Privacy policy

1. About this policy

This policy describes how LEAPCORE TECH LIMITED ("we," "us," or "our") processes information in connection with Track & Flow: Puzzle for Android, package com.firstgametrackflowgp (the "Game"), and the Track & Flow pages on this official website. SnapCard is covered by its separate privacy policy.

The Game is intended for users aged 13 and above and is not directed to children under 13. This notice describes information practices; it does not replace any consent that must be requested separately under applicable law.

2. Information processed

The information processed depends on the features you use, your device, permissions, and the services enabled for your version of the Game.

Player identifiers and game activity

A generated player ID; level and puzzle progress; in-game currency, items, rewards, and entitlements; selected, unlocked, and favorited content; and interactions with features. Some progress and preferences are saved on your device. Selected identifiers, progress, and activity are also sent to our services or analytics providers.

Device, network, and technical information

Device and app-instance identifiers, advertising identifiers where available, device model, operating system and app version, language, network information, IP address, and service or diagnostic events. Providers may infer an approximate region from an IP address. These identifiers are not necessarily anonymous and may be linked to usage or advertising records.

Advertising and attribution information

Installation and referral information, AppsFlyer identifiers, attribution results, ad requests, impressions, clicks, rewarded-ad activity, and advertising revenue or campaign events. Advertising partners may process this information with device identifiers to deliver and measure ads.

SIM status and selected application checks

The Game checks whether a SIM is present when preparing its startup configuration. It also checks for a limited set of applications: Facebook and Facebook Lite, TikTok and its Lite variants, Instagram, X, Threads, and WhatsApp. It reports the first matching application, if any, and the check result to analytics. This check is not a complete inventory of installed applications, and SIM-presence status is not your phone number.

Purchases and entitlements

Product identifiers, transaction or order IDs, purchase tokens or receipts, purchase and renewal status, entitlement periods, and the associated player ID. Google Play processes payments; the Game uses purchase records to verify and deliver items or entitlements. Payment-card details are handled by the payment provider rather than entered into the Game's purchase verification flow.

Messaging identifiers

The Firebase integration can generate and update a device messaging token for messaging services. Availability of notifications depends on the released version, device settings, and applicable permissions. A messaging token identifies an app installation; it is not a phone number.

Media and support information

Game images and videos may be downloaded and cached for playback, themes, and collections. If you choose to save game media to your device's gallery, the selected content is written to the gallery. If you contact support, your email address, message, and any information you choose to include will be processed to handle your request.

3. How information is used

• Operate the Game: load configuration and content, retain progress and preferences, and provide levels, collections, and rewards.
• Handle purchases: verify transactions, deliver or restore entitlements, and process changes to purchase status.
• Deliver and measure advertising: request ads, handle rewarded-ad outcomes, attribute installations, and assess campaign performance.
• Understand usage: measure sessions, feature interactions, installation-check results, and technical events to understand how the Game and its services are used.
• Support and protect services: investigate errors, respond to requests, detect misuse, and meet applicable legal obligations.

Where a legal basis is required, processing must be based on the applicable basis for its purpose, such as providing a service you request, legitimate interests balanced against your rights, compliance with law, or consent where required. Using the Game does not by itself constitute consent to all advertising or tracking.

4. Advertising and your choices

The Game supports rewarded, interstitial, and app-open advertisements. Ad delivery may involve an advertising mediation service and one or more advertising networks. Depending on the provider, region, and choices available to you, ads may use identifiers and activity information for personalization, measurement, or fraud prevention.

• Android advertising controls: use your device's Settings search for "Ads," "Advertising ID," or "Ads privacy." Depending on your Android version, controls may let you reset or delete an advertising ID or manage advertising preferences. Names and availability vary by device.
• Partner consent controls: review any privacy or consent options offered by the active advertising provider. Where offered, use those controls to change or withdraw your choice for that provider.
• Permissions and notifications: review the Game under Android Settings → Apps. You can manage the permissions and notification controls available on your device.

Changing an advertising identifier or turning off personalization does not necessarily remove ads or stop all analytics, purchase processing, or technical data collection. Buying an ad-removal entitlement also does not automatically disable other data processing.

5. Third-party services

The Android application includes the integrations below. Availability depends on the released version and configuration; listing an integration does not mean every provider receives information during every session. Providers may act on our behalf or process certain information under their own policies.

Our game backend and content hosting services also process requests needed to deliver the Game, including requested content, identifiers, and network information. Links above lead to third-party sites governed by their own information practices.

6. Android permissions and device features

• Internet, network, and Wi-Fi state: support configuration and media downloads, purchases, advertising, analytics, and connectivity checks.
• Advertising identifier: allows supported services to access an advertising ID where the operating system and user settings make it available.
• Phone state / SIM presence: the Android configuration declares phone-state permission, and the game integration checks SIM status for startup configuration. A declared permission does not mean every Android version requires a runtime prompt for this check.
• Storage or gallery access: supports saving selected game images or videos. Older Android versions may require a storage permission; behavior varies by OS version. The game-media save feature writes selected game content and is not a request to upload your personal photo library.
• Vibration: supports optional haptic feedback, which can be changed through the Game's vibration setting.
• Notifications, where offered: device notification settings control whether notifications may be displayed. Denying display permission does not necessarily prevent creation of an app messaging token.

You can review and revoke permissions through Android's app settings. A feature relying on a permission may be unavailable if permission is denied. Additional permissions introduced by an enabled third-party SDK must be reflected in the final release notice.

7. How information is shared

Information is transmitted to providers involved in hosting, content delivery, analytics, attribution, messaging, purchases, advertising, and embedded services as described above. This can include identifiers and event-level information, not only anonymous or aggregated statistics.

Information may also be disclosed when legally required, to establish or protect legal rights, to address fraud or security incidents, or as part of a business transfer subject to applicable protections and notice requirements.

Some jurisdictions define certain advertising disclosures as a "sale," "sharing," or processing for targeted advertising even without a monetary payment. Whether those definitions apply depends on the actual arrangement. See Your privacy rights for the choices that may apply.

8. Storage, retention, and security

Progress, settings, and downloaded media can be stored on your device. Information transmitted to us or our providers may be stored separately on their systems. Clearing app data or uninstalling the Game can remove local progress and cached files, but does not automatically delete records already held by a server or third-party provider. Media exported to your gallery may remain until you delete it there.

The retention period for server-side records depends on their purpose, the service involved, transaction and legal requirements, and any applicable deletion request. Records should be retained only for as long as necessary for those purposes. Specific server retention periods and backup-deletion schedules are still being confirmed for the final policy.

Safeguards should be appropriate to the information and services involved, including access controls and transport protection where supported. No storage system or transmission method is completely secure. This policy does not guarantee that every SDK, endpoint, or downstream service uses an identical security configuration.

9. International processing

Service providers may process information in countries other than the country where you live. These countries may have different data-protection laws. Where applicable law requires safeguards for international transfers, the relevant legal mechanism and protections must be in place. Hosting locations, recipients, and applicable transfer arrangements remain to be confirmed for the published policy.

10. Your privacy rights and requests

Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information; object to certain processing; withdraw consent; or opt out of a sale, sharing, or targeted advertising. You may also have the right to complain to your local data-protection authority and, where applicable, appeal a decision about your request.

To make a request, email us using the contact details below. Include "Privacy request — Track & Flow: Puzzle" in the subject, describe what you would like us to do, and provide your in-game player ID if available. The ID is shown in the Game's settings. Do not send passwords, complete payment-card information, or unrelated identity documents.

We may need proportionate information to verify a request and locate the relevant records. Certain records may need to be retained for legal obligations, transaction handling, or security purposes; any applicable limitation should be explained when responding. Rights and response times depend on the law that applies.

For information controlled independently by a third-party provider, its own request process may also be relevant. Clearing local game data is not a substitute for requesting deletion of server records. Uninstalling the Game or requesting data deletion does not cancel a Google Play subscription; manage subscriptions separately through Google Play.

11. Children's privacy

The Game is intended for people aged 13 and above and is not directed to children under 13. A higher minimum age or additional parental involvement may be required by local law. This audience statement does not imply that the Game verifies every player's age.

If you believe a child has provided personal information in connection with the Game contrary to applicable requirements, contact us using the contact details below so that the matter can be reviewed and appropriate action, including deletion where required, can be taken.

12. This website

The Track & Flow pages consist of static pages with locally served styles and illustrations. It does not add advertising, analytics scripts, tracking cookies, account registration, or contact forms, and it does not use browser storage to profile visitors.

The hosting provider may still process ordinary connection and access-log information, such as an IP address, browser information, requested URL, and access time, to deliver and protect the site. The hosting provider and its log-retention settings must be confirmed when the site is deployed.

Third-party privacy-policy links take you to other websites. Visiting those websites is subject to their own notices and settings.

13. Changes to this policy

We may update this notice to reflect changes to the Game, its services, or legal requirements. The published policy will show its effective date and latest revision date. Where required, significant changes will be communicated and any necessary consent obtained before the affected processing takes place.