Privacy PolicyPolítica de privacidad

1Who is responsible for your data

The data controller for the ClueCipher Word Puzzles app (the “App”) is:

• Adrián Rodríguez Lázaro (trading as NXVRMORE), private individual developer
• Almería, Spain
• Email: hello@nxvrmore.com · Website: nxvrmore.com

This policy applies to the App on the Apple App Store and Google Play. It explains what data is processed, why, on what legal basis and what rights you have under the EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD) and other applicable privacy laws.

2Data we process

2.1 Data stored only on your device

Your game progress (levels solved, letters entered, hints, daily puzzle and streak), statistics and settings (sound, music, vibration, font size and language) are saved in the App’s private storage on your device. This information is never sent to us or to any server we operate. It is deleted when you use Settings › Reset all progress or uninstall the App. Whether you bought “Remove Ads” is also cached locally so the App can respect your purchase offline.

2.2 Data processed by our advertising partner (Google AdMob)

The free version of the App displays banner, interstitial and optional rewarded video ads served by Google AdMob (Google Ireland Limited / Google LLC). To deliver, measure and protect ads, Google’s SDK may collect:

• Device identifiers: the advertising identifier (IDFA on iOS, only if you allow tracking; Android Advertising ID, which you can reset or delete), and app-scoped identifiers such as IDFV/App Set ID;
• IP address and an approximate (coarse) location derived from it;
• Device and app information: model, operating system and version, language, screen, app version, network type;
• Advertising data: ads shown, taps and interactions, and whether a rewarded video was completed;
• Diagnostics: crash and performance data of the ads SDK, and data used to prevent fraud and invalid traffic.

How Google uses this data is described at How Google uses information from sites or apps that use its services and in the Google Privacy Policy. The list of ad technology providers is available through the consent form (see section 4).

2.3 Purchases

The optional “Remove Ads” purchase is processed entirely by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never receive your name, card number or billing address. The App only receives a confirmation that the product com.nxvrmore.cluecipher.removeads belongs to your store account, which is used to disable banner and interstitial ads and to restore the purchase (Settings › Restore purchases). Rewarded videos remain optional after purchase.

2.4 Technical providers

The App is built with the Unity engine (Unity Technologies). We have disabled Unity analytics, performance reporting and hardware statistics; Unity’s purchasing module only communicates with the Apple or Google store to process purchases. The App’s music was generated with Suno (suno.com) and the fonts are Poppins (Google Fonts); neither processes your data inside the App.

2.5 When you contact us

If you email us (support, or Settings › Report an ad), we process your email address and the content of your message only to answer you, and keep it for as long as needed to handle your request and any follow-up, up to a maximum of 2 years.

We do not collect precise location, contacts, photos, microphone or camera data, health or financial data, and we do not sell your personal data for money.

3Purposes and legal bases

4Consent, tracking and your ad choices

• European Economic Area, UK and Switzerland: on first launch the App shows Google’s consent form (User Messaging Platform, IAB TCF v2.2). You can accept, reject or manage options per purpose and vendor. If you reject, ads can still be shown, but they are non-personalised or limited. You can change or withdraw your consent at any time in Settings › Privacy options; withdrawing does not affect processing carried out before.
• iOS – App Tracking Transparency: after the consent form, iOS asks whether the App may track you. The IDFA is only accessed if you tap “Allow”. You can change this at any time in iOS Settings › Privacy & Security › Tracking. The game works exactly the same if you decline.
• Android: you can reset or delete your advertising ID in Settings › Google › Ads (or Settings › Privacy › Ads).
• US state privacy laws (e.g. California CCPA/CPRA): showing personalised ads may be considered “sharing” personal information for cross-context behavioural advertising. You can opt out by declining tracking (iOS), deleting your advertising ID (Android) or using Settings › Privacy options where available. We honour these choices and do not discriminate against you for exercising them.
• Ads are requested with a maximum content rating suitable for a general audience (PG). If an ad seems inappropriate, use Settings › Report an ad.

5Sharing and international transfers

We do not share your data with anyone except the providers described above: Google (advertising and consent management), Apple or Google (purchases, under their own responsibility) and, where legally required, public authorities. Google may process data outside the EEA, including in the United States; these transfers rely on the EU–U.S. Data Privacy Framework (Google LLC is certified) and/or the European Commission’s Standard Contractual Clauses. Google acts as an independent controller or as a processor depending on the processing, as set out in the Google Ads Controller-Controller Data Protection Terms and the Google Business Data Responsibility site.

6Retention and deletion

• Game data stays on your device until you reset your progress or uninstall the App. We cannot access or recover it.
• Advertising data is kept by Google according to its retention policies (see How Google retains data).
• Purchase records are kept by Apple or Google as required by law.
• Emails are kept for up to 2 years after your request is closed, unless a longer period is legally required.

Because the App has no accounts, there is no online account to delete. To delete all data: use Settings › Reset all progress, uninstall the App, and reset or delete your advertising ID in your device settings. You can also ask us to delete any email correspondence at hello@nxvrmore.com.

7Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability and the right to withdraw consent at any time. Since we do not hold your game data on our servers, most requests are best handled directly on your device or with Google/Apple, but we will always help: write to hello@nxvrmore.com and we will reply within one month. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with your local supervisory authority.

8Children

ClueCipher is a word puzzle game intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children. In Spain, users under 14 need the consent of their parents or guardians to accept personalised advertising. If you believe a child has provided personal data, contact us and we will help to delete it.

9Security

Communication between the App and Google or the app stores is encrypted (HTTPS/TLS). Local game data is stored in the App’s private sandbox, which other apps cannot read. No method of storage or transmission is completely secure, but we apply reasonable measures appropriate to the small amount of data involved.

10Device permissions

• Internet / network state – to load ads and communicate with the app store.
• Advertising ID (Android) / Tracking (iOS, optional) – for ads, as explained in section 4.
• Vibration – for optional haptic feedback, which you can turn off in Settings.

The App does not request access to your location, contacts, camera, microphone, photos or files.

11Changes to this policy

We may update this policy when the App or the law changes. The date at the top shows the latest version. Significant changes will be announced in the App or on its store listing and, where required, we will ask for your consent again.