Privacy Policy

Last updated: August 10, 2026

This policy describes how "Sigilloom" (the application) manages your personal data. The project is developed by Angelo Mazzilli ("the Developer", "ANMA Studio").

1. Data Controller

The data controller is: Angelo Mazzilli
Email: info@sigilloom.com

2. Data Collected

The game collects the following types of data:

Authentication Data: a unique player identifier (UID) and public display name, provided via Google Play Games Sign-In. We do not request or receive your email address through this sign-in method.
Leaderboard Data: your run results (e.g. score, hero used) are submitted to our database and associated with your Play Games player identity, so they can be shown on the game's public leaderboards. Leaderboard entries (username and score) are visible to other players.
Usage Data: pseudonymous information about how you interact with the application, such as screen views and session counts, tied to a device-level identifier rather than your personal identity (collected via Google Analytics for Firebase, automatic basic metrics only, no custom event tracking, no data used for advertising).
Technical Data: IP address and device information collected by Firebase App Check to verify that requests to our servers come from a genuine, unmodified installation of the app (via Google Play Integrity), protecting the game's leaderboards and your data from abuse.
Achievements: your in-game achievement progress is submitted to Google Play Games Services and associated with your Play Games player identity, so it can be shown on your public Play Games profile.
Push Notifications: if you grant notification permission, a device token is registered with Firebase Cloud Messaging so we can send you notifications (e.g. game updates or reminders). You can revoke this permission at any time from your device settings.

Sign-in happens automatically and silently in the background. If it fails or is unavailable (e.g. no Google Play Games account, no network connection), the game continues to work fully offline using only data stored on your device, no data is sent anywhere in that case, though leaderboards will not be available.

3. Purpose of Processing

Data is collected exclusively to:

Identify you as a player and display your results on the game's public leaderboards.
Analyze anonymous usage patterns to improve the game's design and technical performance.
Ensure the security and correct technical operation of the application, including verifying that requests come from a genuine installation (Firebase App Check).
Track and display your achievement progress on your Play Games profile.
Send you notifications, only if you have granted notification permission.

Legal basis (GDPR, Art. 6): sign-in, leaderboards, achievements, and notifications are processed on the basis of your consent (each is an opt-in action: connecting your Google Play Games account, granting notification permission). Usage analytics and security/integrity verification are processed on the basis of our legitimate interest in understanding how the game is used and in protecting the service and other players from abuse, an interest that does not override your own rights and freedoms given the limited, non-advertising nature of this processing.

4. Third-Party Services

The application uses Google Firebase services (Google Ireland Limited) for authentication, database storage (Cloud Firestore), integrity verification (Firebase App Check with Google Play Integrity), usage analytics (Google Analytics for Firebase), and notifications (Firebase Cloud Messaging). It also uses Google Play Games Services for sign-in, leaderboards, and achievements. Data is stored on secure Google servers, complying with international data protection standards.

5. Data Retention

Leaderboard and account data is retained as long as you maintain an active game profile. To request full deletion of your account and all associated data, contact us using the email address below.

6. User Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the right to:

Access your personal data in our possession.
Request rectification of inaccurate data.
Request permanent deletion of your data.
Request portability of your data in a structured format.

7. How to Exercise Your Rights

For any request regarding your data, or to request its deletion, contact us directly at: info@sigilloom.com. We will permanently remove every reference from our database within 30 days of the request.

8. Data Security

We adopt appropriate technical and organizational security measures to protect your data from unauthorized access, alteration, or destruction. However, remember that no method of transmission over the internet is 100% secure.

9. Changes to this Policy

We reserve the right to update this Privacy Policy periodically. Any changes will be notified within the application or by updating the date at the top of this document.

By proceeding with the use of "Sigilloom," you declare that you have understood and accepted the terms of this Privacy Policy.