backups may retain or restore a copy and must be managed separately. Clearing data may permanently remove progress and virtual items.

Removing local data does not automatically delete information already received by Google, RevenueCat, or us. Firebase states that Crashlytics retains crash traces and associated identifiers for 90 days before beginning removal from live and backup systems. Analytics retention depends on the Firebase property settings. Google Play and RevenueCat retain transaction records according to their policies and applicable legal obligations. Support emails are retained only for as long as reasonably needed to answer the request, maintain appropriate records, and meet legal obligations.

We do not maintain a directory linking a player's name or email address to local saves or all SDK-generated identifiers. An email address alone will therefore not normally allow us to locate Analytics, Crashlytics, advertising, or RevenueCat records. A purchase-support request may require an order reference. If you make a deletion request, we will explain what information is reasonably necessary to identify relevant records and use available provider tools where identification and deletion are possible.

9. Your choices and rights

Depending on your location and the applicable law, you may have rights to request access, correction, deletion, restriction, or portability of personal data; to object to certain processing; or to withdraw consent. Contact advitsolutionsro@gmail.com. You may also complain to your local data-protection authority, including Romania's ANSPDCP where applicable.

We may request limited information needed to verify and locate records. Do not send identity documents unless we explain why they are necessary and provide an appropriate way to send them. Under the GDPR, we normally respond within one month, subject to lawful extensions.

You can choose not to watch rewarded advertisements or make in-app purchases. Android provides advertising-ID and other privacy controls, although those controls do not necessarily stop all SDK processing. You can stop future Game collection by uninstalling the Game. Clearing app data resets local progress and can cause services to generate new installation identifiers if the Game is used again. The Game has no account-deletion button because it does not provide a Mold Loop player account.

10. Changes and contact

We may update this policy when the Game, its providers, or legal requirements change. The effective date identifies the current version. Material changes will receive an appropriate notice, and new consent will be requested where required before the relevant new processing begins.

For questions or requests, contact ADV IT Solutions SRL — advitsolutionsro@gmail.com.