Privacy Policy

This Privacy Policy describes how FullStackTechnologies LLC ("we", "our", "us") collects, uses, and shares information when you use the Snake n Friends mobile game, related websites, and support services (the "Service").

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, do not use the Service.

1. Information we collect

1.1 Information you provide

• Display name and player tag. A handle (2–20 characters) and a numeric discriminator that together identify you to other players.
• Avatar / calling card / theme selection. Visual choices you make for your in-game profile.
• Friend connections. Player tags of users you add as friends and incoming/outgoing friend requests.
• Linked-account information. If you choose to protect or recover your account with email, Apple, or Google, Firebase receives the provider identifier and information the provider releases, such as an email address or display name. Linking is optional.
• Support requests. If you contact support, we receive the name, email address, and message you submit.

1.2 Information collected automatically

• Anonymous account ID. When you first launch the app we create a Firebase anonymous account with a system-generated user ID. This ID lets us save your progress and identify you across sessions.
• App and device-integrity signals. Firebase App Check may process platform attestation signals from Apple App Attest/DeviceCheck or Google Play Integrity to help verify that backend requests come from an authentic app or device. We do not use IDFV or Android ID as an account-recovery secret.
• Network and abuse-prevention data. Our infrastructure and service providers may process IP address, request timing, authentication state, and security logs to operate the Service, enforce rate limits, investigate abuse, and protect accounts.
• Game data. Sector progress, stars earned, high scores, longest snake, arena rank (SR), wins, losses, win streaks, completed games, and game configurations you save as favorites.
• Push notification and delivery data. If you grant permission, we receive an Expo push token. Expo's push notification service uses this token to deliver our game-related notifications through Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM). We also process limited ticket, receipt, retry, and error-status metadata to reconcile delivery; this operational metadata does not contain the device token after the delivery reaches a terminal state.
• Purchase history. Records of in-app purchases (transaction ID, product, purchase date) processed via Apple App Store or Google Play and tracked through RevenueCat.
• Crash and error reports. Diagnostic information about crashes or errors via Sentry, which may include a pseudonymous user ID, stack trace, device model, breadcrumbs, and diagnostic fields.
• Product analytics. Firebase Analytics and Vercel Analytics process events such as app/site use, gameplay interaction, feature engagement, purchase completion, approximate platform information, and pseudonymous identifiers. Mobile Firebase Analytics is disabled until you enable it in Store Settings, and you can withdraw that choice there at any time. We do not use this information for third-party advertising.
• Language preference. The locale code used to display translated content.

1.3 Information we do not collect

• We do not require your real name, phone number, or street address to play. We receive an email address only when you voluntarily link an account, use an identity provider that releases it, or contact support.
• We do not collect precise location data.
• We do not access your contacts, photos, microphone, or camera.
• We do not use third-party advertising SDKs or information from the Service for cross-service targeted advertising.

2. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Save and synchronize your game progress across sessions and, for linked accounts, across reinstalls or devices.
• Match you with opponents in arena play and maintain your ranked arena standing (SR, wins, losses).
• Send game-related push notifications (turn alerts, friend requests, daily rewards) where you have granted permission.
• Process and verify in-app purchases.
• Diagnose, debug, and prevent abuse, fraud, and cheating.
• Enforce our Terms of Use.

Your public player profile consists only of your display name, player tag, avatar, and related public gameplay rank. Authenticated players may see it when searching for your exact tag, viewing a leaderboard, or interacting with you through friends or arena play. Private inventory and preferences are not included in that profile.

We do not sell your personal information.

3. Third-party services

We use the following third-party providers to run the Service. They process data under their applicable terms, privacy commitments, and legal roles.

We do not share your information with advertisers or data brokers.

4. Data retention and deletion

• Active accounts. We retain your data for as long as your account exists.
• Inactive anonymous accounts. Anonymous accounts may be deleted after 180 days without recorded activity. Accounts with purchase, refund, fraud-prevention, moderation, or legal-retention obligations may be excluded or have limited records retained.
• Account deletion. You can delete your account at any time from within the app: open the Store tab → tap the gear icon → choose Delete Account. Deletion is permanent and runs as a background process whose status is shown in the app. It cascades across your profile, stats, friends, streaks, push tokens, game history, the players you have blocked, and the reports you have submitted. You will lose access to any in-app purchases tied to that account. A limited deletion-status tombstone may remain for up to 30 days and a restricted processing record may remain for up to 90 days so we can complete, retry, and audit the request; these records are not used to restore the account.
• Moderation records exception. Reports that other players file about you, and limited records needed to enforce a block or suspension, may be retained after your account is deleted where we have a legitimate interest in safety, abuse prevention, and detecting repeat violations.
• Name-change history. A record of display names you have used is retained for the lifetime of your account to support player-tag assignment and abuse prevention, and is removed when your account is deleted.
• Purchase and anti-fraud records. Account-facing purchase records may be deleted or de-identified with the account. Hashed transaction identity, entitlement ownership, refund, debt, and anti-fraud records may be retained longer where needed to prevent duplicate grants, process refunds, meet legal obligations, and protect the Service.
• Support records. Support requests are retained for as long as needed to respond, document the request, prevent abuse, and meet legal obligations.
• Crash logs. Sentry retains crash reports for the period defined by Sentry's standard retention policy.
• Push delivery records. Terminal delivery records, including ticket/receipt outcome and bounded error codes but not the raw device token, may remain for up to 30 days for reliability, abuse prevention, and operational review. Active device tokens remain until they are removed, invalidated, or the account is deleted.
• Backup snapshots. Deletion removes data from active systems. Residual encrypted copies may remain until the applicable backup lifecycle expires and are not restored except for disaster recovery.

5. Your rights

Depending on where you live, you may have additional rights under laws such as the GDPR (European Economic Area, United Kingdom) or the CCPA / CPRA (California). These may include:

• Access. The right to know what information we hold about you.
• Deletion. The right to delete your information (the in-app Delete Account flow exercises this right).
• Portability. The right to receive a copy of your data. The in-app data-export flow prepares a private JSON portability copy of supported account, gameplay, social, report, and purchase fields, makes it available for seven days, and issues a download link that expires after five minutes. Automatic copies are limited to 10 MiB; larger requests require support so data is not silently truncated. Security, anti-abuse, anti-cheat, confidential third-party, and legally retained records may be withheld from the automatic copy where permitted. Contact support for a complete access request or information about an omitted category.
• Objection / restriction. The right to object to or restrict certain processing.
• Non-discrimination. We will not discriminate against you for exercising any of these rights.

To exercise any right that is not covered by the in-app Delete Account or data-export flows, including a copy that exceeds the automatic size limit, contact us at support@snakenfriends.com.

6. Children's privacy

The Service is not directed to children under 13 (or under the relevant age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact support@snakenfriends.com and we will delete the account.

7. Security

We use industry-standard safeguards to protect your information, including:

• Encryption in transit (TLS) and at rest (Firebase Cloud Firestore).
• Server-side validation of purchases and gameplay state.
• Restricted Firestore security rules that prevent users from modifying other players' data, fraudulently granting themselves items, or tampering with ranked scores.
• App/device attestation, server-side throttling, and kill switches on sensitive operations where enabled and supported.
• Access controls limiting administrative tooling to authorized personnel.

No method of transmission or storage is 100% secure. Promptly report any suspected vulnerability to support@snakenfriends.com.

8. International transfers

Our backend is hosted on Google Cloud Platform in the United States. By using the Service from outside the United States you consent to your information being transferred to and processed in the United States.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, if the changes are material, provide notice within the app or via push notification. Your continued use of the Service after the updated policy takes effect constitutes acceptance.

10. Contact

Questions or requests:

FullStackTechnologies LLC
Email: support@snakenfriends.com