CrystalCoreCrystalCore Privacy Policy
1. Who we are
CrystalCore is a mobile simulation game developed by the CrystalCore developer team. Contact: destekofficial@gmail.com.
2. Data we collect
| Data | Source | Purpose | Retention |
|---|---|---|---|
| Email address, password (hashed) or Google account identity (email, name) | Sign-up / Google sign-in | Account, session, password reset | Until the account is deleted |
| Miner name, game progress (level, equipment, balances), reward/movement records | Gameplay | Running the game, cloud save, fairness / anti-cheat | Until the account is deleted |
| App interaction events (e.g. session start, mission completed) and error logs | The app | Product improvement, stability | 12 months |
| Push notification token | Only if you enable notifications | Sending notifications | Until disabled / account deleted |
| Advertising ID and device information | Google AdMob SDK (only if you choose to watch an ad) | Ad display and verification | Per Google’s policies |
| Purchase records (product, order id, purchase token) — never card details | Google Play Billing (only if you buy something) | Delivering purchases, refunds, fraud prevention | Until the account is deleted |
Leaderboard: your miner name and in-game totals (crystals, level, prestige) are shown to other players in the ranking (never your email or identity). You can change your miner name in Settings at any time.
We do not collect location, contacts, files, camera or microphone data. The app is not directed at children; we do not knowingly collect data from anyone under 13.
3. How we use data
To provide the game, keep your progress across devices, prevent cheating and abuse, fix bugs and (if you allow it) send notifications. We do not sell your data.
4. Third parties
- Supabase (database, authentication, server functions) — data processor.
- Google AdMob — optional rewarded ads; Google’s privacy policy applies. In the EU/UK you will be asked for consent before personalized ads (UMP).
- Google Play Billing — in-app purchases are processed by Google; we never see your payment details.
- Google Sign-In — optional; we receive only your email and display name.
- Expo / Google (FCM) — push notification delivery (only if enabled).
5. About in-game items
In-game “crystals”, the “CrystalCore Wallet” balance (SIM-BTC) and other resources are virtual game items. The USD figure on the wallet screen is an informational estimate computed from the current market rate only; it is not money, cryptocurrency or any other asset and cannot be bought, sold, withdrawn or exchanged. The app does not mine cryptocurrency on your device and never asks for a wallet address.
6. Security
Data is encrypted in transit (TLS). Session data is stored in the operating system’s secure storage on your device. Row-level access control is enforced server-side; administrative actions are written to an audit log.
7. Your rights and account deletion
- Account deletion: App → Settings → “Delete my account”. The request is applied permanently within 30 days; you can cancel it by signing in again during that period. Web: account-deletion.
- Access / correction / portability: write to destekofficial@gmail.com; we reply within 30 days.
- Notifications: can be disabled in Settings; the token is deactivated on the server.
- Ad personalization: device ad settings and the in-app consent form.
Your rights under GDPR (EU/UK), CCPA (California) and other applicable laws are preserved; the data controller is the CrystalCore developer team.
8. Changes
Updates to this policy are announced in the app and on this page.