SPECTRUM

Last updated: September 7, 2026

This Privacy Policy explains how the game SPECTRUM ("app", "game", "we"), developed by Brazil Games Studio, handles the information of its players. SPECTRUM is a black-and-white endless runner for Android (package org.brazilgamesstudio.spectrum). Brazil Games Studio is responsible for processing data in the game services under its control; third-party services also have their own policies, listed below.

In short: you can play solo without creating a game account. Participating in online leaderboards and Versus uses an optional account with a nickname and recovery code, without asking for your personal email or a Google account login. Online features, ads, purchases and support requests may involve data processing. The Google account used for Google Play purchases is separate from your game account.

1. What data the game handles

1.1 Game account and online leaderboards

Online features use Google Firebase Authentication and Firebase Realtime Database. Viewing leaderboards without creating a game account may create an anonymous technical Firebase session. To submit scores, you must choose CREATE ACCOUNT or restore an existing account. Merely being connected does not enable score submission for a player without a game account.

The eight-character recovery code is an access credential. The game uses it to form a technical email-shaped identifier and an authentication password for Firebase; it is not your personal email. This data identifies an account pseudonymously and must not be treated as completely anonymous. Keep the code safe and do not share it. It does not appear on leaderboards.

Nicknames and scores are public on leaderboards; accessible records also contain technical identifiers and run data. Avoid using your real name, phone number or other personal information in a nickname. With an active account, offline runs may remain in a local queue for later submission, including when you reopen the game.

Firebase may also process IP addresses, connection client information and technical logs for authentication, security and abuse prevention.

1.2 Versus and invitations

When you create or join a duel, Firebase receives participant identifiers, nicknames, character appearance with equipped cosmetics, the invitation code, creation and joining times, game version and technical match data, and each player's results: distance, simulation steps and run coins.

Anyone who knows the invitation code and accesses the service can view match data; do not treat it as a private conversation. The six-character invitation code is different from your account recovery code. COPY puts the invitation code on your device's clipboard; you decide whom to send it to in another app. The game does not read your address book or send messages to your contacts.

1.3 Ads and privacy choices

The game uses Google AdMob and the Google UMP consent platform. These services may process IP addresses (including to estimate approximate location), the Android advertising ID, app set identifiers and other applicable identifiers, device and system information, app and ad interactions, and diagnostic or performance data. Purposes include serving and measuring ads, analyzing operation and preventing fraud, depending on the service and identifier used.

In OPTIONS → ADS, you can revisit the choice between ACCEPT PERSONALIZED and ESSENTIAL ONLY. The latter requests non-personalized ads; it does not mean no ads or no technical data processing. Google may show its own consent form where applicable. You can also reset or delete your advertising ID through the controls available in Android settings.

Rewarded ads require the player's choice. Test versions may use demo ads, but that does not eliminate technical data processing by the integrated services.

1.4 In-app purchases

Coin packs are processed through Google Play Billing. The game also recognizes compatible previous purchases, including the ad-removal entitlement. The integration handles product identifiers, prices and offers, purchase status and transaction tokens to deliver products, acknowledge or consume purchases and query recoverable entitlements. Purchase data is not published on leaderboards or sent by the game to the Firebase score database.

We do not receive full card details, banking credentials or your Google account password. Payments and purchase history held by Google Play follow Google's rules and policy. Joining a closed test does not automatically make purchases free; purchases without charges require the appropriate Google Play testing setup and test payment instrument.

1.5 Local progress, achievements and backups

Your device stores sound, language, control and privacy settings, coin balance, power-up and cosmetic inventory, missions, statistics, achievements, local high score, game credentials, queued scores and duel references. There are exceptions to local storage: scores and run data are sent to leaderboards when you have an account, and equipped appearance is shared in duels, as explained above.

Current achievements are local medals, without coin rewards and without Google Play Games or Firebase synchronization. Recovering a game account using its code restores its nickname and online high score; it does not restore coin balance, inventory, missions or the full achievement history. Recoverable purchase entitlements are queried separately through Google Play.

The app allows Android data backup and transfer. Depending on the device and user settings, the operating system may include local files in backups or transfer them to another device. Therefore, we do not promise that uninstalling the game deletes every copy or prevents future restoration.

1.6 Support contact and access to this page

If you contact us, we process your email address, provided name, message and any attachments to respond, identify your request and address your rights. Send only what is necessary; do not send passwords, card details or your account recovery code.

This policy is hosted on GitHub Pages. When you visit it, GitHub may process IP addresses and technical connection and browser information to provide and protect the site. These pages do not include our own advertising or visitor analytics scripts.

2. How we use the data

• Provide the optional account, authentication, recovery and global, weekly, monthly and daily challenge leaderboards;
• Operate Versus invitations, matches and results;
• Maintain local progress and player preferences;
• Check scores and prevent abuse or fraud;
• Serve and measure ads, respecting applicable choices and requirements;
• Process purchases and recoverable entitlements through Google Play;
• Respond to support and data requests.

These purposes relate to providing the features you request, securing services and meeting applicable obligations. Where consent is required, it must be obtained through the corresponding flow. We do not sell your data or use leaderboard or duel data to personalize ads.

3. Who data is shared with

We use Google Firebase for authentication, leaderboards and Versus, Google AdMob and UMP for ads and consent, Google Play for purchases, and GitHub Pages for this policy. Support data is also processed by the email service used to handle requests.

Other players can access public leaderboard data and view duels using invitations. Data may also be provided where necessary to comply with a legal obligation or a valid order from a competent authority. Providers may process data in other countries; the safeguards and conditions described in those services' policies and terms apply.

4. Third-party services

• Google (Firebase, AdMob, Play) — Google Privacy Policy
• Firebase — Privacy, security and data retention
• AdMob — Data handled by the ads SDK
• How Google uses data from partner apps — Data use in partner services
• GitHub — GitHub General Privacy Statement

5. Retention, rights and deletion

5.1 Local data

You can remove installation data through Android storage settings or by uninstalling the game. Backups and transferred copies must be managed through the operating system or the responsible provider. Clearing data or uninstalling does not delete your Firebase account or online records, or purchase history held by Google Play.

5.2 Online data

Authentication data, profiles, nickname reservations, leaderboards and duels remain in online services until requested deletion or administrative cleanup. The end of a leaderboard period or expiration of an invitation does not automatically erase its records. Support records are retained to handle and follow up on requests and any applicable obligations.

Providers' technical logs, backups and purchase records may have their own retention periods, described in the policies in section 4. A request to the studio covers data under our control; it does not delete your Google or GitHub account or records those providers must retain independently of the game.

5.3 Request account and data deletion

1. Include your in-game nickname, including any suffix, and whether you want to delete the entire account or request deletion of specific data.
2. Do not send passwords, payment details or your recovery code. We may request minimal information to confirm ownership and prevent someone else's account from being deleted.
3. We will reply by email to confirm the request, clarify its scope and explain the applicable timeframe. Deletion is not instant and will be handled within the deadlines required by applicable law.

Account deletion covers the Firebase authentication identity, profile, nickname reservations, scores and player-associated duel data, not just removal of one leaderboard entry. If retention is necessary for legal obligations, security or fraud prevention, we will explain which data is retained, why and for how long.

You do not need to reinstall the game to start a request. If you do not remember your nickname or no longer have app access, explain the situation in your email. In the game, this page is available through OPTIONS → ADS → privacy policy. The current process is a support request, not automatic deletion inside the app.

Account deletion prevents recovery and does not constitute a purchase refund. Payment requests follow Google Play's channels and rules. You can also contact us to request confirmation of processing, access, correction and other rights under Brazil's LGPD and applicable law, including withdrawal of consent where relevant.

6. Children

SPECTRUM is not directed at children under 13. We do not request your legal name, personal email, phone number, contacts, photos or precise location to play; this does not eliminate the processing of identifiers and other data described in this policy. If you are a guardian and believe a child provided data to the game, contact us for assistance and deletion.

7. Security and changes

Communications with integrated online services use HTTPS/TLS. Firebase uses authentication and access rules to protect operations; leaderboard and invitation data remain accessible as described in this policy. We do not promise absolute anonymity, end-to-end encryption or 100% security. Protect your device and recovery code.

We may update this policy to reflect actual changes to the game and its services. The date at the top indicates the latest update. Where changes require fresh consent, it must be requested through the appropriate flow, not assumed merely because this page has been updated.

8. Contact

Questions or requests about this policy and your data: brazilgamesstudio@gmail.com