Privacy Policy

Last updated: August 7, 2026

1. Scope and who we are

This policy applies to the Match 3 Daily website and Android app (together, the Service). For support or privacy questions, contact thesoundingwave@gmail.com.

2. What we collect

The data we process depends on how you use the Service and whether you use the website or Android app:

Gameplay and app activity: puzzle date, attempt identifier and number, win/loss result, swap or move sequence, moves taken, tiles remaining, personal bests, streaks, completion records, and related timestamps. We use these records to validate runs, sync progress, and produce aggregate game statistics.
Account identifiers: Firebase Authentication creates a Firebase user ID so we can associate progress and submissions with an account. If you play as a guest, Firebase creates an anonymous user ID. A guest ID is still an account identifier even though it does not contain your name or email address.
Google sign-in information (optional): if you choose Google sign-in, Google and Firebase Authentication provide us with a Google account identifier and basic profile information such as your name, email address, and profile-photo URL. We do not access the other photos or videos stored on your device or in your Google account.
Purchase history (Android, optional): if you purchase the remove-ads option through Google Play, the app and our service providers may process the product identifier, purchase token, purchase status, entitlement status, and transaction time to verify and restore the purchase and prevent fraud. Google Play processes the payment. We do not receive your full payment-card or bank-account details.
Advertising and app interaction data: where ads are enabled in the Android app, the Google Mobile Ads SDK (AdMob) automatically processes IP address, general location inferred from IP address, app launches, taps, ad impressions or video views, diagnostic information, and device or account identifiers such as the Android advertising ID and App Set ID. The Android app does not request precise GPS location for advertising.
Technical and security data: IP address, browser or device type, operating-system and app version, Firebase SDK information, app-integrity tokens, request logs, and similar diagnostic or security information. This information helps deliver the Service, troubleshoot problems, and prevent abuse.
Website cookies and local storage: the website may use cookies, browser storage, or similar technologies for sign-in, preferences, security, analytics, and advertising. See our Cookie Policy for more information.

3. How we use data

Provide the website and Android app, authenticate users, and manage accounts.
Validate and record completed runs and synchronize progress across supported devices.
Compute and display aggregate daily statistics such as completion rates, distributions, and total attempts.
Verify purchases and provide or restore the remove-ads entitlement.
Show, measure, and protect advertising where ads are enabled.
Analyze usage and performance, diagnose problems, prevent cheating or fraud, and protect the Service from abuse.

4. Advertising and analytics

The website may use Google AdSense, and the Android app may use the Google Mobile Ads SDK (AdMob). These services may collect and share IP-derived general location, app or website interactions, diagnostic data, cookies, and device or advertising identifiers for advertising, analytics, measurement, and fraud prevention. Depending on your region, consent choices, and device settings, ads may be personalized or non-personalized.

We may also use Google Analytics to understand overall usage. Learn more about how Google handles information from apps and sites in Google's partner-sites policy, and manage ad personalization in Google Ad Settings.

5. Android purchases

Android purchases are processed by Google Play under Google's own terms and privacy policy. A remove-ads purchase is optional. After a valid entitlement is recognized, the app stops requesting in-app ads for that user. Purchase and entitlement records may still be processed to restore the purchase, respond to refunds or chargebacks, meet legal obligations, and prevent fraud. Removing ads does not erase advertising data collected before the entitlement was recognized.

6. When we disclose data

We disclose data only as needed to operate and protect the Service, including to:

Service providers: Firebase, Google Cloud, Google sign-in services, and Google Play Billing process data for authentication, hosting, storage, app integrity, backend functions, and purchases.
Advertising and analytics providers: Google AdSense, AdMob, and their advertising or measurement partners may receive advertising identifiers, general location derived from IP address, interaction data, and diagnostics for advertising, analytics, and fraud prevention.
Legal and safety purposes: we may disclose information when reasonably necessary to comply with law, enforce our terms, investigate fraud or abuse, or protect users, the public, or the Service.

We do not sell your personal information for money. Advertising providers may process data for personalized advertising where permitted and where the required consent has been obtained.

7. Retention and deletion

We retain account and private gameplay data while your account is active and as reasonably necessary to provide the Service, maintain security, resolve disputes, and comply with legal obligations. Advertising, analytics, and payment providers apply their own retention practices. Aggregate statistics may remain after they can no longer reasonably identify an account.

You can permanently delete your Match 3 Daily account from Account > Settings > Delete Account on the website or Android app, or follow the instructions on our Account Deletion page. Account deletion removes the Firebase sign-in identity and associated private progress and run records. It does not delete transaction records controlled independently by Google Play, and we may retain limited records where required for security, fraud prevention, refunds, chargebacks, or law.

8. Your choices

Guest or Google sign-in: you may play with an anonymous Firebase account instead of providing Google profile information.
Browser controls: you can clear cookies and site storage at any time in your browser settings.
Android privacy controls: where required, the Android app presents Google's consent controls before requesting eligible ads. Android and Google settings may also let you reset or delete the advertising ID and manage ad personalization.
Remove ads: Android users may optionally purchase the remove-ads entitlement when offered.
Ad personalization: you can manage or limit ad personalization via Google Ad Settings.
Opt-out tools: you can also use industry opt-out options such as AboutAds (DAA WebChoices).

9. Security and international processing

We use reasonable safeguards appropriate to the Service. Data transmitted by the Service is encrypted in transit using HTTPS or equivalent transport security. No method of transmission or storage is completely secure. Google and other providers may process data in countries other than the one where you live, subject to their applicable safeguards and legal obligations.

10. Consent (EEA, UK, Switzerland)

For users in the EEA, UK, and Switzerland, we use Google's consent tools where required for AdSense and the Android Google Mobile Ads SDK. These tools request choices about personalized advertising, advertising storage, and related uses before eligible ads are requested. You can learn more in Google's documentation: About European regulations messages.

11. Changes

If we update this policy, we will revise the "Last updated" date at the top of this page. Material changes may also be communicated through the Service where appropriate.