Privacy Policy
Effective date: September 30, 2026
MergeForge is a casual merge puzzle game operated by GameLabsNovo. This policy explains how the game handles data.
Data Stored On Your Device
MergeForge stores gameplay progress, purchases cached from Google Play, active offers, and settings locally. This can include the current board, scores, statistics, audio/haptics choices, tutorial state, consent UI state, and opaque purchase-intent identifiers. Purchase tokens and authentication credentials are not written to analytics or ordinary client logs.
Google Play Purchases And Backend Verification
Google Play processes purchases. MergeForge sends the product identifier, purchase token, and an anonymous authenticated application identity to the monetization backend to verify purchases, restore entitlements, prevent duplicate fulfillment, process refunds or revocations, and validate genuine limited-time offers. Firebase anonymous Auth and App Check protect this communication. MergeForge does not receive payment-card details.
Advertising And Consent
MergeForge uses Google Mobile Ads and Google's User Messaging Platform (UMP). Depending on region, consent, device settings, and the ad selected, Google may process device or other identifiers (including Advertising ID when available), IP-derived approximate location, app interactions, advertising data, and diagnostics for advertising, measurement, fraud prevention, security, and compliance. UMP collects and communicates privacy choices where required.
Players can reopen Privacy Options from Settings whenever UMP reports that the entry point is required. Buying Remove Ads disables automatic interstitials; optional rewarded ads remain player-initiated.
Google's policies explain its processing: https://policies.google.com/privacy
Analytics
The production analytics sink receives privacy-reviewed gameplay and monetization events such as sessions, progression, offer impressions, purchase outcomes, ad pacing, and rewarded-feature use. Events may include app and device information needed for measurement and diagnostics. They do not include names, email addresses, purchase tokens, authentication tokens, precise location, contacts, photos, files, payment-card data, or free-form player text.
Google Play Games
Signing in with Google Play Games is optional; MergeForge is fully playable as a guest. When you are signed in, MergeForge uses your Play Games gamer profile to show your gamer name and avatar on the Profile screen and to record achievements in Google Play Games. The gamer name and avatar are shown on your device and cached only there; signing out or switching accounts clears that cache. MergeForge does not request your email address or other Google Account details, and it does not store your gamer name, avatar, or raw Play Games player identifier on its own servers or in analytics. Achievement progress is sent to Google Play Games, which processes it under Google's policies; you can manage or delete your Play Games data in the Google Play Games app settings. The game does not create accounts of its own.
Data Sharing And Purposes
Data is processed by service providers only for app functionality, purchase verification, entitlement delivery, advertising, analytics, fraud prevention, security, legal compliance, and diagnostics.
Retention And Deletion
Deleting the app removes local gameplay data. Verified purchase and anti-fraud records may remain with Google Play and the monetization backend for the period required to deliver entitlements, handle refunds, prevent abuse, and satisfy legal obligations.
Deleting your game data
MergeForge offers an in-app deletion path: Settings > Profile > "Delete game data". After you confirm the disclosure, the backend accepts an authenticated deletion request for your game profile and processes it in the background. While it is pending the app shows "Deletion in progress"; you can close the game and check back later. The app keeps a receipt credential on your device so it can show the outcome even after you sign out; clearing app data removes that credential and the local copy of the outcome.
What is deleted: your gameplay progress, levels, coins, boosters, offers, earned unlocks, purchase intents and the technical records that link them to your game profile, on the server and on this device.
What is kept, and why:
- a minimal protective record of your anonymous app identity for this game (a keyed one-way digest, the closed profile identifier and its revision, no gameplay data), so that old requests cannot reopen or rewrite the deleted profile; it is removed when the anonymous identity itself is removed;
- the record of paid non-consumable purchases needed to restore what you paid for through Google Play; a purchase that can no longer be restored is kept for at most 90 days after that is established, to handle refunds and provider replays;
- the deletion receipt and its request links for 30 days after completion, then removed; sanitized deletion audit entries for 30 days;
- active abuse-protection windows of at most one hour, removed after they expire;
- Google Play's own purchase records, which are subject to Google's controls.
After deletion you can start a fresh profile from the same screen ("Start fresh"); nothing is restored automatically. Paid purchases stay with your Google Play account and can be restored into the new profile by an explicit Restore action in the Shop.
Privacy questions can be sent to privacy@gamelabsnovo.com. Provider-controlled data is also subject to the provider's controls and legal retention obligations.
Children
MergeForge is not directed to children under the applicable digital-consent age and is not enrolled as a child-directed app. If that changes, this policy will be updated before the change takes effect.
Contact
Privacy contact email: privacy@gamelabsnovo.com
Canonical public URL: https://gamelabsnovo.com/mergeforge/privacy/