The short version: the game itself runs on your device and keeps working without internet. When it is online, it signs you in (with Google, or as a guest), keeps a backup of your saved game on our server so you can restore it on a new phone, verifies your purchases, and sends crash reports and basic usage statistics to Google Firebase so we can fix bugs. We don't sell your data, we don't show ads, and you can ask us to delete your account at any time.
1. Who we are
Quack Heroes ("the game") is developed and published by Rakumaro Game Studio ("we", "us"). For any question about this policy, or to exercise your rights, email [email protected].
2. Scope
This policy covers the Quack Heroes mobile app and the online services it talks to. It does not cover Google Play, Google Sign-In or any website you open from a link in the game (for example the asset credits); those are governed by their own policies.
3. What we collect and why
| Data | Why |
|---|---|
| Google account identifier and email address — only if you sign in with Google. We never receive your Google password. | To create your account and let you recover it and your progress on another device. |
| Player ID and nickname — a random ID and a nickname we generate for you (such as "Duck 3853"). | To identify your account in the game and in support requests. |
| Your saved game — a copy of your progress (stages, heroes, items, currencies and similar game state), plus summary figures such as your highest stage, play time and currency totals. | Cloud backup and restore, and detecting cheating or tampering. |
| Device information — a random installation ID, platform, device model, and a one-way hash of your device's hardware and system build properties. We do not read your IMEI, serial number or phone number. | Keeping your account signed in on one device at a time, account security, and preventing abuse. |
| Purchase records — the product bought, the Google Play order ID and purchase token. Payment is handled entirely by Google Play; we never see your card or bank details. | Verifying the purchase with Google and delivering what you paid for. |
| In-game mail and code redemptions — gifts sent to you and which gift codes you redeemed. | Delivering rewards and enforcing per-player code limits. |
| Push notification token — an address issued by Firebase Cloud Messaging. | Telling you when new in-game mail arrives. You can turn notifications off in your device settings at any time. |
| Crash reports (Firebase Crashlytics) — the error and where it happened in the code, app version, device model, OS version, free memory/storage and a Crashlytics installation ID. | Finding and fixing crashes. |
| Usage statistics (Google Analytics for Firebase) — app opens, session length, app version, device model, OS, language, approximate location at country/region level derived from your IP address, an app-instance ID and, on Android, the device's advertising ID. | Understanding how many people play and on what devices, so we can decide what to improve. We do not use it for advertising. |
| Network data — your IP address, which necessarily reaches our servers with every request. | Delivering the service, rate limiting and protecting it from attacks. We do not store it in your account. |
We do not collect your name, phone number, contacts, photos, files, precise location, microphone or camera. The game shows no ads.
If sign-in to our server fails, the game still plays fully offline; you may then choose to continue as a guest, which uses the same data above except the Google account identifier and email.
4. Permissions
- Internet / network state — for the online features above. With no connection the game keeps working and simply syncs later.
- Notifications (Android 13 and later asks you) — only for mail alerts. Saying no changes nothing else.
5. What stays on your device
The game's working copy of your progress, your settings and an encrypted integrity seal of your save are kept in the app's private storage. Android may include that storage in your own Google device backup, under Google's control and your backup settings.
6. Who we share data with
We do not sell or rent your personal data, and we do not share it for advertising. We use these service providers, who process data on our behalf:
- Google — Google Sign-In, Google Play (distribution and billing), and Firebase (Crashlytics, Analytics, Cloud Messaging). See the Google Privacy Policy and Firebase privacy information.
- Cloudflare — carries and protects traffic between the app and our server. See the Cloudflare Privacy Policy.
We may also disclose data if the law requires it, or to protect players and the game against fraud or abuse.
7. Where data is stored
Our game server is operated by us and may be located in Indonesia or other countries. Google and Cloudflare process data in data centres around the world. Wherever it is processed, data travels over encrypted (HTTPS) connections.
8. How long we keep it
- Account data, your saved game, mail and purchase records: for as long as your account exists.
- Guest accounts that never made progress and have been inactive may be removed automatically.
- Crash reports and analytics: according to Firebase's retention periods (crash reports around 90 days; analytics data up to 14 months).
- After you delete your account, see section 9.
9. Deleting your account and data
You can ask us to delete your account at any time — see how to delete your account. When we delete it we remove your Google identity link and email, your saved game, mail, statistics, code redemptions, push tokens and moderation records, and sign out every device. Two things remain, detached from you: purchase records we must keep for accounting and refund handling, and a minimal anonymised account shell so old sign-in tokens are refused. Deletion is permanent: your server backup cannot be restored afterwards. The copy of the game on your device is not affected until you uninstall it or clear its data.
10. Your rights
Depending on where you live (for example under Indonesia's Personal Data Protection Law, the GDPR in the EU/UK or the CCPA in California) you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to withdraw consent. Email [email protected] from the address linked to your account (or include the ID shown in the game's Settings) and we will respond within 30 days. You may also complain to your local data-protection authority.
You can reset or delete your advertising ID, and opt out of personalised ads, in your device's Google settings.
11. Security
Connections to our server use HTTPS. Sign-in credentials on your device are encrypted with a key held in the device's hardware-backed keystore, and our server stores only hashes of refresh tokens. No system is perfectly secure, but we work to protect your data and will notify affected players and authorities of a breach where the law requires.
12. Children
Quack Heroes is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We will update this page, and the "last updated" date above, before any change to the game alters what it collects. For material changes we will also tell you in the game.
14. Contact
Rakumaro Game Studio · [email protected]