Privacy Policy

Effective date: July 13, 2026 · Last updated: August 17, 2026

This policy explains how 2048 Turbo Arena handles information when you play as a guest, create an account, join an online match or purchase a subscription.

Information we process

• Account information: if you choose email sign-in, we process your email address, display name, Firebase user ID and sign-in provider.
• Account-deletion safeguard: after account deletion, the backend keeps a durable tombstone at accountDeletionTombstones/{former Firebase user ID}. The former Firebase user ID appears only in the document path and the document contains only the deletion timestamp—no email address, display name, gameplay data or push token. This minimal record is retained indefinitely, or for as long as necessary, solely to prevent a stale authenticated device or delayed server retry from recreating deleted cloud data.
• Verified competitive information: competitive scores, match actions, move/replay logs and match results may be processed and stored online to run multiplayer races, verify fair play and publish verified leaderboards.
• Automatic Android Firebase identifier: on Android, Firebase components initialize when the app starts, and Firebase / Firebase Cloud Messaging automatically create and process a Firebase Installation ID and associated FCM registration identifier. This technical identifier processing is required by the current Android build and occurs whether or not you grant notification permission, create an account or upload gameplay. Google processes these identifiers as our service provider; we do not use them for advertising or analytics.
• Optional notification registration: separately, if a signed-in user in the general experience grants the operating-system notification permission, the app obtains an Expo push token that identifies the notification recipient/app installation. We store that Expo token in Firestore with the Firebase user ID, platform, enabled status and timestamps. The operating-system permission and our Firestore Expo-token registration are optional; you may deny permission and continue using the game.
• Purchase information: when subscriptions are enabled, Google Play or the Apple App Store and RevenueCat process product identifiers, entitlement status and purchase history. We do not receive your full payment-card details.
• Device-local information: all mutable economy and progress—including credits, reward and ad claims, quests, streaks, league points, local records and preferences—is stored only on your device in this release and is never cloud-synced, even when you sign in.
• Legacy test-build cleanup: an earlier test build may have created a whole-record playerRecords/{Firebase user ID} progress document. That progress is never loaded into the app, hydrated, merged, or used. The client issues a delete-only cleanup after authenticated launch; the backend enumerates the collection solely to delete legacy rows during its idempotent startup cleanup, and account deletion also removes the document.
• Age setting: the app is intended for users aged 13 and older. It asks for a birth year on first use, uses it only in memory to select a restricted or general experience, and stores only that broad setting on the device. The birth year is not saved or sent to us.
• Technical information: service providers may process IP address, device/app identifiers and diagnostic information needed for security, fraud prevention and reliable service delivery.

Why we process information

We use cloud information to create and secure account identities, maintain friend relations, provide online matches, verify competitive scores and replays, restore eligible external purchase entitlements, provide support and protect players and the service from abuse. We do not use the cloud to sync mutable economy or progress in this release. Automatic Android Firebase identifiers support reliable operation of Firebase and FCM. The optional Expo push token is used only to route friend-request, friend-acceptance and game-invitation notifications; it is not used for advertising, marketing or analytics. The account-deletion tombstone is used only to enforce deletion and block deleted cloud data from being recreated.

Service providers

We use Google Firebase for authentication, account identity, friend relations, optional push-token records and verified competitive score/replay storage; Expo Push Service together with the underlying Google Firebase Cloud Messaging or Apple Push Notification service for push-token management and notification delivery; our hosting provider for the match service; Google Play and the Apple App Store for app distribution and billing; and RevenueCat for external purchase entitlement management when billing is enabled. These providers process information to provide services on our behalf, under their own terms and privacy commitments.

Advertising and analytics

The current release does not include a third-party advertising SDK and does not use Firebase Analytics in the app. If this changes, we will update this policy and the applicable Google Play and App Store privacy disclosures before release.

Retention and deletion

Account identity and friend-relation information is retained while your account is active. Our Firestore Expo push-token record may also be retained while the account is active; it is removed when the notification service reports that it is no longer valid or as part of account deletion. Android Firebase Installation IDs and FCM registration identifiers follow Google Firebase's technical retention and lifecycle rules. Verified competitive scores/replays and multiplayer match data may be retained for leaderboards, match operation, security and abuse prevention. External purchase entitlements follow the applicable store and RevenueCat retention rules when configured. Device-local economy and progress remains until the app deletes it, you clear app data or you uninstall the app; it cannot be restored from our cloud.

After deletion, the minimal deletion tombstone described above is retained indefinitely, or for as long as necessary to keep the deletion barrier effective. It is not used to contact you, identify a public profile, restore gameplay or deliver notifications.

You can delete an email account from the in-app Profile screen. This deletes the Firebase account identity, friend relations, our verified competitive score/replay records and our Firestore Expo push-token records; only the minimal deletion tombstone described above remains. Device-local economy and progress is not a cloud profile and cannot be recovered from another device. Store or RevenueCat purchase records and entitlements may remain with those external providers under their terms. You can also follow the instructions on our account deletion page.

Security and international processing

We use encrypted network connections and access controls. Firebase account identity, friend relations, push-token records and verified competitive records are hosted in the European multi-region. Other providers may process information in additional countries under appropriate safeguards.

Age eligibility

2048 Turbo Arena is intended for users aged 13 and older on its supported app stores. The service is not directed to children under 13. A neutral age screen selects a restricted or general experience without encouraging a particular answer.

For users placed in the restricted experience, the app provides offline, account-free play. Cloud account creation, account or gameplay uploads, online multiplayer, purchases, advertising, analytics, social sharing, friend features and third-party subscription services are disabled. Restricted gameplay progress stays on the device. Because Android Firebase components initialize at app startup, Google may still automatically process the Firebase Installation ID and associated FCM registration identifier as a service-provider technical identifier; no operating-system notification permission is required for that automatic processing, and the app does not create an account-linked Firestore Expo-token record in the restricted experience.

Parents or guardians who believe a user under 13 provided personal information through a general-audience account can contact us to request deletion.

Your choices and rights

You may play as a guest without creating a cloud account. Operating-system notification permission and our account-linked Firestore Expo-token registration are optional, and you may decline without losing access to gameplay. The Android Firebase Installation ID and FCM registration identifier are created automatically by Firebase components in the current Android build. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of your personal information, subject to records that must be retained to keep an account deletion effective. Contact us to exercise these rights.

Contact

Developer: AHDE-SOFT
Email: hakandaldaband@gmail.com