Last updated: 9 August 2026
Whirldrop is a casual board game (a drop-and-connect game with rotating gravity). We keep data to the minimum needed to run online play and rankings.
No real name or email is required. Email sign-in is optional and is used only when you choose to save progress across devices. There are no in-app purchases. We show ads via Google AdMob (see section 6).
On your device: your settings (sound, haptics, theme, language and board rules), local play statistics, points, coins, challenge progress and unlocked cosmetics. These remain on your device unless you later use a leaderboard, online or account feature, at which point eligible progress is synchronised as described below.
In the cloud (when you use leaderboard, online or account features): we use Google Firebase (Anonymous Authentication + Cloud Firestore). We create an anonymous account with a random identifier. Linked to that identifier we may store:
Reliability and abuse prevention: Firebase Crashlytics may receive crash diagnostics such as device/app version, stack traces and technical identifiers. Firebase App Check uses device attestation signals to help reject automated abuse. We do not use these services to build advertising profiles.
This data is processed on Google's servers under Google's terms. We do not sell it. Advertising data is handled separately by AdMob as described in section 6.
No phone number, real name, contacts, location, or photos. We don't require an email — one is stored only if you opt in to email sign-in (section 1). We run no behavioural analytics of our own. Crash diagnostics are described in section 1. (Our ad provider, Google AdMob, may access a device advertising identifier to serve and measure ads — see section 6.)
The app uses Internet access for the optional cloud features and ads described above. Two players on one device and play-vs-computer remain available when cloud services are unavailable. If you opt into the daily-reward reminder, the app also requests notification permission.
Whirldrop does not knowingly collect personal information from children. The only user-provided data is a freely chosen, non-personal username. There are no in-app purchases. The app shows ads via Google AdMob (section 6).
You can delete your account and its cloud data at any time, directly in the app: Profile → Delete account. This removes your profile, username, ranking data, coin counters, cosmetics and leaderboard entry, and deletes the underlying authentication account (including a linked email, if any). Short-lived match records are normally deleted when a match finishes or by automated retention; they and service backups/logs may take additional time to disappear. Account deletion cannot be undone. Limited pseudonymous settlement records are kept for up to 90 days and then deleted automatically; service logs may be retained where needed for fraud prevention, security, or legal compliance. Alternatively, you may request deletion by contacting us (section 8) with your linked email address (if any), in-app username, and approximate creation date.
Whirldrop shows ads through Google AdMob: a full-screen (interstitial) ad after some online games, and an optional rewarded ad you can choose to watch to earn cosmetic coins. AdMob is a Google service that may collect and use a device advertising identifier and related data to serve and measure ads, under Google's policies. In regions that require it (e.g. the EEA/UK) we show a consent prompt before any personalised ads. You can reset or limit the advertising identifier in your device settings.
If this policy changes, the updated version will be posted on this page with a new "Last updated" date.
Questions or deletion requests: nuurcompass@gmail.com.