PLAYER INFORMATION
Privacy notice
Your game. Your data.
This notice describes the information used to run CANNON PANG and the choices available to players.
01Account & saved progress
Firebase Authentication handles guest, Google, Apple and existing email-account sign-in. Account information may include a game user ID, login provider, email address and display name. Guests do not need to enter an email, and Apple may supply a private relay address.
Sign-in credentials are handled by the selected provider. The app stores session credentials securely on the device. Temporary browser-to-game sign-in data is encrypted and removed after use. Cloud saves contain game progress, currency earned through play, completed runs and save metadata.
For email sign-in, the password entered in the app is sent directly to Firebase Authentication over HTTPS for verification. The game backend, cloud game saves and stored app sessions do not store this password. Session authentication tokens are stored securely on the device.
02Purchases & memberships
When purchases are enabled, Apple processes App Store payments and Google processes Google Play payments. Our server uses transaction or purchase-token identifiers, product identifiers, an account-binding token, the purchase environment, paid-Gem balances and membership status to verify purchases, recover interrupted delivery and handle refunds. The game server does not receive payment-card details.
Purchased Gems use a server wallet. App Store, TestFlight, Google Play production and Google Play sandbox profiles and purchase records are isolated. Paid wallets and memberships are not automatically combined across stores or test environments.
03Optional rewarded ads
When advertising is enabled, the game requests non-personalized AdMob ads. The SDK may process IP-derived coarse location, device identifiers, ad views/interactions, crash logs and performance diagnostics. Google iOS SDK disclosure ↗ · Google Android SDK disclosure ↗
The app requests Google Limited Ads and disables publisher first-party IDs. This restricts personalization and advertising features that require local identifiers. IP-based ad delivery, SDK diagnostics and fraud-prevention processing can still occur; programmatic Limited Ads may use fraud-prevention-only local storage. Available ads may be reduced. Google Limited Ads ↗
Use Ad privacy settings to review available choices. Auto-hunt and double-Gold rewards require the SDK earned-reward confirmation and ad closure. Daily ad Gems are different: 5 Gems are credited only after our server verifies Google’s signed reward callback; verification can take time after the ad closes. Membership ad removal uses the server-verified benefit and keeps the daily limit.
04How information is used
Information supports sign-in, cloud recovery, purchase delivery, membership access, optional advertising, fraud prevention and troubleshooting. Firebase, Apple and Google process information as service providers or under their own service terms. The release configuration and third-party privacy information should be reviewed together.
05Retention & account deletion
Account and cloud data are kept while the account is in use. The in-app deletion flow removes the game account, cloud saves, purchase wallets and account linkage after required identity checks. The current device profile resets only after the server confirms deletion.
Minimal pseudonymous records are retained to prevent purchase replay and repeat processing: hashed account/token references, transaction identifiers and processing state. These records do not contain your email, display name, plaintext account-binding token, Google purchase token or receipt JWS. No deletion date for these replay-prevention records is currently configured.
Provider-held records and platform purchase history follow the providers’ policies. Deleting a game account does not cancel an App Store or Google Play subscription. Copies already stored on other devices are not remotely erased by the game.
06Your choices & questions
You can choose guest play, connect an account, manage cloud saves and request account deletion from the game. The support page explains these controls. For access, correction or other privacy requests, use the operator’s verified contact below. We may need to verify that a request concerns your account.