Privacy Policy for ZipPath

This Privacy Policy explains how ZipPath, a mobile number-path puzzle game, accesses, collects, uses, stores, and shares information when you play the app.

Information processed and why

1. Game progress stored on your device

ZipPath stores gameplay progress in the app's private storage on your device. This local save data includes:

• Levels unlocked and completed
• Petals earned and completion times
• Selected and unlocked color themes
• In-game Drops balance
• Daily Pond streak and last-completion date
• Hint balance and last-refill time
• Sound and haptic settings
• Whether ads have been removed if a future purchase feature is enabled

This local save file is used to restore your progress and settings in the app. Little Tag Art Studios does not upload the full save file to its own servers. Some values derived from your progress, such as petals and completion time, may be submitted to Google Play Games leaderboards when you are signed in to Play Games.

2. Firebase Authentication and Cloud Firestore

ZipPath includes an optional Google Sign-In button in Settings. If you choose to sign in, Firebase Authentication and Google handle the sign-in flow. ZipPath receives account profile information from Firebase and stores a small profile document in Cloud Firestore under your Firebase user ID.

The Firestore profile may include:

• Firebase user ID
• Google account display name
• Google account email address
• Google account profile photo URL
• Email verification status processed in the app
• Last profile update time

This information is used to keep your in-game account profile current and to support account-related features. The Firestore security rules are designed so that each signed-in user can read, update, and delete only their own profile document. Little Tag Art Studios does not use this Firebase profile to sell personal information.

Signing out of the app stops the current signed-in session on that device, but does not automatically delete the existing Firebase profile document. To request deletion of that profile data, contact us using the email address below.

3. Product analytics

ZipPath uses Google Analytics for Firebase to understand how the app is used, measure engagement and advertising performance, improve gameplay and game balance, and diagnose broad usage trends. The Google Analytics for Firebase SDK automatically collects certain events and properties when you use the app. This may include:

• App opens, first opens, sessions, engagement time, and screen interactions
• Ad requests, impressions, clicks, exposure time, and rewarded-ad activity received through the linked Google AdMob integration
• App version, device type, operating system, language, and general device information
• Approximate location derived from IP address; Google states that Analytics does not log or store individual IP addresses
• A randomly generated app-instance identifier and, where available and permitted, device or advertising identifiers

ZipPath may also record pseudonymous product events, such as level starts and completions, moves, hints, resets, daily-challenge activity, virtual-currency balances and awards, shop activity, and rewarded-ad choices. These events may be sent to Google Analytics for Firebase or stored in batched form in Cloud Firestore. Firestore event batches may include timestamps, a random per-device identifier, a session identifier, app version, platform, and your Firebase user ID if you are signed in.

This information is used for aggregated reporting and to improve ZipPath. The analytics event instrumentation does not intentionally send your name, email address, Google profile photo, or full local save file. Little Tag Art Studios does not sell this analytics information. Google processes Google Analytics for Firebase data under Google's terms and privacy policies.

4. Google Play Games Services and leaderboards

On Android, ZipPath initializes Google Play Games Services and may attempt Play Games sign-in so that leaderboard features can work. If you authorize or have previously authorized Play Games for ZipPath, Google manages the sign-in flow and account choices.

When Play Games leaderboards are used, ZipPath processes:

• Your Play Games public display name
• Your Play Games avatar image URL
• Your leaderboard rank
• Your leaderboard scores, which encode petals earned and completion time
• Public display names, avatar image URLs, ranks, and scores of other players shown on the leaderboard screen

This data is shared with and processed by Google to authenticate players, submit scores, and display leaderboards. Little Tag Art Studios does not receive your Google account password or payment-card information through Play Games. You can manage Play Games profile, privacy, and game-data settings through your Google account and Play Games settings.

5. Google AdMob advertising

ZipPath uses the Google Mobile Ads SDK to display banner, interstitial, and rewarded ads. Google's advertising services may collect and share data with Google for ad delivery, ad measurement, analytics, fraud prevention, security, and consent management. This may include:

• IP address, which may be used to estimate general location
• User interactions, such as app launches, taps, ad views, and video views
• Diagnostic information, such as app or SDK performance, launch time, hangs, crashes, and energy usage
• Device and account identifiers, such as the Android Advertising ID, App Set ID, and other applicable device or account identifiers
• Basic device information, such as device type, operating system, language, and locale
• Advertising consent choices where Google's User Messaging Platform is shown

Google may use this information to provide, personalize, measure, and protect advertising, depending on your region, your consent choices, and your Google or Android ad settings. Little Tag Art Studios receives aggregated advertising reports, such as impressions and revenue, rather than your Google account password or payment-card information.

You can manage your Advertising ID and ad-personalization choices in Android or Google settings.

6. Store crash reports and diagnostics

Google Play, the device operating system, and related platform services may collect crash reports, security signals, and technical diagnostics according to your device, account, and store settings. Little Tag Art Studios may receive aggregated or pseudonymous reports through developer consoles to find and fix errors.

Permissions

ZipPath requests only the permissions needed for the app features it provides:

• Internet: used for Google Play Games sign-in and leaderboards, Firebase Authentication, Firestore profile and product-event storage, Google Analytics for Firebase, AdMob advertising, consent management, and related diagnostics.
• Vibrate: used for optional haptic feedback during gameplay. Haptics can be disabled in the game's settings.

ZipPath does not request access to precise device location, contacts, photos, calendar, microphone, or camera.

How information is shared

Little Tag Art Studios does not sell personal information. Information is shared only as needed with:

• Google Firebase Authentication and Cloud Firestore, for optional Google Sign-In, the signed-in user's profile document, and pseudonymous product-event storage.
• Google Analytics for Firebase, for app-use, engagement, gameplay, advertising-performance, and audience reporting.
• Google Play Games Services, for player authentication, leaderboard score submission, and leaderboard display.
• Google AdMob and the Google Mobile Ads SDK, for advertising, ad measurement, analytics, consent management, security, and fraud prevention.
• Google Play and platform providers, for app distribution, billing if enabled in a future release, security, crash reporting, and diagnostics.

These providers process information under their own privacy policies and may process it in countries other than your own.

Security

Local progress is kept in the app's private storage. Data sent to Google services, including Firebase, Google Analytics, Google Play Games Services, and Google AdMob, is transmitted using encrypted connections such as HTTPS/TLS. Firestore profile access is limited by Firebase Authentication and Firestore security rules. No method of electronic storage or transmission is completely secure, but we and our service providers use reasonable safeguards appropriate to the information processed.

Data retention and deletion

• Local progress: remains on your device until you reset progress in the app, clear ZipPath's app data, or uninstall the app.
• Firebase profile data: remains in Cloud Firestore while your ZipPath Firebase account profile exists. You may request deletion by contacting us. We will delete the active profile data after verifying the request unless we need to retain information for legal, security, or abuse-prevention reasons.
• Analytics and product-event data: Google Analytics data is retained according to the retention settings configured for the linked Google Analytics property and Google's policies. Pseudonymous Firestore event batches are retained only as reasonably necessary to analyze and improve the app, then deleted or aggregated. Resetting app data or reinstalling the app may cause a new app-instance or per-device identifier to be created. You may contact us to request deletion where the data can reasonably be identified.
• Play Games data: is retained by Google according to your Play Games settings and Google's policies. You can manage or request deletion of Play Games data through your Google account or Play Games settings.
• Advertising, consent, and diagnostic data: is retained by Google, the app store, or the relevant platform provider according to that provider's policies. You can manage ad privacy choices and reset or delete your Advertising ID in Android or Google settings.

Children's privacy

ZipPath is a general-audience game and is not directed to children under 13 or the minimum digital-consent age in their country. We do not knowingly collect personal information directly from children. Google Play Games, Firebase, AdMob, Google Play, and the device platform process information under their own policies and account, age, consent, and regional settings. If you believe a child has provided personal information in connection with ZipPath, contact us so we can review the request and assist with the appropriate provider controls.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of personal information, or to object to or withdraw consent for certain processing. To make a request, contact us below. We may need enough information to verify and respond to your request.

Third-party privacy information

• Google Privacy Policy
• Google advertising and cookies
• Google Mobile Ads SDK data disclosure
• Google Analytics data collection
• Google Analytics data retention
• Google Play Games privacy information
• Firebase privacy and security information

Changes to this policy

We may update this policy when the app, its service providers, or legal requirements change. We will post the revised policy at the privacy-policy URL listed for ZipPath and update the effective date above.

Contact

Little Tag Art Studios
Email: info@littletagartstudios.com

For privacy questions or requests, email us at the address above.