Privacy Policy
Effective: February 26, 2026
1. Who We Are
Scramage ("we", "us", or "our") is a mobile puzzle game that turns your photos into sliding-tile challenges. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.
2. Information We Collect
2.1 Information You Provide
Player name: An optional display name you choose (stored locally on your device and included when you share puzzles with other players).
Photos: Images you select from your device camera or photo library to create puzzles. Photos are processed entirely on your device unless you choose to share a puzzle.
Profile avatar: An optional photo you select as your profile picture (stored locally only).
2.2 Information Collected Automatically
Device identifier: A randomly generated anonymous ID (UUID) created on first launch. This is not linked to your name, email, phone number, or any personally identifiable information.
Analytics data: Screen views and gameplay events (e.g., puzzle started, puzzle solved, difficulty level, move count) collected via Firebase Analytics. This data is aggregated and anonymous.
Crash and performance data: Crash reports (stack traces, device model, OS version) and app performance metrics collected via Firebase Crashlytics and Firebase Performance Monitoring to help us fix bugs and improve the app.
Session telemetry: Basic session information (platform, OS version, app version, locale, session count) sent to our backend to understand usage patterns. No personal information is included.
2.3 Information Collected Through Sharing
When you share a puzzle with another player, the following data is uploaded to our servers:
- The puzzle image (JPEG, with all EXIF metadata stripped)
- Tile positions and difficulty settings
- Your anonymous device ID and display name (if set)
- A cryptographic share token
Shared puzzle data is automatically deleted after 30 days.
3. How We Use Your Information
We use the information we collect to:
- Provide and operate the game
- Enable puzzle sharing between players
- Save your game progress and settings locally
- Diagnose crashes and improve app stability
- Monitor app performance
- Understand aggregate usage patterns
- Enforce content policies and prevent abuse
We do not use your data for advertising, behavioral profiling, or sale to third parties.
4. How We Share Your Information
We do not sell, rent, or trade your personal information.
Service providers: We use Firebase (Google LLC) for analytics, crash reporting, data storage, and file hosting. Information processed by Firebase is subject to Google's Privacy Policy.
Puzzle sharing: When you share a puzzle, the recipient can see your display name (if set) and the puzzle image. Senders can restrict recipients from saving the solved image.
Legal requirements: We may disclose information if required by law, regulation, or legal process.
5. Data Storage and Security
Local data: All game progress, settings, and saved images are stored on your device in an AES-256 encrypted database. Encryption keys are stored in your device's secure keychain.
Cloud data: Shared puzzle images and metadata are stored in Firebase (Google Cloud) with encryption at rest and in transit. API access is protected by Firebase App Check.
Image privacy: When you share a puzzle, all EXIF metadata (including GPS location, camera details, and timestamps) is stripped from the image before upload. Only pixel data is transmitted.
6. Data Retention
- Local game data: Retained until you uninstall the app or clear app data
- Solved puzzle album: Up to 200 entries, oldest automatically removed
- Shared puzzles: Automatically deleted 30 days after creation
- Crash reports: Retained for 90 days (Firebase default)
- Analytics data: Retained per Firebase Analytics defaults
- Session telemetry: Retained indefinitely in aggregate form (no personal information)
7. Your Rights and Choices
Access and deletion: You can delete all local data by uninstalling the app or clearing app data in your device settings. To request deletion of any server-side data associated with your device ID, contact us at the address below.
Analytics opt-out: You can limit analytics collection by disabling usage data sharing in your device settings.
Screenshot protection: The app can block screenshots on the puzzle screen to protect shared content when the sender has enabled save restrictions.
If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA, including the right to access, correct, delete, or port your data. Contact us to exercise these rights.
8. Permissions We Request
Camera: To take photos for use as puzzles (optional).
Photo library: To select existing photos for puzzles and to save solved puzzle images to your gallery (optional).
Internet: To enable puzzle sharing, analytics, crash reporting, and app configuration updates.
We only request permissions when needed and explain their purpose at the time of the request.
9. Children's Privacy
Scramage is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.
Parents and guardians: If your child uses the app, we encourage you to review this policy and supervise their use of the sharing features.
10. Third-Party Services
We use the following third-party services:
- Firebase Analytics (Google) — usage analytics
- Firebase Crashlytics (Google) — crash reporting
- Firebase Performance (Google) — performance monitoring
- Cloud Firestore (Google) — puzzle sharing data
- Firebase Storage (Google) — puzzle image hosting
- Firebase App Check (Google) — API security
These services are governed by Google's Privacy Policy.
Firebase privacy and security documentation: firebase.google.com/support/privacy
11. International Data Transfers
Firebase services may process data in the United States and other countries where Google operates. By using the sharing features, you consent to the transfer of puzzle data to these locations. Google provides appropriate safeguards under Standard Contractual Clauses for international transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by updating the "Effective" date at the top of this page. Your continued use of the app after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: privacy@scramage.app
We aim to respond to all requests within 30 days.