Effective date: September 7, 2026
Last updated: September 7, 2026
Controller: Charlie Software Development Center (“Charlie,” “we,” “us,” or “our”).
Contact: support@charliesdc.com
1. Data we collect and process
- Player name: the display name chosen for the game and, when ranking is enabled, shown publicly on the leaderboard.
- Internal Player ID: a randomly generated identifier used to distinguish the profile, connect results, answer support requests, and process deletion.
- Progress and ranking: scores, experience, player level, rank title, unlocked stages, selected ranking board, eligible weekly position, and ranking period.
- In-game shop activity: tools obtained or used, purchases made with gameplay score, inventory, and resulting balance. Gameplay score is not real money.
- Gameplay activity: stage, round result, correct and incorrect actions, duration, score changes, timer or rescue events, timestamps, app version, and signals needed to validate a result.
- Server and security data: IP address, request time, device or app signals, integrity or attestation result, rate-limit events, suspected replay attempts, and security logs when online services are used.
- Advertising data: Google AdMob may receive the app name, IP address, general location derived from IP, device and operating-system information, ad interactions, consent status, and an advertising identifier when the platform permits it and the required permission or consent has been obtained.
- Diagnostics: crash reports, performance information, app version, device model, operating-system version, error state, and technical logs.
- Support data: email address and any information, screenshots, or recordings voluntarily included in a support request.
2. Why we use the data
We use this information to save progression, manage stage and shop unlocks, operate rankings, validate scores and levels, prevent cheating and replay abuse, limit harmful traffic, serve and measure advertisements, honor consent choices, diagnose crashes, answer support requests, enforce our rules, and comply with legal or store obligations.
3. Public ranking information
When online ranking is available, the chosen player name, verified score, ranking position, weekly period, and selected board (ALL or one of the five stages) may be visible to other players. Do not use a real full name, email address, phone number, or other contact information as a player name. Internal Player IDs, IP addresses, integrity results, inventories, and security logs are not intended to be public.
4. Service providers and disclosures
Limited data may be processed by Cloudflare for hosting, database, network delivery, and security; by Google AdMob for advertising; by Google Play services on Android; by Apple platform services on iOS; and by crash or diagnostic services included in the final release. We may also disclose data when legally required or reasonably necessary to protect players and the service.
Read How Google uses information from apps that use its services and the Google Privacy Policy.
5. Advertising choices
Advertising identifiers are used only when allowed by the device, platform rules, and the player's consent choice. If personalized ads are not permitted, ads may still be shown contextually or in a restricted form and data may still be used for delivery, measurement, security, and fraud prevention. iOS tracking permission will be requested where legally and technically required. Child-appropriate treatment and non-personalized or restricted ads will be used where applicable.
6. Age recommendation and minors
FAST POP is recommended for ages 13+. Players under 13 are not part of the intended audience, and online ranking participation is disabled for anyone identified as under 13. The game does not provide public chat, precise-location sharing, user photographs, or profile biographies. A parent or guardian may request review or deletion of a minor's information.
7. Retention periods
- Active profile, level, and inventory: retained while the online profile remains active.
- Weekly ranking: ALL and stage-specific results are displayed for the active period; validated records may be retained for up to 90 days for fraud review and disputes.
- IP and security logs: normally retained for up to 90 days, or longer only when necessary to investigate abuse, protect the service, resolve a dispute, or meet a legal duty.
- Crash and diagnostic records: normally retained for up to 12 months.
- Support correspondence: normally retained for up to 24 months after resolution.
- Deleted profile data: active records are scheduled for deletion within 30 days after verification; residual backup copies may remain for up to 30 additional days.
- AdMob data: retained by Google under Google's own policies and controls.
8. Security
Online requests are designed to use HTTPS, short-lived session tokens, replay protection, rate limits, input validation, server-side score checks, Google Play Integrity on supported Android builds, and Apple App Attest on supported Apple builds. Security controls reduce risk but cannot guarantee absolute security.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a copy of personal data. You may change advertising choices through the game's consent controls or device settings where available. We may ask for the Player ID and limited verification information so we act on the correct profile.
10. Changes and contact
We will revise this policy when a material data practice, provider, account feature, or online service changes. The updated date will appear above. Questions may be sent to support@charliesdc.com.
