PRIVACY POLICY

Last Updated: June 2026

1. Introduction

Welcome to Poison Block ("App").

This Privacy Policy explains how RunArc Labs Private Limited ("RunArc Labs", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use the Poison Block mobile application on iOS, Android, or other supported platforms.

By downloading, installing, or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

2. Who We Are

Poison Block is operated by:

RunArc Labs Private Limited

For privacy-related questions or requests, contact us at:

Email: support@runarclabs.com

3. Information We Collect

We collect information in the following categories.

3.1 Account and Profile Information

When you use the App, we may collect and store:

• Username and display name

• Player ID (Firebase user identifier)

• Profile information you choose to provide

• Whether your username was chosen by you or auto-assigned

• Email address (only if you sign in with Google or Apple and the provider shares it with us)

We do not collect or store your account passwords. Sign-in is handled by third-party authentication providers.

3.2 Guest and Anonymous Accounts

You can play Poison Block without linking Google or Apple. In that case:

• We create an anonymous account for you through Firebase Authentication.

• We may use a device-based identifier (such as a hashed Android ID or iOS vendor identifier) to help assign and restore a guest username on the same device.

• Guest accounts may not include an email address.

If you later link Google or Apple sign-in, your progress may be associated with your linked account.

3.3 Gameplay and Progress Information

To provide game features, we collect and store information such as:

• Match history and move data

• Wins, losses, streaks, and recent results

• XP, level, tier, and season progress

• Trophies, badges, and achievement progress

• Leaderboard rankings and statistics

• Board settings and match outcomes

• Tournament participation (when tournaments are available)

3.4 Online Multiplayer Information

When you play online, we may store:

• Match participation and room details

• Usernames of players in the same match

• Connection or presence status during a match (for example, whether a player is connected or disconnected)

• Match outcomes used for rankings and trophies

Other players in a match can see your username during gameplay.

3.5 Social Features

If you use friends or invite features, we may collect and store:

• Friend connections and friend request status

• Usernames and player IDs involved in friend requests

• Game invites sent or received

• Timestamps related to social interactions

We use this information to operate friends lists, friend requests, and game invitations.

3.6 Device and App Information

We may automatically collect:

• Device type and model

• Operating system and version

• App version

• Language and regional settings

• General device or app identifiers used for analytics, advertising, authentication, or guest account continuity

We do not collect precise GPS location.

3.7 Advertising and Analytics Data

Advertising

Poison Block displays advertisements through Google AdMob, including:

• Interstitial ads (shown at certain points during use)

• Rewarded video ads (optional ads you may choose to watch in exchange for in-game benefits such as bonus XP, streak protection, or similar rewards)

Ad partners may collect information such as:

• Advertising ID (IDFA on iOS / GAID on Android, where available)

• Device and app information

• Ad interaction data

• Approximate location derived from IP address

We do not control all data collected by advertising partners. Google's use of data is governed by Google's Privacy Policy.

Analytics

We use Firebase Analytics to understand how the App is used, including:

• Feature usage

• App performance and stability-related events

• Custom events related to gameplay and optional ad interactions

Analytics data is used to improve the App. We do not use analytics to sell your personal information.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App

• Create and manage your account and guest profile

• Save and sync your game progress

• Enable online multiplayer, matchmaking, and rooms

• Display leaderboards, seasons, trophies, and achievements

• Operate friends, friend requests, and game invites

• Show advertisements and optional rewarded ads

• Measure app usage and improve performance

• Detect cheating, abuse, fraud, or violations of our Terms

• Provide customer support

• Comply with legal obligations

• Send important service-related notices when necessary

We do not sell your personal information.

5. How We Share Information

We may share information in the following situations.

5.1 Service Providers

We use trusted third-party providers to operate the App, including:

Google Firebase (Authentication, Firestore, Cloud Functions) – Accounts, game data storage, backend logic

Google Firebase Analytics – Usage analytics

Google AdMob – Advertising

Google Play Services – Android sign-in and platform services

Apple Services – Sign in with Apple and iOS platform services

These providers process data on our behalf according to their own privacy policies and our instructions.

5.2 Other Players

Your username may be visible to other players during online matches, in lobbies, on leaderboards, and in friend-related features.

5.3 Legal and Safety Reasons

We may disclose information if we believe it is reasonably necessary to:

• Comply with applicable law, regulation, legal process, or government request

• Enforce our Terms and Conditions

• Protect the rights, safety, and security of RunArc Labs, our users, or the public

• Detect or prevent fraud, cheating, or abuse

5.4 Business Transfers

If RunArc Labs is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell personal information to third parties for their own marketing purposes.

6. Legal Bases for Processing (EEA, UK, and Similar Regions)

If you are in the European Economic Area, the United Kingdom, or another region that requires a legal basis for processing personal data, we rely on one or more of the following:

• Contract — to provide the App and its features you request

• Legitimate interests — to improve the App, maintain security, prevent abuse, and show advertising

• Consent — where required, such as for certain optional ads or analytics in your region

• Legal obligation — where we must comply with applicable law

You may withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

7. International Data Transfers

Your information may be stored and processed in countries other than your own, including countries where our service providers operate (such as the United States).

Where required by law, we use appropriate safeguards for international transfers, such as standard contractual clauses or equivalent mechanisms approved by relevant authorities.

8. Data Retention

We retain your information for as long as necessary to:

• Provide the App and maintain your account

• Preserve your game progress and social connections

• Resolve disputes and enforce our policies

• Meet legal, tax, and regulatory requirements

When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Anonymous or aggregated data that cannot reasonably identify you may be retained longer.

9. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information against unauthorized access, loss, misuse, or alteration.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have some or all of the following rights:

• Access — request a copy of personal information we hold about you

• Correction — request correction of inaccurate information

• Deletion — request deletion of your personal information

• Restriction — request restriction of certain processing

• Objection — object to certain processing based on legitimate interests

• Portability — request a copy of certain data in a portable format

• Withdraw consent — where processing is based on consent

To exercise these rights, email support@runarclabs.com. We may need to verify your identity before fulfilling a request.

10.1 Account Deletion

Linked accounts (Google or Apple)

You can delete your account in the App via Settings → Delete Account. This permanently removes your profile, scores, trophies, leaderboard entries, friends data, and linked login, subject to legal retention requirements.

Guest accounts

If you use the App without linking Google or Apple, contact support@runarclabs.com to request deletion of your guest account and associated data.

Deletion is permanent and cannot be undone.