Privacy Policy — Chroma Bounce

This Privacy Policy applies to Chroma Bounce, developed and published by Malakaay Studios.

Chroma Bounce is available as an Android game distributed through Google Play and as a free HTML5 browser edition distributed through itch.io. Some features, storage methods and third-party services differ by platform.

Chroma Bounce does not require users to create an account.

For privacy questions or requests, contact malakaay.studios@gmail.com.

Information we process

We do not ask players to provide a real name, email address, phone number, postal address, contacts, photos, videos, microphone recordings, precise location or payment information in order to play Chroma Bounce.

However, online services and service providers may process pseudonymous identifiers and technical information such as IP address, User-Agent, timestamps or advertising identifiers where applicable. Depending on the context and applicable law, some of this information may constitute personal data.

Local game data

Chroma Bounce stores gameplay and progression data locally to provide game features. This may include scores, best runs, coins, XP, unlocked items, achievements, settings, language preferences, profile progress, gameplay statistics, selected avatar and other local preferences or reward state.

Android: local progress is stored on the device. Clearing the app data or uninstalling the app can remove that local data.

HTML5 on itch.io: progress and preferences are stored in browser storage. Clearing site data, changing browser or device, or using certain private/incognito modes may cause local progress to be lost.

Local progress is not automatically synchronized between Android and the browser edition or between different browsers/devices. Chroma Bounce does not currently provide account-based synchronization or backend save export/import for the HTML5 edition.

Malakaay Studios does not automatically receive the player's complete local progression. Only information required for the online leaderboard is sent to the backend.

Online leaderboards

Chroma Bounce includes a global online leaderboard operated by Malakaay Studios through backend infrastructure hosted on Cloudflare.

The Android and HTML5 editions currently participate in the same global leaderboard service. Local progression and local player identity remain tied to the relevant installation/browser and do not automatically synchronize between platforms.

Leaderboard data may include:

• an internal pseudonymous player identifier;
• a system-generated public callsign/display name;
• a player tag generated by the backend;
• equipped avatar identifier;
• score, number of bounces, maximum combo and run duration;
• competitive category such as Pure or Assisted;
• ranking period such as All-Time, Month, Week or Season;
• competitive metadata used to validate and separate runs; and
• technical timestamps used to order, display and audit entries.

Information that may be displayed publicly includes rank, display name, player tag, avatar, score, bounces, combo, duration, leaderboard category and ranking period.

Clearing local Android or browser data does not by itself guarantee deletion of leaderboard entries previously submitted online.

Technical data and server logs

Cloudflare may process technical request information for security, diagnostics, abuse prevention and service operation, including IP address, User-Agent, request timestamps, basic technical logs, rate-limit information and anti-abuse metadata.

This information is used to operate and protect the leaderboard, diagnose incidents and maintain fair competition.

Advertising and consent

Android: Chroma Bounce may use Google AdMob to display advertising. Google User Messaging Platform (UMP) may be used to collect and manage consent choices where required. Depending on device settings, consent choices and Google's services, AdMob may process information such as IP address, advertising identifiers, device information, ad-related app activity, diagnostics, crash information and approximate location.

HTML5 on itch.io: the Chroma Bounce browser edition does not include integrated advertising and does not use AdMob or UMP. It does not collect advertising identifiers through those SDKs.

Third-party services

• Google Play — Android distribution and platform services.
• Google AdMob — advertising in the Android edition where enabled.
• Google User Messaging Platform (UMP) — consent management in the Android edition where applicable.
• Cloudflare — leaderboard backend, database, security, diagnostics and service operation.
• itch.io — hosting and distribution of the HTML5 browser edition.

Third-party providers may independently process information under their own privacy, retention and deletion practices. This policy does not attribute specific categories of data to itch.io beyond the services Malakaay Studios actually uses.

Data sharing

Malakaay Studios does not sell users' personal data. Information may be processed by the providers described above where necessary for distribution, advertising, consent management, hosting, leaderboard operation, security, diagnostics, fraud or abuse prevention and service operation.

Leaderboard information is intentionally visible to other players as part of the ranking feature. It is not shared for sale or unrelated marketing.

Data retention and deletion

Local progression: remains on the device or browser storage until removed by the user, lost because the storage is cleared or unavailable, or otherwise replaced during normal game operation.

Leaderboard records: may be retained for as long as reasonably necessary to provide rankings, maintain security and competitive integrity, prevent abuse, resolve technical incidents or disputes, or comply with applicable legal obligations.

Technical security data: may be retained for as long as reasonably necessary for security, diagnostics, abuse prevention and service operation. No fixed retention period is promised where one has not been technically established.

Third-party data: is retained according to the relevant provider's own practices.

For detailed instructions, see the Chroma Bounce Data Deletion Request page.

Your privacy rights

Depending on the law applicable to you, you may have rights relating to personal data, including access, rectification, deletion, restriction, objection and data portability. Requests can be sent to malakaay.studios@gmail.com.

Malakaay Studios is established in Andorra. Andorran data protection law provides rights for data subjects and the possibility of lodging a complaint with the Andorran Data Protection Agency (APDA).

Because Chroma Bounce does not create user accounts and uses pseudonymous leaderboard identities, we may need enough non-sensitive information to reasonably identify the records concerned before acting on a request.

Children

Chroma Bounce is not specifically directed to children and is intended for a general audience aged 13 or older. If a parent or guardian believes that a child has provided personal information through the game, please contact malakaay.studios@gmail.com.

Security

Chroma Bounce is designed to avoid collecting unnecessary personal information. We use reasonable technical and organizational measures to protect online features, prevent abuse and operate the service securely. No method of transmission or storage is completely secure.

Changes to this Privacy Policy

We may update this Privacy Policy when Chroma Bounce, its platforms or service providers change. Material changes will be published on this page with an updated revision date.

Contact