Privacy Policy for QuadSum

This policy explains what happens to information when you play QuadSum (the "Game"), an Android number puzzle published under the package name com.quadsum.game.

The Game is provided by Vitalii Shmatko (Dragon2000v), an individual developer based in Kharkiv, Ukraine ("we", "us"). You can reach us at quadsum.support@gmail.com.

The short version. QuadSum has no accounts, no login and no analytics. Your progress is stored only on your own device. We, the developer, do not run any server and never receive your personal data. The only information that leaves your device is what Google's advertising SDK sends when it serves ads, and what Google Play handles if you buy the one-time "Remove Ads" product.

1. Information we collect ourselves

None.

QuadSum does not ask you to create an account, sign in, or give us your name, email address, phone number or any other identifying detail. The Game contains no analytics SDK, no crash-reporting SDK, no attribution or ad-mediation SDK, and no code of our own that contacts a server. It does not read your advertising identifier, device identifier, contacts, location, camera, microphone, photos or files.

The puzzles themselves — including the Daily Challenge, which is derived from the current UTC calendar date on your device — are generated locally. Nothing about your play is sent to us.

2. Information stored on your device

QuadSum saves a single file, save.json, in the Game's private app storage. Only QuadSum can read it. It contains:

• Settings — sound on/off, music and effects volume, haptics on/off, chosen language.
• Statistics — best results and games played in Easy and Hard, levels completed, total play time, number of solves, hints used, fastest solve, solves per board size.
• Daily Challenge progress — last completed date, number of days completed, current and best streak, best and last time.
• Achievements — which of the twelve achievements you have unlocked.
• Purchase flag — whether "Remove Ads" is active on this device.
• Tutorial — whether you have seen the tutorial.

This file contains no personal identifiers. It is not uploaded anywhere, and Android backup is switched off for the Game (allowBackup="false"), so it is not copied to Google Drive backups either. Uninstalling the Game, or using Settings → Apps → QuadSum → Storage → Clear data, deletes it permanently.

3. Information collected by third parties

There are exactly two third parties, both Google. We do not receive the data they collect; each acts under its own privacy policy.

3.1 Google AdMob (advertising)

QuadSum shows two kinds of ads: rewarded ads, which you choose to watch in exchange for an optional hint, extra fifteen seconds in Hard mode, or an extra life; and interstitial ads, shown between levels and at the end of a run.

To select, deliver, measure and report on those ads, Google's Mobile Ads SDK may collect and process:

• your device's advertising identifier (Android Advertising ID) and app set ID;
• device and app information — device model, operating system version, language, screen and network characteristics, and the app you are using;
• your IP address, from which an approximate (coarse, city-level) location can be derived;
• ad interaction data — which ads were requested, shown, viewed, clicked or completed, and diagnostic information about ad delivery.

The Game requests the INTERNET, ACCESS_NETWORK_STATE and advertising-ID (AD_ID) permissions for this purpose. QuadSum does not collect precise GPS location, and no runtime permission (location, camera, microphone, contacts, storage) is requested.

Google's handling of this data is described in the Google Privacy Policy (https://policies.google.com/privacy) and in How Google uses information from sites or apps that use our services (https://policies.google.com/technologies/partner-sites).

3.2 Google Play Billing (the "Remove Ads" purchase)

QuadSum offers one optional, one-time, non-consumable in-app product, Remove Ads (remove_ads), which removes the interstitial ads between levels and at the end of a run. Optional rewarded hints remain available after the purchase, exactly as the in-app description states.

The entire transaction is handled by Google Play. We never see or receive your payment card, bank details, billing address or Google account. The Game only reads back from Google Play the product identifier, whether the purchase is in the "purchased" state, the purchase token, and whether it has been acknowledged — and stores a single true/false flag locally so ads stay off. Ownership is re-checked with Google Play each time the Game starts, which is why the purchase is restored automatically after a reinstall.

Google Play's processing is covered by the Google Payments Privacy Notice (https://payments.google.com/legaldocuments) and the Google Privacy Policy. As the developer, we can see order and refund records in the Google Play Console, as Google provides them to all developers.

3.3 Google Play itself

Downloading and updating the Game is a Google Play function and is governed by Google's policies, not by this one.

4. Advertising identifiers and personalised ads

The advertising identifier is a resettable identifier that Google provides on Android so that ads can be tailored and measured without using your name. Depending on your consent and your device settings, ads in QuadSum may be personalised (selected using this identifier and inferred interests) or non-personalised (selected using only coarse context, such as approximate location and the app you are in; non-personalised ads still use identifiers for frequency capping, fraud prevention and measurement).

You can control this at any time:

• Reset or delete your advertising ID: Android Settings → Privacy → Ads (on some devices Settings → Google → All services → Ads), then Reset advertising ID or Delete advertising ID. Deleting it stops apps from receiving the identifier.
• Opt out of ads personalisation: the same screen offers Opt out of Ads Personalisation.
• Google account-level controls: https://myadcenter.google.com and https://adssettings.google.com.
• In the European Economic Area, the United Kingdom and Switzerland: use the consent choices described in section 5.

Turning off personalisation does not remove ads; it changes how they are chosen. To remove the interstitial ads entirely, buy Remove Ads.

5. GDPR — European Economic Area, United Kingdom and Switzerland

If you are in the EEA, the UK or Switzerland, the following applies.

Consent before advertising. The first time QuadSum starts, and whenever Google's rules require it again, the Game shows Google's User Messaging Platform (UMP) consent form before the advertising SDK is initialised. That form asks whether you agree to the storing of information on your device and to the processing of personal data such as your advertising identifier for personalised advertising, ad measurement and related purposes, and it lists the ad technology providers involved. Your answer is recorded by Google's SDK on your device and governs what Google may do afterwards. If you decline, or if the form cannot be shown, ads are served on a non-personalised basis.

Controllers and legal bases. For the personal data that Google's advertising SDK collects for advertising purposes, Google acts as a controller and relies on your consent (or, where permitted, on its legitimate interests for security, fraud prevention and measurement). For the purchase, Google acts as the payment processor and controller of the transaction data; our use of the resulting order record rests on the necessity of performing the contract with you and on our legitimate interest in supporting and accounting for purchases. We do not process any other personal data about you and do not operate as a controller of any dataset that identifies you.

International transfers. Google processes data in the United States and other countries outside the EEA/UK. Google states that it relies on the European Commission's Standard Contractual Clauses and equivalent UK safeguards, and on adequacy decisions where they apply. See Google's privacy policy for current details.

Your rights. You have the right to access, correct, erase, restrict and object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting processing carried out before the withdrawal. Because we hold no data that identifies you, requests about advertising data must be directed to Google (https://support.google.com/policies) — we will help you route a request if you write to us at quadsum.support@gmail.com. You may also lodge a complaint with your national data protection authority.

Withdrawing or changing your advertising consent. You can change your choice at any time using the Android advertising controls listed in section 4 (deleting or resetting your advertising ID, and opting out of ads personalisation), by declining consent the next time the form is presented, or by uninstalling and reinstalling QuadSum, which clears the stored consent state and makes the form appear again. Writing to us at quadsum.support@gmail.com will also get your request forwarded.

6. CCPA/CPRA — California residents

We do not sell your personal information for money, and we ourselves collect none.

However, under the CCPA as amended by the CPRA, the use of advertising identifiers to serve interest-based advertising can qualify as a "sale" or as "sharing" for cross-context behavioural advertising. To the extent Google's advertising SDK does this in QuadSum, the categories involved are identifiers (advertising ID, app set ID, IP address), internet or other electronic network activity (ad interactions), coarse geolocation inferred from IP address, and inferences drawn for ad targeting, all used for the business purpose of advertising and its measurement. We do not knowingly sell or share the personal information of consumers under 16. We do not collect sensitive personal information, and we do not use the data for profiling that produces legal or similarly significant effects.

To opt out of that sale/sharing, use the Android advertising controls in section 4 — deleting your advertising ID or opting out of ads personalisation is the effective opt-out signal for this Game — and Google's own controls at https://myadcenter.google.com. You may also contact us at quadsum.support@gmail.com.

California residents additionally have the right to know what personal information is collected and how it is used, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. Since we hold no personal information about you, a request to us will be answered by confirming that and, where relevant, directing you to Google.

Residents of other US states with comparable laws (including Virginia, Colorado, Connecticut, Utah and Texas) may exercise the equivalent rights through the same routes.

7. Children

QuadSum is a number puzzle with no violence, no gambling, no chat and no user-generated content, and it is suitable for a general audience. It is not directed at children under 13 (or under the applicable age of digital consent in your country, which is 13 to 16 in the EEA and the UK), and it is not published in Google Play's Designed for Families programme.

We do not knowingly collect personal information from children under 13. The Game contains advertising that uses advertising identifiers, which is why it is intended for a 13+ audience. If you believe a child under 13 (or under the applicable age of consent) has used QuadSum in a way that resulted in personal data being collected, please contact us at quadsum.support@gmail.com; we will confirm what we can and refer the request to Google, since any such data is held by Google and not by us. The most effective immediate step a parent can take is to delete the device's advertising ID (section 4) and uninstall the Game, which removes all local data.

8. Data retention

• On your device: the save.json file is kept for as long as QuadSum is installed. It is deleted when you uninstall the Game or clear its data. We cannot delete it remotely, and we have no copy of it.
• Advertising data: retained by Google according to Google's own retention schedules, described in the Google Privacy Policy. We have no access to it and no ability to delete it.
• Purchase records: retained by Google Play. Order records visible to us in the Google Play Console are retained for as long as Google provides them and for as long as we need them to handle support, refunds, tax and accounting obligations.
• Consent record: the UMP consent state is stored locally on your device and is removed when the Game's data is cleared or the Game is uninstalled.

9. Security

The Game stores its only file in private app storage, which Android isolates from other apps, and Android backup is disabled for it. All network traffic is made by Google's SDKs to Google's own endpoints over encrypted connections. Because we neither collect nor store personal data on any server, there is no account of yours for us to lose. No method of transmission or storage is perfectly secure, and we cannot guarantee the security of data handled by third parties.

10. Permissions the app requests

QuadSum declares two permissions of its own:

• INTERNET — used only by the Google advertising and billing SDKs; no game code opens a network connection.
• VIBRATE — short haptic feedback on taps and wrong answers, which you can switch off in the Game's settings.

Google's SDKs add further normal-level permissions, including access to network state, advertising-ID and Android Ad Services permissions, the Google Play billing permission, and permissions used by Google's background work and logging components. No dangerous or runtime permission is requested — no location, camera, microphone, storage, contacts or call-related permission.

11. Links and third-party content

Ads shown in QuadSum may lead to third-party websites or app store listings that we do not control and are not responsible for. Their own privacy policies apply once you leave the Game.

12. Changes to this policy

We may update this policy when the Game changes or when the law requires it. The revised version will be posted at this address with a new effective date. If a change materially affects how your data is handled, we will make the change prominent in the Game's store listing or in the Game itself. Continuing to play after an update means you accept the revised policy.

13. Contact

Questions, requests or complaints about this policy or about privacy in QuadSum:

Vitalii Shmatko (Dragon2000v)
Kharkiv, Ukraine
Email: quadsum.support@gmail.com

We answer privacy requests within 30 days. For data held by Google — advertising data and purchase data — please also contact Google directly at https://support.google.com/policies.

QuadSum is not affiliated with, endorsed by, or sponsored by Google LLC. Google, Google Play, AdMob and Android are trademarks of Google LLC.