Privacy Policy

This Privacy Policy explains what information GridRivl ("we", "us") collects when you use our website and mobile app, how we use it, and the choices you have. By creating an account or using GridRivl, you agree to this policy.

Information we collect

• Account details — your username, email address, and a securely hashed password. We never store your password in plain text.
• Optional profile info — country, avatar, bio, and cosmetic choices, if you provide them.
• Gameplay data — your scores, ranks, matches, achievements, streaks, quests, and in-game coin balance.
• Device & technical data — your IP address and basic request information, used for security, rate-limiting, and abuse prevention.
• Push notification token — if you use the mobile app and allow notifications, we store a device token so we can send you alerts (for example, when a battle finishes or a friend request arrives).
• Cookies — we use a small number of cookies to keep you logged in and remember your session. We do not use third-party advertising cookies.

How we use your information

• To create and manage your account and let you play.
• To run matchmaking, leaderboards, friends, and the daily challenge.
• To send you account and gameplay notifications (in-app, email, and push) — you can turn push off any time in your phone settings.
• To process coin purchases you request (see below).
• To keep the service secure and prevent cheating, spam, and abuse.
• To respond to your support requests.

Coin purchases

Coins are an in-game currency with no real-world cash value. Coin purchases in the mobile app are processed securely by Google Play Billing. We never see or store your card or bank details — Google handles the payment and sends us only a confirmation that a purchase succeeded, so we can add the coins to your account. Refunds are handled through Google Play under their refund policy.

Who we share data with

We do not sell your personal information. We share limited data only with the service providers we need to operate GridRivl:

• Google Firebase Cloud Messaging — delivers push notifications to the mobile app (receives your device token).
• Google Play Billing — processes in-app coin purchases. Google handles the payment; we only receive a purchase confirmation.
• Our hosting and email providers — store the site/database and send transactional emails (such as password resets and notifications).
• flagcdn.com — serves the small country-flag images shown on profiles.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Data retention & deletion

We keep your information for as long as your account is active. You can request that we delete your account and associated personal data at any time by contacting us at main@gridrivl.com or through our Contact page. Some records may be retained where required for legal, security, or anti-fraud reasons.

Security

We protect your data with industry-standard measures, including hashed passwords and encrypted (HTTPS) connections. No method of transmission or storage is ever 100% secure, but we work to safeguard your information.

Children

GridRivl is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will remove it.

Your choices

• Update your profile details from your account settings.
• Turn push notifications on or off in your device settings.
• Request access to, correction of, or deletion of your data by contacting us.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above. Significant changes may also be announced in the app or by email.

Contact us

Questions about this policy or your data? Email main@gridrivl.com or visit our Contact page.