Privacy Policy

This policy explains what information the mobile game Find Differences: Time Travel (published by Brainlio, "the game", "we", "us") collects, why, who it is shared with, and the choices and rights you have. It applies to the game on Android (Google Play) and iOS (App Store).

The game has no user accounts: we never ask for your name, email address, phone number or password, and we do not run our own server that stores player data.

1. Summary

2. Information we collect and how it is used

2.1 Game data stored on your device

Your progress (levels, stars, coins, hints, lives, museum collection, daily challenge streak, weekly league score), your settings (sound, music, vibration, notifications, language) and a record of the items you have purchased are saved on your device. To protect against tampering, this save file is signed using an identifier generated by your device's operating system; this identifier never leaves your device.

The weekly league is played against computer-controlled opponents. Your league score is not sent to any server or shown to other players.

2.2 Cloud save (iCloud / Google Play Games)

If cloud save is available on your device, a copy of your game progress is stored in your own Apple iCloud account (iOS) or in Google Play Games Services "Saved Games" (Android), so you can continue on another device or after reinstalling. We do not receive this data; it is held by Apple or Google under their terms. On Android, signing in to Google Play Games may display your Play Games profile.

2.3 Advertising (Google AdMob)

The game is free and supported by ads served through Google AdMob. To show and measure ads and to prevent fraud, AdMob automatically collects your device's advertising identifier, device and app information (model, operating system, app version, language), your IP address (used for approximate location such as country or city — not precise GPS location) and information about the ads shown and your interactions with them.

• Consent (EEA, UK, Switzerland and other regions where required): the first time you open the game, Google's consent form (User Messaging Platform) asks whether ads may be personalized. If you decline, you will still see ads, but they will not be personalized. Where this form applies, you can change your choice at any time in Settings → Privacy Settings in the game.
• iOS — App Tracking Transparency: on iPhone and iPad, the game asks for your permission before accessing your device's advertising identifier (IDFA). If you do not allow tracking, the IDFA is not used. You can change this later in iOS Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in your device settings (Settings → Privacy → Ads, or Settings → Google → Ads).

Buying "Remove Ads", or having an active subscription, turns off ads except the optional rewarded ads you choose to watch.

2.4 Analytics (Google Firebase Analytics)

We use Firebase Analytics to understand how the game is played so that we can balance and improve it. It records events such as starting, finishing or failing a level, using a hint, watching a rewarded ad, completing a chapter or the tutorial and making a purchase, together with a few properties (current level, total stars, language, subscription status), an app-instance identifier, and device and app information. We do not send your name, email address or anything you type. Where consent is required, full analytics (with the app-instance identifier) is turned on only if you give consent in the consent form described above. If you decline, analytics runs in a restricted mode using Google Consent Mode: no app-instance identifier or advertising identifier is stored on or read from your device, and only anonymous, aggregated usage signals are sent.

2.5 Crash reporting (Google Firebase Crashlytics)

If the game crashes or hits a serious error, Firebase Crashlytics sends a crash report containing technical information: the error and where in the code it happened, a short log of recent in-game steps (for example, which screen you moved to), device model, operating system version, app version and a Crashlytics installation identifier. We use this only to find and fix bugs.

2.6 Purchases and subscriptions

Optional purchases (coin packs, hint packs, Remove Ads, starter pack) and subscriptions are processed entirely by the Apple App Store (StoreKit) or Google Play Billing, through the Unity In-App Purchasing library, which uses Unity Gaming Services to operate. We never see or store your payment card details. We receive only what is needed to deliver and restore a purchase, such as the product identifier and a transaction receipt. Subscriptions are managed and cancelled in your App Store or Google Play account settings.

2.7 Downloading game content (Cloudflare)

Some level images and other game content are downloaded when you reach them, from our content delivery network hosted on Cloudflare (R2 storage). As with any website, Cloudflare processes your IP address and standard request information to deliver the files and protect the service. To check the current date and time (for daily rewards), the game also makes a simple request to well-known public websites (google.com, cloudflare.com, apple.com) and reads only the standard date header of the response.

2.8 Notifications

If you allow notifications, the game schedules local reminders on your device (for example, when your lives are full or a daily challenge is waiting). They are created on the device itself; no push-notification token is sent to us or to any server. You can turn them off in the game's Settings or in your device settings.

3. Legal bases (GDPR / UK GDPR / KVKK)

• Performance of our agreement with you — running the game, saving progress, delivering purchases and downloaded content.
• Consent — personalized advertising, and analytics where consent is required. You can withdraw consent at any time as described in section 2.3.
• Legitimate interests — crash reporting, fraud prevention, security, and showing non-personalized ads that keep the game free.
• Legal obligations — for example, records the app stores keep for purchases.

4. Third-party services

We do not sell your personal information. The services below process data on our behalf or under their own policies:

Some of these providers are located in, or transfer data to, countries other than your own (including the United States). Such transfers rely on the providers' safeguards, such as the European Commission's Standard Contractual Clauses.

5. How long data is kept

• On your device: until you delete the game or clear its data.
• Cloud save: until you delete it from your iCloud or Google Play Games account.
• Analytics: event data is kept for a limited period according to Firebase's retention settings (no longer than 14 months).
• Crash reports: kept by Crashlytics for about 90 days.
• Advertising and content-delivery data: kept by Google and Cloudflare according to their own policies linked above.

6. Your choices and rights

• Ads and analytics consent: change it in Settings → Privacy Settings in the game (where shown), in your iOS tracking settings, or by resetting your Android advertising ID.
• Deleting your data: deleting the game removes all data stored on your device. To delete your cloud save, remove it in your iCloud settings (Settings → [your name] → iCloud → Manage Storage) or in Google Play Games. To request deletion of analytics or crash data associated with your device, email infobrainlio@gmail.com. Because the game has no accounts, we may ask for your device model and the approximate dates you played so we can locate the data. We will respond within 30 days.
• EEA / UK (GDPR): you have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.
• Türkiye (KVKK, Law No. 6698): under Article 11 you may learn whether your personal data is processed and request information about it, learn the purpose of processing and whether it is used for that purpose, learn the third parties in Türkiye or abroad to whom it is transferred, request its correction or deletion, object to results arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing. Send your request to infobrainlio@gmail.com.
• California (CCPA/CPRA): you have the right to know what personal information is collected, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell personal information for money. Personalized advertising through AdMob may be considered "sharing" under California law; you can opt out by declining ad personalization, limiting ad tracking in your device settings, or emailing us.

We will not treat you differently for exercising any of these rights.

7. Children

The game is a general-audience puzzle game and is not directed at children under 13, or under the age of digital consent where you live (up to 16 in some EEA countries). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at infobrainlio@gmail.com and we will delete it.

8. Security

Data is sent over encrypted connections (HTTPS). No method of storage or transmission is completely secure, but we limit what we collect to what the game needs.

9. Changes to this policy

We may update this policy when the game or the services it uses change. The effective date at the top shows when it was last updated.

10. Contact

Questions, requests or complaints about privacy: infobrainlio@gmail.com