BallvsBall Privacy Policy

Version 1 · Effective date: October 17, 2026 · Developer: Abdul Rahman Aldirieh (sole developer, Ontario, Canada)

Contents

1. Who we are
2. What the game stores on your device
3. The age screen
4. What leaves your device: Google's SDKs
5. Ads
6. Purchases
7. Children (under 13)
8. Retention and deletion
9. Security
10. Links that leave the game
11. Canada (PIPEDA)
12. Quebec (Law 25)
13. United States
14. EEA, United Kingdom and Switzerland
15. Brazil (LGPD)
16. Australia
17. Other countries
18. Changes to this policy
19. Contact

1. Who we are

BallvsBall ("the game") is published by Abdul Rahman Aldirieh, an individual developer based in Ontario, Canada ("we", "us"). We are the controller of any personal data processed through the game, and the person responsible for the protection of personal information under Quebec law.

• Email: support@zentorogames.com
• Postal address: 461 Avens Street, Waterloo, Ontario N2V 0B6, Canada
• Website: https://zentorogames.com/

This policy covers the Android version of the game on Google Play. When the game is released on the Apple App Store, this policy will be updated for that version (see section 18).

2. What the game stores on your device

The game saves one file on your device (its private app storage). Nothing in it is sent to us. It contains:

• your progress: coins, gems, the balls you own, their cards and stars, Adventure levels cleared, your decks, Workshop levels, achievements, tasks, free spins, tutorial steps and play statistics (for example wins and damage counters);
• your purchases: a flag that says whether you own "Remove forced ads" and the list of one-time purchases you own (so the game knows what to unlock);
• the daily "Free with videos" offers and how many videos you have watched today;
• your settings: sound and music volume;
• the age screen answer: your birth month and year, the age group worked out from them (child, teen or adult), and when you answered;
• your answer to the "Personalised ads" question (adults only; off by default) and whether the question was asked;
• which version of this policy and of the Terms of Service you have seen, and when.

We have no way to read this file. It is deleted when you use Delete my data in Settings or uninstall the game. If you change phones, it does not move with you (there is no account or cloud save).

3. The age screen

The first time the game opens, it asks "When were you born?" with a blank month and a blank year. We use the answer for one thing only: to decide how ads are requested (section 5) and whether the parental gate protects purchases and outside links (section 7). The answer is kept only on your device. It is never sent to us or to Google. If you do not answer, or the date is impossible, the game treats you as a child.

4. What leaves your device: Google's SDKs

The game itself has no network code: it does not run a server, does not create accounts, and includes no analytics or crash-reporting SDK. Two Google components inside the game do communicate with Google:

4.1 Google Mobile Ads SDK (AdMob)

This SDK shows the ads in the game. According to Google's published disclosure for the SDK, it automatically collects and shares with Google:

Google encrypts this data in transit (TLS). Google, not us, holds it; we only receive aggregated reports (ad views, revenue) that do not identify you. Google's own rules are in the Google Privacy Policy and in How Google uses information from sites or apps that use our services.

For ad requests marked child-directed (section 5), Google states that the advertising ID is not transmitted and that no personalised ads or remarketing are used.

4.2 Google Play Billing

Purchases are made through Google Play. Google processes the payment under its own terms and privacy policy. The game receives from Google only the product you bought and a purchase token, which it uses on your device to unlock what you paid for. We never see your name, card number or billing address.

4.3 Google's consent message (EEA, UK and Switzerland only)

If you are in the European Economic Area, the United Kingdom or Switzerland, the game shows Google's consent message (the User Messaging Platform) before ads, where required, and offers a "Privacy choices" button in Settings to change your answer later. Your choice is stored on your device in a standard consent string that the ads SDK reads. It is not shown to children (ad requests for them are tagged as under the age of consent, and Google does not ask them for consent).

5. Ads

The game shows two kinds of ads: short reward videos that you choose to watch for an in-game reward, and occasional interstitial ads between levels or matches. There are no banner ads and no ads at launch.

• Maximum ad content rating G for everyone. The game never uses your play or your purchases to target ads, and never sends your age to Google: it only sets the tags below.
• Non-personalised by default. Unless you turn personalised ads on (next point), ads are chosen from the context only (the app, the device type, a region derived from the IP address), not from your interests, and the advertising ID is not used to build a profile of you.
• Personalised ads: an opt-in for adults (18+) only. After the Welcome screen, adult players see one page titled "Personalised ads": "Ads can be picked for your interests using your device's advertising ID. This is off unless you allow it. You can change it any time in Settings.", with Allow and Not now. Nothing is on until you tap Allow. If you allow it, Google's ads SDK uses your device's advertising ID (and the technical data in section 4.1) to pick ads that match interests Google has associated with that ID across apps and sites, and to measure them; this is Google's interest-based advertising, described in How Google uses information for advertising. To turn it off: Settings > Ads & privacy > Personalised ads (the switch takes effect from the next ad), or reset or delete your advertising ID in your device's settings (Settings > Google > Ads on Android). Turning it off does not reduce the game in any way.
• Teens (13-17) are never asked and never get personalised ads: the switch in Settings is greyed out for them ("Only for players 18 and over. Your ads are never personalised.").
• Children under 13, and players whose age is unknown: never asked, never personalised, and every ad request is also tagged as child-directed and under the age of consent. Google then serves ads only from its child-safe inventory and does not use the advertising ID.
• Whatever your choice, Google uses the technical data in section 4.1 for contextual ads, frequency capping (not showing you the same ad too often), ad measurement and fraud prevention.
• In the EEA, the UK and Switzerland, Google's consent message (section 4.3) decides whether personalised ads may be shown at all; the in-game switch never overrides a "no" given there.

The one-time purchase "Remove forced ads" removes interstitial ads; the optional reward videos stay available because you choose them.

6. Purchases

The game sells gem packs and "Remove forced ads" through Google Play. Gems are a virtual currency with no cash value that buys fixed things (balls, star cards, Workshop levels). Gems never buy gumball machine spins: the machines take only coins you earn by playing, or free spins you win. Google Play's records of your purchases follow Google's privacy policy; you can see them in your Google Play account. On your device the game keeps only what you own. If you are in child mode (section 7), a parental gate asks a grown-up before any purchase.

7. Children (under 13)

BallvsBall is for everyone 9 and up, so it is a mixed-audience game that children may play. This section is our notice under the United States COPPA Rule and similar laws, and it applies to any player the game treats as a child: under 13, or age not answered.

• What we collect from children: nothing. We have no accounts, no server, no chat, no free-text input and no analytics. The only personal information collected from a child's device is the technical data in section 4.1, collected by Google's ads SDK.
• Why Google collects it: solely to support the internal operations of the game's advertising: serving contextual (non-personalised) ads, frequency capping, ad measurement, fraud prevention and keeping the service working. It is not used for behavioural advertising and no profile of the child is built. Ad requests from children are tagged child-directed, which tells Google to apply child treatment and to drop the advertising ID.
• Third parties: Google LLC (Google Mobile Ads SDK / AdMob; Google Play Billing). No other third party receives data from the game.
• Parental gate: in child mode, a grown-up must solve a small arithmetic question before any real-money purchase and before any link that leaves the game (this policy, the Terms, support). The game does not store the answer.
• Your rights as a parent or guardian: you can review or delete what the game stores on the device at any time (Settings > Your data, or uninstall). Because we hold nothing on our side, there is nothing for us to give you or delete on request, but you are welcome to write to us and we will confirm this and help. For data Google holds, use Google's controls (section 5) or contact Google. You may refuse further collection by uninstalling the game.
• Contact for parents: Abdul Rahman Aldirieh, 461 Avens Street, Waterloo, Ontario N2V 0B6, Canada, support@zentorogames.com.

We do not knowingly collect personal information from children beyond what is described here. If you believe a child has given us personal information in some other way (for example by emailing us), write to us and we will delete it.

8. Retention and deletion

• On your device: the save file stays until you delete it. Settings > Your data > Delete my data (asked twice) erases all progress, balls, gems, settings, the age answer, the personalised-ads answer and the accepted-terms record, and the game starts again as on the first day (personalised ads are off again until an adult allows them). Uninstalling the game deletes the same file. Purchases of "Remove forced ads" are remembered by Google Play and can be brought back with Restore Purchases.
• With us: we keep nothing about you, so there is nothing to retain. If you email us, we keep the email for as long as needed to answer you and for our records, then delete it.
• With Google: Google's retention periods for ads data are described in the Google retention policy.

See also our Delete my data page.

9. Security

The save file lives in the game's private storage on your device, which other apps cannot read on a normal (non-rooted) phone. Data sent by Google's SDKs is encrypted in transit. We run no servers, so there is no database of players that could leak.

10. Links that leave the game

The game only opens this website and your email app (for support). Those pages are plain static pages: this site sets no cookies and uses no analytics. Your hosting provider may log IP addresses for security, as any website host does.

11. Canada (PIPEDA)

We follow the Personal Information Protection and Electronic Documents Act and its ten fair information principles. Abdul Rahman Aldirieh is the individual accountable for compliance (section 1). Your consent: by playing, you accept the technical ads processing described here; you can withdraw it at any time by uninstalling the game or resetting your advertising ID. You may ask us what personal information we hold about you (none) and challenge our compliance. You can also complain to the Office of the Privacy Commissioner of Canada. Data processed by Google may be stored and processed outside Canada, including in the United States, where it is subject to the laws of those countries.

12. Quebec (Law 25)

For players in Quebec, the Act respecting the protection of personal information in the private sector applies.

• Person in charge of the protection of personal information: Abdul Rahman Aldirieh, support@zentorogames.com, 461 Avens Street, Waterloo, Ontario N2V 0B6, Canada.
• Technologies that identify, locate or profile you: the only one is personalised advertising through Google's ads SDK, which uses your device's advertising ID to profile your interests for ad selection. It is off by default and is activated only by you: adults are asked once ("Personalised ads": Allow / Not now) and can deactivate it any time in Settings > Ads & privacy > Personalised ads. It is never available to players under 18. The game cannot locate you (Google only derives a region from the IP address for ad delivery and fraud prevention).
• Privacy settings by default: the game ships with the most protective settings; the personalised-ads switch is the only setting that lowers them, and it starts off.
• Information collected from minors under 14: we collect none ourselves (section 7).
• Outside Quebec: data collected by Google's SDK is processed outside Quebec, including in the United States.
• Your rights: access, rectification, withdrawal of consent, and the right to complain to the Commission d'accès à l'information du Québec. Write to the person in charge above; we answer within 30 days.
• This policy is also available in French: Politique de confidentialité.

13. United States

We do not sell your personal information. We never give any data to a data broker, and we hold no data to sell. Ads are non-personalised by default. If you are an adult and turn Personalised ads on, Google's ads SDK uses your advertising ID for interest-based advertising, which some state laws call "sharing for cross-context behavioral advertising"; the in-game switch (Settings > Ads & privacy > Personalised ads) is your opt-out and works at once, and Google's own "Do Not Sell or Share" message is shown where Google requires it. Players under 18 are never personalised, so no opt-in for minors ever happens. Section 7 is our COPPA notice for children.

State privacy rights (California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws): residents of these states may have the right to know what personal information a business holds, to delete it, to correct it, to opt out of sale, sharing or targeted advertising, and not to be discriminated against for exercising these rights. We hold no personal information about you, so a request to us will be answered with that confirmation; the data Google collects through its SDK is governed by Google's privacy policy and controls, including the "Do not sell or share" signals Google supports in its US-states consent message, which the game displays where Google requires it. To exercise any right, email support@zentorogames.com; we will not ask you to create an account to do so. Many of these laws apply only to businesses above revenue or data-volume thresholds that a solo developer does not meet; we nevertheless honour the rights above for everyone.

14. European Economic Area, United Kingdom and Switzerland

If you are in the EEA, the UK or Switzerland, the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection applies. This section adds the information those laws require.

14.1 Controller and representative

The controller is Abdul Rahman Aldirieh (section 1). The game is not offered in the European Economic Area or the United Kingdom yet; a representative there will be named here before it is.

14.2 What we process, why, and on which legal basis

Data stored only on your device (section 2) is not transmitted to anyone and we do not process it.

14.3 Children

We do not rely on a child's consent. Players under the digital age of consent in their country (13 to 16 depending on the Member State; 13 in the UK), and players whose age is unknown, are tagged as under the age of consent: Google does not ask them for consent and serves only non-personalised, child-safe ads. We apply the UK Children's code principles of high privacy by default, no profiling and no nudging for everyone.

14.4 Recipients and international transfers

The only recipient is Google (Google Ireland Limited for users in the EEA, UK and Switzerland, and Google LLC in the United States). Google transfers data to the United States and other countries under the safeguards described in its privacy frameworks page (such as standard contractual clauses and adequacy decisions). We ourselves receive no personal data from the game.

14.5 Retention

See section 8. We hold nothing; Google's retention periods are in Google's retention policy.

14.6 Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time (which does not affect processing before the withdrawal). Withdraw ads consent with Settings > Ads & privacy > Privacy choices (Google's message) and turn off Personalised ads on the same screen. Because we hold no data about you, requests to us will be answered with that confirmation; for data Google holds, use Google's tools or contact Google. You can lodge a complaint with your national supervisory authority, with the Information Commissioner's Office in the UK, or with the FDPIC in Switzerland.

14.7 Automated decisions

The game makes no decisions about you with legal or similarly significant effects.

15. Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados Pessoais applies. The controller is Abdul Rahman Aldirieh; the person in charge (encarregado) is Abdul Rahman Aldirieh, reachable at support@zentorogames.com. Legal bases are those in section 14.2 (consent, legitimate interest, performance of a contract). Data collected by Google's SDK is transferred internationally under Google's safeguards. Data of children and adolescents is processed in their best interest: we collect none ourselves, ads for them are non-personalised and child-directed, and this notice is written in simple language. You have the rights listed in article 18 of the LGPD (confirmation, access, correction, anonymisation, portability, deletion, information about sharing, and revocation of consent) and may complain to the ANPD.

16. Australia

If you are in Australia, we handle any personal information in line with the Australian Privacy Principles even where the Privacy Act 1988 may not apply to a small developer. This policy is our APP 1 privacy policy and our APP 5 notice. Data collected by Google's SDK is disclosed overseas (United States and other countries where Google operates). You may request access to or correction of personal information we hold (none) and complain to us first, then to the Office of the Australian Information Commissioner.

17. Other countries

Wherever you play, the facts are the same: we collect nothing ourselves, Google's SDKs collect the technical data in section 4, ads are non-personalised unless an adult turns personalised ads on, and your save stays on your device. If the law of your country gives you rights to access, correct, delete or object, you can exercise them by emailing us; we will answer with what we hold (nothing) and point you to Google's controls for the rest. Where local law requires a local representative or a notice in a local language, we will add it before offering the game there.

18. Changes to this policy

When this policy changes in a way that matters, we raise its version number. The game then shows the Welcome screen again with a link to the new version before you play, and the effective date at the top changes. The current version is 1. Older versions are available on request.

19. Contact

Abdul Rahman Aldirieh
461 Avens Street, Waterloo, Ontario N2V 0B6, Canada
support@zentorogames.com