Dopa Arcade Privacy Policy

Effective date: August 6, 2026
Last updated: August 8, 2026

This Privacy Policy explains how Dopa Arcade collects, uses, stores, shares, protects, and deletes information in connection with the Dopa Arcade mobile application and related web pages.

1. Service and Contact

Operator and data controller: the same individual or legal entity identified as the developer or seller for Dopa Arcade in the applicable app-marketplace developer and merchant profile (the "Operator," "we," "us," or "our")
Service name: Dopa Arcade
Privacy contact: hesety00@gmail.com
Privacy Policy URL: https://dopamine-booster-app.web.app/privacy.html
Account Deletion URL: https://dopamine-booster-app.web.app/account-deletion.html

2. Age Requirement

Dopa Arcade is intended for users who are at least 18 years old. If the minimum lawful age in your country or region is higher, that higher age applies. The Service is not directed to minors, and we do not knowingly collect personal information from anyone under 18.

3. Information We Collect

• Apple or Google sign-in information, including provider user ID, email address, display name, and profile photo when the selected provider supplies it.
• Account information, including internal user ID, provider, account status, language setting, sign-in status, and account creation or update dates.
• Legal acceptance records, including the Terms and Privacy Policy versions presented, acceptance method, and local or server timestamp.
• Gameplay information, including scores, coins, gold bars, play counts, streaks, game progress, achievements, rewards, preferences, and game results.
• In-app purchase information, including product ID, app account token, purchase token, order ID, transaction and original transaction IDs, purchase status, subscription status, consumption status, refund or cancellation status, and purchase verification results.
• Advertising information processed by Google AdMob, such as advertising ID, IP address, approximate region, device information, ad impressions, clicks, interactions, frequency, and fraud-prevention signals.
• Device, technical, diagnostic, and security information, such as app version, operating system version, device model, language, approximate region, error logs, crash logs, performance data, and suspected abuse or tampering signals.
• Support information if you contact us, including your email address, account identifier, message content, screenshots or files you voluntarily send, and records of our response.

Dopa Arcade does not intentionally collect precise GPS location. Camera and microphone games are not currently included in the production app. We do not receive or store your Apple or Google password, full payment-card number, bank account number, or full app-marketplace payment credentials.

4. Firebase and Service Providers

Dopa Arcade currently uses Google Firebase services, including Firebase Authentication, Firestore, Cloud Functions, and Firebase Hosting.

We also use Apple StoreKit and Google Play Billing for in-app purchases, and Google AdMob for advertising. These providers may process information under their own privacy policies and legal obligations.

5. How We Use Information

• To sign users in with Apple or Google and automatically create a Dopa Arcade account when needed.
• To provide gameplay, save progress, maintain scores, and manage coins, gold bars, rewards, and Premium status.
• To verify Apple App Store or Google Play purchases, prevent duplicate credits, restore purchases, process refunds or reversals, and prevent purchase fraud.
• To show and manage advertisements, including frequency control, ad fraud prevention, and consent or privacy choices where required.
• To diagnose errors, improve performance, protect accounts, detect abuse, enforce the Terms of Service, and comply with legal or platform obligations.
• To establish, exercise, or defend legal claims; preserve evidence; respond to lawful process; and complete a merger, financing, reorganization, or transfer of the Service subject to applicable safeguards.

6. Advertising and Privacy Choices

Dopa Arcade may show ads through Google AdMob. AdMob may process advertising identifiers, IP address, approximate location derived from technical data, device information, ad impressions, clicks, and fraud prevention data. Dopa Arcade configures its Google Mobile Ads requests for restricted data processing and non-personalized advertising. This means we do not ask Google to select ads based on a user's prior behavior or interests. Contextual information, including the app content and a coarse location derived from an IP address, may still be used to serve, measure, limit the frequency of, and protect non-personalized ads.

Where a privacy message is required, Dopa Arcade requests current consent information through Google's User Messaging Platform before making an ad request. The Account screen provides an "Ad privacy settings" entry point whenever the platform reports that one is required, so a user can review or change an available choice. UMP may store and communicate applicable Global Privacy Platform (GPP) signals to Google and participating ad partners. Dopa Arcade does not override a Global Privacy Control (GPC) signal that Google receives and applies to an ad request.

7. Purchases and Virtual Currency

Gold bars, coins, points, rewards, and similar items are virtual items used only inside Dopa Arcade. Server-side records are the authoritative records for logged-in account balances. Local storage may be used as a temporary cache and may not represent the final server balance.

8. Sharing

We do not sell personal information for money. We also do not use or disclose personal information for cross-context behavioral advertising. Limited information is disclosed to Google and its service providers to provide authentication, hosting, purchase processing, restricted and non-personalized advertising, measurement, security, fraud prevention, and legal compliance. Information may also be disclosed to professional advisers, authorities where required by law, or another party at your direction. Information may also be transferred as part of a proposed or completed financing, reorganization, merger, sale, or transfer of the Service, subject to applicable law and confidentiality safeguards. We do not use a third-party mobile advertising mediation SDK in the production app.

9. Data Retention

• Account and gameplay data are generally retained while the account remains active.
• Purchase, payment, cancellation, refund, and chargeback records are generally retained for at least the period reasonably needed for verification, tax, accounting, fraud prevention, legal claims, and platform compliance, which may be five years or longer.
• Customer support, complaints, and dispute records are generally retained while needed to resolve the matter, preserve evidence, enforce rights, or comply with law, which may exceed three years.
• Advertising records required for compliance may be retained for a reasonable legal or operational period.
• Security and anti-fraud records may be retained as reasonably necessary to prevent repeated abuse or protect the Service.
• Backups may remain until overwritten or deleted through normal backup cycles.

Retention periods are operational estimates, not promises to delete a record on a fixed date. We may retain information longer where reasonably necessary for a legal hold, unresolved dispute, security investigation, fraud prevention, tax or accounting duty, platform requirement, or other lawful purpose, and may delete or de-identify it earlier where permitted.

10. Account Deletion

You may delete your account in the app from Account > Delete account, or request deletion through the account deletion page. Deleting the app from your device does not delete the server-side account.

Account deletion may permanently delete or make inaccessible account information, game progress, scores, achievements, preferences, rewards, coins, unused gold bars, and related gameplay information. Limited records may be retained where necessary for legal, payment, refund, accounting, tax, security, fraud-prevention, dispute, or platform compliance purposes. An App Store transaction identifier or Google Play purchase token, order identifier, and one-way hash of the previously linked account identifier may also be retained so a still-valid Permanent Ad Removal purchase can be restored after the user creates and links a new Dopa Arcade account. These retained purchase records are not used to recreate deleted gameplay or profile data.

11. Security

We use reasonable safeguards such as authentication controls, server-side authorization, database access rules, encrypted network transmission, purchase verification, transaction deduplication, and access controls. No electronic system can be guaranteed to be completely secure.

12. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain information. Requests may be sent to hesety00@gmail.com. We may require reasonable verification before processing a request. We may request information reasonably necessary to verify identity, authority, account ownership, or the scope of a request. We may deny, limit, or charge for a request only where applicable law permits, such as when a request cannot be verified, is manifestly unfounded or excessive, conflicts with another person's rights, or concerns information we must retain.

13. United States State Privacy Notice

This section supplements the rest of this Policy for residents of U.S. states with applicable privacy laws, including California. During the preceding 12 months, the categories of personal information described in Section 3 may have included identifiers, account and profile information, purchase records, internet or electronic activity, approximate location, and device or diagnostic information. We obtain this information from you, your device, Google services, and your interactions with Dopa Arcade. We use and disclose it for the business purposes described in Sections 5, 6, and 8.

This notice is provided to describe our practices and honor rights where applicable. It is not an admission that the Operator meets every revenue, volume, nexus, or other statutory threshold under the law of any state. Nothing in this Policy waives a non-waivable privacy right or expands a private right of action beyond what applicable law provides.

Subject to applicable law, you may request access to, correction of, deletion of, or a portable copy of covered personal information. You may also request information about covered categories, sources, purposes, and recipients. We will not discriminate against you for exercising an applicable privacy right. We may verify a request and may deny or limit a request where the law permits or requires us to retain information.

Dopa Arcade does not knowingly sell or share the personal information of anyone under 16 and is not intended for anyone under 18. Because ad requests are configured for restricted data processing and non-personalized treatment, Dopa Arcade does not use personal information for targeted or cross-context behavioral advertising. Where Google makes a U.S. state privacy option available, you may also open Account > Ad privacy settings and submit the available opt-out signal.

Browser "Do Not Track" signals do not have a uniform legal or technical standard and are generally not passed to a native Android app. Where an applicable GPC signal is received and supported by Google for an ad request, Google states that it activates restricted data processing. Dopa Arcade independently applies restricted data processing to its ad requests regardless of that signal.

14. Changes and Notice

We may update this Privacy Policy to reflect changes to the app, providers, data practices, legal requirements, or platform rules. The updated policy will state its effective date. Material changes will be communicated through a prominent in-app notice, an account notice where available, or another method reasonably designed to reach affected users before the change takes effect when required by law.

15. Contact

Privacy questions, complaints, and requests may be sent to hesety00@gmail.com.