The short version
We use account and game information to run Crystal MergeX, keep scores, connect friends and manage gems. You choose whether to add a profile photo or link a sign-in. We do not sell personal information or use it for targeted advertising. For privacy questions or deletion requests, contact atenterprise.development@gmail.com.
1. About this policy
This policy covers the Crystal MergeX game and its official website. The Crystal MergeX development team is responsible for the player information described here. Our privacy and support contact is atenterprise.development@gmail.com.
The services you use determine what is processed. Visiting this website does not create a game account. Starting the app as a guest creates a technical player identifier so the app can provide account-based game services.
2. Information we process
| Category | Information and source |
|---|---|
| Account and sign-in | A guest or linked account identifier; sign-in provider; authentication and verification information. If you choose Google or Apple sign-in, Firebase Authentication may receive the name, email address and profile information made available by that provider. We do not receive your Google or Apple password. |
| Player profile | Your generated or chosen player name, shareable player ID and any profile photo you choose. Photos selected or taken for your avatar are processed and a resized avatar is uploaded for your player profile. |
| Game and social data | Scores, ranking entries, friend relationships, gems balance, reward claims, in-game item records where applicable, platform information and account/game record timestamps. |
| On-device preferences | Your current saved game, best score, player profile copy, music/effects settings, sign-in state and limited account/deletion status information. These are stored in app or browser storage. |
| Support messages | Your email address, message, player ID and any screenshots or other information you choose to send when asking for help. Please do not send passwords or authentication tokens. |
| Technical requests | Network information needed to deliver and protect the service, including IP addresses processed by hosting/authentication providers, request timing and basic device/browser or platform information. The game API uses IP addresses transiently for abuse rate limiting; it does not write them into player or wallet records. |
The app does not request your contacts, precise location or microphone. Camera or photo access is optional and is used when you choose to change your avatar. Denying that permission leaves the default avatar available.
3. How we use information
- Create and authenticate a player session and let you return to a linked account.
- Save player profiles, show scores and rankings, and maintain friend lists.
- Provide daily rewards, manage gems and in-game item records, and prevent duplicate or abusive claims.
- Remember local game progress and audio preferences.
- Respond to support requests, resolve problems and carry out verified privacy requests.
- Protect the service and comply with applicable legal obligations.
Where a legal basis is required, we process information to provide the game services you request, with your consent for optional activities such as providing a photo, for legitimate service-security interests, or to meet legal obligations as applicable. Optional consent can be withdrawn by stopping the activity, changing permissions or contacting us; this does not affect processing already carried out lawfully.
5. What other players can see
Your player name, shareable player ID, avatar if provided, and scores may be visible to other players in rankings, friend lists and player search. Use a nickname and a photo you are comfortable sharing. Your sign-in email is not included in public ranking entries.
Inviting friends opens your device’s share options with your player ID. You choose where to send it; the app does not automatically send messages or access your address book.
6. Storage and retention
We keep account, profile, social and game-service records while they are needed to provide your account and requested features, until you request deletion or they are no longer needed for those purposes. Local saved games and preferences remain on your device until cleared, replaced, removed by the operating system or removed through app actions. Device backup settings may affect whether local data is restored.
After a verified account deletion is completed, associated account, profile, avatar, ranking, friend and wallet/item records are removed from active game systems. Minimal security/deletion markers may remain briefly to prevent stale signed-in requests from recreating data; a non-identifying receipt hash and completion time may remain to confirm deletion status. Data required by law, or contained in provider security logs/backups, may be retained for their applicable limited retention periods and will not be used to restore an active game account.
Support correspondence is kept only as needed to resolve and document the request and meet applicable obligations. Contact us for information about a specific retention or deletion request; we will explain any exception that applies.
7. Your choices and privacy rights
You can edit your player name and photo in Settings, change audio preferences, manage friends and choose whether to link a supported sign-in. You can withdraw camera/photo permissions through your device settings.
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of your personal information, receive a portable copy, withdraw consent, or complain to your local data-protection authority. Email our privacy contact to make a request. We may need to verify that you own the account before taking action; we will not ask for your password or authentication tokens.
Logging out clears the current local player data and session; it does not delete your remote account. An unlinked guest player may not be recoverable after logout or loss of local sign-in data.
8. Account and data deletion
In the app, open Settings → Account → Delete Account and follow the confirmation steps. If you cannot access the app or that option is unavailable, you can request deletion by email using our account deletion page. You do not need to reinstall the app to contact us.
Account deletion covers your authentication account and associated player profile, avatar, scores, friend relationships, gems and in-game item records. Deleting the account does not delete the original photo from your device’s photo library. Once completed, account deletion is permanent. We will verify ownership and tell you the request’s status and applicable completion timeframe; submitting a request is not a claim that deletion has already completed.
9. Children and families
The game does not ask for a date of birth. Parents or guardians who have questions about a child’s use of Crystal MergeX, or believe a child’s personal information was provided without the permissions required by applicable law, should contact us. We will review the report and take appropriate steps, including removal of information where required.
Please use a nickname and avoid including personal details in a public player name or photo. The app’s store listing and your platform’s family settings provide age and parental guidance for the available release.
10. This website
This website does not add advertising pixels, analytics scripts or tracking cookies. Its small merge illustration runs in your browser and does not send your clicks, simulated score or game state to us. Fonts and game images are served with the site rather than loaded from external font services.
The hosting infrastructure processes the technical requests needed to deliver and secure the website and may use necessary security or access cookies. Following an external link or emailing support brings you to that provider’s service and privacy terms.
11. Security and international processing
The game uses authenticated requests, encrypted transport and access controls to protect account services. No network or storage system can be guaranteed completely secure. Service providers may process information in countries other than your own, subject to their applicable contractual safeguards and data-protection terms.
Only provide information needed for the feature or support request. Never share your account password, one-time sign-in codes or authentication tokens with support.
12. Policy updates and contact
We may update this policy when the game, its providers or applicable requirements change. The date at the top identifies the current version. Where required, material changes will be communicated through the app or another appropriate channel.
For privacy questions, access/correction requests, or account deletion, contact the Crystal MergeX development team: