Overview
This policy explains what data Dropmelo (formerly "Drop & Merge") collects, why, and how third-party services process it. The game is published by İbrahim Halil Demircioğlu, an individual developer ("we"). You can play without creating an account, and the game does not ask for your real name, phone number or home address.
Data we collect
- Identifiers: a random device/player ID generated by the app (and an anonymous Supabase session), used to tie progress, scores and purchases to your device. If you opt in to ad personalisation on iOS, the advertising identifier (IDFA) may be used by the ad SDK.
- Device and technical information: platform, OS version, app version, last-seen time, language, time zone and connectivity state. Our service providers also see your IP address when your device connects to them.
- Gameplay data: scores, game mode, run duration, merges, highest level, coins, jokers, energy, quests, daily rewards and progression.
- Profile data you choose: a leaderboard nickname (screened by a profanity filter) and an avatar. These are public to other players on leaderboards, and to friends and duel opponents.
- Social features: a friend code, friend requests, friend lists and duel challenges between players.
- Sign-in (optional): if you sign in with Apple or Google, an account identifier and the email address the provider shares (Apple may share a private relay address), used to sync progress.
- Purchases: product IDs and purchase receipts/tokens needed to verify and deliver in-app purchases. Payments are handled by Apple or Google; we never see your card details.
- Push notification token: if you allow notifications, a Firebase Cloud Messaging token is stored on our server so we can send reminders, rewards and social alerts. Local notifications are scheduled on your device.
- Messages you send us: text you submit through in-app feedback, including limited app context (such as version and device type).
- Ads data: ad impressions, clicks and ad-loading diagnostics.
- Analytics and diagnostics: in-app events, crashes, errors and performance data (Firebase Analytics, Firebase Crashlytics and our own Supabase event tables).
How we use data
- To save progress, sync it across devices, and show leaderboards, friends and duels.
- To deliver purchases and rewards and to restore purchases.
- To show and measure ads.
- To send notifications you have allowed.
- To understand how the game is played, fix bugs and improve balance.
- To prevent fraud, cheating and abuse.
Advertising and tracking
The game shows ads through Google AdMob. AdMob may process advertising IDs, device information and ad interaction data to serve and measure ads and to prevent fraud. On iOS, the system App Tracking Transparency prompt lets you allow or deny tracking, and you can change this at any time in Settings. On both platforms you can reset or limit your advertising ID in device settings. Where required (for example in the EEA and UK), Google's consent message is shown before personalised ads. We do not sell your data.
Third-party services
- Google AdMob – ads
- Firebase Analytics, Crashlytics and Cloud Messaging – analytics, crash reports, push notifications
- Supabase – leaderboards, progress sync, friends/duels and cloud storage
- Sign in with Apple and Google Sign-In – optional login
- App Store and Google Play billing – purchases
These services process data under their own privacy policies and may transfer data internationally.
Sharing
We do not sell personal data. Data is shared only with the service providers above, with other players where you chose to make it public (nickname, avatar, score), when needed to run the game, or when required by law.
Retention
Progress, purchase and leaderboard records are kept while these features exist or until you ask us to delete them. Diagnostic and analytics data is kept only as long as needed to fix, secure and improve the app.
Your choices and data deletion
You can play offline, skip signing in, deny notifications and tracking, and limit ad tracking in your device settings. To access, correct or delete your data (including your leaderboard entries and profile), email ihalildemircioglu@gmail.com with the subject "Delete my data" from the device or account email, and include your nickname. We will respond within 30 days. Uninstalling the app removes data stored on your device. Depending on where you live (for example under the GDPR, UK GDPR, Turkish KVKK or CCPA), you may have additional rights, which you can exercise through the same address.
Children
Dropmelo is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided data, contact us and we will delete it.
Security
We use reasonable technical measures to protect data, but no online service can be fully secure.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
İbrahim Halil Demircioğlu · ihalildemircioglu@gmail.com