Privacy & Cookie Policy for Quickle

1. Introduction

Ballsagna, LLC ("we", "our", or "us") is committed to protecting your privacy. This Privacy & Cookie Policy explains what information we collect, how we use and safeguard it, how we use cookies and local device storage, and your legal rights when you play Quickle via our iOS and Android mobile applications or on the web at playquickle.com (collectively, the "Service").

2. Information We Collect

We collect the minimum information necessary to operate the game, synchronize your stats across devices, and maintain global leaderboards:

• Guest & Social Authentication Data: When you first launch Quickle, we automatically assign an anonymous session identifier (via Google Firebase Authentication) so you can play immediately as a Guest. If you choose to link an account via Sign in with Apple, Google, or Facebook (Meta), we receive basic profile identifiers from that provider (User ID, Display Name, Email Address, and profile photo URL). Your email address and full legal name are stored in a restricted private record and are never displayed publicly or shared with other players (public display names default to first name and last initial, e.g., "Alex M.", or your chosen nickname).
• Gameplay, Leaderboard & Challenge Data: We store your game statistics, high scores (Timed and Zen), daily/weekly/monthly XP, streaks, virtual currency balance ("Pickles" 🥒), unlocked badges, avatars, Picklepedia facts, unique vocabulary bank, and match history. When you submit a Daily Challenge or 1v1 Multiplayer Challenge, your display name, selected avatar, score, completion time, words found in that round, and preset emoji reactions are shared with leaderboard viewers or your match opponent.
• Device Telemetry, Analytics & Diagnostic Logs: We use Google Firebase Analytics (GA4) to collect aggregated gameplay metrics (such as games started, boards completed, shuffles, and feature usage) associated with your Firebase User ID and app instance. We also record your general platform type (ios, android, pwa, or web) and session count. When a technical error or authentication issue occurs, our internal diagnostic logger (system_logs) records the error message, stack trace, timestamp, device User-Agent string, page URL, and UID strictly so our engineering team can resolve bugs.
• Push Notification Tokens & Timezone (Optional): Only if you explicitly opt in to push notifications, we store your Firebase Cloud Messaging (FCM) device token and local timezone identifier (e.g., America/New_York) to deliver 8:00 AM local-time daily board reminders, 1v1 challenge alerts, and occasional inactivity reminders. You can disable notifications at any time in the in-game Settings menu or your OS settings, which deletes the token from your profile.
• What We Do NOT Collect: Quickle does not use generative Artificial Intelligence (AI) or Large Language Models (LLMs) to process user data. We do not allow user file or photo uploads, and we never access your device camera, microphone, contacts, or precise GPS location.

3. How We Use Your Information

We use your information strictly for the following purposes:

• Creating and authenticating your Guest or linked account and syncing your progress across devices.
• Operating Daily, Weekly, Monthly, and All-Time leaderboards, awarding automated Weekly Champion Pickle rewards, and facilitating 1v1 multiplayer challenges.
• Delivering opt-in push notifications for daily challenges, match results, and streak reminders.
• Monitoring application stability, diagnosing crashes, and preventing cheating or unauthorized database access.

4. Cookie & Local Storage Policy

Quickle does not use third-party advertising cookies or cross-site tracking pixels inside the game. However, we use essential browser storage and analytics identifiers to make the game function:

• First-Party Local Storage (localStorage): We store wr_* keys directly on your device to save your game preferences (theme, sound, vibration, solo timer duration, board difficulty) and provide instant offline access to your XP, Pickle balance, streaks, saved Zen boards, and vocabulary bank.
• Session Storage & IndexedDB: We use sessionStorage to manage temporary OAuth login redirects and session de-duplication, and Firebase uses browser IndexedDB to keep you signed in and cache leaderboard data when offline.
• Analytics Cookies (Web Only — Strict Opt-In): On the web version (playquickle.com), Google Firebase Analytics scripts and cookies (_ga and _ga_*) are blocked by default and only load if you click "Accept Analytics" on our cookie banner. You can switch back to "Essential Only" (which immediately disables analytics and deletes any _ga cookies) at any time via Settings ⚙️ → Cookie Settings.
• How to Clear Storage or Cookies: You can wipe your local game storage at any time inside the app via Settings ⚙️ → Clear All Game Data (or Delete Account), or by clearing site data and cookies in your browser or mobile device settings.

5. Third-Party Service Providers & Data Sharing

We do not sell, rent, or trade your personal information to data brokers or third parties, and we do not run third-party behavioral advertising SDKs inside the game.

To operate the Service, we share limited technical data with the following trusted infrastructure providers acting as data processors or authentication controllers:

• Google Firebase (Google LLC): Provides cloud database hosting (Cloud Firestore), user authentication (Firebase Auth), serverless backend triggers (Cloud Functions), push delivery (Firebase Cloud Messaging), and usage telemetry (Google Analytics for Firebase). (Google Privacy Policy)
• Apple Inc. & Meta Platforms, Inc.: Process authentication requests only if you voluntarily choose to sign in using Sign in with Apple or Facebook Login.
• UI Avatars (ui-avatars.com): If you do not use a custom Pickle avatar or social photo, the app requests a fallback initial graphic from ui-avatars.com using only your display initials (no email or UID is shared).
• Static Web CDNs & QR Service: Our web application loads fonts, icons, audio effects, and word lists from standard content delivery networks (Google Fonts, unpkg, jsDelivr, GitHub Raw CDN, Mixkit) and renders a mobile download QR code on desktop via api.qrserver.com. Standard web requests automatically transmit your device IP address and browser headers to those servers to deliver the requested static asset.

6. Data Retention & Account Deletion

We retain your gameplay profile for as long as your account remains active. Diagnostic error logs in system_logs are retained only as needed to resolve technical issues and are periodically purged. You have the right to permanently delete your account and all associated personal data at any time:

• Instant In-App Deletion (2 Taps): Open Quickle, navigate to Settings ⚙️ → Delete Account, and confirm. This immediately and permanently deletes your public and private user records, scrubs your created challenges and daily leaderboard attempts, deletes your Firebase Authentication identity, and wipes your local device data.
• Web-Based Deletion Portal: You may also request complete account and data deletion from any browser without opening the app by visiting playquickle.com/delete-account or emailing ross@theballsagna.com.

Once initiated, account deletion is permanent and irreversible. All XP, Pickles, badges, and historical stats are permanently erased.

7. Children's Privacy (COPPA Compliance)

Quickle is intended for a general audience and is not directed to children under the age of 13 (or under 16 in the European Economic Area and United Kingdom). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has used Quickle or linked an account, you may immediately delete the data in-app via Settings → Delete Account or contact us at ross@theballsagna.com and we will promptly purge all associated records.

8. Your Regional Privacy Rights (CCPA/CPRA, GDPR, UK, Canada & Australia)

• California Residents (CCPA / CPRA): Under the California Consumer Privacy Act, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the right to request deletion of your personal information, and the right not to receive discriminatory treatment for exercising your privacy rights. Ballsagna, LLC does not "sell" or "share" (as defined under the CCPA/CPRA) your personal information for cross-context behavioral advertising.
• EEA, UK, Canadian & Australian Residents (GDPR / UK GDPR / PIPEDA / Privacy Act): Where applicable, we process your data under the legal bases of Contractual Necessity (to provide the game, save progress, and run leaderboards), Legitimate Interests (to fix crashes, secure the database, and measure aggregate game performance), and Consent (for optional push notifications and social account linking). You have the right to access, rectify, erase, restrict, or port your data, withdraw consent at any time, and lodge a complaint with your local data protection supervisory authority.

9. Contact Us

If you have any questions, concerns, or privacy requests regarding this Privacy & Cookie Policy or your data, please contact us at:
Ballsagna, LLC
Email: ross@theballsagna.com