Privacy Policy
Summary. Odd Physics saves your game on our servers from the first time you play, without asking you to sign in: your game progress, a system-generated display name and related game data are kept under an account created for this installation of the application, so that you can take part in leaderboards and leagues and receive your purchases and rewards. You may also link a Google Play Games account, which lets you restore your game on a new device or after reinstalling the application. We do not request your name, email address, telephone number or password. Advertising is provided by Google AdMob, which processes device data as described in Section 6. You may delete your account at any time. This summary is provided for convenience only; the full terms of this Policy govern.
1. Introduction and scope
1.1 This Privacy Policy (the "Policy") explains how Parallax Arc ("we", "us" or "our") collects, uses, discloses, retains and protects personal data in connection with the Odd Physics mobile application and its associated online features (together, the "Services").
1.2 "Personal data" means any information relating to an identified or identifiable natural person. Terms not defined in this Policy have the meaning given to them by applicable data protection law, including the EU General Data Protection Regulation ("GDPR"), the UK GDPR and India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
1.3 This Policy does not apply to services operated by third parties, such as Google Play, which are governed by their own privacy policies.
2. Data controller and contact details
2.1 Parallax Arc, the developer and publisher of Odd Physics, is the controller (and, for the purposes of the DPDP Act, the Data Fiduciary) responsible for the personal data processed through the Services.
2.2 All enquiries, requests and complaints relating to this Policy or to your personal data may be addressed to parallaxarc.games@gmail.com.
3. Personal data we process
3.1 Your game account
When you first use the application, it creates an account for this installation on our servers (a "guest account"), without asking you to sign in. We process the personal data described in Section 3.2 for that account, except a Google Play Games identifier. A guest account is tied to this installation of the application: if you uninstall the application, clear its data or change device without linking a Google Play Games account, your guest account cannot be recovered, save that purchases of Premium are restored by Google Play. Until the application can reach our servers, your game is kept on your device. The application also contacts our servers to obtain the current time for the purposes of daily rewards and the Daily Challenge; such requests necessarily transmit your IP address and basic technical information, which are handled as described in Section 3.3.
3.2 Personal data we process for your account
We process the following categories of personal data for every account. Linking a Google Play Games account is optional; where you elect to do so, we also process your Google Play Games player identifier:
| Category | Description |
|---|---|
| Account identifiers | An internal player identifier, a randomly generated secret for each registered device (of which we retain only a one-way cryptographic hash), a random identifier of this installation of the application, and, where you link one, your Google Play Games player identifier. |
| Display name | A two-word name generated by the application (for example, "Silent Warden"), with a two-digit number where that pair of words is already in use, and a history of display names used. Display names cannot be entered by players. |
| Gameplay and activity data | Levels and Challenges completed; moves made (retained so that each solution can be verified server-side); lives, hints and undo actions used; points; league and leaderboard results; awards; Premium status; and your hint and skip balance together with its transaction history. |
| Transaction data | For in-app purchases: product identifier, order identifier, purchase token, the Google Play receipt and the result of its verification, and refund status. Payment card and other payment details are processed exclusively by Google Play and are not received by us. |
| Rewarded advertising data | A record that a rewarded advertisement was viewed, the advertising service that delivered it and the reward granted. |
| Device data | Device model, operating system, language setting, time-zone offset, application version and the outcome of Google Play Integrity verification. |
| Location data (approximate) | Your country, derived from your store region or language setting. |
| Consent records | Where you link an account, the versions of our terms and this Policy that you have accepted, and the date and time of acceptance. |
3.3 Technical and security data
When the application communicates with our servers, we record the action performed, the application version, your country and your player and device identifiers. We do not store IP addresses. We retain only a keyed, one-way hash of a truncated form of the IP address (the network prefix) for the purpose of preventing abuse, and that hash is permanently erased after 30 days. Other log data is retained for no longer than 180 days.
3.4 Correspondence and problem reports
If you contact us by email, we process your email address and the contents of your message for the purpose of responding to you.
If you send a message from Settings › Help & feedback in the application, whether or not you have linked a Google Play Games account, the application sends us your message together with a diagnostic report: your device and application details (device model, operating system, graphics, screen, language, time-zone offset and application version), the state of your game (progress, settings, display name, wallet, Premium status, and the level you were playing with its moves), a record of your recent actions in the game and of recent errors, the state of the Google Play store connection (whether it is connected, its last answer, and which product prices it returned; never a purchase token or order number), a random identifier of this installation of the application and your player identifier, and a code that identifies the report. We use it only to investigate and fix the problem you report and to answer you, keep it for 90 days, and delete it with your account. A report is sent only when you choose to send it.
3.5 Crash and error reports
If the application crashes, stops responding or meets an internal error, it sends an automatic technical report to our error-monitoring provider, Sentry (Section 5), so that we can find and fix the defect. A report contains: the error and where in the application's code it occurred, the application version, device model, operating system and its version, language setting, the screens and actions in the game shortly before the error, and a random identifier of the report. It does not contain your display name, your player identifier, your messages, your advertising identifier or your IP address beyond its use to deliver the report. Reports are kept by Sentry for 30 days (Section 9).
3.6 Data we do not collect
We do not collect your name, email address (save as described in Section 3.4), telephone number, contacts, photographs, precise geolocation or passwords. Our own systems do not collect your advertising identifier or hardware identifiers; advertising data processed by Google is addressed in Section 6.
4. Purposes and legal bases of processing
4.1 We process personal data only for the purposes set out below and, where the GDPR or UK GDPR applies, on the corresponding legal basis:
| Purpose | Legal basis |
|---|---|
| Providing the Services, including synchronising and restoring progress across devices and delivering purchases and rewards | Performance of a contract (Art. 6(1)(b) GDPR) |
| Operating leaderboards and leagues, including the display of display names | Performance of a contract (Art. 6(1)(b) GDPR) |
| Ensuring fair play and security, including verifying solutions, detecting cheating, fraud and abuse, and maintaining an audit trail of points, purchases and administrative actions | Our legitimate interests in operating a fair and secure game (Art. 6(1)(f) GDPR) |
| Displaying advertising in order to fund the Services | Consent, where required by law (Art. 6(1)(a) GDPR); otherwise our legitimate interests (Art. 6(1)(f) GDPR) |
| Receiving automatic crash and error reports to find and fix defects (Section 3.5) | Our legitimate interests in providing a working application (Art. 6(1)(f) GDPR) |
| Responding to enquiries, resolving defects and balancing game difficulty | Our legitimate interests in supporting players and improving the Services (Art. 6(1)(f) GDPR) |
| Retaining transaction records | Compliance with a legal obligation (Art. 6(1)(c) GDPR) |
4.2 Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal. Where processing is based on legitimate interests, you may object to it as described in Section 12.
4.3 We do not sell personal data.
5. Disclosure of personal data
5.1 We disclose personal data only to the following service providers, who process it either on our behalf or as independent controllers under their own privacy policies:
| Provider | Function | Privacy policy |
|---|---|---|
| Google AdMob | Delivery of advertisements (rewarded video and interstitial advertisements) | How Google uses data from apps |
| Google Play Games Services | Optional sign-in and account linking | Google Privacy Policy |
| Google Play Billing | Processing of in-app purchases | Google Privacy Policy |
| Google Play Integrity API | Verification that the application and device are genuine (anti-cheat) | Google Privacy Policy |
| Supabase | Hosting of our game server and database (servers located in Mumbai, India) | Supabase Privacy Policy |
| Sentry (Functional Software, Inc.) | Crash and error reports (Section 3.5; data stored in the European Union) | Sentry Privacy Policy |
5.2 We may also disclose personal data where we are required to do so by law, regulation, court order or other legal process, or where disclosure is reasonably necessary to establish, exercise or defend legal claims or to protect the rights, property or safety of Parallax Arc, our players or others.
6. Advertising
6.1 The application shows advertisements served by Google AdMob: optional rewarded videos, which any player may choose to watch in exchange for an in-game reward, and, for players who have not purchased Premium, full-screen advertisements between levels. The Google Mobile Ads SDK may collect your device's advertising identifier, IP address, approximate location derived from that IP address, device and application information, and advertising interaction data, and may use such data to deliver, measure and (where permitted) personalise advertisements and to prevent fraud. Premium players are not shown advertisements unless they choose to watch a rewarded video.
6.2 EEA, United Kingdom and Switzerland. Before personalised advertisements are shown, the application requests your consent through Google's consent management solution. You may review or withdraw your consent at any time from Settings › Privacy choices within the application.
6.3 All regions. You may reset or delete your advertising identifier, or opt out of personalised advertising, through your Android device settings (Settings › Google › Ads, or Settings › Privacy › Ads).
7. International data transfers
7.1 Our servers are located in India, and our service providers may process personal data in other countries, including countries that may not provide the same level of data protection as your country of residence.
7.2 Where personal data originating in the European Economic Area, the United Kingdom or Switzerland is transferred to a country that has not been recognised as providing an adequate level of protection, such transfer is made subject to appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission (and their UK equivalents), as incorporated in our service providers' data processing terms.
8. Information visible to other players
Your display name, league and leaderboard scores, the items you wear and whether you hold Premium are visible to other players. No other personal data is made available to other players.
9. Data retention
9.1 We retain personal data only for as long as is necessary for the purposes for which it was collected, as follows:
| Data | Retention period |
|---|---|
| Data stored on your device | Until you delete your account in the application, clear the application's data, or uninstall it. For 14 days after a guest account's deletion is requested, the application keeps only that account's sign-in key on the device, so that the game can be brought back on that device |
| Accounts whose deletion you requested | 14 days after a request made in the application, and 29 days after a request made by email, unless you bring the account back before then (Section 9.2) |
| Account data (linked or guest) | For as long as your account remains active. An account that has not been used for 24 months is deleted automatically, in the same way as when you delete it yourself |
| Guest accounts without a purchase | Deleted automatically after 90 days without use, or after 14 days if the application never sent any game data |
| IP address hashes | 30 days |
| Other server logs | Up to 180 days |
| Crash and error reports | 30 days |
| Transaction records | Retained in anonymised form, without any link to your Google account, for the period required by accounting, tax and refund obligations |
| Database backups | Encrypted, up to 90 days. Data erased from the Services can remain in a backup until it expires; a backup is used only to recover the Services after a failure, and erasures made since it was taken are then applied again |
9.2 When you delete your account in the application, the game on your device is erased at once, and your account is withdrawn from the Services at once: it no longer appears on any leaderboard and can no longer be used from any device. It is kept for 14 days so that an accidental deletion can be undone, and then your progress, solutions, points, wallet, display names, registered devices, consent records and rewarded-advertising records are erased and your account is anonymised, save for the transaction records described above. If you open the game and load your account again within those 14 days (with the same Google Play Games account, or, for a guest account, on the same device without having uninstalled the application), the deletion is cancelled. A guest account cannot be brought back after the application has been uninstalled or its data cleared. A deletion requested by email is completed within 30 days. Instructions for deleting your account are available on our Account Deletion page. You may delete a guest account in the same way, from Settings › Account in the application.
10. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. All communications between the application and our servers are encrypted in transit using HTTPS; device secrets are stored only as one-way hashes; IP addresses are stored only as keyed hashes; and access to our database is restricted. While no method of transmission or storage is completely secure, we will act promptly to investigate and respond to any security incident and will notify affected individuals and the competent authorities where required by law.
11. Children
The Services are not directed to children under the age of 13, and we do not knowingly collect personal data from them. If you believe that a child under 13 has used the Services, please contact us and we will delete the account and its associated data.
12. Your rights
12.1 Subject to the conditions and exceptions of applicable law (including the GDPR, the UK GDPR and the DPDP Act), you may have the right to:
- access the personal data we hold about you and obtain a copy of it;
- request the correction of inaccurate or incomplete personal data;
- request the erasure of your personal data;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your personal data in a structured, commonly used and machine-readable format (data portability);
- withdraw your consent at any time, where processing is based on consent; and
- nominate another individual to exercise your rights in the event of your death or incapacity, where the DPDP Act applies.
12.2 To exercise any of these rights, please email us at the address in Section 14, stating your request and the report code of a message sent from Settings › Help & feedback on your device (your in-game display name alone is not enough, as it is visible to other players). We may ask for further information reasonably necessary to verify that the account belongs to you. We will respond within the period prescribed by applicable law and, in any event, within 30 days of receiving a verified request.
12.3 You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence or, in India, with the Data Protection Board of India. We would, however, welcome the opportunity to address your concerns first.
13. Changes to this Policy
We may amend this Policy from time to time to reflect changes in the Services or in applicable law. The "Last updated" date at the top of this page indicates when it was last revised. Where we make material changes, we will provide notice within the application before the changes take effect.
14. Contact and grievances
Questions, requests and complaints concerning this Policy or the processing of your personal data may be addressed to:
Parallax Arc
Email: parallaxarc.games@gmail.com