Privacy Policy — Pin Clash World

Effective date: 27 September 2026

This policy describes Pin Clash World version 0.1.0. Arabic version.

Pin Clash World is published by WAL DIGITAL.

WAL DIGITAL is the developer display name for this app. This policy does not name a separate legal person.

1. What the game is

Pin Clash World is an offline-capable pin game. A player can play as a guest without creating an account. Optional Google sign-in is available. The app shows ads and, only after consent, product analytics.

2. Data that stays on the device

Guest progress is stored on the device. The game does not upload that progress to a live leaderboard or other backend in this version.

Stored locally: level unlocks, stars, and completion records; Core Coins, XP, and player level; owned and equipped cosmetics; daily and weekly challenge progress; sound, vibration, and music settings; language; a country code only if the player selects one from a fixed list. The app does not read GPS. After Google sign-in only: Firebase user id, display name, email address, Google profile photo URL, and sign-in time.

Music files are bundled in the app. Playing them does not collect audio from the microphone.

Clearing the app’s storage, or uninstalling the app, removes this local data. There is no in-app button that deletes all guest progress. Sign-out and account deletion leave stars, level progress, coins, XP, cosmetics, boss rewards, and daily and weekly progress on the device. This version never uploaded that progress.

3. Accounts

This version offers guest play, with no Firebase user, and Continue with Google through Android Credential Manager and Firebase Authentication. There is no email-and-password sign-in.

Continue with Google sends a Google ID token to Firebase Authentication. Firebase may store the account’s user id, name, email address, and profile photo URL. The app copies those fields into local preferences and may download the profile photo over HTTPS to show an avatar. The app does not read the camera or the photo library.

Sign-out does not delete the Firebase Authentication user.

A player who is signed in with Google can delete that Firebase account from Settings, then Account, then Delete Account. The confirmation says: “Deleting your account will permanently remove account-linked data and sign you out.” It also says that stars, level progress, coins, and cosmetics stored on this device stay on this device. The app deletes the Firebase account first. Local identity fields are cleared only after that deletion succeeds. The player is then signed out and returned to guest. If a recent Google sign-in is required, the app asks the player to sign in with Google again and then retries the delete. A failed delete does not clear local identity and is not reported as success. No deletion analytics event is sent, and the flow does not send an email address, Firebase user id, or Google id to Analytics.

Guests have no Firebase account. Delete Account is hidden for them. Guest data is removed by clearing app storage or uninstalling the app.

This version does not write cloud progress documents. Account deletion does not delete shared or public data.

The same steps are explained on the Account & Data Deletion page. Help requests go to pinclashworld@gmail.com. Do not send a password or token.

Facebook Login is not a live sign-in method in this version. The Facebook SDK is not in the release app. The release build hides the Facebook button.

4. Advertising

The app includes Google Mobile Ads and these formats: a banner on the home screen, an interstitial at natural level breaks, and rewarded ads for continue, coins, and the daily double. There is no in-app purchase and no app-open or native ad format in this version.

Ads are not loaded until Google’s User Messaging Platform reports that the app can request ads.

Google’s published disclosure for the Google Mobile Ads SDK says the SDK collects and shares, for advertising, analytics, and fraud prevention: IP address, which may be used to estimate general location; product interactions; diagnostic information; and device and account identifiers, including the Android advertising ID and app set ID.

The app does not declare itself child-directed. It does not set a child-directed treatment flag or a maximum ad content rating.

5. Analytics

Google Analytics for Firebase is off unless consent allows it. Collection stays disabled for unknown or denied consent. The app does not set a user id and does not send a player name, email address, or other personal identifier as an analytics parameter. Analytics advertising-id collection is disabled.

When collection is enabled, the app sends events from a fixed list. Parameters are numbers or short labels such as level, world, and ad trigger. Firebase Analytics is not Crashlytics and not Firebase Performance Monitoring. Neither of those products is installed.

6. Consent

The Google User Messaging Platform runs at launch. When Google reports that a privacy-options entry point is required, Settings shows Privacy Options and opens Google’s form. When Google does not require that entry point, the button is hidden. The app does not treat “ads can be requested” as permission to turn analytics on.

7. Leaderboard

The leaderboard does not load a live global or country ranking. A manually chosen country code stays on the device.

8. Data this version does not collect

This version does not collect precise location, contacts, camera or microphone input, health data, messages, photos or videos from the device, uploaded files, a list of installed apps, in-app search history, payment data, or Crashlytics crash logs.

9. Third-party services

Active: Firebase Authentication after Continue with Google; Google Analytics for Firebase after consent; Google Mobile Ads; Google User Messaging Platform; Google Play services used by those SDKs; Google Identity for Google sign-in.

Not active: Facebook SDK, Facebook Login, live leaderboard writes, Crashlytics, Firebase Performance Monitoring, and Google Play Billing. Firestore is not called by this version.

10. Age and children

Target audience: 13 and older. The app is not intentionally directed to children under 13.

This target audience is not a Google Play content rating. Content rating is determined by the Google Play questionnaire. A later content rating does not change this target audience.

11. How long data is kept

Local game data remains on the device until the player clears app storage or uninstalls the app. Sign-out and a successful account deletion remove the local identity fields and leave gameplay progress on the device.

A successful in-app deletion removes the Firebase Authentication user. If deletion fails, that user remains. Analytics, advertising, and consent data kept by Google follow Google’s policies.

12. Security

Requests made by the Google SDKs in this app use HTTPS. A profile photo is downloaded only when its URL starts with https://.

13. Choices

Play as a guest and skip Google sign-in.
Use Privacy Options when Google requires that entry point.
Deny analytics consent. Collection then stays off.
Reset or delete the Android advertising ID in Android settings.
Sign out of Google. This does not delete the Firebase account.
Delete Account, when signed in with Google. Gameplay progress on the device stays.
Clear app storage or uninstall to remove local progress, including guest progress.
Contact pinclashworld@gmail.com. Do not send a password or token.

14. International processing

Google may process Authentication, Analytics, ads, and consent data in the United States and other countries where Google operates. Local gameplay data stays on the device.

15. Changes

If a later version adds live Facebook Login, a live leaderboard, or purchases, this policy will be updated before that version is offered. Account deletion for Google sign-in is part of this version.

16. Contact

WAL DIGITAL
pinclashworld@gmail.com