Who we are and what this covers
The Zylos games are published by Zylos TechSolutions LLP (“we”, “us”). This policy covers the Zylos account that every one of the Zylos games shares (including signing in with Google), and this website, games.zylostechsolutions.com.
Each app also has its own privacy policy that lists exactly what that app uses on your device, its permissions, ads and backup. Those policies are part of this one and are linked under “Each app's own policy” below.
Information we receive when you sign in
- Signing in is optional: every app works without an account. You can sign in with Google, email and password, or as a guest.
- With Google sign-in we receive, from your Google account, only your name, email address, profile-photo link and a Google account identifier. We ask Google for these basic profile scopes only (
openid,email,profile). We never get your Google password, contacts, files, Gmail, calendar or any other Google data. - With an email account we receive your email address and the name you enter, if any; your password is handled by Firebase Authentication and we never see it. As a guest you get an anonymous user ID only, with no name or email.
- Firebase Authentication gives every account a random user ID. We also record the sign-in method and when your profile was last updated.
How we use it
- To create your Zylos account, keep you signed in, and show your name and photo in the app's Settings → Account.
- To save and restore the optional cloud backup of each app you use while signed in, so you can move to a new phone. One Zylos account works across the Zylos games; each app keeps its own separate backup.
- To reply if you contact us, and to delete your account when you ask.
- We do not use your Google data for advertising, we do not use it to build profiles, we never sell it, and we do not share it with ad networks. People at our company do not read it, except when you ask us for help, for security reasons, or when the law requires it.
- Google API Services. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Where it is stored and who processes it
- Your account and backups are stored in Firebase Authentication and Cloud Firestore, run by Google LLC as our service provider (Firebase project
zylos-games-tsl; Firestore region asia-south1 (Mumbai, India)). - Security rules let only you, the signed-in owner, read or write your profile and backups. Other users cannot see them.
- All connections use encryption in transit (HTTPS/TLS), and Google encrypts the stored data at rest.
- We run no servers of our own and share your account information with no one else. If the law requires us to disclose information, or if the business is transferred, we would do so only as the law allows and would update this policy.
Keeping and deleting your account
- Your account and backups are kept until you delete them. Delete them at any time at games.zylostechsolutions.com/delete-account or in an app's Settings → Account → Delete account. This removes your sign-in, your profile and every Zylos backup at once, right away; copies in Google's encrypted system backups expire within Google's standard backup cycle.
- Signing out keeps your backup for your next sign-in. A guest account can't be recovered after signing out.
- You can also remove our access in your Google account at myaccount.google.com/permissions; that stops future sign-ins but does not delete your Zylos account, so delete it as well if you want the data gone.
This website
- This site is hosted on Firebase Hosting (Google). Like any web server, Google receives your IP address, browser and the page requested in order to deliver the page and keep the service secure.
- The site has no ads, no analytics, no tracking and no cookies. Pages download the current company name and contact email from Firebase Remote Config and keep a copy in your browser's local storage so the next visit is faster; it contains no personal information.
Each app's own policy
The apps themselves also use Google AdMob for ads (with Google's consent form where required), Firebase Analytics and Crashlytics, Remote Config and push notifications to topics. What each one collects, and why, is in its own policy:
Children
- Signing in is optional. We do not knowingly collect personal information from children under 13 (or the minimum age in your country) through a Zylos account. If you believe a child has created a Zylos account, contact us and we will delete it, or delete it at games.zylostechsolutions.com/delete-account. Each app's policy says who that app is made for.
Your rights
- Depending on where you live (for example under the GDPR, UK GDPR, India's DPDP Act or US state privacy laws), you may have rights to access, correct, export or delete your personal information, to object to or restrict its processing, and to withdraw consent.
- You can see your account in an app's Settings → Account and delete it yourself at games.zylostechsolutions.com/delete-account. For anything else, including a copy of your account data, email us. You may also complain to your local data-protection authority.
Changes to this policy
- If our data practices change, we will update this page and the date at the top before the change takes effect. Significant changes will also be noted in the apps' release notes.
Contact
Questions or requests: support@zylostechsolutions.com. If you email us, we receive your email address and whatever you write; we use it only to reply and delete it when the conversation is finished.
Publisher: Zylos TechSolutions LLP.