Effective 2 November 2026Last updated 2 November 2026
Fruit Merge (“the App”) is developed and published by Nishant Sharma / NishArc Studios (“we,” “us,” or “our”). This policy describes information processed by the current Android app, its online player services, and Google AdMob advertising.
You can play the core game without entering an email address, phone number, or password. The App can automatically create a guest player profile when it connects to our services. Offline play does not prevent local progress from being saved, but online profiles, leaderboard updates, and ads need a network connection.
1. Information Stored on Your Device
The App stores game progress and preferences locally, including best score, games played, mission progress, claimed rewards, unlocked and selected avatars, available power-ups, and sound and music settings. Legacy coin values may also remain in saved data even when the coin economy is disabled.
It also stores your player name, a randomly generated installation registration credential, player ID, and access and refresh credentials. These credentials let the App reconnect to its guest player record without a password. They are not your Android advertising ID. Avoid sharing credentials or your App's private storage with others.
Local storage may be temporarily unavailable because of device or operating-system errors. Changes kept only in memory cannot survive the App being terminated before they are successfully written to storage.
2. Online Player Profiles and Progress
When online services are available, the App sends information to the NishArc Studios backend to create or restore a guest profile and maintain game features. Server records can include:
A generated player ID and guest username, or the username you choose
Selected avatar ID and the game identifier
Best score and number of games played
Registration and authentication credential hashes used to associate requests with your player record
Profile creation, update, login, and gameplay timestamps
Your chosen name and avatar are sent when you save your profile. New personal bests and games-played totals can be uploaded while playing or when a run ends. Local mission progress, ad-earned power-up balances, and settings are not currently backed up through the player-profile service. Reinstalling the App or clearing its storage can remove your local credentials and prevent access to the same guest profile.
Do not include your real name, email, phone number, or other sensitive information in a public username.
3. Public Leaderboard
The online leaderboard makes player usernames, avatar selections, high scores, and ranks visible to other users. The public leaderboard API also returns player IDs, games-played totals, and game identifiers. Authentication credentials are not included in the public leaderboard response.
Changing your username or uninstalling the App does not automatically remove an existing server record or leaderboard entry.
4. Session and Activity Tracking
The App sends authenticated session activity to our backend. This includes a randomly generated session ID, request sequence number, activity state (such as home, playing, paused, viewing/loading an ad, or background), foreground time, and active playing time.
Activity can be sent at startup, when the App's activity or lifecycle changes, and periodically while it is in the foreground. Our server stores session timestamps and aggregate daily activity to operate player-activity dashboards and understand game usage. This is developer-operated activity tracking, even though the App does not include a separate general-purpose analytics SDK.
Requests to online services necessarily expose an IP address to the receiving network service. Hosting infrastructure may process technical request logs for operation and security.
5. Google AdMob Advertising
Fruit Merge displays banner ads on the Home and Game screens and offers optional rewarded ads for power-ups or continuing a game. Ad availability and reward delivery depend on the ad service and the relevant in-game conditions.
The App integrates the Google Mobile Ads SDK. Google documents that this SDK automatically collects and shares IP addresses, product interactions, diagnostics, and device or account identifiers for advertising, measurement, and fraud prevention. IP addresses can indicate a general location. Advertising-ID availability depends on device settings and SDK configuration; the App does not request access to precise GPS location.
You can manage or delete your Android advertising ID through your device's Privacy/Ads settings, subject to Android version. Changing an advertising preference does not guarantee that ads stop appearing or remove your NishArc player record.
6. Why We Process Information
We use player and activity information to maintain guest profiles, synchronize supported progress, display the leaderboard, understand active use, troubleshoot failures, and protect the integrity and security of online services. Local data supports gameplay, rewards, missions, avatars, and preferences. Advertising supports the game and provides optional rewarded features.
The App does not ask for access to contacts, camera, microphone, photos, messages, financial accounts, or precise device location. Information you voluntarily send by email is processed to respond to your request.
7. Sharing and Service Providers
Player data is stored through our backend and database infrastructure. The website/API is hosted on Vercel, and player records are stored in MongoDB. Infrastructure providers process data to operate these services. Google AdMob and its advertising services process advertising information as described above. Leaderboard information is public as described in Section 3.
We do not sell player-profile records. Advertising involves sharing information with Google's services and is governed by their policies. Information may also be disclosed when necessary to meet legal obligations or protect the security of users and services.
8. Retention and Security
Local data remains until it is changed, reset, removed through device settings, or lost when App storage is removed. Server-side player, score, and activity records can remain after uninstalling the App or resetting local progress. We retain these records to provide the online features and maintain activity history; the current implementation does not specify an automatic expiry period for these records.
Online requests use HTTPS. Our backend stores hashes of player authentication credentials. No storage or transmission system can be guaranteed completely secure. Third-party services apply their own retention and security practices.
9. Resetting Progress and Requesting Deletion
The in-app Reset Progress action resets local game progress, rewards, and missions. It does not delete your backend player profile, server activity history, or leaderboard entry. A later profile synchronization can restore the server's high score and games-played total.
Uninstalling the App or clearing its storage removes local data and credentials in normal circumstances, but does not itself delete data already held by our backend or Google. The current Fruit Merge app does not provide an in-app server-account deletion action.
To request access, correction, or deletion of information held by NishArc Studios, email nishants.robocircuits@gmail.com with the subject “Fruit Merge data request”. Include your in-game username and the nature of your request. Do not send access tokens, refresh tokens, passwords, or other authentication secrets. We may need information to verify that a request relates to your player record; a public username alone does not prove ownership. We will review the request and explain the available steps and any information that must be retained. Information processed independently by Google is subject to Google's own privacy controls and request procedures.
10. Children and Parental Requests
The App does not ask players to provide an age, email address, or password to start playing. Guest profiles, public usernames, session activity, and advertising data may nevertheless be processed as described in this policy. Please do not put a child's real name or contact details in a public username.
Parents or guardians can contact us at the address below about a child's player record or privacy concern. A general-audience store rating does not mean that no data is processed.
11. External Links and Your Choices
The App can open the privacy website and app-store rating or listing pages. Those services handle data under their own policies. You can change your profile through the App, manage local preferences, use device advertising controls, and contact us about server-held data. Rights available to you may depend on your location and applicable law.
12. Changes and Contact
We may update this policy when the App, services, or data practices change. The “Last updated” date on this page identifies the latest revision.
