Privacy Policy

Who is responsible

EcoMatch is operated by an individual developer based in Germany. For all privacy questions, data requests, or concerns, the contact point is [jaytayeldev@gmail.com]. A full provider identification (Impressum) is available on request and on the game's listing.

What we collect

EcoMatch is built to collect as little as possible. Specifically:

• Google account identifiers. When you sign in with Google, we receive your Google account ID, display name, email address and profile picture. We use the ID to identify your player account and the name/picture to show you who is signed in. We never receive your Google password.
• A session cookie. A strictly necessary, signed cookie keeps you signed in for up to 30 days. It contains your player ID and display name and nothing else. It is not used for tracking or advertising.
• Game progress and stats. Your unlocked species, missions, run history, boosts, credit balance and similar in-game progress are stored so your account persists between sessions.
• Payment records. When you buy credits, we store the payment processor's transaction reference, the amount and currency, the bundle bought and the time, so we can deliver your credits and keep an order history. Card and mobile-money details are entered directly with the processor (Stripe or Flutterwave) — we never see or store card numbers, CVCs or mobile-money PINs.

We do not ask for your address or location, we show no advertising, and we do not build profiles about you.

Why we use it (legal basis)

Under the GDPR, we rely on the following bases:

• Performance of a contract — to run the game you asked to play: authenticating you, saving progress, and delivering purchases.
• Legitimate interests — to keep the game secure, prevent abuse, and apply rate limits.
• Legal obligation — to keep the transaction records that tax and accounting law require us to retain.

Where it's stored and for how long

Game progress and payment records are stored in a managed database (MongoDB) used to operate the game. We keep this data for as long as your account is active. If you ask us to delete your data, or stop using the game, we will delete or anonymise your stored progress and records, except where we must keep limited transaction information to meet legal or accounting obligations.

Service providers

EcoMatch shows no advertising. The following companies process data on our behalf, only as needed to run the game:

• Google — sign-in (Google OAuth). Google's own privacy policy governs your Google account.
• Stripe — card payments. Your card details go directly to Stripe; see the Stripe Privacy Policy.
• Flutterwave — mobile-money payments (MTN, Airtel, M-Pesa and others). Your phone number and payment prompt are handled by Flutterwave and your mobile network; see the Flutterwave Privacy Policy.
• MongoDB Atlas, Upstash and Vercel — database, rate limiting and hosting for the game and its servers.

Some of these providers are based outside the EU/EEA. Where personal data is transferred, it is done under standard contractual clauses or an equivalent lawful mechanism.

Payments

Purchases in EcoMatch are made by buying credit bundles, paid by card through Stripe or by mobile money through Flutterwave. The processor confirms the payment to us and we store a transaction record (reference, amount, currency, bundle, time) so we can add the credits to your account and keep an order history. We do not handle or store card numbers or mobile-money credentials. Each processor's handling of your payment is subject to its own terms and privacy policy.

What we don't do

We do not sell your data. We do not share your game data with third parties for their own marketing. We do not track you across other apps or websites. The only third-party data processing involved is the sign-in, payment processing and hosting described above.

Your rights

Depending on your location (and in particular under the GDPR if you are in the EU/EEA), you have the right to:

• access the data we hold about you;
• correct inaccurate data;
• delete your data ("right to be forgotten");
• restrict or object to certain processing;
• request a copy of your data in a portable form;
• lodge a complaint with your local data protection authority.

To exercise any of these, contact us at [jaytayeldev@gmail.com]. We will respond within the time required by law.

Children

EcoMatch is not directed at children under the age where consent is required in their country (16 in much of the EU). If you believe a child has provided data through the game, contact us and we will remove it.

Changes & contact

We may update this policy as the game evolves. Material changes will be reflected by the "last updated" date above. For any question about this policy or your data, contact [jaytayeldev@gmail.com].