Privacy Policy – Crack the Vault

1. Who we are

Crack the Vault (in Hebrew: לפצח את הכספת) (“the app”, “we”, “us”). This policy explains how the Android app handles information. For questions, see Contact.

2. About the app

Crack the Vault is a logic puzzle game: you deduce a secret 3–5 digit code from exact clues. It includes 500 levels, Endless Mode, a Daily Challenge, achievements, statistics, optional hints and settings. Puzzles are played offline. An internet connection is used only for ads, for the ad consent form, and when you choose to open a link such as this policy.

3. Data we collect

We, the developer, do not operate a server for this app and do not collect, receive or store personal data about you. The app has no account or sign-in, no in-app purchases, no analytics or crash-reporting tools of our own, and does not use Firebase.

Ads in the app are provided by Google, which collects some data directly through its software development kit (SDK). That is explained in section 5.

If you email us, we will receive your email address and whatever you choose to write. We use it only to reply and keep it only as long as needed for that purpose.

4. Data stored on your device

The app saves the following information locally on your device so the game works. It is not sent to us.

• Game progress: opened vaults, stars and best times.
• Daily Challenge results and your daily streak.
• Statistics and the history of hints you have used.
• Settings: language, sound, vibration and reduce motion, plus whether you have completed the tutorial.
• A random number created on installation, used only to vary the puzzles generated in Endless Mode. It is not linked to you or your device identity and never leaves the device through our app.

Google's ad and consent SDKs also store some information on your device, such as your consent choices, so that they work correctly.

5. Advertising and Google's ad SDK

The app uses the Google Mobile Ads SDK (Google AdMob) to show ads and Google's User Messaging Platform (UMP) to request ad consent where required. The app shows:

• Rewarded ads, only when you choose to watch one to unlock a hint. Your first hint is free and you never have to watch an ad to keep playing.
• Interstitial (full-screen) ads, only between puzzles and not during a puzzle or the tutorial.

What Google's ad SDK collects

According to Google's data disclosure for the Google Mobile Ads SDK, the SDK automatically collects and shares the following data:

Google states that this data is used for advertising, analytics and fraud prevention, and that it is encrypted in transit. Google may also use information from apps that use its services as described in How Google uses information from sites or apps that use our services and in the Google Privacy Policy. Google's handling of this data is governed by Google's own policies, not by us.

Personalized and non-personalized ads

Personalized ads are based on information such as your interests and past activity. Non-personalized ads are based on more limited context, such as the app itself and your general (not precise) location. Depending on your choices, your region and your device settings, Google may show you personalized, non-personalized or limited ads. Learn more in How Google uses cookies and similar technologies in advertising.

6. Consent and your ad choices

Where it is required (for example in the European Economic Area, the United Kingdom and Switzerland, and, where we have enabled it, certain U.S. states), the app shows Google's consent message after the tutorial. You can accept, decline or manage your choices.

When privacy options are available for your region, you can review or change your choices at any time in the app under Settings → Privacy choices (ads). If your choices mean ads cannot be requested, the game still works; only hints unlocked through ads become unavailable.

You can also manage ad personalization for your Google Account at My Ad Center.

7. Your advertising ID

Android provides a resettable advertising ID. On most devices you can reset or delete it in Settings → Privacy → Ads (menu names vary by device and Android version). Deleting it stops apps from accessing it for advertising; resetting it replaces it with a new random ID. Some devices also offer ad privacy settings for the Android Privacy Sandbox in the same area.

8. Android permissions

The app does not ask you for runtime permissions such as location, camera, contacts or storage. The installed app includes the following permissions, which are added by Google's ad SDK and Android libraries:

• Internet access and network state: to load ads and the consent form.
• Advertising ID (com.google.android.gms.permission.AD_ID): lets the ad SDK read the advertising ID.
• Android ad services (ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS): let the ad SDK use Android's Privacy Sandbox advertising features where the device supports them.
• Wake lock and foreground service: required by the Android WorkManager library that the ad SDK uses for background tasks. The app itself does not run a foreground service.

9. Children

We do not knowingly collect personal information from children, and the app itself does not collect personal information from anyone. Ads in the app are served by Google, which collects the data described in section 5. If you are a parent or guardian and have questions or concerns, please contact us. Parents can also use Android and Google Play features such as Google Family Link to manage a child's device.

10. Data retention and deletion

• Our servers: we have none, so we keep no copy of your game data.
• On your device: game data stays until you choose Settings → Reset progress (which deletes progress, stars, the daily streak, statistics and hint history), clear the app's data in Android settings, or uninstall the app.
• Google: data collected by Google's ad SDK is retained according to Google's policies. See the Google Privacy Policy and How Google retains data.

11. Device backup

The app allows Android's backup feature to include your game progress and settings, so they can be restored if you set up a new device. If backup is turned on in your device settings, Android may store this data in your Google Account backup or move it during a device-to-device transfer, under Google's terms and your device settings. Data stored by the ad and consent SDKs is excluded from backup. You can turn backup off in your device's settings.

12. Sharing and links

We do not sell or share your personal data, because we do not receive any. Apart from the ad SDK described above, the app sends information only when you choose to:

• Share a Daily Challenge result: the app opens Android's share menu with a short, spoiler-free text (date, time taken, attempts, hints and streak). You decide whether and where to send it.
• Open this privacy policy: it opens in your browser. The page is hosted on GitHub Pages; GitHub may log visitors' IP addresses for security purposes under the GitHub General Privacy Statement. This page uses no cookies, analytics or tracking scripts.

13. Security

Because we do not collect your data, there is no copy of it on our side to protect or lose. Game data on your device is protected by Android's app sandbox. Google states that the data its ad SDK collects is encrypted in transit. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

14. Your rights

Depending on where you live, privacy laws such as the EU and UK General Data Protection Regulation (GDPR), Israel's Protection of Privacy Law, 5741-1981, and U.S. state privacy laws may give you rights over your personal data. These can include the right to access, correct or delete it, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority.

• We do not hold personal data about you, so in most cases there is nothing for us to access or delete. Your game data is on your device and you can delete it as described in section 10.
• For data collected by Google through the ad SDK, use your ad choices in the app (section 6), your device's ad settings (section 7), and Google's tools described in the Google Privacy Policy.
• You can always contact us, and we will help as far as we are able.

15. Changes to this policy

We may update this policy, for example if the app or the services it uses change. We will post the updated version on this page and change the effective date at the top. If a change is significant, we will also take reasonable steps to let you know, for example through the app's release notes.

16. Contact

Email: manextapps@gmail.com