The provider of Aquageorama ("we") handles users' information as follows.
| Information | Details and purpose |
|---|---|
| Anonymous account ID | An identifier created per device on first launch (Firebase Authentication, anonymous sign-in). Used to store your tanks and coins on our server. We do not ask for your name or e-mail address. |
| Sign-in information (if you register) | If you register with an Apple or Google account, we receive the user ID issued by that provider and your e-mail address (if you choose "Hide My Email" with Apple, the relay address issued by Apple). Used to let you use the same account on other devices and to manage your account. For Google, the account name and profile image URL are also included in the authentication record (Firebase Authentication) but are not used by the App. We never receive your Apple / Google password. |
| Tanks you publish to the gallery | The layout, thumbnail image, title, author name (entered by you) and language of the tanks you choose to publish. They are made public so that other users of the App can view them. Likes, reports and blocks are used to rank posts and to handle inappropriate content. |
| Notification information | If you allow notifications, a device identifier for delivering them (a Firebase Cloud Messaging token) is registered with Google's notification service, and announcements are sent in your language (Japanese / English). We do not store it in our database. |
| Your tank data | The layout of each tank (placed items, painted areas, fish, water level) and its name. Stored on our server so it can be restored for the same account. |
| Coins and purchase records | Your Aqua Coin balance, purchased items, in-app purchase order IDs, products and amounts, and rewarded-ad records (transaction IDs), and treasure-chest records (items received, coins spent and the count toward the guarantee). Used to process purchases, prevent double crediting and fraud, and meet legal obligations (tracking unused prepaid balance). Payment details such as card numbers are handled by Apple / Google and never reach us. |
| Store country or region | To decide whether the treasure chest can be opened with Aqua Coins where you live, we use the country or region of your App Store / Google Play account (on the web version, estimated from your browser's time zone and language) and keep it in the treasure-chest records. |
| Device and app information | Device model, OS version, app version and language. Used to adjust rendering and investigate problems. |
| Usage and diagnostics | Screen load times, interaction events (viewing a tank, saving an image, widgets, purchases, ads, sync failures), errors and crashes (Firebase Analytics / Firebase Crashlytics). Used to improve quality. Tank contents and names are not included. The advertising identifier is not used for Analytics. In the web version (played in a browser), instead of Analytics / Crashlytics, we record an error only when one occurs: the error message, screen, version, browser type (User-Agent), GPU name, language and screen size, together with your account ID, in our database (Firestore). Up to 20 reports per day; used only to investigate problems. |
| App integrity | Verification that requests come from an unmodified app (Firebase App Check: Play Integrity on Android, App Attest / DeviceCheck on iOS, Google reCAPTCHA on the web). Used to prevent abuse. reCAPTCHA sends device and browser information to Google (the Google Privacy Policy and Terms of Service apply). |
| Advertising identifier | Used by Google AdMob to show rewarded ads and to grant and verify rewards. On iOS we ask for tracking permission (ATT); in the EEA, UK and Switzerland we ask for consent. Without consent, non-personalised ads are shown. |
| Home-screen widget images | Tank images you send to the widget stay on your device and are not uploaded. |
We do not share personal information with any other third party without your consent, except where required by law.
Server data is stored on Google Cloud (including the Tokyo region). Account IDs, tank data and coin/purchase records are kept until you ask us to delete them or the service ends. Usage and diagnostics data are deleted automatically after the Firebase default retention periods (Analytics: up to 14 months, Crashlytics: 90 days); neither is linked to your account ID. Web error reports are deleted after about 90 days.
Gallery posts stay public until you withdraw them or delete your account. When a device switches to a registered account, the data of that device's anonymous account is deleted automatically 30 days after the switch (only the remaining balance of paid Aqua Coins is moved to the account you switch to). When you delete your account, your server data is deleted immediately, except for purchase and rewarded-ad transaction records (order IDs, transaction IDs, products, amounts and dates), which we keep after deletion to process refunds, prevent double crediting and meet legal obligations.
We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us.
All server communication is encrypted (HTTPS). Server-side access control (Firebase Security Rules and App Check) prevents anyone other than the account owner from reading or writing their data.
Changes to this policy are published on this page; significant changes are also announced in the app.
IWANAWORKS, K.K.
E-mail: nishioka@iwana.works