MINDMATCH • LEGAL
Privacy Policy & Data Protection
Overview & Commitment
At MindMatch (operated by ZERADES), we respect your privacy. Our game requires no sensitive device permissions such as camera, microphone, contacts, location, or local file storage. The limited data we collect is solely used to provide multiplayer matchmaking, prevent fraudulent gameplay, and ensure secure authentication.
1Data Controller
Under applicable data protection laws (including GDPR and KVKK), the data controller is:
2Data We Collect & Processing Purposes
A. Account & Identity Information
Username, email address (when signing in via Google, profile email and ID token), account creation timestamp. Used for authentication and profile management.
B. Gameplay, Leaderboards & Wallet Data
Match history, score records, rank tier, energy count, coin balances, and friendships. Used for fair matchmaking and game progression.
C. Device Identifiers & Push Notifications
Firebase Cloud Messaging (FCM) device token, device platform (Android/iOS), language preference. Used strictly to deliver duel invites and energy recharge alerts.
D. In-App Purchases (Google Play Billing)
All financial transactions are handled securely by Google Play. We never collect or store payment cards, banking info, or billing addresses. Only purchase validation receipts issued by Google are verified server-side.
3Account Deletion & Data Erasure (Google Play Requirement)
Under Google Play Data Safety policies and GDPR, you have the right to delete your account and all associated personal data at any time:
Method 1: In-App (Instant)
Open MindMatch → Go to Profile / Settings → Tap "Delete Account" and confirm. Your account, sessions, and active tokens are erased immediately.
Method 2: Via Web / Email
If you uninstalled the game, send an email from your registered address to support@zerades.com with subject "Delete Account". All associated data will be deleted within 48 hours.
Deleted Data: Email, username, avatar, friends list, wallet balances, and auth tokens are permanently wiped.
Retention: No personal records are kept beyond legal compliance periods.
4Third-Party Services & Infrastructure
- •Google Play Services & Google Sign-In: Secure authentication and account identity.
- •Firebase Cloud Messaging (Google LLC): Instant duel invitations and energy recharge notifications.
- •Google Mobile Ads (AdMob): In-game rewarded video ads (utilizing Advertising ID).
- •Hetzner Online GmbH (European Union Datacenters): Game servers and databases are hosted in ISO/IEC 27001 certified German datacenters.
5Your Rights & Inquiries
You have the right to request access to your data, rectification, or full erasure under applicable privacy regulations.