Privacy Policy

1. Overview & Application Identity

Welcome to Candy Crush Ultra (Package Identifier: com.candycrushultra.app). This privacy policy informs players and regulatory authorities of our strict commitment to zero data collection, offline privacy, and security protocols.

Candy Crush Ultra is developed and operated as a privacy-first, local-first web application and Progressive Web App (PWA) designed to provide 100% ad-free Match-3 puzzle gameplay without collecting any personal data.

2. Zero Personal Data Collection (100% Client-Side)

We respect your fundamental right to digital privacy. We explicitly confirm:

• No Personal Information: We do NOT collect your name, email address, phone number, physical address, or contact list.
• No Account or Registration Required: The application does not require any login, signup, or authentication credentials.
• No Device Identifiers: We do not collect or transmit IMEI, Android ID, Advertising ID (AAID), or hardware serial numbers.
• No Geolocation Tracking: We never request or access GPS, network location, or Wi-Fi scanning permissions.
• No Third-Party Ad Networks: We do not incorporate Google AdMob, Unity Ads, AppLovin, or any advertising SDKs. The app is completely free of advertisements.

3. Local Storage & Data Retention

Candy Crush Ultra uses client-side browser storage (specifically localStorage and IndexedDB) solely to power core gameplay functionality. This data is stored strictly on your local device and is NEVER transmitted to external servers:

• Level Progression: Current level reached (from Level 1 to Level 199) and stars earned per stage.
• High Scores: Your best scores and move records.
• Game Preferences: Audio toggle (sound effects on/off) and haptic vibration preferences.
• Offline Cache: Game assets cached by the Service Worker (sw.js) to allow fully functional offline play when disconnected from the Internet.

You retain full control over this data. You can erase all saved progress at any time by clearing your browser cache, storage data, or uninstalling the PWA.

4. Security Measures & Data Protection Protocols

We prioritize the security and integrity of your gaming experience through industrial best practices:

• HTTPS Enforcement: All app assets and code are served exclusively over encrypted HTTPS connections (TLS 1.3) to prevent tampering or man-in-the-middle attacks.
• Origin-Private Sandboxing: All game logic runs within the sandboxed web browser context with no external code execution permissions.
• Service Worker Isolation: The Service Worker operates strictly as an asset caching proxy with zero telemetry transmission capabilities.

5. Children's Online Privacy Protection (COPPA & GDPR Compliance)

Candy Crush Ultra is family-friendly and suitable for all ages. Because we do not collect, store, transmit, or monetize any personal data from any user, our application strictly complies with the Children’s Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and the Google Play Families Policy.

6. Changes to this Privacy Policy

We may update our Privacy Policy from time to time to reflect game engine improvements or legal updates. Any revisions will be published immediately on this page with an updated "Last Updated" timestamp.