GridLord Privacy Policy
Effective date: September 10, 2026
GridLord is a Sudoku and puzzle game operated by ACTIVETECH PORTAL (“GridLord,” “we,” “us,” or “our”). This Privacy Policy explains what information GridLord collects, why we use it, when it is shared, how long it is kept, and the choices available to you.
1. Contact us
Privacy questions and requests can be sent to:
- Legal operator: ACTIVETECH PORTAL
- Privacy email: info@activetech.ae
- Postal address: Dubai, United Arab Emirates
- Account deletion: https://gridlord.activetech.ae/account-deletion
2. Information we collect
GridLord can be played locally, but the app may create an anonymous Firebase identity so that account features can work. You may later link that identity to Google, Apple, or an email address.
Depending on the features you use and the permissions or choices you provide, we may process the following information.
Account and profile information
- A Firebase user identifier and whether the account is anonymous or linked.
- Your email address, display name, sign-in provider, and provider identifiers when you link Google, Apple, or email sign-in.
- Profile choices such as avatar, frame, title, nameplate, showcased badges, language, and time-zone-related settings.
- Friend code, friendships, inbox messages, and social-feature activity.
We do not receive your Google or Apple password. Authentication is handled by the selected provider.
Game and progression information
- Puzzle sessions, board actions needed to save or validate play, results, scores, completion times, difficulty, hints, mistakes, and integrity signals.
- Statistics, streaks, experience, level, missions, achievements, leaderboard entries, journey progress, seasonal-pass progress, inventory, collectibles, rewards, and virtual-currency balances and transactions.
- Settings, accessibility choices, notification choices, analytics preference, and advertising-consent status.
Device, network, and diagnostic information
- Device or installation identifiers, operating system, platform, app version, language, time zone, network status, and limited integrity or abuse-prevention signals.
- Push-notification tokens when notifications are enabled.
- IP address, request identifier, timestamps, user agent, security events, and server logs when the app communicates with our service.
- Crash reports, stack traces, diagnostic information, and performance-related context through Firebase Crashlytics when enabled.
- App interaction and gameplay events through Firebase Analytics only when analytics collection is enabled in GridLord.
GridLord does not request access to your precise location, contacts, photos, camera, microphone, SMS, or call history for ordinary gameplay.
Advertising information
If advertising is enabled, GridLord may use Google Mobile Ads and, where configured, Unity Ads mediation. Those providers may process advertising or installation identifiers, IP address, device information, ad interactions, approximate location inferred from IP, consent signals, and fraud-prevention data. The exact data depends on your region, device settings, consent choices, and whether personalized advertising is permitted.
Rewarded ads are optional. GridLord does not require you to watch a rewarded ad to play a standard puzzle. You can reopen advertising privacy choices from Settings when the consent platform makes that option available.
Purchases and subscriptions
Google Play or Apple processes payment-card and billing information. GridLord does not receive your full payment-card number. We may receive and store product identifiers, purchase tokens or receipts, transaction identifiers, subscription status, renewal or expiration information, and verification responses so that we can grant, restore, reconcile, or revoke an entitlement and prevent duplicate or fraudulent claims.
Communications and privacy requests
If you contact us, request support, or request account deletion, we process the email address and information you provide, along with the request status and correspondence needed to respond and verify account ownership. Never send us a password, sign-in code, full payment-card number, or other secret.
3. Information stored only on your device
GridLord stores local game data such as puzzle state, notes, settings, statistics, progress, reminders, and queued synchronization work on your device. Local data may remain until you clear app data or uninstall GridLord. Completing account deletion inside the app clears GridLord’s local user-owned data on that device. A web deletion request cannot erase data from a device that is offline or no longer under our control.
4. How we use information
We use information to:
- provide, save, synchronize, and restore GridLord features;
- authenticate accounts and keep accounts secure;
- calculate valid results, streaks, rewards, rankings, achievements, and progression;
- deliver notifications you enable and remember your preferences;
- verify purchases, subscriptions, and rewarded-ad callbacks;
- detect cheating, fraud, abuse, outages, and security incidents;
- diagnose crashes and improve reliability, accessibility, balance, and game design;
- provide support, export data, and complete privacy or deletion requests;
- comply with law, enforce our Terms, and protect users, GridLord, and others.
Where applicable, our legal bases are performing our contract with you, our legitimate interests in operating and securing the service, your consent for optional analytics or advertising where required, and compliance with legal obligations. You may withdraw consent through GridLord’s settings or the relevant device or provider controls. Withdrawal does not affect processing that was lawful before withdrawal.
5. When information is shared
We may share information with service providers only as needed for the purposes described above, including:
- Google Firebase for authentication, messaging, remote configuration, analytics, crash reporting, and related infrastructure;
- Google Play for Android distribution, purchases, subscriptions, integrity services, and store account management;
- Google AdMob and approved mediation partners for ads, consent handling, measurement, and ad-fraud prevention when ads are enabled;
- Apple for Sign in with Apple, App Store distribution, purchases, subscriptions, and store account management;
- Unity Ads when enabled through the configured advertising mediation;
- Hostinger for application and database hosting;
- professional advisers, authorities, or other parties when reasonably necessary to comply with law, establish or defend legal claims, investigate abuse, protect safety, or complete a corporate transaction with appropriate notice and safeguards.
We do not sell personal information for money. If applicable law treats personalized advertising disclosures as a “sale,” “sharing,” or targeted advertising, we use the consent and privacy controls available in GridLord and from the advertising provider so that you can exercise the applicable choice.
Third-party services process information under their own terms and privacy policies. Store billing history held by Google or Apple is controlled by the relevant store, not by GridLord.
6. Retention
We keep personal information only for as long as needed for the purpose for which it was collected, including the following production retention schedule:
- Account, profile, cloud game, social, reward, and entitlement data: while the account is active, then deleted when account deletion completes unless an exception below applies.
- Pending deletion data: until the deletion process succeeds or an operational failure is resolved.
- Minimal account-deletion completion records: up to 90 days to prevent fraud, resolve mistakes, and demonstrate that the request was completed.
- GridLord application and security logs: up to 90 days, unless a specific security incident requires longer preservation.
- Firebase Crashlytics crash data and related identifiers: generally 90 days under Firebase’s service retention behavior.
- Firebase Analytics user-level and event-level data: 2 months. Aggregated reports may not follow the same event-level retention control.
- Purchase, subscription, fraud-prevention, prize, tax, accounting, and dispute records that must be preserved: for the applicable statutory or dispute period, which may be up to seven years. Wherever reasonably possible, these records are separated from the deleted profile or anonymized.
- Server backups: up to 6 weeks, depending on the active Hostinger backup schedule, after which older backups are overwritten or deleted. Deleted data is not restored to the live service except when necessary for disaster recovery, and any restored deletion request must be re-applied.
We may retain de-identified or aggregated information that cannot reasonably be linked to you.
7. Account deletion
You can initiate permanent deletion in GridLord by opening Account, choosing Delete account, and confirming the warnings. We may require a recent sign-in to prevent unauthorized deletion. Authenticated in-app deletion starts immediately and uses a retry process if a temporary provider or network failure occurs.
If you no longer have the app or cannot access the account, visit https://gridlord.activetech.ae/account-deletion and use the displayed privacy request address. Web requests are completed within 30 days after we verify control of the account. We send confirmation when the process is complete.
Deletion removes the GridLord authentication identity and associated account, profile, cloud game, progression, social, device, notification, wallet, entitlement, purchase-verification, and advertising-reward records held on our active systems. It is not temporary deactivation. Limited data described in the Retention section may remain when necessary for fraud prevention, transaction disputes, accounting, or legal compliance.
Deleting GridLord does not cancel a subscription billed by Google Play or Apple. Cancel an active subscription in your Google Play or Apple account settings. The store that processed the transaction controls billing history and refunds.
8. Your choices and rights
Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information; withdraw consent; opt out of certain advertising uses; or appeal a decision. You may also have the right to complain to a data-protection authority.
GridLord provides account-data export and deletion controls in the Account area. Analytics, notifications, language, accessibility, cloud synchronization, and available advertising privacy choices are managed in Settings or device settings. You can also contact info@activetech.ae. We may need to verify account ownership before fulfilling a request.
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. These include encrypted transport, authenticated API requests, server-authoritative reward and purchase checks, access controls, least-privilege service credentials, and deletion workflows designed to resume safely after temporary failures. No electronic system is completely secure, so we cannot guarantee absolute security.
10. International processing
GridLord and its service providers may process information in countries other than the country where you live. Where required, we use recognized transfer mechanisms and contractual or organizational safeguards. Contact us for more information about safeguards relevant to your region.
11. Children
GridLord is not directed to children under 16, and we do not knowingly collect personal information from a child below that age without the authorization required by applicable law. If you believe a child provided personal information contrary to this policy, contact info@activetech.ae so that we can investigate and delete it where required.
12. Changes to this policy
We may update this Privacy Policy when GridLord, our providers, or legal requirements change. We will update the effective date and provide additional notice in the app when a material change requires it. Continued use after an update is subject to the policy then in effect, except where additional consent is required.
13. Contact
For privacy questions, rights requests, or complaints, contact ACTIVETECH PORTAL at info@activetech.ae or Dubai, United Arab Emirates.