Privacy Policy

The short version

Mass Reaction is an endless balance puzzle for iPhone. This policy explains, in plain terms, what the game and this website process, what they do not, where the data goes and how long anything is kept.

• No accounts, no sign-up, no names. You can play without giving us your name or email address.
• Your progress stays with you. Your best score, settings and seen tips stay on your iPhone; your stash of special balls is kept in your own iCloud account. We cannot see either.
• Apple handles payments and the leaderboard. Purchases go through the App Store, and scores go to Game Center if you are signed in. We never receive your card details.
• We use non-identifying game statistics. Firebase Analytics receives limited gameplay events, such as runs started and finished or the shop being opened. They are not linked by us to your name, email address, Apple ID or advertising ID.
• No advertising, no cross-app tracking, no sale of data, and no cookies inside the game.
• The website uses analytics cookies only with your consent, given in its cookie banner.

Who is responsible

Mass Reaction and massreaction.app are developed and published by Yulia Shishkina, an independent software developer in Luxembourg, who is the data controller for the personal data described in this policy (“we”, “us”). The game is designed to avoid collecting directly identifying personal data wherever possible. For any privacy question or request, send us a message (opens your email app).

On your iPhone

The game keeps a few things on your iPhone: your best score, your settings (such as vibration), which special-ball tips you have already seen, and a copy of your stash. This information stays on the device, is not sent to us, and is removed when you delete the game. The game does not ask for access to your camera, photos, microphone, contacts or location.

Your stash in iCloud

If iCloud is turned on for the game, it keeps counters of the special balls you have bought and used in your private iCloud key-value storage, so your stash follows you to your other devices and survives reinstalling. To keep devices from overwriting each other, the game creates a random identifier for each device; it is not linked to your name, Apple ID or any advertising identifier.

This data is stored by Apple in your iCloud account under Apple’s Privacy Policy. We cannot see or access it. If iCloud is off, the stash is kept only on that device and is lost if the game is deleted.

In-app purchases

Special-ball packs are optional and sold through Apple’s in-app purchase system. Apple handles the payment; we never receive your card details or billing address. The game receives a confirmation of the transaction from Apple so it can add the items to your stash.

Game Center

If you are signed in to Game Center, the game submits your score at the end of a run to the Mass Reaction leaderboard. Depending on your Game Center settings, your nickname and score can be visible to other players. Game Center is operated by Apple; you can manage your profile and visibility in your iPhone settings.

Game statistics

The game uses Firebase Analytics, a Google service, to receive limited gameplay events: for example, a run started or finished, the level and score reached, special balls used, the shop or a purchase offer opened, settings changed and the game language. We use these statistics only to understand how the game is played, find problems and balance it.

Firebase Analytics also processes basic technical data needed to deliver the statistics, such as the app version, the iOS and device model, the country and a pseudonymous app-instance identifier. That identifier is not a name or an account ID. We do not combine it with contact details, iCloud data or Game Center profiles, and we do not use it for advertising or cross-app tracking. The game does not access the advertising identifier (IDFA). Deleting and reinstalling the game creates a new app-instance identifier. See how Google uses information from sites and apps that use its services.

This website

massreaction.app has no advertising trackers, accounts or forms. Fonts and images are served with the site rather than loaded from other services. Two small scripts run on the pages: one builds our support address when you click a contact button and stores nothing; the other shows the cookie banner and remembers your answer in your browser’s local storage (not a cookie), so we do not ask again on every page.

To deliver and protect the pages, our hosting provider in Germany and Cloudflare, which sits in front of the site, process technical connection data such as your IP address, browser type, the page requested and the time. This data is used only to run and secure the site and is not combined with other information.

Website analytics

If you click “Accept” in the cookie banner, the site loads Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you click “Decline” or ignore the banner, it is not loaded and nothing is sent to Google.

With your consent, Google Analytics sets two first-party cookies, _ga and _ga_BN36B66LGS, which tell visits apart and last up to two years. It records the pages you view, scrolling, clicks on links to other sites and similar interactions, along with your browser and device type, screen size, the page you came from, and an approximate location derived from your IP address. Google Analytics 4 does not log or store IP addresses. Google signals and ad personalisation are turned off.

You can withdraw your consent at any time: click “Cookie settings” at the bottom of any page and choose “Decline”. The site then deletes the Analytics cookies and stops loading Google Analytics. Open cookie settings.

When you contact us

If you email us, we receive your email address, your message and anything you choose to include. We use it only to answer you. Mail to our support address is forwarded by Cloudflare Email Routing to a mailbox hosted by Google. Please do not send card details, passwords or other sensitive information.

What we do not collect

• names, phone numbers or email addresses in the game;
• account credentials (there are no accounts);
• your location, photos, camera, microphone or contacts;
• payment card data (Apple handles payments);
• advertising identifiers (IDFA) or data for cross-app tracking;
• health or financial data.

We do not sell personal data and do not use it for advertising.

Service providers

We rely on these providers to run the game and the website. Each one processes only what is described above.

International transfers

Google, Cloudflare and Apple may process data outside the European Economic Area, including in the United States. For such transfers we rely on appropriate safeguards under the GDPR: the EU–US Data Privacy Framework where the provider is certified, and the European Commission’s Standard Contractual Clauses where applicable.

Legal bases

• Performance of a contract (Art. 6(1)(b) GDPR): delivering the special balls you buy and keeping your stash.
• Our legitimate interests (Art. 6(1)(f) GDPR): keeping the website secure and available, answering your messages, and measuring non-identifying game statistics to fix problems and balance the game.
• Your consent (Art. 6(1)(a) GDPR): website analytics cookies. You can withdraw it at any time under “Cookie settings”.
• Your choices: turning on iCloud or signing in to Game Center.

Game statistics and connection data are pseudonymous rather than anonymous, so the GDPR may apply to them; we do not claim otherwise.

How long we keep data

• Data on your iPhone: until you delete the game.
• Your stash in iCloud: in your iCloud account, under your control.
• Game statistics: according to the retention settings of the Firebase Analytics property.
• Website analytics: event-level data for two months and user-level data for 14 months; after that only aggregated reports remain.
• Connection data at the host and Cloudflare: according to their log-retention policies.
• Support emails: only as long as needed to handle your request and any follow-up.

Your rights

Where the GDPR applies, you may have the right to access, correct or erase your personal data, to receive a copy of it, to object to or restrict its processing, and to withdraw consent. To make a request, send us a message (opens your email app). Because the game has no accounts, we often cannot find statistics that belong to a particular player; we will not collect extra identifying data just to do so unless you ask us to. Data held by Apple, including iCloud, purchases and Game Center, is managed through your Apple account.

You can also complain to a supervisory authority. In Luxembourg, this is the Commission nationale pour la protection des données (CNPD).

Children

Mass Reaction is a general-audience puzzle game. It does not ask anyone, including children, for personal information, and it does not knowingly collect personal data from children. Purchases and Game Center are subject to the parental controls of the Apple account used on the device.

Security

• collecting as little as possible and avoiding accounts;
• keeping game progress on your device and in your own iCloud;
• encrypting the website and all game traffic in transit (HTTPS);
• restricting access to the server and to the analytics properties.

No online service can guarantee absolute security, but the game is designed to hold as little identifiable data as possible.

Changes to this policy

We update this policy when the game, the website, our providers or our data practices change, before the change reaches you. The date at the top always reflects the current version, which is published at https://massreaction.app/privacy.html.

Contact

For privacy or support questions, contact Yulia Shishkina, independent software developer, Luxembourg: send us a message (opens your email app).