FINGER RUSH Privacy Policy
coffee break designs handles the following information to provide FINGER RUSH and operate its global leaderboard.
Information collected
- The player name and country or region selected at first launch. The country or region is self-reported; the app does not collect device location.
- An anonymous user ID issued by Firebase Authentication. The app does not ask for an email address or password.
- The event, result and gameplay action data when a world leaderboard attempt is completed. Free local results remain on the device. Name changes are stored in a history.
- App settings, device rankings and unsent world attempts are stored on the device. Google Play purchase tokens are sent to our server over an encrypted connection for verification. The server stores token hashes, product IDs, credits granted, balances and their link to an anonymous ID. Raw purchase tokens are not stored in the server database. The app does not collect payment card numbers.
Android app verification
World attempts are available only in the Android app distributed through Google Play. At the start, Google Play Integrity checks whether the request comes from the genuine app. Google Play processes app package, version and signature information, licensing information, device attestation information and a hash of the request. The hash is derived from the anonymous ID, event and attempt ID; these original values are not sent to Google. The encrypted verification token passes through our server to Google for verification. We do not store or log raw tokens. The attempt record stores the Android verification status, app version and verification time. This information is used to prevent abuse, not for advertising or device tracking. Web race results are saved only in the device leaderboard.
Purposes and public information
We use this information to identify a player, verify results, compile and display global rankings, and verify entry purchases, manage entry balances and recovery, grant the legacy-owner bonus, and process refunds or revocations. The global leaderboard displays the player name, selected country or region, flag, event and result. Please do not use personally identifying information as a player name.
External services
We use Google Firebase for anonymous authentication and to store and serve profiles and rankings. Google Play processes in-app purchases and payment details. We do not sell or provide information collected by the app to third parties for advertising.
Retention and deletion
We retain player information and ranking records for as long as needed to provide the service. Deleting the account in Settings removes the anonymous authentication account, player profile, name history, global leaderboard entries, local records, entry balances and purchase-to-account links. Token hashes and processing records needed to prevent duplicate grants remain without their account links. If you saved a web deletion code issued in Settings, you can verify it on our account deletion page and delete the same server data. The page also accepts email requests without a code, although a name or country alone cannot prove ownership. We temporarily retain only the anonymous ID and an expiration time to prevent old requests from recreating the account. It becomes eligible for deletion after 48 hours and is normally removed within a further 24 hours. Google Play purchase entitlements and transaction records managed by Google remain.
Security
Connections to the server are encrypted in transit. Server writes are tied to an ID issued through anonymous authentication.
Age
This app is intended for ages 13 and older.
Changes and contact
When this policy changes, we will update the content and date on this page. For privacy, deletion or purchase inquiries, contact wada@coffee-break-designs.com.