UPPERLEAF · Block Puzzle Heaven

Privacy policy

Effective October 20, 2026. This policy covers Block Puzzle Heaven, including its internal test versions. Features and data processing can differ between versions and between guest and connected play.

Who we are

UPPERLEAF develops Block Puzzle Heaven. Contact us at upperleaf.official@gmail.com for privacy questions or requests.

Game and account data

• Guest play: progress, preferences and unlocked items are stored on your device. Guest play does not prevent advertising services from processing device data.
• Google sign-in: Google and our authentication service process your email address, account identifiers, display name and profile metadata returned by Google. We do not receive your Google password.
• Connected features: when enabled, game-account identifiers, cloud progress, scores, gameplay inputs used to verify scores, inventory and reward records support synchronization, rankings and reward verification.
• Chosen region: you select a country or city for regional rankings. This selection does not verify your residence and is separate from GPS location access.
• Support: emailing us shares your email address, message and any information you include. Do not send Google passwords, sign-in codes or login tokens.

Advertising

The game includes optional rewarded advertising through Google AdMob. Advertising services process IP addresses, device or account identifiers, app interactions and diagnostic information for advertising, measurement and fraud prevention. An IP address can be used to estimate an approximate location.

Ad privacy choices are separate from Google sign-in. Choosing guest play or skipping a reward ad does not establish that the advertising SDK has processed no data. Ad personalization depends on applicable consent and age protections; non-personalized ads can use contextual information.

Sharing and service providers

Google supports sign-in and advertising, Supabase supports authentication and database storage, and Google Cloud hosts the game API. These providers process data to operate their services. See the Google privacy policy and Supabase privacy policy.

Where public rankings are enabled, your game display name, selected character, score and chosen ranking region can be visible to other players. Your sign-in email is not a public leaderboard label.

The current game database and API are configured in Seoul. Google Cloud log storage is configured globally. These settings do not mean that all authentication, advertising, provider logs or recovery copies are processed only in South Korea.

Retention

Connected account and gameplay records remain in the service until removed. We use these records to provide connected features, maintain reward integrity and resolve support requests. Signing out or uninstalling the game does not remove server-side records.

The current Google Cloud default log bucket retains logs for 30 days and its required audit-log bucket for 400 days. These periods apply to those buckets, not every provider record. Provider security, authentication and recovery records may have separate retention under the providers' policies. We do not promise that uninstalling the game immediately removes every provider copy.

Account and data requests

You can contact us to request access, correction or deletion of your game-account data. The account deletion page provides the request steps without requiring the game to be installed. We verify ownership before removing account data. Deleting a game account does not delete your Google account.

Requests are handled manually by UPPERLEAF support, with technical processing and recovery handled by our infrastructure team. We verify control of the confirmed Google email address on file before processing. We review associated service records, controlled copies and support correspondence for each request. Before marking a request complete, we confirm the removed categories and explain any retained records, reasons and applicable retention periods. A submitted request is not confirmation of deletion, and we do not promise immediate complete erasure or automatic deletion within 90 days.

Your choices and security

You can play as a guest or choose to connect an account. Where available, use the game's ad privacy options to review your choices. You can also manage your Google permissions and Android advertising ID in their respective settings. Current game-service connections use HTTPS; advertising and authentication SDKs use their providers' encrypted connections.

The intended audience is teenagers aged 13 and above and adults. The store content rating describes game content; it does not determine an individual player's age or consent. Age-related protections depend on the applicable region and service. Contact us if you believe a child's data has been provided inappropriately.

Changes

We update this page when data practices change. The effective date identifies the current policy. Contact upperleaf.official@gmail.com with questions.