Who is responsible
Konsepto d.o.o. operates Aquamora: Water Sort and is responsible for the processing described in this policy. Our postal address and privacy contact are provided at the end of this document.
Feature availability
Aquamora supports optional accounts and cloud saving. Premium is offered as a one-time purchase, subject to Google Play availability. You can contact us for support and privacy requests.
Game progress on your device
The game stores progress, saved rounds and preferences on your device, including scores, Adventure progress, stars, hints and Daily puzzle history. You can play without creating a game account.
Daily history keeps up to 366 dates. Android automatic application backup is disabled. Local progress remains until it is replaced or you clear the application’s stored data. Account deletion does not automatically erase this local progress.
Personal records store best move counts separately by extra bottles and hint use. Up to 1,024 puzzle records are retained; older Classic and Daily records can be removed when this limit is reached. Cloud saving includes these records when enabled.
Optional accounts and cloud saves
Optional game accounts and cloud saves are available to players who meet the age requirement in the Terms of Service. If you choose an account, Firebase Authentication handles email and password sign-in, and Firestore stores progress and saved rounds under your account identifier. The account is used to save and restore progress.
Firebase also processes technical information, which can include IP addresses and application or device verification information, to authenticate users and protect against abuse. The application does not save your password in game preferences.
Daily leaderboard
If you sign in and choose Submit my result, the game sends the puzzle date and your moves to Firebase to validate the solution. We retain your account identifier, best move count and a daily pseudonym. The leaderboard shows the pseudonym, moves and rank; it does not show your email. Equal move counts share a rank. Results stop appearing after 40 days and are then queued for deletion. Deleting your game account also removes these results.
Age and eligibility
Under the Terms of Service, Aquamora is intended for players aged 13 and over. The game does not ask your age, collect a birth date or run an age-verification system; the 13+ rule is a clause of the Terms of Service and no parental-consent system is provided.
Where required in your region, Google's consent form for advertising is shown at first launch; you can change your choices at any time in Settings → Ad preferences. No separate age-derived advertising signal is sent.
Accounts and cloud saves are optional for all players who meet the age requirement in the Terms. Using the ad-supported game and purchase services involves the processing described in this policy; local play alone requires no account.
Purchase information
Google Play handles payment. RevenueCat processes purchase information, purchase history, entitlement status and an account or anonymous customer identifier so the game can provide and restore Premium access. The game does not receive or store payment-card details.
For a new guest, RevenueCat does not start simply because the game launches. It can start when Premium or Restore purchases is requested, after the applicable service-eligibility checks. It can also run to verify an existing signed-in account or recover a previous or pending purchase. Older installations may check this game’s purchase with Google Play to recover an existing right.
A guest using the purchase service has a RevenueCat identifier. Signing in associates access with the game account. A guest purchase does not create an email game account.
Advertising and your choices
Google AdMob and its advertising partners may process identifiers, IP addresses, approximate location derived from IP, ad interactions and diagnostics to deliver and measure advertisements and help prevent fraud. Google’s consent tools manage the advertising choices available for your region and circumstances. The game checks applicable consent eligibility before requesting advertisements.
Advertising preferences can be managed in Settings → Ad preferences when the consent service makes a form available. The absence of an additional form does not mean that advertising services process no information. A failure to load a form does not change your saved choices.
Premium prevents advertisements in the game. Buying Premium does not erase earlier advertising data or automatically change advertising choices. Account and purchase services continue to process the information needed for their features.
Why we use your data
We process information needed to provide the account, saved-game and Premium features you request on the basis of performing that service. We process privacy-rights requests and qualifying accounting records to meet applicable legal obligations. Necessary service security and limited error investigation rely on our legitimate interests, balanced against your rights, with particular care for younger players. Advertising personalization and non-essential device storage rely on valid consent where required; paying for the free game through advertising does not make all advertising necessary for a contract. You can withdraw consent through the available advertising privacy controls.
Account and provider deletion
When a game account is deleted, we remove its Firebase account and associated cloud save and request deletion of the RevenueCat customer record linked to that game-account identifier. RevenueCat accepting a deletion request does not by itself complete the process: the linked customer record must be confirmed absent before cleanup is marked complete.
If cleanup fails or is still pending, we keep a minimal tracking record so the request can be retried or reviewed. The retention periods below explain when completed cleanup records expire. For a purchase made without a game account, use the guest purchase request process. Account cleanup does not erase local game progress or issue a purchase refund.
Requests about guest purchase records
If you bought Premium without creating a game account, send your Google Play order reference and describe your request. You do not have to find an internal user ID. We use the reference to locate the relevant purchase and, where reasonably necessary, ask for a redacted receipt showing only the relevant product, date and reference. A reference alone is not treated as proof that you own the purchase.
If you have no purchase reference or game account, tell us that. We explain whether the available information can identify an associated record and any limitation. We do not require a reinstall or collect a new identity profile just to identify a guest record. Deletion, clearing local progress, restoring a purchase and requesting a refund are separate actions.
How long information is kept
We keep the current account and cloud save while they are needed for the account service you request. Records needed to recognize and restore a valid one-time Premium purchase are handled for that purpose; deleting an account is separate from a purchase refund.
Minimal cleanup records expire seven days after account and associated provider cleanup has been verified as complete. Expiry does not guarantee instantaneous physical deletion by the storage service. For unresolved cleanup, we retain the minimum tracking information needed to finish the request, then apply the completion period.
Support correspondence and privacy-rights request records are kept only while needed to verify the request, investigate it, provide the outcome and resolve any related follow-up. Once those purposes are complete, the correspondence, identity-check material and linked case information are deleted unless a specific legal obligation or an open dispute requires particular information to be retained. Any such exception is limited to the relevant information and lasts only for the applicable obligation or the resolution of that dispute. These criteria also apply to support attachments; material unrelated to the request is deleted. You may ask which information is retained and why.
The account-cleanup server function is deployed, and its application log stream is configured for seven-day retention. This limit does not apply to Android system logs, required provider audit logs or other provider records. The seven-day cleanup and scoped-log periods are operational limits, not periods fixed by law.
Qualifying invoices are retained for the applicable Slovenian accounting period, generally ten years after the end of the relevant year; that rule does not apply to all game data or support mail. Provider security, audit, backup and service records follow their applicable terms and retention processes. For example, Firebase states that deleted Authentication information is removed from its live and backup systems within 180 days. We do not promise immediate erasure of every provider backup.
Providers, processing locations and safeguards
We use Firebase and Google Cloud for account, saved-game, application-integrity and service operations; RevenueCat and Google Play for purchase and entitlement handling; and Google AdMob and its disclosed advertising partners for advertising where available. Support messages are handled through Konsepto’s business email service. These providers receive the information needed for their respective functions.
Firestore and the Google-managed cleanup Functions are deployed in europe-west1 in Belgium. This does not mean that all provider processing takes place in Belgium: Firebase Authentication, Hosting, advertising, email and RevenueCat have separate infrastructure and processing arrangements. RevenueCat’s published data-processing terms identify US subprocessors and applicable international-transfer safeguards. Relevant provider terms include data-processing agreements and, where applicable, Standard Contractual Clauses. Contact us for information about the applicable safeguards or how to obtain a copy.
Visits to Aquamora’s public website
If you visit Aquamora’s public website, Firebase Hosting receives your IP address with page requests and uses it to detect abuse and analyze service usage. Firebase states that Hosting retains IP data for a few months. The website adds no tracking scripts or external fonts. Reading this document inside the game does not require opening that website.
Your privacy rights
Depending on the processing and applicable conditions, you can request access, correction, deletion or restriction, object to processing, request data portability, and withdraw consent without affecting processing that was lawful before withdrawal. Contact blockamora@konsepto.si. If we must retain specific information or cannot identify a record using proportionate information, we explain the reason and the available next steps. We do not require passwords or build a new identity profile solely to identify an otherwise unidentifiable record.
How to make a privacy request
Email blockamora@konsepto.si and tell us what you need help with. For a game account, include its email address; we may reply to that address to confirm control. You do not need to reinstall the game. For a purchase without a game account, a Google Play order reference can help us locate the transaction. We ask for further information only when reasonably needed to verify the request. Never send your password, card details or purchase token.
Handling a request requires the relevant correspondence and only the identifiers reasonably needed to verify and resolve it. We provide information about action on a privacy-rights request without undue delay and within one month of receiving it. If complexity or the number of requests makes an extension necessary, we explain the reason within that first month; the extension may be up to two further months.
Complaints and appeals
You can complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), or to your competent data-protection supervisory authority. You do not have to contact us first in order to exercise that complaint right.
Our decision on your privacy-rights request includes its reasons and the available appeal route. Under the Slovenian procedure, you can appeal that decision to the Information Commissioner within 15 days of learning of it. Official guidance and forms are available from that authority. This does not limit your other complaint or judicial remedies.
Policy updates
This policy is versioned by its effective date. Changes will be published in the policy available through the game and on Aquamora’s public website. Contact us if you have questions about a change or a privacy request.
Contact
Konsepto d.o.o.
Dunajska cesta 136
1000 Ljubljana, Slovenia
blockamora@konsepto.si