Apps · Maze Glass Puzzle · Privacy
Privacy Policy
Effective date: 11 September 2026
Maze Glass Puzzle (the "App") is a maze game with a global leaderboard and a community maze editor, published by Taoufik Jabbari ("we", "us"). This policy explains what data the App collects, how it is collected, who receives it, and the choices you have. It applies to the iOS version on the App Store and the Android version on Google Play.
Quick summary: your game progress lives on your device. A Firebase account created on first launch stores your display name, country, scores and the mazes you publish; on iOS it also stores your push token if you allow notifications. If you tap "Save my progress" on iOS, Sign in with Apple links that account to your Apple ID, and Apple shares your name and email with us. Google Firebase Analytics measures how the App is used, including the Remove Ads purchase. Firebase Crashlytics reports crashes. Google AdMob shows ads and uses your advertising identifier only if you allow tracking in the App Tracking Transparency prompt (iOS) or in the Google consent form (Android and the EU/UK). A one-time Remove Ads purchase is available on iOS.
1. What we collect
This list matches the App Privacy labels published on the App Store. "Linked to you" means the data is tied to your account or your device identifiers. "Tracking" means the data may be combined with data from other companies' apps and websites for advertising.
- Device ID: your device's advertising identifier (IDFA on iOS, Google advertising ID on Android), the Firebase installation id and Google Analytics app instance id, and, on iOS, the Firebase Cloud Messaging push token. Used for third-party advertising, our own re-engagement push campaigns, analytics and app functionality. Linked to you: yes. Tracking: yes, but only after you allow it in the App Tracking Transparency prompt on iOS or in the Google consent form on Android; if you decline, the advertising identifier is not used for tracking and ads are non-personalized.
- User ID: a Firebase Authentication user id created on first launch, before any sign-in. It keys your leaderboard row, your published mazes, your best times on community mazes and, on iOS, your reports and your block list. Used for app functionality. Linked to you: yes. Tracking: no.
- Name: the name Apple shares with us when you use Sign in with Apple (iOS only) to save your progress. It is passed to Firebase Authentication with your Apple credential. Your leaderboard display name is separate: it is generated by the App (for example "GlassCipher472") and you can edit it. Used for app functionality. Linked to you: yes. Tracking: no.
- Email Address: the email Apple shares with us on your first Sign in with Apple, iOS only (Apple may give a private relay address if you choose Hide My Email). It is stored on your Firebase account and cached on your device so the Settings screen can show which Apple ID your progress is synced to. Used for app functionality only; we do not send marketing email. Linked to you: yes. Tracking: no.
- Gameplay Content: your scores, best times and quest level, your best time and score on each community maze you finish (shown on that maze's leaderboard with your display name and country), and the mazes you build and publish in the community editor (maze name, layout, your display name and country flag as the author, play count). Published mazes are visible to every player. On iOS, abuse reports you file against a maze and the list of authors you block are also stored. Used for app functionality. Linked to you: yes. Tracking: no.
- Purchase History: when you buy Remove Ads (offered on iOS), Google Firebase Analytics automatically records an in-app purchase event with the product id, price and currency. Apple processes the payment; we never receive your card number or payment details. Used for analytics. Linked to you: yes. Tracking: no.
- Coarse Location: an approximate location (country or region) derived from your IP address by Google AdMob, the Google consent platform and Google Firebase Analytics, plus the country code you set in the App for your leaderboard flag. The App never asks for Location Services and never collects precise location. Used for third-party advertising, our own advertising, analytics and app functionality. Linked to you: yes. Tracking: no.
- Product Interaction: screens viewed, mazes started and won, session length, taps on ads, and similar usage events recorded by Google Firebase Analytics and the Google Mobile Ads SDK. Used for third-party advertising, our own advertising, analytics and app functionality. Linked to you: yes, when you have allowed tracking Google Analytics can attach your advertising identifier. Tracking: no.
- Advertising Data: which ads were shown to you and how you interacted with them, collected by Google AdMob. Used for third-party advertising, our own advertising and analytics. Linked to you: yes. Tracking: no.
- Crash Data: crash logs from Firebase Crashlytics, with device model, OS version and the state of the App at the moment of the crash, so we can find and fix bugs. Used for app functionality and analytics. Linked to you: no. Tracking: no.
- Performance Data: launch time, ad load times, and app responsiveness, collected by the Google Mobile Ads SDK, the Google consent platform and Firebase. Used for third-party advertising, our own advertising, analytics and app functionality. Linked to you: no. Tracking: no.
- Other Diagnostic Data: technical logs from the Google Mobile Ads SDK, the Google consent platform, Firebase Analytics and Crashlytics (device model, OS version, App version, network type, ad request errors). Google may also use ad SDK diagnostics for displaying ads, including sharing with other entities that display ads. Used for app functionality, analytics, third-party advertising and our own advertising. Linked to you: no. Tracking: no.
- Other Data Types: your country code, stored with your account so the leaderboard can show your flag, and, on iOS when you allow push notifications, your device language and platform, stored with your account so push notifications can be sent in your language. Used for app functionality and analytics. Linked to you: yes. Tracking: no.
2. How we collect it
- On your device: quest level, best times, best scores, sound and haptics settings, your Remove Ads status, your blocked authors and the mazes you hid after reporting them are stored locally and removed when you uninstall.
- Firebase account: on first launch the App creates an anonymous Firebase Authentication account and writes your display name, country, quest level and total score to Google Firestore so the leaderboard can rank you. When you finish a community maze, your best time and score are written to that maze's leaderboard with your display name and country.
- Sign in with Apple (iOS only): only if you tap "Save my progress" in Settings. The App requests your name and email from Apple and links the Apple credential to your Firebase account so your progress follows you to a new iPhone or a reinstall.
- Community mazes: when you publish a maze from the editor, the maze and your author display name and flag are written to Firestore and shown to all players. On iOS, reports and blocks are written under your account; the Android version has no report or block feature.
- Push notifications (iOS only): if you allow notifications, the App registers with Firebase Cloud Messaging, which delivers through Apple Push Notification service, and stores the push token, your device language and platform on your account. We use it to send occasional re-engagement messages about the game. The Android version does not send push notifications.
- SDKs: the Firebase, Google Analytics, Crashlytics and Google Mobile Ads SDKs run inside the App and send the data described in section 1 to Google automatically while you play.
- Purchases: the optional one-time Remove Ads purchase goes through Apple (StoreKit) on iOS. The Android version currently has no in-app purchase.
3. Third parties
We share data only with the processors below, for the purposes stated. We do not sell your data to anyone else.
- Google AdMob (Google LLC): serves banner and interstitial ads. Receives your advertising identifier (personalized ads only with your tracking or consent choice), coarse location derived from your IP address, ad interaction data, performance and diagnostic data. See Google's Ads Privacy and AdMob data practices.
- Google Firebase Analytics: receives usage events (screens, mazes played, session length, the in-app purchase event), the app instance id, your advertising identifier when you allowed tracking, and coarse location derived from your IP address. No precise location: the App never uses Location Services.
- Firebase Crashlytics: receives crash reports, device model, OS version and App version.
- Firebase Cloud Messaging and Apple Push Notification service (iOS only): receive your push token to deliver notifications. The token, your device language and platform are stored on your Firestore account.
- Firebase Authentication and Firestore (the App's backend): store your user id, your Apple name and email when you sign in (iOS), your display name, country, scores, community maze times, published mazes and, on iOS, reports, block list and push token. See Firebase's privacy notice.
- Apple (iOS): Sign in with Apple provides your name and email (or a private relay address) when you choose to save your progress; the App Store processes the Remove Ads purchase. Apple does not share your card details with us. See Apple's privacy policy.
- Google Play (Android): distributes the Android version. The Android version has no in-app purchase, so no payment data reaches Google Play Billing through the App. See Google's privacy policy.
4. Your choices: consent, tracking and notifications
On iOS, the App Tracking Transparency prompt governs whether AdMob and Google Analytics may use your advertising identifier:
- Allow: AdMob may serve personalized ads based on your activity in other apps.
- Ask App Not To Track: AdMob serves only non-personalized ads. The game stays fully playable either way.
In the EU, UK and EEA, a Google consent form (User Messaging Platform) asks for your choice before any personalized ad is requested, on both iOS and Android; you can reopen it from Settings inside the App. On Android outside those regions, personalized ads follow your Google advertising ID setting.
You can change your choice at any time: on iOS, in Settings > Privacy & Security > Tracking; on Android, in Settings > Privacy > Ads. You can also manage Google's use of your data at myadcenter.google.com. On iOS, purchasing Remove Ads removes all ads.
Push notifications (iOS) are optional: the App asks for permission after your first wins, and you can turn them off at any time in your device's notification settings.
Sign in with Apple (iOS) is optional: the game is fully playable without it.
5. Children's privacy
Maze Glass Puzzle is rated 4+ but is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided any identifiable information, please email goloio32@gmail.com and we will delete it.
6. Data retention and deletion
On-device data is removed when you uninstall the App. Your account data (display name, country, scores, leaderboard row, community maze times, published mazes and, on iOS, push token, block list and Apple link) is kept while your account exists. Crash and analytics data are retained by Google under Firebase's default retention settings.
To delete your account on iOS, open Settings inside the App and tap "Delete my account". This deletes your Firestore user document (display name, country, scores, push token) and your Firebase Authentication account (including the Apple sign-in link) and clears your progress and identity from the device immediately. Three things are not removed by that button: mazes you published stay visible under your display name unless you delete them yourself from the Mazes tab (the trash action on your own mazes) before deleting your account; your best times on community mazes stay on those mazes' leaderboards; and your block list entries and the reports you filed stay in our database. Email us to have any of them removed. The Android version has no in-app deletion button: email us and we delete your account data on request.
You can also request deletion of anything tied to you, including published mazes, community maze times, block list entries and reports, by emailing goloio32@gmail.com with the display name shown in your Settings tab.
7. International transfers
Firebase, Google Analytics, Crashlytics and AdMob are operated by Google LLC (USA). Data sent to those services may be stored or processed in the United States. By using Maze Glass Puzzle you consent to such transfer where applicable.
8. Changes to this policy
We may update this policy. The effective date above will change when we do. Material changes will be reflected in an updated App Store / Play Store release.
9. Contact
Questions or requests: goloio32@gmail.com.