Privacy Policy

1. Introduction & Scope

Vesper Studio LLC (“Vesper Studio”, “we”, “us”, or “our”) is dedicated to protecting player privacy. This Privacy Policy governs your use of our Android mobile game, MathFlow: Infinite (the “App”), and describes the types of data we collect, how it is processed and protected, and your individual privacy rights.

If you have questions or wish to exercise any rights described herein, contact our privacy team at info@vesperstudioworks.com.

2. Information We Collect & Authentication Modes

A. Account Types: Google Sign-In vs. Guest Mode

• Optional Google Sign-In (OAuth): Players may optionally authenticate using their Google Account to enable cross-device cloud saving, leaderboard ranking, and progression restore. Authentication is managed through Supabase Auth via Google OAuth.
• Guest Play (Local Save): Players may play completely anonymously in guest mode. When playing as a guest, all game progress, upgrades, and settings are stored locally on your device only. No account identifier or personal data is transmitted to our backend.

B. Backend Data Storage (Supabase)

For players signed in with Google, game data is stored in our managed Supabase backend (PostgreSQL database):

• Authentication Profile: User identifier and associated email address provided during Google OAuth authentication.
• Game Progression: Formulas unlocked, prestige parameters, quantum upgrades, achievements, and mathematical stage milestones.
• In-Game Entitlements: Balance of virtual currency (“Quarks”) and purchase entitlement states.
• Leaderboards: High scores and public display name for competitive rankings.

C. In-App Purchases (Google Play Billing)

In-app purchases (such as purchasing Quarks) are processed securely through Google Play Billing. We verify purchase tokens server-side to grant entitlements. Vesper Studio does not collect, receive, or store your credit card numbers, billing addresses, or banking details.

D. Advertising & Consent (Google AdMob & UMP)

MathFlow: Infinite uses Google AdMob rewarded video ads. Important aspects of our advertising implementation include:

• Player-Initiated Only: Rewarded ads are entirely optional. They are triggered only when a player explicitly chooses to watch an ad in exchange for in-game multipliers or rewards. We do not use forced interstitial ads.
• User Messaging Platform (UMP) Consent: In compliance with GDPR and privacy regulations across the European Economic Area (EEA), the UK, and Switzerland, we utilize Google’s User Messaging Platform (UMP) SDK to present a consent dialogue and obtain explicit player consent before requesting personalized advertising.

E. Crash & Diagnostic Reporting (Sentry)

When the App encounters an unhandled error or crashes, automatic crash and error diagnostic reports are collected and processed on our behalf by Sentry (Functional Software, Inc.) on servers located in the European Union.

• Contents of a Report: A pseudonymous device identifier (not your account identifier and not your advertising ID), device model, operating system version, available memory and storage, app version and build number, language setting, and a stack trace of the failed code path.
• Explicitly Excluded: Reports do not include player names, email addresses, account identifiers, game save data, purchase records, or account credentials. IP addresses are not stored; Sentry derives only coarse geographic information (approximate country or region) from the network connection and discards the address itself.
• Purpose: Strictly limited to identifying, diagnosing, and resolving bugs and application stability issues. Diagnostic data is never used for advertising, behavioral profiling, or any analytics beyond stability.
• Scope & Authentication: Applies to both signed-in players and guests. Diagnostic reporting initializes prior to authentication resolution and is not conditioned on sign-in.
• Legal Basis: Legitimate interest under Article 6(1)(f) GDPR.
• Player Controls & Opt-Out: You may object to diagnostic data collection at any time by navigating in the app to Settings → Send crash reports and toggling the setting off. This immediately halts all further diagnostic reports from that device.
• Independence from Advertising Consent: Crash diagnostic reporting operates independently from advertising consent choices; adjusting ad consent does not alter diagnostic reporting, and disabling crash reporting does not affect ads.

3. Data NOT Collected & Data Sharing Restrictions

We share data only with trusted service providers operating as data processors under strict security and confidentiality obligations:

• Google LLC: Provider of Google Sign-In (OAuth), Google Play Billing, and Google AdMob / UMP SDKs.
• Supabase Inc.: Provider of secure cloud database (PostgreSQL) and authentication infrastructure.
• Functional Software, Inc. (Sentry): Provider of application stability monitoring and crash diagnostic reporting (EU data storage).

4. Data Retention & Legal Exceptions

We retain authenticated player profile data and cloud save states for as long as your account remains active. If you request account deletion, your cloud save, leaderboard scores, and authentication profile are permanently purged.

Crash and diagnostic reports collected via Sentry are retained for 30 days and then deleted. Because these reports contain no account identifier, they cannot be associated with an individual player and are therefore unaffected by account deletion; they expire automatically on the schedule above.

5. Your Rights: Account & Data Deletion

You have the right to request deletion of your account and all associated personal data at any time. We provide two easy methods:

• In-App Deletion: Open MathFlow: Infinite → Settings (gear icon) → Data Privacy → Delete My Data.
• Web Deletion Route: If you no longer have the app installed on your device, you can submit a manual deletion request via our Account & Data Deletion Page or by emailing info@vesperstudioworks.com with your Google Sign-In email. Requests are processed within 30 days.

6. Children’s Privacy

MathFlow: Infinite is not directed to children under the age of 13 (or under 16 in certain European jurisdictions). The game carries a standard general-audience age rating on Google Play. We do not knowingly solicit or collect personal information from children. If we become aware that a child has provided us with personal data, we will promptly delete it.

7. Policy Changes & Contact Information

We may update this Privacy Policy periodically. Any revisions will be published directly to this URL with an updated Effective Date.

For any privacy-related questions, inquiries, or data rights requests, please contact us:

• Studio: Vesper Studio LLC
• Email: info@vesperstudioworks.com
• Address: 7901 4th St N STE 300, St. Petersburg, FL 33702 USA