Privacy Policy

This Privacy Policy applies to the mobile application Don't Cross the Lines (Android package name com.varlextech.dctl, the "App"), developed and published by Varlextech Limited ("Varlextech Limited", "we", "us", or "our"). It explains what information the App handles, how it is used, the third-party services integrated into the App, and the choices you have.

By installing or using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Summary

• The App is anonymous by design — no account, sign-up, or login. Your data is tied only to a random install ID generated on first launch, which is not linked to your identity.
• Game progress is stored on your device and, if you are online, synced to our backend (a Cloudflare Worker) so it can be restored and kept in sync.
• The App shows advertising via Google AdMob and processes optional in-app purchases via Google Play Billing. These services may collect device and usage data under their own privacy policies, as detailed in Section 4.
• You can delete all locally stored data by clearing the app's storage or uninstalling it; doing so permanently severs the link to your anonymous install ID.

2. Information stored on your device

The App saves the following data locally on your device (in app-private storage) so the game can function and remember your progress:

• Anonymous install ID — a random identifier generated on first launch, used to key your cloud save. It is not derived from and cannot be linked back to your real identity.
• Game progress — unlocked levels, stars earned, scores, challenge-mode records, and daily-challenge state.
• Settings — sound and haptic (vibration) preferences.
• Virtual items — your coin balance and hint-related state.
• Purchase entitlements — a flag recording whether the "Remove Ads" purchase is active.

3. Information our servers receive

To provide cloud save sync and purchase verification, the App communicates with a backend operated by Varlextech Limited (a Cloudflare Worker at dcl-backend.kuthreecar.workers.dev). It receives:

• Your anonymous install ID (sent as a request header), used solely to look up your save data.
• Save snapshots — the same progress data listed in Section 2, stored in an isolated Cloudflare key-value store so your progress can be restored or synced.
• Best scores — high scores may be recorded per install ID for records and future leaderboard features.
• Coarse usage events — anonymous events such as "level completed" (level number, moves, score, stars) used to balance difficulty. No message content or personal data.
• Purchase tokens — when you buy something, the store receipt token is forwarded to our backend only so it can be validated with Google Play. We never see or store payment card details.
• Integrity tokens — a Google Play Integrity token may be sent to verify the App is a genuine install from Google Play.

Server-side records are keyed only by the anonymous install ID and are retained for up to 400 days.

4. Third-party services

The App integrates the following third-party services. Each acts as an independent data controller and processes data under its own privacy policy.

4.1 Google AdMob (advertising)

The free version of the App displays banner, interstitial, and opt-in rewarded ads provided by Google AdMob (Google LLC). To serve and measure ads, prevent fraud, and cap frequency, the AdMob SDK may collect and process:

• Device identifiers, including the Android Advertising ID (AAID)
• IP address, from which coarse (city-level) location may be inferred
• Device and app information (model, OS version, screen size, app version)
• Ad interaction data (impressions, taps, rewarded-ad completions)
• Diagnostic and crash data related to the ad SDK

Your controls. You can limit ad personalization or reset/delete your Advertising ID at any time via your device settings (Android: Settings → Privacy → Ads). Rewarded ads are always optional — they are only shown if you choose to watch one for a hint. The Remove Ads purchase disables banner and interstitial advertising entirely.

• Google Privacy Policy: https://policies.google.com/privacy
• How Google uses information from apps: https://policies.google.com/technologies/partner-sites
• Google's advertising technology partners: https://support.google.com/admob/answer/9012903

4.2 Google Play Billing (payments)

All payments are processed entirely by Google Play under its own terms and privacy policies. Varlextech Limited never sees or stores your payment card information — our backend only receives the purchase token needed to verify and grant your purchase.

• Google Play Terms: https://play.google.com/about/play-terms/

4.3 Google Play Integrity (app integrity)

The App may request a Play Integrity token to confirm it is running as a genuine, unmodified install from Google Play. The token is verified via Google's Play Integrity API through our backend.

4.4 Cloudflare (hosting)

Our backend runs on Cloudflare Workers and stores data in Cloudflare KV. Cloudflare processes requests (including your IP address, technically necessary to deliver any network response) under its own privacy policy.

• Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/

5. Information Varlextech Limited does not collect

We do not ourselves collect, request, or have access to:

• Your name, email address, phone number, or contacts
• Account credentials (the App has no sign-up or login)
• Precise location, photos, microphone, camera, or files
• Payment card details (all payments are processed by the app store)

6. How information is used

• Core gameplay — saving progress, scores, settings, and virtual items on your device.
• Cloud sync — backing up and restoring your progress via the anonymous install ID.
• Advertising — displaying ads, measuring ad performance, and preventing ad fraud (AdMob).
• Purchases — completing transactions, granting purchased items, and restoring purchases across reinstalls.
• Integrity — verifying the App is a genuine install to protect the service from abuse.
• Game balancing — coarse, anonymous usage events to tune level difficulty.

For users in the EEA/UK, the legal bases are: performance of the contract (providing the game, sync, and purchases you request), legitimate interests (fraud prevention, app integrity, and game balancing), and your consent or device-level choices (advertising personalization).

7. Data sharing and sale

Varlextech Limited does not sell your personal information and does not share data with third parties for their own marketing. The only disclosures are the automatic transmissions made by the embedded SDKs and services listed in Section 4, which are necessary to show ads, process purchases, and operate the backend. Under some US state privacy laws (e.g., California's CCPA as amended by the CPRA), sharing an advertising identifier with an ad network for personalized advertising may be considered "sharing" for cross-context behavioral advertising — you may opt out as described in Section 9.

8. Data retention and deletion

Local data remains only on your device and is erased when you clear the App's storage or uninstall it. Server-side records keyed to your anonymous install ID are retained for up to 400 days, after which they expire automatically. Because server records are keyed only by the anonymous ID, clearing the app's data permanently severs the link — remaining records can no longer be attributed to you. You may also contact us at varlextechltd@gmail.com to request deletion.

9. Your rights and choices

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent.

• Delete your data: uninstall the App or use "Clear data"/"Clear storage" in your device's app settings — this removes all locally stored progress and severs the anonymous ID link.
• Control ad personalization: use your device's advertising settings (Settings → Privacy → Ads) to opt out of personalized ads or reset your Advertising ID at any time.
• Opt out of "sharing"/sale (US states): we do not sell personal data; to opt out of any ad-identifier sharing, disable ad personalization in your device settings.
• Disable sync: play offline — cloud sync only runs when the App can reach the network.
• Contact us: for any privacy request (access, deletion, questions), email varlextechltd@gmail.com. We respond within a reasonable time and will not discriminate against you for exercising your rights.

EEA/UK users may also lodge a complaint with their local data protection authority.

10. Children's privacy

Don't Cross the Lines is intended for a general audience and is not directed at children under 13 (or the applicable age of digital consent in your region). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App's third-party services, please contact us at varlextechltd@gmail.com and we will work with the relevant provider to delete it.

11. Security

All communication between the App and our backend uses HTTPS (encrypted in transit). Save data on your device is protected by the OS sandbox, and server-side snapshots live in an isolated Cloudflare key-value store keyed by the anonymous install ID. No method of transmission or storage is 100% secure, but we minimize data collection by design — the App works fully anonymous, with no accounts and no direct identifiers.

12. International data transfers

Third-party providers such as Google and Cloudflare may process data on servers located in the United States and other countries. Where required, such transfers are covered by the safeguards described in those providers' privacy policies (e.g., Standard Contractual Clauses or adequacy frameworks).

13. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted at this URL with an updated "Effective date". Your continued use of the App after changes take effect constitutes acceptance of the revised policy.

14. Contact us

If you have questions about this Privacy Policy or the App's data practices, contact:

Varlextech Limited
Email: varlextechltd@gmail.com