Privacy Policy

Data we collect

Vault creates an anonymous Firebase Authentication account so profiles, friends, multiplayer sessions, and reconnect can work without a separate sign-up form.

• Account and profile data: Firebase user ID, display name, public player ID, selected avatar, and profile creation date.
• Social and multiplayer data: friends, friend requests, lobby invitations, lobby membership, session players, game actions, votes, reactions, connection state, and timestamps.
• Purchase data: product identifiers, purchase and subscription status, store transaction references, and entitlement state. Vault does not receive your full payment-card details.
• Analytics and technical data: automatically collected app lifecycle events, selected product events, app version, device and operating-system information, interface language, time zone, approximate country or region derived from network information, SDK-generated installation identifiers, crash reports, and diagnostics.
• Support data: your email address and any information you voluntarily include when contacting us or submitting a form.

How we use data

• Create and maintain your Vault profile and public player ID.
• Provide friends, invitations, lobbies, multiplayer games, and reconnect.
• Process purchases, restore access, and prevent subscription or payment fraud.
• Operate, secure, troubleshoot, and improve Vault.
• Reply to support and account-deletion requests and comply with legal obligations.

Service providers

Vault uses service providers that process data on our behalf or provide store services. Their processing is also governed by their own terms and privacy documentation.

• Google Firebase Authentication and Cloud Firestore for accounts, profiles, social data, and multiplayer data.
• Google Firebase Analytics and Google BigQuery for product measurement, and Firebase Crashlytics for crash reports and technical diagnostics.
• Apphud and the applicable app store for purchases, subscriptions, paywalls, and entitlement checks.
• Netlify for this public website and support forms.

Product analytics and diagnostics

Firebase Analytics records automatic lifecycle events such as first open and session start, together with a limited set of typed product events used to measure onboarding, multiplayer reliability, game completion, and the purchase funnel. The interface language is stored as an analytics user property, and the anonymous Firebase Authentication UID may be set as the analytics user ID to connect activity across devices.

Vault does not manually send lobby or invitation codes, game-session IDs, player names, public player IDs, complete URLs, prices, revenue, or free-form error messages as Firebase Analytics event parameters. Crash details and diagnostic context are handled separately by Firebase Crashlytics or the applicable platform diagnostic tools.

Firebase Analytics events may be exported to Google BigQuery for internal aggregate reporting, including activation and repeat-play analysis. Apphud remains the source of record for subscription status, renewals, cancellations, refunds, and revenue.

Advertising identifiers

Vault does not use advertising identifiers for product analytics or targeted advertising. The iOS app does not link Apple’s AdSupport framework or request App Tracking Transparency permission solely for analytics, and the Android app does not request Google Play’s AD_ID permission. Service providers may still use non-advertising installation or technical identifiers for app functionality, measurement, security, and fraud prevention.

Retention and account deletion

You can delete your account inside Vault at Settings → Delete account and data, or submit a request through our public deletion page. The live Firebase account, profile, social records, invitations, and reconnect records are deleted. Player data in an active game is removed or anonymized so the remaining game can continue.

Limited transaction, security, fraud-prevention, accounting, legal, backup, analytics, or diagnostic records may be retained where required or for a limited operational period. Where possible, retained analytics is de-identified or aggregated and is no longer used to provide your Vault profile.

Security and international processing

We use reasonable technical and organizational measures, including authenticated access controls and encrypted network transport. No system can guarantee absolute security. Providers may process data in countries other than your own under their applicable safeguards.

Children

Vault is not directed to children under 13, and we do not knowingly collect personal data from a child under 13. If you believe a child provided data, contact us so we can investigate and delete it.

Changes and contact

We may update this policy when Vault or its providers change. The effective date above identifies the current version. Privacy questions can be sent to georgin2000155@gmail.com.