Privacy
Your game, your choices
Miskuli is a marble game with offline practice, an online collection and online matches. This notice covers Miskuli 2.0 and its connected services. Offline practice does not require an account. Online features require an internet connection and sign-in; availability can vary by platform and service capacity.
Who is responsible
Omer Faruk Bozkurt operates Miskuli. For privacy questions, access, correction or deletion requests, contact ofb_90@icloud.com. We may need to verify that the account belongs to you. Never send a password or verification code.
Information on your device
The app stores language, sound, accessibility and gameplay preferences, local progress, and privacy choices. Account credentials and pending-operation recovery records use the platform secure store. Removing the app can remove local progress; secure storage and device backups follow the operating system’s behavior.
Accounts and security
You can use the sign-in options offered on your device: Apple, Google, or email and password. Firebase Authentication processes your sign-in information and assigns an account ID. Miskuli’s game server does not store your plaintext password. Google/Firebase and Apple process app and device integrity signals to help reject modified apps, fraudulent requests and abuse. Account or age-eligibility signals are used for game access where available; an operating-system age signal is not supplied to our advertising or analytics integration.
Online play and collection
We process your account ID, chosen display name, preset avatar, friend code, virtual marble collection and selections, reward and exchange records, match participants, shot commands and results, and operation timestamps. These records provide the game, recover interrupted actions and prevent duplicate rewards or inconsistent ownership. Private matchmaking information can include an internal skill estimate and recent match activity. Virtual marbles have no cash redemption value.
Optional notifications
If you enable notifications in Miskuli and allow them in your device settings, Google Firebase Cloud Messaging and Apple Push Notification service deliver supported friend, invitation and match notices. Registration associates your game account with a device notification token, platform, time zone, notification preferences and registration time. The service also uses limited delivery and duplicate-prevention records. These details route notices, apply quiet periods and avoid sending repeated or outdated notices. You can change notification categories or turn off notifications for this device in Miskuli; system permission is also controlled in device settings. Turning them off in the game removes this device’s registration. Notification delivery is not guaranteed, and the in-app inbox remains available.
Advertising
Miskuli uses Google AdMob for optional rewarded ads and ads at selected breaks. The Google Mobile Ads SDK can process IP address (including approximate location derived from it), ad interactions, diagnostics, and device or account identifiers for advertising, measurement and fraud prevention. Availability and processing depend on consent, age treatment, device settings and region. A reward request also sends a game account ID and a one-use reference so our server can verify the reward. We do not send your email, password, contacts or precise location to an ad request. When age is unknown, our integration requests non-personalised, general-content ads and applies under-age-of-consent treatment. Privacy choices are available in Settings → Privacy when required by the consent system.
Analytics, diagnostics and service logs
Firebase Analytics and Crashlytics collection is disabled in this release. This does not disable essential authentication, integrity checks or the advertising SDK’s own processing. Our online providers process connection data such as IP address, request time and error references to operate and secure the service. Support email contains the information you choose to send.
Reports you choose to record and share
You can start and stop a local performance report in the app. It can contain device model, operating system and app version, elapsed time, frame timing, memory, battery and thermal readings where available, and game screen, phase and input counts. The report is kept on your device and is not automatically uploaded. The native Share action sends it only to the destination you choose. Our report format does not include your account ID, sign-in credentials or notification token. If you choose to send a report or screenshot to support, we process it to investigate your request; review what you share first.
How long information is kept
Active account, collection and friendship records are kept while needed to provide your account. Closed online match records are scheduled for cleanup after 90 days; shot/replay and operation-receipt records generally after 30 days. Closed rooms are scheduled after 30 days and matchmaking search records after 7 days from their expiry or creation. Expiry makes a record eligible for asynchronous cleanup; it does not mean instantaneous erasure. Security, moderation, virtual-ownership, reward-verification and deletion-audit records can be kept longer to prevent repeated fraudulent rewards, preserve other players’ ownership and resolve disputes. These records do not all have an automatic deletion deadline. Account deletion replaces personal account references in retained game history with a pseudonymous identifier; this is not a claim of complete anonymisation. Provider logs and backups follow the providers’ own retention processes.
Delete your account
In the app, open Settings → Privacy → Delete account, verify the same account, and confirm. Active obligations are settled before the sign-in identity, profile, friendships and account notification registrations are removed. Apple sign-in authorisation is revoked as part of the Apple-account flow. The app shows completion only after server confirmation. Retained security and ownership records are described above. You can also request deletion without reinstalling the game: Request account deletion by email. See the deletion instructions.
Providers, sharing and locations
Google/Firebase provides authentication, integrity, database, hosting, advertising and notification services; Apple provides platform sign-in, integrity and push notification services. Our game API and physics service run in Google Cloud’s europe-west1 region. Provider services can process information in other countries. Other players receive the profile and match information described above. We do not sell account records. See Firebase privacy information, Google’s privacy policy and Apple’s privacy policy.
Children and permissions
Use of connected features is subject to the age requirements and parental authorisation that apply where you live. The game does not need access to contacts, camera, microphone or precise location. Parents can contact ofb_90@icloud.com about a child’s information or request its deletion. Advertising treatment is described above.
This website
These support pages use no JavaScript analytics, advertising or page-set cookies. Firebase Hosting processes normal connection information to deliver the pages. Sending an email or following an external link uses that provider’s services.
Friends and other players
Your display name, preset avatar and friend code are visible where a friendship, invitation, code lookup or shared match requires them. The service records requests, friendships, invitations, blocks, preset emotes and reports. Reports contain selected reasons and related account or match references. There is no free-text player chat, custom photo upload or voice chat. Friend requests and invitations appear in the app. Optional system notifications are described below.
If you arrive through an invite link, the inviting player’s account is linked to yours and the service records whether you have played a first player match; this is used only for the cosmetic invite reward (a shooter-marble glass) you both receive. The invite page (miskuli-play.web.app) stores nothing. On Android, the app reads only the invite code from Google Play’s install referrer; an invite link on the clipboard is read only when you tap Paste. These records are deleted when your account is deleted.