Shape Clash › Privacy

Privacy Policy — Shape Clash

Effective date: 10 August 2026 · Last updated: 16 August 2026

This policy explains what happens to data when you play Shape Clash (the “Game”), an Android game published by Cronomz — “we”, “us”.

Contact: cronomzstudio@gmail.com

1. The short version

2. Data stored on your device

The Game saves your progress locally, in the app’s own private storage, using Android’s standard app-storage mechanism. This data never leaves your device except through the optional cloud save in section 4.

What is stored:

• Run state — the map, your board, gold, relics and trinkets for a run in progress, and separately for a Today’s Page attempt in progress.
• Permanent progress — runs played, wins, boss kills, best round, ascension level, achievements, and which units you have benched.
• Your hero roster — including names you type for your heroes, plus each hero’s level, trinket, and capture details.
• Today’s Page — your daily streak, which tiers you have attempted today, and the dates the game uses to work out when a new day begins.
• The tuck shop — your Pocket Money balance, what is stocked in the pantry, and which objects you own and where you put them on the page.
• Codex — which units, relics, trinkets and bosses you have discovered.
• Tutorial progress — which prompts you have already been shown.
• Settings — sound volume, music volume, and the haptics toggle.
• Cosmetics — which ink, cover and decor you have selected, and a local cache of which packs you own.

To decide when a new day starts and how hungry the shelf has become, the Game reads your device’s own clock. It never contacts a time server or any other network service to do it.

None of this is personal data unless you choose to make it so. Please do not type real names, email addresses or other personal details into hero names — those names are stored with your save and, if you enable cloud save, are copied to your Google Play Games storage.

How to delete it: uninstalling the Game, or using Android’s Settings → Apps → Shape Clash → Storage → Clear data, permanently erases all of the above from your device. We cannot delete it for you, because we never have a copy.

Permissions we do not ask for

Shape Clash requests no runtime permissions. The app explicitly blocks the microphone, external-storage and screen-overlay permissions that some libraries would otherwise add. It has no access to your camera, microphone, location, contacts, call logs, SMS, photos or files.

3. Advertising (Google AdMob)

Shape Clash shows rewarded ads only, and every one of them is opt-in: an ad plays only after you tap a button that states what watching it will give you. There are no banners, no interstitials, and no ad that interrupts play.

Ads are served by Google AdMob. When an ad is requested or shown, the Google Mobile Ads SDK collects and sends information to Google, including:

• your device’s advertising ID (a resettable identifier Android provides for advertising),
• your IP address (from which approximate location may be derived),
• device and app information — device model, operating-system version, language, and the fact that the request came from Shape Clash,
• ad interaction data — that an ad was requested, shown, watched to completion, or closed.

We receive none of this in identifiable form. Google acts as an independent controller of the data it collects through the SDK, and uses it to serve and measure ads, to limit repetition, and to detect invalid traffic and fraud. Google’s handling of it is governed by:

• Google Privacy Policy
• How Google uses information from sites or apps that use its services
• Google Advertising

We only see aggregate, non-identifying reports in the AdMob dashboard, such as how many ads were shown and what revenue they earned.

Your choices about ads

• Reset or delete your advertising ID — Android Settings → Privacy → Ads (path varies by device). Deleting the ID stops apps from receiving it, and Shape Clash keeps working normally.
• Opt out of ads personalisation — the same Android settings screen. You will still see ads, but they will not be personalised.
• Watch no ads at all — simply don’t tap the ad buttons. Nothing in Shape Clash is locked behind an ad; every reward an ad offers is a convenience, not a requirement, and the Game is fully playable and fully completable without ever watching one.
• In the EEA, the UK and Switzerland, where consent is required for personalised advertising, a Google consent message is shown before any ad is requested, and your choice is recorded on your device. Declining means you see non-personalised ads instead.
• Change or withdraw that choice at any time from the home screen, which re-opens the same Google privacy options form wherever the law requires it to stay available. Withdrawing is exactly as easy as consenting was, and takes effect immediately.

4. Cloud save (Google Play Games Services)

Cloud save is entirely optional. The whole Game works without it and you are never required, or prompted at start-up, to sign in.

If you choose to connect a Google Play Games account:

• Google authenticates you and tells the Game whether a Play Games account is connected. Google’s processing of your account is governed by its own privacy policy (linked above) and by the Play Games Services terms.
• The Game writes one save snapshot into your own Play Games storage, containing: your permanent progress statistics, your hero roster (including the names you typed), your codex discoveries, your cosmetic selections, your Today’s Page streak and ledger, and your tuck shop (Pocket Money, pantry and objects). Each snapshot is stamped with the time it was saved.
• The snapshot is stored by Google under your Google account. We have no access to it, no console for it, and no way to read anyone’s save.

Deliberately not included in the snapshot: your in-progress run, and your purchase entitlements (those live with Google Play — see section 5).

How to delete it: in the Google Play Games app, open Settings → Delete Play Games account & data, or delete the saved game for Shape Clash from your Play Games profile. You can also simply stop signing in; your local progress is unaffected.

5. In-app purchases (Google Play Billing)

Shape Clash offers optional paid packs. Purchases are handled entirely by Google Play Billing inside Google’s own checkout flow.

• We never see, receive or store your payment details. No card number, no billing address, no name, no email.
• The Game asks Google only one question: which product IDs does this account own? — and Google answers with a list of product IDs. That is used to unlock what you bought and to restore it after a reinstall.
• Google’s processing of your purchase is governed by the Google Payments privacy notice.
• Refunds are handled by Google Play, not by us.

What the packs contain: cosmetics (inks, covers, accessories and page decorations), extra shelf space for your heroes, and a content expansion that adds new units, relics, trinkets, bosses and harder challenge tiers.

Nothing sold is random — every pack lists exactly what it contains before you buy, and no purchase is a loot box or a draw of any kind. Nothing sold makes the game easier: the expansion adds content that is different and deeper, not stronger, and buying it skips nothing you would otherwise have to play. In-game currency (Pocket Money) is earned by playing and can never be bought.

6. Bug reports (only when you send one)

There is a small tab on the edge of every screen labelled bug. Tapping it opens a form. Nothing is sent by tapping the tab, and nothing is sent by closing the form — a report leaves your device only when you press Send it, and the form tells you what it will contain before you do.

If you send one, we receive:

• What you wrote. The description you typed, and nothing you didn’t.
• Your email address, only if you typed one. The field is optional and labelled as such. It exists so we can reply to you, and that is the only thing it is ever used for. Leave it blank and your report is anonymous.
• A picture of the screen, taken at the moment you tapped the tab, so that we can see what you saw. It is shown to you in the form and there is a tick box to leave it out. Untick it and no image is sent.
• Which version of the Game you are running, and your device’s brand, model, Android version and screen size. Not your device’s identifiers — see below.
• The run you were playing: the map, your board, gold, relics, trinkets, the run’s random seed, and your overall totals (runs played, wins, ascension reached, which expansion packs you own). This is what lets us reproduce a bug instead of guessing at it. If you have named a hero and brought it into that run, the name you typed is part of it.

What a report never contains: your advertising ID, your device ID, any Google or Play Games account or identity, your location, your contacts, your IP address as anything we store, or any file on your device. There is nothing in a report that ties it to any other report, so we cannot build a picture of a player from them even if we wanted to — each one arrives as a single, unlinked message.

Where it goes. The report is sent over HTTPS to a small script running in our own Google account, which turns it into an email to cronomzstudio@gmail.com and keeps no database. No advertising network, analytics provider or third-party support desk is involved. Reports are kept in that mailbox for as long as it takes to fix the bug and answer you, and deleted after that. To have yours deleted sooner, reply to it or write to us and say so — but note that a report you sent anonymously cannot be identified as yours, so we would have no way to find it.

Legal basis (EEA/UK): your consent (Art. 6(1)(a)), given by pressing Send it. You can withhold it by not sending a report, and there is no consequence for not sending one.

7. What we do not do

• We do not operate any server or database that receives your data. The one script that receives bug reports (section 6) stores nothing — it forwards to a mailbox and stops.
• We do not use analytics, attribution, A/B-testing or crash-reporting SDKs, and nothing in the Game reports anything automatically.
• We do not build advertising profiles, and we do not combine data across apps or services.
• We do not sell, rent or trade personal data.
• We do not share your data with anyone other than the Google services described in sections 3–5.
• We do not use anything in a bug report for advertising, marketing or mailing lists, and we do not add an address you gave us for a reply to any list.
• We do not knowingly collect data from children under 13.

8. Legal bases for processing (EEA and UK)

Where the UK GDPR or EU GDPR applies, the legal bases are:

For the data Google collects through AdMob, Play Games Services and Play Billing, Google determines the purposes and means of processing and is the controller you should address for those. Because those services are operated by Google, data may be transferred to and processed in the United States and other countries; Google relies on its own transfer safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time.

Unless you have sent us a bug report, we hold no personal data about you at all, and so generally cannot fulfil an access or deletion request ourselves — there is nothing for us to look up. In practice:

• Local data: delete it yourself by clearing app data or uninstalling (section 2).
• Ad-related data: reset or delete your advertising ID (section 3), and address requests to Google, whose privacy tools cover it.
• Cloud save: delete it through Google Play Games (section 4).
• A bug report you sent: write to us and we will delete it. If you left the email field blank we have no way to tell which report was yours, so quote something from it (section 6).

If you believe your data has been handled unlawfully, you may complain to your local supervisory authority — in the UK, the Information Commissioner’s Office; in the EEA, your national data protection authority.

Write to us at cronomzstudio@gmail.com with any privacy question. We aim to respond within 30 days.

9. California residents (CCPA/CPRA)

We do not collect, and have no access to, personal information about California residents. Through the AdMob SDK, Google may collect the categories described in section 3 — identifiers (advertising ID, IP address), internet or other network activity (ad interactions), and inferences used for ad targeting — for the business purpose of serving and measuring advertising.

We do not sell personal information for money. Where personalised ads are served, the resulting disclosure of an advertising identifier to an advertising network may qualify as a “sale” or as “sharing for cross-context behavioural advertising” under the CPRA. You can opt out at any time by turning on Opt out of Ads Personalisation (or deleting your advertising ID) in your Android settings, as described in section 3; the Game will keep working and will serve non-personalised ads.

California residents also have rights to know, delete, correct and to non-discrimination. As we hold no personal information, direct such requests to Google under its privacy policy, or contact us at cronomzstudio@gmail.com and we will point you to the right place.

10. Children

Shape Clash is not directed to children under 13, and its Google Play target age range starts at 13. The Game contains simulated gambling (a wager node that stakes in-game gold on a fight) and is rated accordingly. We do not knowingly collect personal data from children.

If you believe a child has provided personal data through the Game, contact us at cronomzstudio@gmail.com and we will help you get it removed — in practice, by clearing local app data and any cloud save.

11. Data retention

• On your device: kept until you clear app data or uninstall the Game.
• Cloud save: kept in your Google Play Games storage until you delete it.
• By Google: retained according to Google’s own policies, over which we have no control.
• By us: nothing collected automatically — we keep no records of players. If you email us, or send a bug report (section 6), we keep that message only as long as it takes to fix the problem and answer you, then delete it.

12. Changes to this policy

If the Game’s data practices change — a new SDK, a new feature that sends data anywhere — this policy is updated before that change ships, and the “Last updated” date at the top changes with it. Material changes will also be noted in the Google Play release notes. The current version is always the one published at the privacy policy URL listed on the Google Play store page.

13. Contact

Cronomz
Email: cronomzstudio@gmail.com

For data held by Google — advertising, cloud save, purchases — please also see policies.google.com/privacy and myaccount.google.com/privacy.