Privacy Policy for Maze Runner

This Privacy Policy explains how Maze Runner ("we", "our", or "us") collects, uses, and shares information when you use our mobile application.

1. Information We Collect

A. Account & Gameplay Information (Provided by You)

You may play as a guest without creating an account. If you choose to create an account, we collect:

• Username: Used to identify you on public leaderboards. No email address, phone number, or real name is requested or stored.
• Password: Stored securely using a cryptographic hash (bcrypt). We never see or store plain-text passwords.
• Gameplay Data: Level completions, completion times, move counts, points, and recorded replay paths (used for ghost replays and server-side anti-cheat validation).
• Session Tokens: A random credential stored in hashed form that keeps you signed in for up to 30 days.

B. Device Identifiers & Technical Data (Collected Automatically)

To deliver core app services, push notifications, and advertising, the app automatically collects:

• Push Notification Tokens: Device push tokens managed via Firebase Cloud Messaging to send you game updates and communications.
• Advertising & Device Identifiers: Advertising IDs (such as Google Advertising ID / AAID) and device performance metrics collected by advertising networks to display ads.

2. Third-Party Services & SDKs

We integrate trusted third-party SDKs into Maze Runner to operate push notifications and ad monetization. These services may collect and process data in accordance with their respective privacy policies:

• Firebase Messaging (Google Play Services): Used to deliver push notifications. It processes device identifiers to route messages to your device.
  Google Privacy Policy
• Unity LevelPlay Mediation (Unity Technologies): Used to serve ads within the game. Unity LevelPlay and its mediation partners (such as Unity Ads, Meta Audience Network, Google AdMob, or AppLovin) may collect advertising identifiers, device model, IP address, and ad interaction data to display and personalize ads, prevent ad fraud, and track ad performance.
  Unity Privacy Policy

3. How Your Data Is Used

We use the collected data for the following purposes:

• App Functionality & Leaderboards: To display leaderboards, store your ranks, and sync your game progress across devices.
• Fair Play & Security: To validate submitted runs, prevent cheating, and protect service integrity.
• Notifications: To send you relevant game updates and alerts (if push notifications are enabled).
• Monetization & Advertising: To display ads through Unity LevelPlay and measure advertising efficiency.

4. Data Storage and Security

• Encryption in Transit: All network traffic between the Maze Runner app, server, and API is encrypted using standard HTTPS protocols.
• Credential Protection: Passwords and session tokens are stored exclusively as cryptographic hashes.
• Backend Storage: Your account and gameplay data are securely stored in a MySQL database hosted on our server infrastructure.

5. Your Choices & Data Control

• Play as Guest: You can play without creating an account.
• Sign Out: Signing out (via the Profile tab in the app) revokes your active session token immediately.
• Account Deletion: You have the right to delete your account at any time:
  • Online: Visit our Account Deletion Request Page
  • Effect: Account deletion is immediate and permanent. Your username, hashed password, leaderboard scores, ghost records, and session data will be permanently purged from our database.
• Opt-out of Personalized Ads: You can opt out of interest-based advertising through your device's settings (Settings → Privacy → Ads on Android).

6. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our app features or regulatory requirements. Any updates will be published on this page with a revised "Last Updated" date.

7. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at: