Last updated: 2026-05-19
Package: com.xstudio.flowstone
Flowstones is a single-player, offline-capable match-3 puzzle game. We collect the minimum data needed to save your puzzle progress to the cloud so you can continue on a new device. This policy describes exactly what we collect, what we do not collect, and how to delete your data.
Data we collect
When you sign in (anonymously or with a Google account, via Firebase Authentication), we create one document per player in Cloud Firestore. That document stores the following fields and nothing else:
Firebase Auth UID — an opaque identifier generated by Google Firebase. It is not an email, phone number, or real-world identity. It exists only to associate the save document with your account on next sign-in.
current_level — integer, the level number you are currently on (1–24).
coins — integer, your in-game soft-currency balance. Not purchasable; earned by playing.
last_daily_claim — string timestamp of the last daily-bonus claim, used to gate the next claim.
stars_per_level — JSON-stringified array of 0–3 star ratings per completed level.
booster_counts — JSON-stringified object mapping booster type to remaining count.
updated_at — string timestamp of the last save, used by the client to merge against local progress.
Data we do NOT collect
No analytics, telemetry, or session tracking (no Firebase Analytics, no Google Analytics, no third-party SDKs).
No crash reporting (no Crashlytics, no Sentry, no equivalent).
No advertising identifier (no Google Advertising ID, no IDFA, no IDFV).
No ads or ad-network SDKs of any kind. The game contains zero advertisements.
No in-app purchases. The game contains no IAP.
No precise or coarse location data.
No contacts, calendar, photos, microphone, or camera access.
No device identifiers (no IMEI, MAC address, Android ID, build serial).
No personal information (no name, email, phone number, address, age, gender).
No usage logs, gameplay event streams, or behavioral profiles.
No third-party sharing of any data. Your save document is read and written only by you (via Firestore security rules scoped to your UID).
How your data is stored and secured
Stored in Google Cloud Firestore, project flow-stone, under collection users/<uid>.
All traffic between the game and Firestore uses HTTPS (TLS) — Firebase SDK enforced.
Firestore security rules restrict each document to its owner: only requests authenticated as the matching UID can read or write that document.
Firebase Auth credentials are managed by Google. We never see or store any password.
Data retention and deletion
Your save document is retained until you ask for it to be deleted. To delete your data:
Email the developer at the address below with the subject "Flowstones data deletion request" and include your Firebase Auth UID (visible in the in-game Settings screen).
The corresponding Firestore document at users/<uid> will be permanently deleted within 14 days.
Confirmation will be sent to the email used for the request.
Children
Flowstones is rated for everyone 3+. We do not knowingly collect any data beyond the Firebase Auth UID and gameplay fields listed above. The game contains no chat, no user-generated content, no advertising, and no purchase mechanisms. If you are a parent or guardian and believe your child has used the app, no additional action is required — the only data on file is the anonymous UID and puzzle progress.
Changes to this policy
If we change what we collect, this page will be updated and the "Last updated" date at the top will change. Material changes will also be announced in the in-game changelog.
Contact
Developer / Data controller: XStudio Contact email for privacy / deletion requests:fmichellegpu080@gmail.com Publisher: XStudio (sole developer; no third parties)