Privacy Policy

Last Updated: May 20, 2026

1. Legal Basis for Processing

In accordance with the UK GDPR and the India Digital Personal Data Protection Act 2023, we process limited data under the following legal bases:

• Legitimate Interests: To deliver advertising via Google AdMob (which funds the free game), to monitor app stability and crashes via Google Firebase Crashlytics, and to understand aggregate gameplay patterns via Google Firebase Analytics.
• Consent: Personalised advertising relies on the Android Advertising ID and is governed by your device's Settings → Privacy → Ads. You can opt out of personalised ads at any time; non-personalised contextual ads will still appear.

2. Information We Collect & Why

Rangoli Blast does not ask you for a name, email address, phone number, or any contact details. There is no account system. The third-party services we embed automatically collect a limited set of device and behaviour data:

• Google AdMob (advertising): Android Advertising ID, IP address (used for country/region-level location only — never precise GPS), device model and OS version, and ad interaction events (impressions, clicks). Used to deliver ads, measure ad performance, and prevent click-fraud.
• Google Firebase Analytics (anonymous gameplay analytics): Pseudonymous app instance ID, approximate location derived from IP, device model and OS, language, and anonymous gameplay events (e.g. session start, rangoli completed, power-up used). Used to understand which festivals are popular and which mechanics work well so we can prioritise future updates.
• Google Firebase Crashlytics (crash diagnostics): Stack traces, device state at time of crash, app version, and the same pseudonymous app instance ID. Used to fix bugs.

Your local game preferences (difficulty selection, sound mute state, high scores) are stored on your device only and never transmitted to us.

3. What We Do NOT Collect

• Your name, email, phone number, or postal address.
• Photos, videos, files, contacts, messages, or calendar data.
• Precise (GPS) location, microphone, or camera input.
• Health, fitness, financial, or payment data.
• Biometric identifiers.

4. Children's Privacy

Rangoli Blast is rated for ages 13 and over. The app is not intended for children under 13 and we do not knowingly collect personal data from children. If you believe a child under 13 has used the app, contact us and we will assist.

5. Data Transfers & Security

We use industry-standard encryption (TLS/SSL) for data in transit. All data described above is processed by our designated Data Processor:

• Google LLC (AdMob, Firebase Analytics, Firebase Crashlytics): data may be processed in the United States and other regions. Transfers are protected by Standard Contractual Clauses (SCCs) and recognised UK and EU adequacy frameworks.

6. Data Retention

• Crash reports: Retained for up to 90 days.
• Analytics events: Retained for up to 14 months per Firebase defaults.
• AdMob data: Retained according to Google's published retention schedule.
• Local-only data on your device: Deleted when you uninstall the app.

7. Advertising & Your Choices

Rangoli Blast displays a banner advertisement at the bottom of the screen via Google AdMob. To control how ads are personalised:

• Open your Android device's Settings → Privacy → Ads.
• Toggle Opt out of Ads Personalisation, or reset your Advertising ID.
• Ads will continue to display, but will not be tailored to your inferred interests.

You may also request deletion of data linked to your installation by emailing us — see contact details below.

8. Your Rights

Depending on where you live, you have rights including:

• UK / EU (GDPR): Access, rectification, erasure ("right to be forgotten"), restriction, portability, and the right to object to processing. Lodge complaints with the UK Information Commissioner's Office (ICO) at ico.org.uk.
• India (DPDP Act 2023): Right to a summary of data processed, correction, erasure, and grievance redressal. Escalate unresolved grievances to the Data Protection Board of India.
• California (CCPA / CPRA): Right to know, delete, and opt out of "sale" of personal information. We do not sell personal information.

To exercise any of these rights, contact us using the details below. We respond within 30 days.

9. Changes to This Policy

If we materially change how we collect or use information, we will update the "Last Updated" date at the top of this page. Continued use of the app after a change indicates acceptance of the revised policy.