Privacy Policy
Mirror Mash Blast — last updated 30 May 2026
This Privacy Policy explains how Mirror Mash Blast ("the game", "we", "us")
collects, uses, and protects your information. By playing the game you agree to this policy.
1. Information we collect
If you play as a guest
- Local game progress only — your level, score, stars, streaks, mascot stage and
inventory are stored on your device using browser localStorage. Nothing leaves your device.
- A randomly-generated display name (e.g.
Dreamer4821) is created so you have an identity
in the game. It is stored locally.
If you sign in (Google, Apple, or email/password via Firebase Authentication)
- Account info — your display name and email address are stored privately in our
Cloud Firestore database under a
users/<your-uid> document. Only you can read or write
this document (enforced by Firestore security rules).
- Game progress — level, score, stars, streaks, mascot stage and in-game inventory,
synced across your devices so reinstalling never loses progress.
- Purchase history — for every in-app purchase, a record (product, transaction id,
date) is stored under
users/<your-uid>/purchases/<txnId> to support delivery and restore.
- Public leaderboard entry — your display name and scores only
(no email) are written to a public
leaderboard/<your-uid> document so other signed-in
players can see the cross-device leaderboard.
- Username reservation — a small
usernames/<lowercased-name> document
reserves your handle so it remains unique. It maps your name back to your account uid.
From advertising and the device
- Google AdMob may collect device identifiers (Advertising ID on Android, IDFA on iOS
where allowed), session and ad-interaction data to show, measure and limit ads. AdMob is configured to
request non-personalised content where required by law.
2. How we use it
- To save and sync your progress, purchases and mascot.
- To run the leaderboard and show your rank against other signed-in players.
- To display ads (unless you have purchased Remove Ads) and to process in-app purchases.
- To keep the game working, secure it, and improve it.
We do not sell your data. We do not share your data with advertisers beyond the standard ad-targeting
signals their SDK handles directly on your device.
3. Third-party services
We use trusted third parties; each has its own privacy policy:
4. Your choices & data deletion
- You can play as a guest without providing any personal information.
- You can delete your account and all associated data at any time from
Profile → Delete Account inside the app.
- If you cannot access the app, you can request deletion via our
Account & Data Deletion page.
- You can remove ads via the in-app Remove Ads purchase.
- You can change your displayed username at any time from Profile → Edit Name.
5. Children
The game is not directed to children under 13 (or the age required in your region), and we do not
knowingly collect personal information from them. Ads are configured to request non-personalised content
where required.
6. Data security & retention
Data is stored on Google's secured Firebase infrastructure. We retain it for as long as your account
exists. When you delete your account (in-app or by request), all of the following are removed within
30 days:
users/<your-uid> profile documentusers/<your-uid>/purchases/* purchase recordsleaderboard/<your-uid> public leaderboard entryusernames/<your-name> reservation- Firebase Authentication user record
- Local data on your device (when you delete in-app)
7. Changes
We may update this policy; material changes will be reflected by the "last updated" date above.
8. Contact
Questions about this policy? Email
pooja.devrai@gmail.com.
© 2026 Mirror Mash Blast. All rights reserved. ·
Account & Data Deletion