This privacy policy is applicable to the Align Four app (hereinafter referred to as "Application") for mobile devices, which was developed by Obli (hereinafter referred to as "Service Provider") as a Freemium service. This service is provided "AS IS".
Legal Basis for Processing Your Data
The Service Provider processes your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
- Consent: When you use the Application and provide your information, you consent to the collection and processing of your data as described in this Privacy Policy.
- Performance of a Contract: Processing necessary to provide the service you requested, such as authentication and multiplayer functionality.
- Legitimate Interests: Processing for improving the Application, security, fraud prevention, and providing customer support.
Camera Access for QR Code Scanning
📷 Camera Permission Usage:
The Application may request access to your device's camera for the following specific purposes:
- QR Code Scanning: To scan QR codes containing room codes for joining multiplayer games
- Game Room Joining: Camera access allows you to quickly join friends' games by scanning their QR codes
Camera Usage Details:
- Camera is only accessed when you actively choose to scan a QR code
- No photos or videos are stored on our servers or your device
- Camera access is used only for real-time QR code detection
- You can decline camera permission and still use all other app features
- Camera access can be revoked at any time in your device settings
- The camera stream is processed locally on your device only
What we DON'T do with your camera:
- Store or save any images or video from your camera
- Upload camera content to our servers
- Use camera for any purpose other than QR code scanning
- Access camera in the background or without your explicit action
- Share camera data with third parties
What information does the Application obtain and how is it used?
User Provided Information
When you sign in with your Google account, the Application collects and stores:
- Your Google email address (for account identification and authentication)
- Your Google display name and profile picture
- Custom nickname and avatar you choose within the app
- Custom User ID (@username) for easy friend discovery
- Game statistics including wins, losses, draws, rankings, and MMR scores
- Game preferences and settings (sound, animations, difficulty preferences)
- Friend lists and social connections
- Competitive gaming data including rankings and match history
The Service Provider may also use the information you provided to contact you from time to time to provide you with important information, required notices, and promotional communications related to the game.
Automatically Collected Information
The Application may collect certain information automatically, including but not limited to:
- Your mobile device's unique device ID
- Your mobile operating system version
- App usage analytics and game session data
- Network connection status
- App performance data and crash reports to improve the application
- Anonymous gameplay statistics for game balancing and improvements
- Multiplayer game data transmitted through our relay servers
- Information about how you use the Application and interact with its features
Device Permissions
The Application may request the following permissions:
- Camera Permission (Optional): Used exclusively for QR code scanning to join game rooms. This permission is optional and only requested when you choose to use the QR scanner feature.
- Internet Access: Required for multiplayer functionality, authentication, and accessing online features.
- Network State: To detect internet connectivity and optimize the gaming experience.
- Storage Access: For storing game settings and offline data locally on your device.
Permission Control: All permissions are optional and can be managed through your device settings. Declining camera permission will not affect other app features.
Multiplayer Gaming and Data Transmission
For multiplayer games, the Application uses a relay server architecture:
- Game data is transmitted through our secure servers rather than directly between players
- Our servers relay game moves and messages between players in real-time
- Game session data may be temporarily stored on our servers during active games
- Player IP addresses are not shared with other players
- Game session data is automatically deleted after game completion
Multiplayer Data Processing:
- Game moves and actions are relayed through our servers for fair play
- Room codes and game invitations are processed by our servers
- Matchmaking data is processed to connect players fairly
Cloud Data Storage
The Application uses Google Firebase Firestore to store:
- User profiles and game statistics
- Friend lists and social connections
- Game invitations and matchmaking data
- Competitive rankings and leaderboards
- Premium subscription status
- Custom User IDs and profile information
- Achievement and title progress
All data is stored in accordance with Google's privacy policies and EU GDPR requirements.
Custom User Identification
The Application allows users to create custom usernames (@username) for:
- Easier friend discovery and social features
- Game invitations and matchmaking
- Leaderboard display
- Social sharing and community features
Custom Username Privacy: Custom usernames are public and can be searched by other users. Choose your username carefully as it will be visible to other players.
Competitive Gaming and Rankings
The Application tracks competitive gaming data including:
- Match Making Rating (MMR) and ranking information
- Win/loss statistics and game history
- Seasonal rankings and leaderboard positions
- Achievement and title progress
- Competitive match results and performance metrics
This data is used to provide fair matchmaking, competitive features, and seasonal rewards.
Third-Party Services and Libraries
The Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:
- Google Play Services
- Firebase Authentication
- Firebase Firestore Database
- Google Analytics for Firebase
- AdMob
- RevenueCat (for in-app purchases and subscriptions)
QR Code Processing Library
For QR code detection, the Application uses:
- jsQR Library: An open-source JavaScript library for QR code detection. This library processes camera data locally on your device and does not transmit any data externally.
- Library source: https://github.com/cozmo/jsQR
- The library is loaded from: jsQR CDN
Use of Cookies and Tracking Technologies
The Application uses cookies and similar tracking technologies through third-party services such as Google Analytics and AdMob to collect usage data and improve the service.
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout/.
Additionally, you can control cookies and tracking preferences via your device or browser settings.
Does the Application collect precise real-time location information of the device?
No. This Application does NOT collect any location information from your device. We do not track, store, or use your geographical location in any way. All game features function without requiring access to your device's location services.
Multiplayer and Social Features
The Application includes online multiplayer features that allow you to:
- Play games with other users around the world via our relay servers
- Send and receive friend requests using custom UserIDs
- Maintain a friends list and view friends' game statistics
- Participate in competitive ranking systems with MMR (Match Making Rating)
- Send and receive game invitations with custom game settings
- Share room codes via QR codes for easy game joining
UserID System: You can set a custom UserID that other players can use to find and add you as a friend. Your UserID can be changed once after account creation. UserIDs must comply with our community guidelines and cannot contain offensive or inappropriate content.
Privacy in Multiplayer: Other players can see your chosen nickname, avatar, game statistics, and rank, but they cannot see your email address or other personal information.
Data Security
Your personal information is protected by multiple security measures:
- Firebase Security Rules that restrict access to your personal data to you only
- Secure authentication via Google OAuth 2.0
- Encrypted data transmission for all multiplayer communications
- Regular security monitoring and updates
- Secure relay servers for multiplayer game data
Your Rights Under GDPR
If you are located in the European Union, you have the following rights regarding your personal data. To exercise these rights, please contact us at support@alignfour.it:
- Right of Access: Request a copy of the personal data we hold about you.
- Right of Rectification: Request correction of inaccurate or incomplete data.
- Right of Erasure: Request deletion of your personal data.
- Right of Portability: Request a copy of your data in a structured, machine-readable format.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Object: Object to our processing of your personal data.
- Right to Withdraw Consent: Withdraw your consent to data processing at any time.
Account Deletion and Data Retention
We provide a built-in option to delete your Align Four account at any time. You can delete your account directly in the app or request deletion via email. The details below meet Google Play’s account deletion policy by clearly explaining the steps, the data removed or retained, and applicable retention periods.
Delete your account in the app (recommended)
- Open Align Four and sign in.
- From the main menu, tap the profile icon at the top-right.
- Open the Account tab.
- Tap Delete Account in the account management section and confirm.
After confirmation, your account is immediately scheduled for deletion and you will be signed out.
Request account deletion via web/email
If you cannot access the app, you can request deletion by email using the link below:
Request account deletion by email
What will be deleted
- Account profile and the authentication link to your Google account
- Display name, avatar, custom nickname, and in-app UserID (@username)
- Friend list and social connections
- Game statistics, rankings (MMR) and titles
- Any other personal settings or preferences stored in your profile
What may be retained and why
- Security and anti-fraud logs: Retained for up to 30 days to ensure platform integrity.
- Server backups: Point-in-time backups may contain your data for up to 90 days and are automatically purged.
- Aggregated/anonymized analytics: Non-identifiable analytics about app usage may be retained indefinitely.
Retention timelines
- Account deactivation: Immediate upon confirming deletion.
- Removal from live systems: Within 30 days.
- Backup purge window: Within 90 days.
Note: Game session data is automatically deleted after each game completion. Leaderboard or seasonal summaries may be removed or anonymized so they no longer identify you.
Children
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.
If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information promptly upon discovery. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@alignfour.it.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any material changes by updating this page with the new Privacy Policy and, when appropriate, by sending a notification via email or within the Application. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
Your Consent
By using the Application, you are giving your consent to the Service Provider's processing of your information as set forth in this Privacy Policy now and as amended by us.