Privacy Policy
This policy explains how Digital Chocolate handles information in PenguCrush.
This release
PenguCrush 0.6.0 plays offline without an account. Optional online features include wallet sign-in, a public leaderboard, SOL payments for score submissions and fixed booster packs, and cloud announcements through Firebase. There are no advertisements, analytics, subscriptions, paid loot boxes or monetary prizes.
Your expedition stays on your device
Level progress, stars, shells, boosters, quests, selected character, settings and an unfinished level are saved locally. No player account is required to play. Only a run you choose to submit is sent for score verification; the rest of your campaign save stays on your device. This Android build disables automatic app backup and device transfer; uninstalling, clearing app storage or deleting your save removes that progress.
Wallets, payments and the leaderboard
If you connect a wallet, we process its public address, a signed one-time sign-in message and a session token. Your private keys and seed phrase remain in your wallet. Submitting a completed level sends its seed, companion and recorded moves to calculate the score. We store the public wallet address, level, score, stars, whether boosters were used, a replay hash, order details and transaction signature in PostgreSQL hosted by Railway. Submitted scores and wallet addresses are public on the leaderboard. Solana transactions, including the payment amount, sender, recipient and order reference, are permanently public on the blockchain. Solana RPC providers process requests used to prepare and verify payments. The app uses a random installation identifier to deliver and recover purchases for this installation.
Optional notifications
Local reminders use a small summary of your saved game on your device to tell you about ready rewards, fresh daily quests or an unfinished level. They do not send your progress to us. Each reminder category is optional. Notifications are subject to Android permission, quiet hours and your device settings.
Cloud announcements
When a connected release offers cloud announcements and you explicitly turn them on, Google Firebase Cloud Messaging (FCM) registers this app installation so it can deliver the categories you choose. Firebase processes an installation ID, messaging registration token, app and SDK versions, device and OS details, installation-source information and technical connection information, including IP addresses handled by its infrastructure. These are used to provide, secure and maintain notification delivery. Your game progress, contacts, location, photos and advertising ID are not sent by this app. Firebase Analytics, advertising SDKs, crash reporting and delivery-metrics export are not enabled.
Who receives information
Railway hosts the leaderboard, payment receipts and wallet sessions; its infrastructure processes connection information such as IP addresses. Your installed wallet and Solana RPC infrastructure handle the blockchain interactions you approve. Google/Firebase processes notification data to deliver the announcements you requested. The publisher sends to category topics and does not maintain a player-token database. If you choose to copy a test-device code and send it to support, the recipient can use it to target messages to that installation. Treat it as private. We do not sell personal information or use it for personalized advertising.
Your choices and deletion
You can turn off individual categories in Settings → Notifications. Turning off both cloud categories stops our cloud delivery and queues deletion of the FCM registration and Firebase installation ID. If you withdraw Android notification permission, the app detects that and queues the same deletion when it next opens. Deletion retries when connectivity returns; its status appears in Notifications. Google may take up to 180 days after a successful installation-deletion request to remove the data from live and backup systems. A new opt-in creates a new registration. Settings → Privacy & play → Delete my save also clears local progress and disables every notification category. To delete your public leaderboard entries and revoke wallet sessions, connect the relevant wallet, then open Pack → Delete my leaderboard data. Payment receipts remain for purchase support and to prevent duplicate credit. Public blockchain history cannot be deleted. Deleting the local save removes unused paid boosters too; receipt IDs remain on the installation to avoid granting the same purchase twice.
Retention and security
Your save remains on the device until you remove it. Wallet sign-in challenges expire after five minutes and sessions after seven days; expired records are pruned hourly. Leaderboard entries remain until you delete them. Payment and delivery receipts remain in the database for purchase support and duplicate-payment prevention. Network traffic to the API uses HTTPS; services may process data outside your country. Local notification receipts used to avoid repeat messages are retained for up to 30 days, with older receipts pruned when another notification is delivered. Cloud messages expire within seven days or sooner as set by the sender. Notification traffic uses encrypted connections. Firebase may process data on Google infrastructure in other countries. No internet service or device storage can guarantee absolute security.
Support messages
If you email support, your email provider and our support mailbox process the address, message and any attachments you choose to send. Send only information needed to explain the issue. We use correspondence to answer and resolve your request; you can request deletion of correspondence, subject to any applicable legal retention requirements.
Young players
This release is intended for players aged 13 and older, subject to higher minimum ages or parental-consent rules where they live. We do not knowingly request personal information from younger children. Contact us if a child has sent personal information so we can address it.
Privacy requests and updates
Contact digitalchocolate@gmail.com for privacy questions or requests. Depending on your location, you may have rights to access, correct, delete or restrict use of personal information, withdraw consent, and complain to a data-protection authority. We will handle applicable requests according to local law. Material changes will be reflected in this policy and, where required, a new disclosure or choice in the app.