Privacy Policy — Magnet Hunter

Last updated: September 2, 2026

Magnet Hunter ("the app", "we") is a single-player arcade game with an optional global daily leaderboard and optional cross-device progress sync. This policy explains what information the app handles, where it goes, and how you can control it.

1. Summary

You can play as a Guest without signing in. Your progress stays on your device.
If you sign in with Apple or Google, your game progress is stored in our cloud backend (Firebase) so it can sync between your devices, and the display name you choose can appear on the public daily leaderboard.
The app shows no ads and runs no third-party analytics or tracking.
We do not sell your data.

2. What information is handled, and why

2.1 Always (whether or not you sign in)

Game state stored on your device — best score, best sector, best combo, goal and rank progress, the core you chose, daily results and streak, settings, and the display name you optionally enter. This is kept in the app's local storage.
Anonymous identifier (Firebase Anonymous Auth) — so the app can place you on the public leaderboards even before you sign in, a random anonymous identifier is created. It has no link to your real identity. As a guest you appear under a generated name derived from that identifier (for example "SwiftPulsar17"); it cannot be edited until you sign in.
Leaderboard entries (Firebase Firestore) — when you finish a daily run or set a new personal best, the app submits your display name, score, deepest sector, run duration and a server-generated timestamp to the public daily and all-time leaderboards. These rows are readable by everyone using the app.
App integrity attestation (Firebase App Check) — to confirm requests come from a genuine copy of the app, the device produces an attestation token via Apple App Attest / DeviceCheck or Google Play Integrity. The token contains no personal data and is processed by Google Firebase.

2.2 Only if you sign in with Apple or Google

Provider-issued user identifier — used by Firebase Authentication to associate your sign-in with a stable account.
Email address — when you sign in with Apple or Google we receive an email address (or Apple's private relay address if you chose Hide My Email). It is stored only in Firebase Authentication so we can recognise you on your next sign-in.
Cloud-synced progress (Firebase Firestore) — while signed in, your game progress is mirrored to your private user document (/userSaves/{your-uid}) so it can be restored on a reinstall or another device. Only you can read it (enforced by security rules).

3. Who has access to what

Data	Stored where	Visible to
Game progress (Guest)	Your device only	You
Daily leaderboard entry (name, score, duration)	Firebase Firestore (public)	Anyone using the app
Cloud-synced progress (signed in)	Firebase Firestore (`/userSaves/{uid}`)	You only
Email + provider user id	Firebase Authentication	You and us (admin)

4. Third-party services we rely on

Firebase (Google LLC) — Authentication and Firestore database. See firebase.google.com/support/privacy.
Sign in with Apple (Apple Inc.) — optional sign-in provider. See apple.com/legal/privacy.
Sign in with Google (Google LLC) — optional sign-in provider. See policies.google.com/privacy.

5. Tracking and ads

The app contains no advertising and no third-party analytics SDKs. We do not track your use of the app across other apps or websites, and we do not build an advertising profile of you.

6. Children

The app is suitable for all ages. We do not knowingly collect personal information from children under 13 (under 16 in the EEA). If you believe a child has provided personal information through sign-in, contact us at contact@fluttech.com and we will delete the account and associated data.

7. Your choices

Reset local progress: uninstall the app.
Sign out: Settings → Account → Sign Out. Your cloud-stored progress stays in our backend in case you sign back in.
Delete your account and cloud data: Settings → Account → Delete Account. This removes your Firebase Authentication record and your private cloud save. You can also email contact@fluttech.com from the address tied to your sign-in.
Choose or change your leaderboard display name: Settings → Profile.

8. Data retention

Local game state is kept on your device until you delete the app. Cloud-stored data (Firebase Auth record, private cloud save, leaderboard rows) is retained while your account is active and removed within 30 days of a deletion request.

9. International transfers

Data is processed on Google Firebase infrastructure. Google may process data in various regions; see the Google privacy policy linked above for details.

10. Changes to this policy

If we update this policy, the "Last updated" date above will change. Continued use of the app after a change means you accept the updated policy.

11. Contact

Data controller: Fluttech. For questions about this policy or to exercise the rights in section 7, contact: contact@fluttech.com