Privacy Policy
Privacy Policy for Slide Cafe – Word Game
Effective Date: April 23, 2026
Last Updated: July 26, 2026
This Privacy Policy explains how the mobile application Slide Cafe – Word Game ("Slide Cafe", the "App", "we", "us", or "our") collects, uses, stores, and shares information when you use the App on iOS or Android devices.
Slide Cafe is published under the z6type brand by an independent developer. z6type is not an incorporated legal entity. References to "we" in this Policy mean the developer operating under the z6type brand.
By downloading, installing, or using the App, you acknowledge the practices described in this Privacy Policy. If you do not agree, please do not use the App.
1. Scope and Summary
Slide Cafe is a word puzzle game designed to work without asking you to create a traditional account or provide direct contact information.
- The App does not ask for your real name, email address, phone number, or login credentials.
- The App automatically creates a pseudonymous Supabase user ID so that online features, leaderboards, cloud saves, and purchase verification can work.
- Your chosen in-game nickname, avatar, gameplay progress, virtual-currency balances, and related game data may be stored locally and synced to Supabase.
- RevenueCat processes store purchase history and entitlement information so that Slide Cafe Pro and other eligible purchases can be validated and restored.
- Google Firebase Analytics measures product usage, and Firebase Crashlytics processes crash and diagnostic information.
- Google AdMob processes advertising and ad-interaction data. Advertising identifiers are used only when available and permitted by applicable consent and platform settings.
- Apple App Store and Google Play process payments. We do not receive or store your payment-card details.
2. Who We Are (Data Controller)
- Brand: z6type
- Role: Independent developer (not an incorporated company)
- Contact email: info@z6type.com
Depending on the service and applicable law, Apple, Google, Supabase, and RevenueCat may act as our processors/service providers or as independent controllers for information they process under their own terms and privacy policies.
3. Information We Do Not Request
- We do not ask you to provide your real name, personal email address, phone number, postal address, or profile photo through the App.
- We do not access your contacts, calendar, SMS, call logs, camera, microphone, photos, or precise GPS location.
- We do not receive your payment-card number, billing address, or app-store password.
- We do not sell personal information for money.
4. Information We and Our Service Providers Process
4.1 Information stored on your device
The App stores information locally, including:
- Game state, unfinished puzzle data, completed levels, scores, hints used, and move counts
- Settings such as language, sound, haptics, tutorial state, and onboarding flags
- Virtual-currency and inventory balances
- A locally cached copy of purchase-entitlement status so previously validated purchase benefits can remain recognized when the network or verification service is temporarily unavailable. This cache does not control or restrict offline gameplay, which is available regardless of Slide Cafe Pro status.
- Locally generated session identifiers and player seed values
- Authentication session material used to resume the App's pseudonymous Supabase user
Some local data may also be included in operating-system backup or cloud-storage features that you have enabled. On iOS, secure or iCloud-backed recovery data may persist after reinstall. On Android, uninstalling the App will usually remove locally stored data unless the operating system restores a backup.
4.2 Pseudonymous Supabase identity, profile, leaderboard, and cloud save
The App automatically creates a Supabase user record without asking you to enter a name, email address, or password. Supabase assigns a unique pseudonymous user ID (UUID) and issues session tokens. This is an authenticated technical identity used only for the App's online features.
Information associated with this user ID may include:
- Your chosen in-game nickname and avatar
- Leaderboard and league data, such as scores, time, moves, hints used, locale, game mode, league tier, points, and badges
- Cloud-save data, including progress, unfinished games, settings, streaks, inventory, virtual currencies, and purchase-related game state
- Player-safety preferences, including the pseudonymous IDs of players you choose to hide
- Username-moderation reports, including the reporter and reported pseudonymous IDs, reported nickname, league context, reason, status, and timestamps
- Timestamps, schema versions, and technical records needed to synchronize and protect the data
On iOS, the App may use an app-scoped iCloud/CloudKit user record identifier and iCloud-stored recovery material to reconnect the same pseudonymous Supabase identity after reinstall or on another eligible device. The App may derive internal, non-user-facing recovery credentials from that app-scoped identifier. This is not Sign in with Apple: we do not receive your Apple ID email address, Apple password, or Apple profile information.
Purpose / legal basis: app functionality, cloud save, leaderboards, fraud and abuse prevention, purchase verification, support, and our legitimate interests and/or performance of the service requested by you.
4.3 RevenueCat purchases and entitlements
We use RevenueCat to retrieve product information, process purchase results from Apple or Google, validate purchases, restore eligible purchases, and determine whether Slide Cafe Pro or another entitlement is active.
RevenueCat may process:
- The same pseudonymous Supabase user ID as the RevenueCat App User ID
- Product identifiers, offering and price information, transaction and purchase history, entitlement status, purchase and expiration dates, and restore status
- Apple receipt information or Google Play purchase tokens supplied by the store
- App version, platform, device type, operating-system version, locale, country/currency information, IP address, and SDK-related technical events
The App also sends an authenticated request to a Supabase Edge Function, which queries RevenueCat to verify Slide Cafe Pro status. RevenueCat and our backend do not receive your payment-card details from this process.
Purpose / legal basis: purchase fulfillment, entitlement management, fraud prevention, customer support, analytics, and performance of the purchase contract.
4.4 Google Firebase Analytics
Firebase Analytics may process:
- A Firebase app instance or installation identifier
- Device model, operating-system version, locale, app version, and general technical information
- Install source, first-open time, session information, and coarse location inferred from IP address
- Gameplay and product-interaction events, such as game progress, feature use, store/paywall actions, purchase-result events, and advertising events
We do not intentionally send your real name, personal email address, phone number, or the words you enter during gameplay to Firebase Analytics. Analytics event names and parameters are limited to the technical and gameplay information needed to understand feature performance.
Purpose / legal basis: analytics, game balancing, product improvement, and measuring feature usage, based on legitimate interests and/or consent where required.
4.5 Firebase Crashlytics and diagnostics
Firebase Crashlytics may process crash stack traces, error messages, diagnostic breadcrumbs, app and operating-system versions, device model and state, timestamps, Firebase/Crashlytics installation identifiers, and technical attributes added to diagnose a failure. Diagnostic records are used to identify affected installations and troubleshoot stability issues. We do not intentionally attach your real name or personal contact information to crash reports.
Purpose / legal basis: diagnosing crashes, maintaining security and reliability, and improving App performance, based on legitimate interests.
4.6 Google AdMob
Google AdMob and its advertising partners may process:
- Advertising identifiers, such as Apple's IDFA or Android advertising ID, when available
- IP address and coarse location inferred from IP
- Device, operating-system, language, app, and network information
- Ad requests, impressions, clicks, exposure, closures, rewarded-ad completion, and fraud-prevention signals
On iOS, the App requests App Tracking Transparency permission before using data for tracking. If permission is denied, the IDFA is unavailable to the App and ads are requested without that identifier. In the EEA, UK, Switzerland, and other regions where required, consent choices are requested before personalized advertising or non-essential storage is used.
Purpose / legal basis: displaying and measuring ads, rewarding optional ad views, frequency capping, fraud prevention, and personalized advertising where valid consent has been provided.
4.7 Apple App Store and Google Play purchases
Apple App Store or Google Play processes the payment transaction and provides the App and RevenueCat with the store data needed to fulfill, validate, and restore a purchase. We do not receive your full payment-card information, store password, or billing address. Refunds and payment disputes are handled by the store under its own policies.
4.8 Local notifications and reminders
With your permission, the App may schedule notifications on your device for daily challenges, streaks, league events, and free rewards. These reminders are scheduled locally by the App using game state and times already stored on your device. Slide Cafe does not obtain or upload a remote push-notification token for these reminders.
You can deny notification permission, disable notifications later in your device settings, or continue using the App without enabling them.
Purpose / legal basis: optional gameplay reminders and app functionality, based on your permission.
5. Third-Party Services
| Service | Provider | Purpose | Privacy information |
|---|---|---|---|
| Supabase | Supabase, Inc. | Pseudonymous authentication, database, cloud save, leaderboards, and server-side purchase verification | supabase.com/privacy |
| RevenueCat | RevenueCat, Inc. | Product catalog, purchase validation, purchase history, entitlement management, and restoration | revenuecat.com/privacy-policy |
| Firebase Analytics | Google LLC / Google Ireland Ltd | Product analytics and usage measurement | firebase.google.com/support/privacy |
| Firebase Crashlytics | Google LLC / Google Ireland Ltd | Crash reports and diagnostics | firebase.google.com/support/privacy |
| Google AdMob | Google LLC / Google Ireland Ltd | Advertising, measurement, consent, and fraud prevention | policies.google.com/technologies/ads |
| Apple App Store / iCloud / CloudKit | Apple Inc. / Apple Distribution International Ltd. | iOS distribution, payments, purchase records, and eligible recovery data | apple.com/legal/privacy |
| Google Play Billing | Google LLC / Google Ireland Ltd | Android distribution, payments, and purchase records | policies.google.com/privacy |
| Expo / EAS | Expo, Inc. | App build and update infrastructure | expo.dev/privacy |
6. How We Use Information
We use the information described above to:
- Provide gameplay, save progress, and synchronize supported data.
- Create and maintain a pseudonymous technical identity for online features.
- Operate profiles, leaderboards, leagues, and cloud saves.
- Fulfill, validate, and restore eligible purchases and entitlements.
- Detect abuse, cheating, tampering, and purchase fraud.
- Measure aggregate usage, improve game balancing, and develop features.
- Diagnose crashes and maintain reliability and security.
- Serve, measure, and limit the repetition of ads.
- Comply with platform policies, applicable law, and our Terms of Service.
7. How We Share Information
We disclose information only as needed:
- To Supabase, RevenueCat, Google/Firebase, Google AdMob, Apple, Google Play, and the other providers listed above to operate their described functions
- Between the App, our Supabase backend, RevenueCat, and the applicable app store to validate and restore purchases
- To comply with law, legal process, safety obligations, fraud prevention, or the protection of rights
- In connection with a lawful transfer involving the App or z6type assets
We do not sell personal information for money. AdMob's personalized advertising may constitute "sharing" or "targeted advertising" under some privacy laws; it is used only subject to applicable consent and opt-out requirements.
8. Data Retention
- Local progress and settings remain until you clear App data, uninstall the App, or the operating system removes them. Eligible iCloud or platform backups may remain under your platform settings.
- Supabase user, leaderboard, league, cloud-save, player-hiding, and moderation-report records are retained while needed to provide the features, protect the service, investigate abuse, resolve disputes, and meet legal obligations. You may request deletion as described below.
- RevenueCat retains purchase and entitlement records as needed to validate and restore purchases, provide analytics/support, prevent fraud, and comply with legal obligations and its privacy policy.
- Firebase Analytics and Crashlytics data follow the retention settings and schedules described by Google Firebase.
- AdMob data follows Google's advertising retention policies and your consent/settings.
- Apple and Google retain store transaction records under their own legal obligations and policies.
Deletion from our systems may not delete records that Apple, Google, or another independent controller must retain, and backup copies may take additional time to expire.
9. Children's Privacy
Slide Cafe is a general-audience word puzzle game, but it is not directed to children under 13 (or under 16 in the EEA/UK where applicable), and we do not knowingly request personal information from children.
If a parent or guardian believes a child has provided personal information in violation of this section, contact info@z6type.com.
10. Your Privacy Rights and Data Deletion
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal data, object to certain processing, withdraw consent, and complain to a supervisory authority.
You can permanently delete the App's pseudonymous account from Settings > Delete Account. This removes the Supabase Auth user and associated profile, leaderboard, league, player-hiding, moderation-report, entitlement, and cloud-save records; removes the related RevenueCat customer record under our control; deletes Slide Cafe's private CloudKit game-save record on iOS when available; clears local gameplay data and account-recovery material; and returns the App to its first-run onboarding.
App Store or Google Play transaction records controlled by Apple or Google are not deleted by this action, and deleting the account does not cancel a store subscription. Eligible purchases can be restored later through the applicable store. If in-App deletion is unavailable or you need help with another privacy request, email info@z6type.com. Because we do not request direct contact identifiers in the App, we may ask for your in-game nickname, pseudonymous user ID, transaction identifier, or other technical information needed to locate and verify the relevant records.
You can also:
- Reset or limit advertising identifiers through your device settings.
- Deny or change iOS App Tracking Transparency permission in iOS Settings.
- Change consent choices through any privacy controls made available in the App or by the advertising provider.
- Request purchase refunds, cancel subscriptions, or manage store transaction history through Apple or Google.
11. California Privacy Notice
California residents may have rights to know, access, delete, and correct personal information; to opt out of "sale" or "sharing" for cross-context behavioral advertising; and to non-discrimination for exercising privacy rights.
We do not sell personal information for money. Personalized advertising through AdMob may constitute "sharing" under California law. You may opt out through iOS tracking settings, Android advertising/privacy settings, applicable in-App consent controls, or by contacting us.
12. Other Jurisdictions
Users in the EEA, UK, Switzerland, Brazil, Canada, Australia, Japan, South Korea, Türkiye, and other jurisdictions may have additional rights under local law. Contact info@z6type.com to exercise those rights.
13. International Data Transfers
Our service providers may process information in the United States and other countries outside your country of residence. Where required, transfers are supported by contractual, organizational, or legal safeguards used by the relevant provider.
14. Security
We use platform sandboxing, code signing, encrypted transport, pseudonymous identifiers, authenticated sessions, database access controls, and Supabase row-level security policies. RevenueCat secret API credentials are kept on our backend and are not embedded in the App. No storage or transmission method is completely secure, and we cannot guarantee absolute security.
15. Permissions and Platform Controls
The App may request or use:
- App Tracking Transparency on iOS for advertising tracking
- Notifications for optional, locally scheduled gameplay and reward reminders
- Internet access for cloud saves, leaderboards, purchases, analytics, crash reporting, and ads
- In-app billing for purchases
- iCloud/CloudKit access on iOS for eligible anonymous-account and game-data recovery
- Haptics/vibration and audio playback for gameplay feedback
The App does not request camera, microphone, photos, contacts, calendar, precise location, Bluetooth scanning, SMS, or call-log access.
16. Platform Store Disclosure Summary
Apple App Store privacy label
Depending on the App version and your privacy choices, disclosures may include:
- Data linked to you: pseudonymous User ID, gameplay content, purchase history, product interaction/usage data, advertising data, device identifiers, and coarse location inferred from IP where applicable
- Data not linked to you: crash and performance diagnostics
- Data used to track you: coarse location, device identifiers, advertising data, and product-interaction data used by advertising services when tracking is permitted
Google Play Data Safety
Disclosures may include app activity, purchase history, diagnostics, and device or other identifiers. Data is encrypted in transit. Information is shared with service providers as described in this Policy, and deletion can be requested by contacting us.
The store labels are summaries. This Privacy Policy provides additional context about the purpose and handling of each data type.
17. Changes to This Policy
We may update this Privacy Policy when the App, our service providers, or legal requirements change. We will update the "Last Updated" date and may provide an in-App or store notice when required for a material change.
18. Contact Us
- Email: info@z6type.com
- Brand: z6type
- App: Slide Cafe – Word Game
We aim to respond within 30 days where applicable.