Privacy Policy

01

Information we collect

Our apps do not require account creation and we do not knowingly collect personal information directly. Information falls into two groups.

1a. Stored locally on your device

Each app stores the following in a local Room/SQLite database (or an equivalent local store) on your device. We never upload it to a server of ours; where Android’s own backup is enabled for the app, it may copy this into your personal Google account, as described in 1d:

• App-specific state: the board as you left it, your score, boosters and continues
• Your best-game history and best score, kept as a local-only record
• App settings: sound on or off, haptics on or off, theme, notifications, and similar per-app preferences
• A first-launch flag, used to send you through the onboarding the first time you open the app
• A cached summary of your subscription status — active or not, which plan, the product ID, whether the free trial has been used, and when it expires — so the app applies your entitlement at launch without waiting for the network
• Your progress and in-game economy: the coin balance and the full ledger of coin transactions, daily and weekly missions, achievements, rank progress, play streaks, unlocked themes and cosmetics, difficulty progress, each day’s Daily result and the monthly medals
• A record of the ads you were shown — which type, when, and the daily counters that pace them — and, in Gridlix:2048, the hours of the day you usually play, so a reminder notification arrives at a plausible time rather than at random

1b. Collected by third parties on our behalf

The third-party services described below may collect technical and advertising-related information automatically:

• Google Advertising ID (GAID) — read so ad networks can deliver ads, frequency-cap them, and attribute installs. While Premium or Remove Ads is active it is not used for banner, interstitial or app-open advertising; it is still processed when you explicitly choose to watch a rewarded video.
• Device-scoped identifiers, including the Android device ID (SSAID). Our own code reads neither this nor the Advertising ID; both may be read inside the advertising SDKs described in §2, for delivery, frequency capping and invalid-traffic signals. They play no part in your subscription — that entitlement comes from Google Play Billing directly.
• IP address and approximate geographic location derived from it
• Device model, operating system version, language, and time zone
• App version, session timestamps, and crash diagnostics
• Aggregated, non-personally-identifying usage events, used only in aggregate form
• The Play Install Referrer — how you arrived at the app’s store listing — read so an install can be attributed to the campaign that produced it
• The list of apps installed on your device that can be launched, and checks for a small set of known root-management packages. Neither is read by our code: both come from advertising SDKs bundled with the mediation, which use them for targeting and for device-integrity signals.
• Android Privacy Sandbox signals — Topics, Attribution Reporting, Protected Audience and the Ad ID service. The apps declare permissions for these so the advertising SDKs can use interest and attribution data supplied by the operating system rather than assembled by us.

1c. Analytics, crash reports and remote configuration (Google Firebase)

Both apps include Google Firebase Analytics and Firebase Crashlytics; Blocklix also includes Firebase Remote Config. Analytics collects a random app-instance ID, device and OS information, and aggregated in-app events — a game finished, a purchase completed, an ad shown, together with the revenue and network name reported for that impression — so we can understand overall usage and balance the game economy. We do not use it to build advertising profiles. Remote Config downloads a small set of feature flags and game-balance numbers and sends no personal data beyond the technical request metadata. Crashlytics sends a report when the app crashes or freezes: the stack trace, the device model, the OS and app version, and a random installation identifier — enough to find the bug, and nothing you typed or played. Crashlytics is not the only error reporter present in the builds; see §2. Details: firebase.google.com/support/privacy ↗.

1d. Backup and cloud save

Android’s own backup is enabled in Blocklix and switched off in Gridlix:2048 — the table above says which is which. Where it is on, and where backup is on for your device, Android copies the local data listed in 1a into your personal Google account and restores it when you reinstall on the same account. That copy belongs to you: Android handles and encrypts it, and we can neither read it nor delete it. You control it in Android Settings → Google → Backup. Separately, both games have a cloud save built on Google Play Games Saved Games: one save file in your own Play Games storage, so progress can follow you between devices. It never runs without a Play Games sign-in, it carries game progress only — never subscription state or purchase data — and it is served by Google, not by a server of ours. In Blocklix it ships switched off and is being enabled gradually. In Gridlix:2048 it syncs whenever you are signed in to Play Games; that app has no sign-out of its own, so stopping it means signing out of Play Games from the Google Play Games app. Gridlix:2048 also unlocks Play Games achievements and submits your scores to two Play Games leaderboards.

02

Advertising partners

Our apps display banner ads, occasional interstitial ads, and rewarded video ads that you explicitly choose to watch in exchange for an in-game perk — a booster, a continue after game-over, bonus coins and similar. Blocklix also shows app-open ads when you come back to it; Gridlix:2048 does not. A Premium subscription turns off banner, interstitial and app-open ads in both games, and in Blocklix the one-time Remove Ads purchase does the same. Rewarded videos stay available to everyone and only ever play after you tap their offer.

Appodeal mediation

We use Appodeal as our primary advertising mediation partner. Appodeal's privacy policy is at appodeal.com/privacy-policy ↗.

Appodeal mediates demand from a large number of advertising networks, and the active set evolves as Appodeal updates its SDK and as we change our build configuration. The current, authoritative list is published by Appodeal:

appodeal.com/partners ↗

Each network on that page links to its own privacy policy. Privacy questions specific to ad personalisation can be raised directly with Appodeal at the same site.

What ships inside the mediation SDK

The Appodeal package bundles more than ad networks. The components below are compiled into our release builds, register their own services and receivers, and are started by Appodeal rather than by our code — we neither call them nor configure them. Google Play’s Data safety form asks what is collected, not who initialised it, so they are named here in full:

• Adjust ↗ — install attribution
• AppsFlyer ↗ — install attribution, with its own install-referrer receiver
• Meta Audience Network ↗ — advertising demand and measurement
• Sentry ↗ — error and crash reporting, sent to Appodeal’s project rather than to one of ours. It is a second crash reporter alongside Firebase Crashlytics (§1c).
• Yandex AppMetrica ↗ — analytics, arriving with the Yandex advertising adapter

03

Subscriptions and in-app purchases (Google Play Billing)

Both apps offer an optional Premium subscription, sold and processed by Google through Google Play Billing. Blocklix offers weekly, monthly and yearly auto-renewing plans; Gridlix:2048 offers monthly and yearly. Eligible new subscribers get an introductory free trial on the yearly plan. Premium turns off banner, interstitial and app-open ads and unlocks premium features specific to that app — for example x2 coins and a daily gift. Blocklix also sells one-time products: coin packs, a starter bundle, a piggy-bank payout, and a permanent Remove Ads unlock with the same ad scope as Premium. Gridlix:2048 sells no one-time products at all.

1. All payment, billing, account, and tax information is collected and processed by Google. We do not see, store, or transmit your payment method, your Google account email, or any government identifiers.
2. The app receives only a non-identifying entitlement signal from Google: whether an active subscription exists for your installation, which product it is, and — in Blocklix — which one-time products have been purchased. This signal is cached locally as described in §1a.
3. Subscription management, cancellation, refund requests, and renewal dates are handled entirely on Google Play. The "Manage" button inside the app deep-links to the Google Play subscriptions page.
4. Google Play's privacy policy applies to all billing-related processing: policies.google.com/privacy ↗

04

Legal basis and consent (GDPR / EEA, UK, Switzerland)

If you are located in the EEA, the UK, or Switzerland, the legal basis for advertising-related processing is your consent, collected through an IAB Transparency & Consent Framework (TCF) dialog. That dialog is presented by the Appodeal mediation SDK itself, when your region requires one; we do not operate a consent platform of our own. You may withdraw or change your consent at any time. Blocklix can reopen the dialog from its in-app privacy settings; Gridlix:2048 has no such screen, so there the way is to clear the app’s data (Settings → Apps), which presents the consent dialog again on the next launch. The legal basis for processing subscription data via Google Play Billing is the performance of the contract you enter into when purchasing a subscription.

05

CCPA / US state privacy laws

If you are a California resident, or in another applicable US state, you have the right to opt out of the "sale" or "sharing" of your personal information for behavioral advertising. The in-app consent dialog provides this opt-out where required. Subscription processing by Google Play is not a "sale" of personal information.

06

Children's privacy (COPPA)

Our apps are not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. The Premium subscription is intended for adult purchasers; in-app purchases require a Google Play account with the appropriate purchase permissions.

07

Data retention

Locally stored data described in §1a is retained on your device until you clear the app’s data or uninstall the app. We do not retain personal information on our own servers. Where Android’s own backup is enabled — Blocklix, not Gridlix:2048 — the copy it makes lives in your own Google account and is removed under Android Settings → Google → Backup. A Play Games cloud save lives in your Play Games account and is removed from there. The advertising partners and Google Play retain data per their own policies.

08

Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to lodge a complaint with a supervisory authority. Because we do not directly hold this data, requests should be directed to the advertising partner concerned, or — for billing data — to Google Play.

09

Changes to this policy

We may update this Privacy Policy from time to time — for example when we add new titles, change advertising partners, or update subscription mechanics. The "Last updated" date at the top of the page indicates when the most recent change was made. Material changes will be reflected in-app on next launch.

10

Contact

For privacy questions about any of our apps, write to us at vaslixofficial@protonmail.com. We try to reply within a reasonable time.