MechaBlast - Privacy Policy

Owner / Data controller: JP LEVI INC., a New Jersey corporation (brand: "jplevi"), the publisher of MechaBlast ("we", "us", "our"). Effective date: August 8, 2026 Contact: support@jplevi.com

The short version

MechaBlast is a single-player game. It shows a privacy notice on first launch and collects anonymous, aggregate gameplay analytics only if you allow it - it is OFF until you opt in, carries no personal data, and you can turn it off any time in Settings. In-app purchases are processed by the app store, not by us - we never see your payment details. The game shows ads through Google AdMob (interstitials between levels and optional, opt-in "watch for a reward" ads); AdMob uses a device advertising identifier to deliver and measure them, and you can buy a one-time Remove Ads upgrade that turns off the interstitials.

What we collect (only after you opt in)

If - and only if - you grant analytics consent, the game records anonymous, aggregate gameplay events to help us balance difficulty and fix rough spots:

Progression - which levels you start, clear, or fail (with the failure cause), boss attempts and defeats, tutorial completion, and per-level completion time, score, and shot accuracy - all as aggregate counts.
Economy - store screens viewed, in-game (scrap) purchases, real-money purchases (which pack), and freezer usage - item ids and amounts only.
Retention - app launches and closes (session boundaries), daily-reward claims, and login-streak length.
Settings - significant accessibility/audio changes (e.g. reduce-motion, mute) as aggregate signals.

What our analytics never collects

Our gameplay analytics collects no name, email, phone number, precise location, contacts, photos, or any per-keystroke / per-shot activity, and ties nothing to your identity. Analytics measures aggregate behaviour for tuning - it is not surveillance and carries no personally identifying information. (The app enforces this technically: every event payload is stripped of identifying keys and non-aggregate values before it can be sent.) The advertising identifier described in the Advertising section below is used only by Google AdMob for ads - it is not part of, or combined with, our gameplay analytics.

Advertising (Google AdMob)

The game is free and shows ads through Google AdMob:

Interstitial ads - a full-screen ad shown at natural breaks (between levels, or after a run ends), never during active gameplay, and frequency-capped.
Rewarded ads - optional and opt-in: you tap "watch an ad" to earn a reward (scrap, a freezer, or a revive). You are never forced to watch one.

To serve, frequency-cap, measure, and protect these ads from fraud, AdMob collects a device advertising identifier and coarse ad-interaction and diagnostic data. This is processed by Google as an independent controller under Google's Privacy Policy and the AdMob/Google "How Google uses information" terms. Ad creatives are limited to a PG content rating to match the game's age rating.

Consent (EEA/UK/Switzerland and similar regions) - on first launch the app shows Google's certified consent message (User Messaging Platform); your choice governs whether personalized ads may be used.
iOS - the app does not ask for App Tracking Transparency and therefore serves non-personalized ads (no cross-app/website tracking).
Remove Ads - a one-time in-app purchase removes the interstitial ads. Opt-in rewarded ads remain available if you choose to use them.
Children - this is a general-audience title, not a "Made for Kids" app; see the Children's privacy section.

Consent and your control

Opt-in: on first launch you choose Allow or Decline. Nothing is collected until you choose Allow.
Opt-out any time: Settings → Privacy → Analytics turns it off. When off, the app collects and sends nothing.
Your choice is remembered on your device.

In-app purchases

MechaBlast offers optional consumable purchases (scrap packs and freezer bundles). Payment is processed entirely by the App Store / Google Play - MechaBlast never receives, stores, or transmits your payment card or billing details. The store may share a purchase confirmation with the app so it can grant the item you bought. There are no loot boxes and no randomized paid rewards; every purchase grants a fixed, pre-disclosed amount.

Children's privacy (COPPA / GDPR-K)

MechaBlast contains only mild cartoon robot-vs-robot action and is suitable for a broad audience, but it is a general-audience game - not a "Made for Kids" app, and it is not directed at children under 13. Our gameplay analytics is opt-in and carries no personal data, so it never behaviourally tracks anyone - child or adult - who has not consented. The game does serve ads via Google AdMob (which uses a device advertising identifier), limited to PG ad content and, on iOS, non-personalized (no cross-app tracking). We do not knowingly collect personal information from children. A parent or guardian controls the consent and purchase choices on the device and can decline or opt out at any time. If you believe a child has provided personal information, contact us and we will delete it.

Data sharing and service providers

We do not sell your personal information. We share data only with the service providers needed to run the game:

Google AdMob (advertising) and Google User Messaging Platform (consent) - receive the device advertising identifier and ad-interaction/diagnostic data as described in the Advertising section, and process it as an independent controller under Google's terms.
Analytics provider - when analytics is enabled by a deployment and you have opted in, aggregate, non-identifying events are sent to our analytics provider to process on our behalf.
App store billing (Apple App Store / Google Play) - processes purchases; we receive only a purchase confirmation, never your payment-card details.

(In builds where no analytics provider is configured, no analytics leaves your device. Ad requests are only made when ads are enabled.)

Legal bases (EEA / UK)

Where the EU/UK GDPR applies, we (and our providers) rely on: consent for ads, the advertising identifier, and optional analytics (you may withdraw it at any time); legitimate interests for security, fraud prevention, and basic app functionality; and performance of a contract for delivering in-app purchases.

International data transfers

Our providers, including Google, are based in the United States and may process data outside your country. For transfers of EEA/UK/Swiss data to the U.S., Google relies on the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss-U.S. DPF) and on Standard Contractual Clauses as a safeguard.

Data retention

We keep data only as long as needed for the purpose it was collected: ad and consent records for as long as required to serve/measure ads and evidence consent; opt-in analytics events for a limited period for aggregate tuning; purchase confirmations as needed to grant items and for our records. Your settings and consent choice are stored on your device until you change them or uninstall.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to object to or restrict processing; to withdraw consent; to opt out of targeted advertising, the "sale" or "sharing" of personal information, and profiling; and to not be discriminated against for exercising these rights. Because our gameplay analytics is anonymous and aggregate, it generally cannot be linked back to you individually.

How to exercise them: email support@jplevi.com, or use the in-app controls (Settings turns analytics off; the consent form governs ads). To reset the ad consent choice, clear it in your device's Google/ad settings or reset your advertising identifier. If you are in the EEA/UK, you also have the right to complain to your data-protection supervisory authority (in the UK, the ICO).

California and other U.S. state privacy rights

We do not sell your personal information, and we do not share it for cross-context behavioral advertising in the sense those terms are defined by the California Consumer Privacy Act (CCPA/CPRA) and similar state laws: on iOS the app serves non-personalized ads (no tracking), and elsewhere personalized ads run only where consent/opt-out settings allow. We honor opt-out preference signals, including Global Privacy Control (GPC), where applicable. California, Virginia, Colorado, Connecticut, Texas, New Jersey, and other state residents may exercise the rights above by contacting support@jplevi.com; we do not discriminate against you for doing so. This section serves as our notice at collection: the categories we collect and the purposes are described throughout this policy.

Security

We use reasonable technical and organizational measures to protect data (including encryption in transit and data minimization - notably, we do not collect payment-card data or account passwords). No method of transmission or storage is completely secure.

Data breach

If a security breach affecting personal information occurs, we will notify affected users and the appropriate authorities as required by applicable law, including New Jersey's breach-notification statute.

EU and UK representatives

If required under Article 27 of the EU/UK GDPR, JP LEVI INC. will appoint an EU representative and a UK representative and list their contact details here. Until then, EEA/UK users may contact us directly at support@jplevi.com.

Changes

If this policy changes, we will update the effective date and the hosted page.

Questions or requests: contact us at support@jplevi.com. Your use of MechaBlast is also governed by the Terms of Service.