Privacy Policy

This Privacy Policy explains what data the MASA mobile game for Android (package name win.starfleet.masa, the “App”) collects, why it collects it, who it is shared with, how long it is kept and how you can have it deleted.

Please read it together with our Terms of Service. By downloading or using the App you accept the practices described here.

The short version. MASA has no sign-up. There is no account to create, no email address to give, no password and no social login. The App can be played from the first second, offline, without sending anything anywhere. If you choose to compete on the leaderboards, the App creates an anonymous entry identified by a random number it generates on your device — and that, plus the runs you upload, is all we hold.

1. Who we are

The App is developed and operated by Adrian Duardo, an individual developer (“we”, “us”). For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the data controller for the data described in this policy.

You can reach us at any time at aduardoyanes@gmail.com. This is also the address for privacy questions, data access requests and deletion requests.

This policy covers the Android App and the leaderboard server behind it. It does not cover third-party services you reach from outside the App, such as the Google Play Store, which are governed by their own privacy policies.

2. Data at a glance

The table below is a summary. The detail — including what we deliberately do not collect — follows in sections 3 and 4.

3. What we collect

3.1 The leaderboard account

MASA has no registration. We never ask for, and never receive, an email address, a phone number, a real name, a password or a social media account. There is no Google Sign-In, no Facebook login and no “continue with” button of any kind.

The first time the App contacts the leaderboard server, it generates a random identifier on your device — a UUID produced by the operating system's cryptographic random number generator — stores it locally under the key masa.dispositivo.v1, and sends it to us. We use it to create an anonymous player record and to recognise the same player on later runs. It is a random number: it is not your Android Advertising ID, not your IMEI, not your device serial number and not derived from any hardware or account identifier. It tells us nothing about you or your device.

Together with that identifier we store a display name, which the server generates automatically from it — a noun, an adjective and a three-digit number, in Spanish. You do not choose it and the App does not let you type one, so no name on the leaderboard can contain anybody's personal data.

We also store the date and time the record was created, and issue your device a sign-in token so that later uploads do not have to send the identifier again.

3.2 Runs you upload

When you finish a level, the App uploads the run so that the server can verify it. What travels is the input, not a score: one byte per simulation frame recording how hard your finger was pressing, plus the number of the level.

The server then re-simulates the whole run with the same physics engine that played it, and derives the time and the number of ground touches itself. The App never reports a time, and a time we have not reproduced does not exist for us. What we keep for a verified run is:

• the level, the engine version and a hash of the level layout;
• the input bytes of the run, which are both the proof and the downloadable ghost;
• the time in simulation ticks and the number of ground touches, both derived by us;
• the date and time the run was received.

Uploading is not required to play. Every level, medal and replay works with the game fully offline; the leaderboard is the only thing that needs the network.

3.3 Information stored on your device

Most of what MASA knows about you never leaves your phone. It is not transmitted anywhere except as described elsewhere in this policy, and it is removed when you uninstall the App or clear its storage:

• your progress: which levels you have completed, your best time and fewest ground touches on each, and the replay of your best attempt — the ghost you race against;
• runs that are waiting to be uploaded, because you were offline or the server was unreachable;
• the random identifier and the sign-in token described in section 3.1;
• your preferences: interface language, sound and music volume, whether vibration is on, and flags recording that you have already seen the tutorial and the help screen.

3.4 Technical data

When your device talks to our leaderboard server, your IP address is necessarily processed in order to deliver the request and the response. It is not written to our database, it is not linked to your player record, and we build no profile from it. Standard server logs kept by our hosting provider may briefly record request metadata for operational and security purposes.

4. What we do not collect

We think this list is more important than the one above. As of the date at the top of this page, the App does not:

• ask you to register, or collect your name, email address, phone number, date of birth or any other contact or identity detail;
• contain any advertising — there is no AdMob, no ad network, no banner, no interstitial, no rewarded video, and the App never touches your Advertising ID;
• contain any analytics, telemetry or crash-reporting SDK — there is no Google Analytics, no Firebase, no Crashlytics and no third-party analytics of any kind;
• access your location, camera, microphone, contacts, calendar, call logs, SMS, photos or files;
• collect any device identifier other than the random one the App generates for itself (section 3.1);
• send push notifications;
• offer in-app purchases or process any payment — there is nothing to buy in MASA, no virtual currency, and we never see payment or card details;
• include chat, voice chat, messaging or any way for players to send each other text;
• sell, rent or trade your data to anybody, for any purpose.

The App declares exactly one Android permission: internet access. There are no third-party SDKs in the build at all, which is why there is no advertising identifier permission in it either.

5. How and why we use your information

Under the GDPR, we rely on the following legal bases:

• Performance of a contract (Article 6(1)(b)) — creating your anonymous leaderboard entry, verifying the runs you choose to upload, ranking them and serving them back as ghosts. Without this the leaderboard cannot work.
• Legitimate interests (Article 6(1)(f)) — keeping the service available and honest, rejecting forged or impossible runs, and diagnosing faults. We have balanced these interests against your rights and limited the data to what is strictly needed: the entire anti-cheat mechanism works by re-simulating your inputs, which is why we do not need to know anything about you to run it.
• Legal obligation (Article 6(1)(c)) — where we must retain or disclose data to comply with the law.

We do not use your data for automated decision-making that produces legal effects concerning you, we do not profile you, and we do not use it for marketing of any kind.

6. What other players can see

The leaderboards are public to anyone playing the game. What appears there is your generated display name, your verified time and your number of ground touches on the level, and your position. Region leaderboards additionally show the sum of your best times across a region, once you have completed all of its levels.

If one of your runs reaches the top 100 of a level, other players can download it and race against it as a ghost. What they receive is the input recording and the time — the same bytes you uploaded. It contains nothing but finger presses.

The random identifier from section 3.1 is never shown to other players, and neither is anything else about your device.

7. Who we share your data with

We do not sell your data, and there are no advertising, analytics or attribution partners to share it with, because the App contains none. We share data only with:

• our hosting and infrastructure providers — the companies that host the leaderboard server, its database and this website process data strictly on our instructions, as processors, in order to keep the service running;
• legal authorities — if we are legally required to disclose data, or where it is necessary to establish, exercise or defend legal claims.

Distributing the App through the Google Play Store means Google processes your download and any device-level data as an independent controller under its own privacy policy. That happens in the Store, not in the App, and we receive no personal data from it.

If the App is ever transferred to another operator, we will inform you through the App or this page before your data is transferred, and the new operator will remain bound by this policy until it publishes its own.

8. How long we keep your data

• Your player record (identifier, generated name, creation date) — for as long as the leaderboard entry exists. Uninstalling the App does not delete it; see section 9.
• Verified runs and the times derived from them — kept while the player record exists, because they are the evidence behind a leaderboard position and the ghost other players race against.
• Runs from previous engine versions — kept but no longer ranked. When a physics constant changes, old times stop being comparable, so they move out of the active board instead of being mixed into it. They are deleted with the rest of your data when you ask for deletion.
• Sign-in tokens — valid for 30 days, after which the App simply requests a new one.
• Everything on your device — until you uninstall the App or clear its storage.

9. Deleting your account and your data

You can have your MASA leaderboard entry and everything attached to it deleted at any time, free of charge.

How to request deletion

1. Send an email to aduardoyanes@gmail.com with the subject “Delete my MASA leaderboard data”.
2. Include the display name exactly as it appears on the leaderboard. Open any level leaderboard in the App: your own row is the highlighted one.
3. Include one or two levels and times from that row, so the record can be matched with certainty.

Why we ask for that instead of proof of identity. We hold nothing that identifies you — no email address, no name you typed, no account. That is deliberate, and it means we cannot verify a deletion request the way a service with accounts would. The display name plus a couple of your own times is the strongest link that exists between you and the record, and it is what we act on. If you have already uninstalled the App and cannot look the name up, write to us anyway and we will work out what can be done.

What happens next

• We confirm receipt and locate the record.
• It is deleted within 30 days, and we email you to confirm when it is done.
• Deletion removes the player record (the random identifier, the generated display name and the creation date), every run uploaded from it including the stored input bytes, and every leaderboard position derived from them. Deleting the player record cascades to all of it.
• Residual copies may remain in encrypted backups for a short period after deletion, until those backups are rotated and overwritten.
• Deletion is permanent. Leaderboard positions cannot be restored afterwards. Your local progress is untouched — it is on your device, not ours — and the App will simply create a fresh anonymous entry the next time it uploads a run.

If you only want to stop sending us anything, you do not need to write to us at all: put the device in aeroplane mode, or uninstall the App. The game is fully playable offline and stops uploading immediately. Note that this leaves any existing leaderboard entry on our servers — only the request above deletes it.

Clearing the App's storage or uninstalling removes the random identifier from your device. The leaderboard entry stays on our side, but you will no longer be able to reach it from the App, and a new one will be created next time. If you want the old one gone, the request above is the way.

You can also ask us for a copy of your data using the same address; see section 13.

10. Security

All traffic between the App and our server travels over encrypted HTTPS connections. Uploads are authenticated with a signed token, size-limited, and validated before anything is stored.

Because there are no accounts, there are no passwords to steal and no credentials for us to lose. The trade-off is stated plainly: the random identifier is not a secret, so anyone who copied it off your device could submit runs under your leaderboard entry. What is at stake there is a position in a table of times, not data about you — and it is the price of letting you compete without ever asking who you are.

Access to the production database is restricted to the developer. No method of transmission or storage is perfectly secure, but we take these measures seriously and will notify you and the competent supervisory authority of any breach affecting your data where the law requires it.

11. Children's privacy

The App is not directed to children. It is not part of the Google Play “Designed for Families” programme and it is not intended for anyone under 13 years old, or under 16 in countries of the European Economic Area where that is the applicable age of digital consent.

The App collects no personal data that could identify a child: there is no registration, no contact detail, no advertising identifier and no free-text field anywhere in it. If you are a parent or guardian and want a leaderboard entry created on your child's device removed, write to aduardoyanes@gmail.com and we will delete it promptly, following section 9.

12. International data transfers

Our server and our service providers may be located outside your country of residence, including outside the European Economic Area. When data is transferred out of the EEA or the United Kingdom, we rely on appropriate safeguards recognised by law, such as the European Commission's Standard Contractual Clauses or an adequacy decision covering the destination country.

13. Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — obtain a copy of the data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted; see section 9.
• Portability — receive your data in a structured, machine-readable format.
• Restriction and objection — ask us to limit how we use your data, or object to processing based on our legitimate interests.

To exercise any of these rights, write to aduardoyanes@gmail.com. We will respond within 30 days.

A limit we have to be honest about. Because we hold no information that identifies you, in most cases we genuinely cannot tell which rows in our database are yours unless you tell us. Article 11 of the GDPR covers exactly this situation: where a controller cannot identify a data subject, these rights apply only if you provide additional information that lets us find your record. In practice that information is the display name and the times described in section 9.

If you are in the EEA or the UK and you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority.

California residents. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we do not offer financial incentives in exchange for personal information. You may exercise your rights of access and deletion using the same contact address, and we will not discriminate against you for doing so.

14. Changes to this policy

We may update this policy when the App changes or when the law requires it. The Last updated date at the top of this page always reflects the current version. If a change materially affects how we handle your data, we will give notice inside the App before it takes effect. Continuing to use the App after a change means you accept the updated policy.

15. Contact us

For any question about this policy, about the data we hold, or to make a request under section 9 or section 13:

• Email: aduardoyanes@gmail.com
• Developer: Adrian Duardo
• Application: MASA (win.starfleet.masa)