Applies to: MAZE TIME (Android package io.zec.blazemaze; same Bundle ID on iOS / macOS)
Developer: ZEC.IO
Contact: [email protected]
This policy explains what information this game (the "App") collects, why, how it is protected, and how you can exercise your rights. It covers this App only, not other ZEC.IO products or websites.
01 Information We Collect
We collect only the minimum needed to run and improve the game. The App has no account system — every feature works without registration or sign-in.
1.1 Anonymous device identifier
On first launch the App generates a random string locally on your device (16 bytes of high-entropy randomness), used to distinguish devices, measure feature usage, and prevent cheating.
- It is generated on-device and is not an advertising identifier (Android Advertising ID / IDFA), and not an IMEI, OAID, MAC address, or Android ID.
- It is not linked to your name, phone number, email address, or any real-world identity.
- It is never used for advertising or cross-app tracking.
- Uninstalling the App discards it; reinstalling generates a fresh, unrelated identifier.
1.2 Gameplay events (usage analytics)
To understand game balance and feature usage, the App records and uploads: first open, app open, level complete (mode, difficulty, level number, elapsed time, score), level failure, daily challenge start and finish, store opened, and in-app purchase started / succeeded / failed / cancelled, and feedback submitted. Each event carries the app version, platform, interface language, and the anonymous device identifier above.
These events contain no information that directly identifies you.
1.3 Purchase records
When you buy a gem pack, the App records the product ID purchased and the number of gems granted, in order to deliver the item and reconcile the order.
Payment itself is handled by Google Play Billing / the Apple App Store. Your payment method, card number, and billing address are processed by Google or Apple; the App can neither read nor receive them.
1.4 Information you submit voluntarily
Only when you use the in-app Feedback feature do we receive:
- Feedback text (required);
- Contact email (optional — leave it blank and we simply cannot reply, but your feedback is still received);
- Screenshots (optional, up to 3, chosen by you in the system photo picker. The App cannot see any other photo in your library and requests no photo-library permission);
- Diagnostic log (optional, uploaded with the feedback. It contains recent debug lines emitted by the App plus app version, OS version, device model, and interface language, used to diagnose crashes. It records the program's own state, never the contents of your personal files).
1.5 Leaderboard data (platform dependent)
If you take part in the online Daily Challenge leaderboard, the App uploads that run's score, elapsed time, and submission time.
- If you are signed in to the platform gaming service — Google Play Games on Android, Game Center on iOS / macOS — your platform display name is uploaded along with your score and shown on the public leaderboard. You choose that display name yourself and can change it at any time in your system or platform settings.
- If you are not signed in, or you decline the sign-in prompt, the leaderboard is read-only: you can view rankings, but the App uploads no score and reads or uploads no display name. Every other part of the game is unaffected.
- We receive only the display name and the score. We do not receive your Google or Apple account email address, your friends list, or any other profile data.
02 Information We Do Not Collect
The App does not collect, read, or upload:
Location · Contacts · Call logs · SMS · Calendar · Microphone audio · Camera imagery · Health and fitness data · Biometrics · Installed-app lists · Clipboard contents · Advertising identifiers (Android Advertising ID / IDFA) · Government ID or other sensitive personal information.
The App contains no advertising and integrates no third-party advertising or analytics SDK (no Google Analytics, Firebase Analytics, Facebook SDK, or similar). Usage statistics are handled by our own service and the data goes only to our own servers.
03 How We Use This Information
| Information | Purpose |
|---|---|
| Anonymous device identifier | De-duplicate statistics; prevent leaderboard cheating and abuse |
| Gameplay events | Analyse game balance and feature usage to improve the game |
| Purchase records | Deliver purchased items, reconcile and restore orders |
| Feedback text and screenshots | Investigate the issue you reported |
| Contact email | Reply to you about that feedback |
| Diagnostic log | Diagnose crashes and errors |
| Score and display name | Build and display the public leaderboard |
We do not use this information for user profiling, targeted advertising, or automated decision-making.
04 Permissions
The App requests four Android permissions in total. The list below is exhaustive and matches the merged permission manifest inside the installation package:
- Network access (
INTERNET): upload usage statistics and feedback, fetch leaderboards and daily challenges, complete purchases. Denying it disables those online features; offline play is unaffected. - Network state (
ACCESS_NETWORK_STATE): check whether a network is currently available, so the App can show an offline notice immediately instead of leaving requests to time out. It reads only whether a connection exists — never your Wi-Fi name, IP address, or nearby networks. - Vibration (
VIBRATE): in-game haptic feedback (impacts, trap triggers, the continuous tremor of lava floors). It involves no data collection whatsoever and can be turned off at any time under Settings → Haptics. - In-app billing (
com.android.vending.BILLING): used by the Google Play Billing Library for gem pack purchases.
The following are commonly asked about and are not requested:
- Advertising ID (Android
AD_ID): not requested. The App has no ads and performs no ad attribution. - Photo library: not requested. Screenshots are chosen through the system photo picker, which hands the App only the images you selected.
- Motion sensors: no permission required. The accelerometer is read for tilt controls; that data is used in real time on-device for game physics and is never uploaded or stored.
05 Third Parties and Sharing
We do not sell your information and do not use it for third-party advertising.
Third parties are involved only where necessary:
- Google Play Billing / Apple App Store — process payments, under their own privacy policies.
- Infrastructure providers (such as Cloudflare) — provide network connectivity and protection for our servers, processing necessary network metadata (such as IP addresses) in transit.
We do not disclose the information above to anyone else except where required by law or necessary to protect the rights and safety of our users and ourselves.
06 Storage and Security
- All network traffic uses HTTPS; leaderboard submissions carry an additional HMAC-SHA256 signature against tampering.
- Local save data (level progress, skins, gem balance, feedback history) is stored in an encrypted database (SQLCipher) on your device.
- Server-side data is held on access-controlled servers reachable only by authorised personnel.
07 Retention and Deletion
- Local data: removed with the App when you uninstall it. You may also use "Clear app data" in system settings to wipe local saves immediately (this cannot be undone; game progress is lost).
- Server-side data: usage events are kept for no more than 24 months; feedback records for no more than 24 months after the issue is resolved; leaderboard scores are kept per season.
How to request deletion of your data
The App has no accounts, so there is no account to close. To have data associated with your device deleted from our servers, use either channel:
- In-app — open Settings → Feedback, choose type "Other", write "Please delete my data" in the body, and submit (adding your email lets us confirm the outcome);
- Email — write to [email protected] with the subject "MAZE TIME data deletion request".
So that we can locate your records, please include the device identifier shown in Settings → About in the App. (If you cannot retrieve it, describe roughly when you submitted feedback and what it said, and we will help locate it.)
We complete deletion and confirm by reply within 30 days of receiving the request. Deletion covers all usage events under that device identifier, the feedback text and attachments you submitted, and the associated leaderboard score records. Transaction records that we are legally required to retain are excluded and are anonymised instead.
08 Children's Privacy
The App is not directed to children under 13 and we do not knowingly collect personal information from children. Guardians who believe a child has submitted information to us should contact the address above and we will delete it promptly.
09 Your Rights
Depending on where you live — including under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA) — you may have the right to access, correct, delete, restrict processing of, and port your data, and to object to processing. You can exercise these rights through the channels in section 07, and we will not discriminate against you for doing so.
Our legal bases for processing are: performance of our agreement with you (delivering purchases, providing leaderboards), our legitimate interests (improving the game, preventing cheating and abuse), and your consent (information you volunteer in feedback).
10 Changes to This Policy
When this policy changes we update the effective date shown at the top of this page. Material changes — new categories of collection or new purposes — are additionally announced prominently inside the App.
11 Contact Us
Questions about this policy: [email protected]