Privacy Policy
This policy explains what data the Orb Lab game collects, why, and what you can do about it. We collect as little as we can to run the game.
What we collect
- Player profile: a random player name or a name you choose, and the avatar you pick. There is no password: your device keeps a random secret key, and our server stores only a hash of it.
- Optional sign-in: if you sign in with Google or Apple to keep your player on other devices, we receive from Google or Apple your account's ID and, if they share it, your email address (with Apple this may be a private relay address). For Sign in with Apple we also keep a token from Apple so we can revoke the app's access when you delete your account. We never see your Google or Apple password.
- Gameplay data: levels you win (level, moves, time, hints used and stars), daily puzzle results and leaderboard ranks, league points, tier and trophies, and the time you were last active.
- IP address: used briefly in server memory to limit abuse (for example, too many new accounts from one address). It is not stored in our database. Our web server logs may contain IP addresses and request details; these logs are kept for up to 14 days.
- On your device only: your level progress, stars, hints, lives and settings are saved on your phone and are not sent to us.
Purchases
Payments are processed by Google Play (and by Apple through the App Store on iPhone and iPad). We never see your payment details. Purchases are confirmed on your device through the store and are not sent to our server.
Advertising
The game shows ads through Google AdMob, which may fill them from its mediation partners (currently Unity Ads and AppLovin). These providers may collect your device's advertising ID, IP address and device information to show and measure ads. In the EEA, the UK and Switzerland we ask for your consent with Google's consent tool before personalized ads are shown; you can change your choice at any time under Settings → Privacy options. You can also reset or delete your advertising ID in your device settings. On iPhone and iPad the app may ask for permission to track (App Tracking Transparency); if you decline, ads are shown without the advertising identifier (IDFA), and you can change this in iOS Settings → Privacy & Security → Tracking. See how Google uses data: policies.google.com/technologies/partner-sites and Google's privacy policy: policies.google.com/privacy; Unity: unity.com/legal/game-player-and-app-user-privacy-policy; AppLovin: applovin.com/privacy.
How we use data
Only to run the game: show daily puzzles, leaderboards and leagues, prevent cheating and abuse, and fix problems. Other players can see your player name, avatar and results on leaderboards and in leagues. Leagues and leaderboards may also contain computer-controlled players.
We do not sell your personal data. We share it only with service providers that help us run the game: Google (AdMob, Google Play and Google Sign-In), our ad mediation partners (Unity Ads, AppLovin), Apple (App Store and Sign in with Apple) and our hosting provider Contabo.
Where data is stored
Our servers are in the European Union (Contabo, Germany). Data handled by Google and Apple services is processed by them under their own policies and safeguards, possibly outside the EU.
How long we keep it
We keep your data until you delete your account. After deletion, data may remain in server logs and backups for up to 14 days and is then gone.
Your rights
- Access and correction: you can see and change your name and avatar in your Profile. You can email us for a copy of your data.
- Sign out: Profile → "Sign out" ends the sign-in on that device; your player stays linked to your account until you delete it.
- Deletion: in the app go to Profile → "Delete my account". This permanently deletes your account and all data on our server. If you no longer have the app, email info@messtgames.com with your player name. More: https://messtgames.com/orblab/delete-account.
If you are in the EU/UK you can also complain to your data protection authority.
Children
Orb Lab is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has given us data, contact us and we will delete it.
Changes
If we change this policy we will update this page and the effective date. Significant changes will also be announced in the app.
Contact
Messt Games · info@messtgames.com