Privacy, explained plainly.

1. Scope

This Privacy Policy explains how Marble Comet LLC (“Marble Comet,” “we,” “us,” or “our”) handles information when a person uses LumaPetal Puzzle (the “App”). It applies to the Android version offered through Google Play. The App is free, may show advertising to eligible free users, and offers an optional one-time LumaPetal Lifetime Premium purchase.

The App does not offer a production account, cloud sync, remote analytics, or a production remote-content service.

2. Information stored on the device

The App stores preferences, puzzle progress, saved sessions, statistics, achievements, favorites, daily and weekly history, photo-puzzle metadata, a derived age-treatment bucket with its classification date and policy version, and a cached Premium-entitlement status in app-private storage. Marble Comet does not receive that local gameplay or age-classification data.

Local data generally remains until the relevant item is deleted, Android app storage is cleared, or the App is uninstalled. This Android release disables app-data backup and device transfer, so LumaPetal’s local puzzle progress, preferences, sessions, and imported-photo copies are not backed up or transferred by Android.

3. Photos selected by the user

When a user chooses a photo through the Android system picker, the App receives only the selected file, lets the user crop it, re-encodes it as a JPEG, and stores a copy in app-private storage. LumaPetal does not upload the selected photo to Marble Comet, Google Mobile Ads, RevenueCat, or a LumaPetal server.

A user can delete an App-held photo-puzzle copy in Create. This does not delete the original or recall a copy previously shared outside the App. LumaPetal disables Android app-data backup and device transfer. If the user chooses Share, the Android share sheet offers the generated share card and an accompanying public LumaPetal product-page link to the selected destination. The destination decides which shared items it accepts, and its terms and privacy policy apply.

4. On-device diagnostics

If diagnostics are enabled in Settings, the App keeps a temporary in-memory list of up to 200 recent feature-event names and short structured values. It is designed to exclude selected photos, email addresses, puzzle names, search text, and other free text. The App has no remote analytics or crash-reporting sink, so this history is not transmitted to Marble Comet.

Users can turn diagnostics off under Settings → Data & privacy and clear the history under Settings → Diagnostics. The list is also lost when the App process ends. Copy diagnostics places technical details on the clipboard; Marble Comet receives them only if the user intentionally sends them.

5. Advertising and consent

The Android release is configured to use Google Mobile Ads. Eligible free players may receive a separated banner beneath the gameplay piece tray; a frequency-capped interstitial at the natural break after a qualifying puzzle is completed and safely recorded; and an optional rewarded ad for one play of an eligible Premium puzzle or one bonus hint after the three free hints are spent.

Rewarded ads are player-initiated. No unsolicited full-screen ad interrupts an active solve or Replay. Replay, Start over, Resume, and Play again do not trigger interstitials. Completion interstitials are preloaded, fail open when unavailable, share a 15-minute interval, and are limited to two per session and five per local day. Lifetime Premium removes all advertising and prevents ad requests.

Google Mobile Ads and configured ad providers may receive an IP address, approximate location, app and ad interactions, diagnostic and performance information, and device, app-set, account, or advertising identifiers, depending on Android, regional consent, and production configuration. Providers may use that information for advertising, measurement, analytics, security, and fraud prevention.

The App uses Google’s User Messaging Platform for regional privacy choices. When Google reports that choices must remain available, users can reopen them under Settings → Data & privacy → Advertising privacy choices.

The age screen runs before User Messaging Platform or Google Mobile Ads starts. For users classified as 13–17, the App sends Google’s under-age-of-consent and child age-treatment signals with a G maximum ad-content rating. Google documents that child treatment disables personalized ads, remarketing, third-party ad-vendor requests, and transmission of the Android advertising ID. Users classified as 18+ receive unspecified age treatment with the same G rating. If age is under 13 or remains unknown, the App starts no advertising SDK and makes no ad request.

6. Lifetime Premium and purchase information

LumaPetal Lifetime Premium is a one-time, non-renewing in-app product purchased through Google Play. The current United States base price is USD $14.99; Google displays the final price, taxes, refund rules, and purchase terms before confirmation and processes the payment. LumaPetal and RevenueCat do not receive the buyer’s full payment-card number.

After the on-device age classification permits App use, the App configures RevenueCat to resolve Premium status, including at startup and when a purchase or restore is requested. RevenueCat validates Google Play transactions, provides and restores Premium access, and provides purchase reporting. Because the App has no sign-in account, RevenueCat creates a random anonymous app user ID. RevenueCat may receive that identifier, device type, operating-system information, last-seen time, product identifiers, a Google Play purchase token, and transaction or entitlement status. Automatic device-identifier collection is disabled in the LumaPetal RevenueCat SDK configuration.

RevenueCat does not start until the on-device age classification permits App use. It does not create an anonymous ID, validate a purchase, or receive a request when age is under 13 or classification remains unknown.

7. Accounts, cloud services, and network access

This release does not offer production sign-in, create a Marble Comet account, upload gameplay progress for cloud sync, enable a public leaderboard, or use remote analytics. Profile labels remain on the device. The puzzle catalog is bundled for offline use, and no production remote-catalog endpoint is enabled.

8. Notifications, support, sharing, and local storage

Daily reminders are optional local notifications. First-time setup includes a daily reminder selected by default for 7:00 PM local time; users can turn it off before continuing. The App requests the phone’s notification permission before scheduling a reminder and respects a denial. Users can change the time or turn reminders off in Settings. Existing users’ saved reminder choices are preserved. The App does not use a push-notification account or add users to a marketing list.

Email support opens the user’s mail app. Marble Comet receives the sender’s address, message, and attachments only after the user sends them. Retention of support messages depends on what is reasonably needed to answer the request, maintain security, resolve disputes, and comply with law. Android sharing, Google Play checkout, mail providers, and external links are separate services with their own terms and privacy practices. LumaPetal disables Android app-data backup and device transfer.

9. Disclosure, retention, and deletion

Marble Comet does not sell selected photos or local gameplay history. Information is disclosed only as described here, at the user’s direction, to providers needed for an enabled feature, or when required by law or to protect rights, safety, and security.

Delete photo-puzzle copies from Create, clear temporary events under Settings → Diagnostics, and disable reminders in Settings. Clear Android app storage or uninstall to remove remaining local App data and the derived age bucket. Because LumaPetal disables Android app-data backup and device transfer, that local data is not restored after reinstall. A qualifying Google Play purchase entitlement may still be restored through Restore Purchases.

Google Play and RevenueCat may retain transaction records to validate, report, and restore purchases. Google and configured ad providers retain ad-request information under their policies. Users can contact privacy@marblecomet.com about privacy or personal-information requests; requests are evaluated subject to legal, security, and verification requirements. This release has no Marble Comet app account to delete.

10. Security and privacy rights

The App uses Android app-private storage and HTTPS for configured network services. Marble Comet limits access to support and service information to people and providers who need it. No storage or transmission method is completely secure.

Depending on location, a user may have rights to access, correct, delete, restrict, or object to processing, and may have appeal or authorized-agent rights. Marble Comet may need to verify a request and may retain information when law permits or requires it.

11. Children and target audience

LumaPetal is intended for users aged 13 and older. The App is not primarily directed to children under 13 and is not planned for Families or Teacher Approved promotion.

Before any network SDK starts, a neutral screen asks for a date of birth without a preset or a hint about the permitted age, then asks the user to confirm or edit the entered date. No classification is stored before confirmation. Once confirmed, the date is used transiently on-device to derive an age-treatment bucket and is then discarded; it is never persisted or transmitted. Only the derived bucket, classification date, and policy version are stored.

An entered age under 13 cannot continue and starts no User Messaging Platform, Google Mobile Ads, RevenueCat, or other network SDK. The same zero-network behavior applies while classification is missing, invalid, expired, or unknown. Some countries treat teenagers as children, so local protections still apply.

12. International processing and changes

Google, RevenueCat, configured ad providers, and mail providers may process information in countries other than the user’s country. Their notices describe their locations, transfer practices, and safeguards. Material changes to this policy will receive a new effective date and, when appropriate, an in-app notice.