Maze67 Privacy Policy

Effective and last updated: October 1, 2026

This policy describes the Android game Maze67 (package com.gravestory.maze67), its leaderboard service, and the developer-only Maze67 YouTube publishing utility. You can play the complete local game without creating a leaderboard identity.

Data we process

• Leaderboard identity: a public username and random public player ID after you choose to claim a username.
• Authentication: random account tokens and Recovery codes. Tokens are stored in Android secure storage; the service stores only cryptographic hashes.
• Scores: level, campaign mode (Possible, Impossible, Horror, or Just Run), input type (controller when a game controller moved or turned the player during the run, otherwise touch), completion time, random run ID, app version, texture mode, and submission time. The public leaderboard shows username, player ID, level, campaign mode, input type, time, and rank on separate Possible, Impossible, Horror, and Just Run boards, each with a Touch board and a Controller board.
• Moderation: reports you submit, including the reported player, reason, optional details, status, reviewer decision, and an audit record.
• Security: short-lived keyed network identifiers and request counters used for rate limiting. The application database does not store raw IP addresses, advertising IDs, or device IDs.
• Age handling: Google Play Age Signals may provide an age range or parental-approval status. Maze67 uses that information only for age-appropriate access and parental approval; it is not used for advertising, marketing, profiling, or analytics. Separately, a birth date is checked on this device and immediately discarded. Android secure storage keeps only the derived teen or adult age band and verification time. Maze67 does not send the birth date, exact age, or Play Age Signals response to advertising providers. The Maze67 service and leaderboard database receive no age data. The separately derived on-device age band selects restrictive advertising settings for teens; Play Age Signals data is not used for advertising. Teen advertising cannot be personalized. Where regional SDK consent requires a verified consent authority that this age band cannot establish, teen advertising remains disabled.
• On-device data: shared campaign progress, campaign preference, mode-specific best times, Impossible clear marks, persistent player-authored floor arrows stored separately by mode and maze, game-placed Horror danger marks, blocked-player IDs, cached leaderboards, and pending score submissions. An update-reminder record (the offered app version and the date it was shown) is kept in Android secure storage and is not sent anywhere. Floor-arrow and danger-mark positions and traveled-cell history are not submitted to the leaderboard service. Account credentials and the Recovery code use Android secure storage.
• Ranked Score integrity: Google Play Integrity processes app recognition, licensing, and device integrity for Ranked Score verification. Maze67 retains only the bound request hash, provider timestamp, coarse accepted verdict class, and bounded decision code. Maze67 does not retain raw integrity tokens, full Google responses, Google identity, advertising IDs, raw IP addresses, or stable device identifiers.

YouTube API Services

The developer-only Maze67 Windows Publisher uses YouTube API Services solely to publish approved, original Maze67 gameplay videos to the developer-owned Maze67 YouTube channel. The publisher is not distributed to other users and cannot authorise or manage third-party channels.

• OAuth and scopes: the publisher uses youtube.upload to upload videos and youtube.readonly to confirm the authorised channel and the resulting public video.
• YouTube data processed: the authorised channel ID; video IDs; titles, descriptions, tags, categories, privacy status, and other upload metadata; and API responses needed to confirm each upload.
• Storage and retention: the OAuth client credential and refresh token are encrypted with Windows Data Protection API for the authorised Windows account. Access tokens are used for API requests and are not written to long-term storage. Local publishing receipts may retain video IDs, public URLs, upload metadata, and API status for operational and compliance records. No YouTube user data is sent to the public leaderboard service.

Use of YouTube data is subject to the YouTube API Services Terms of Service, the YouTube API Services Developer Policies, and the Google Privacy Policy. The authorised account owner can review or revoke access in Google Account connections; revocation stops further API access. The operator can remove the local OAuth credential and can manage or delete published videos in YouTube Studio. YouTube data is not sold or shared with third parties.

Ads and personalization

Free play includes basic contextual advertising from Unity LevelPlay and Unity Ads between eligible mazes, where age and regional privacy requirements allow. Basic ads are not personalized. Unity can process device and app information, diagnostics, IP address and IP-derived approximate location, and interactions with ads to deliver advertising, measure performance, support ad functionality, and prevent fraud. Choosing Personalized ads also allows Unity to use advertising and other identifiers, purchase history, and interests to personalize ads. The native Ad privacy screen explains these choices and links provider privacy information. Teen advertising uses restrictive child-directed, device-identifier opt-out, and nonpersonalized signals before SDK initialization. No advertising SDK initialization, load, or display is permitted with unresolved age, regional privacy context or ownership, refused SDK permission, Premium ownership, or earned permanent ad-free play.

LevelPlay also includes Unity Ad Quality. Its ad measurement can associate a provider-generated user identifier with ad impressions, clicks, completion and closing times, impression-level advertising revenue, device and app information, and coarse location to analyze ad quality, performance, and player retention. The provider identifier is not a Maze67 leaderboard account.

Basic ads do not require agreement to personalization. Adult personalization is optional. In the European Economic Area, United Kingdom, and Switzerland, Maze67 also requires explicit permission before running the advertising SDK, including for basic ads. You can decline or withdraw that permission and continue free progression. Teen advertising remains disabled in those regions until the applicable consent authority can be established. Advertising remains unavailable for China and unresolved locations under the current integration policy. Premium or completing the real Colossus removes ads permanently. Preferences are versioned and stored on this device; earlier choices never grant new SDK permission or personalization.

The app requests a regional privacy policy from the Maze67 service without sending age, leaderboard identity, purchase data, or advertising identifiers. Cloudflare derives the request country from network metadata; the service returns only the applicable policy and timestamp, does not store the country in the application database, and marks the response non-cacheable. The app holds it in memory for up to 15 minutes and refreshes it on return to the app and network changes. Missing or expired context blocks new advertising operations. Ads are not tied to Maze67 leaderboard accounts, and the Maze67 service does not receive or store advertising IDs.

Choosing Basic ads withdraws personalization, discards cached ad objects, and applies restrictive provider privacy signals before loading new basic ads. It does not deinitialize an already initialized SDK or delete previously collected data. Where SDK permission is required, declining or withdrawing it first stores a native advertising block. If the advertising SDK has started, the app closes its process to stop it; completed campaign progress remains saved, but the current run ends. The block survives restarting the app, including a failed secure-preference write, and only a new explicitly saved permission clears it. An ad already dispatched may still need its normal close control. Review Unity advertising privacy and Unity privacy and data controls for provider choices and deletion requests. A failed preference save never grants SDK permission or personalization. Free play remains available. A network or secure-storage failure cannot grant advertising permission. Existing SDK background activity may continue after a temporary connectivity failure; a known regional change that removes SDK permission closes the process before it can be reused.

Earlier Maze67 releases use Google Mobile Ads and Google's User Messaging Platform with their own regional consent choices. Those earlier SDKs may process advertising identifiers, approximate location, app interactions, and diagnostics under the Google Privacy Policy. This paragraph describes older installed releases; Google advertising demand is not part of the new Unity integration.

Purchases and earned rewards

Google Play Billing processes the optional non-consumable unlock_all_levels purchase. Premium grants permanent ad removal and immediate play access to all 67 levels in all four modes. Existing valid remove_ads ownership grants the same premium benefits. Maze67 queries Play ownership, acknowledges verified purchases, and caches ownership in Android secure storage for offline use. Store purchase tokens are used by the native billing integration and are not sent to the leaderboard service. A verified revocation removes paid access; actual clears and records remain on the device.

Completing the real Level 67 exit earns permanent ad-free play and THE OUTSIDE without requiring a purchase. That earned reward does not unlock skipped levels. Purchases do not award clears, records, campaign completion, or THE OUTSIDE. A local timestamp enforces at least two minutes between application ad dispatches, including across restarts.

Why we process data

We use this data to provide the leaderboards, keep the best score for each player, level, campaign mode, and input type, sync pending submissions, prevent duplicate or abusive requests, enforce username rules, process reports, and protect the service.

Sharing and service providers

Public leaderboard fields are visible to other players. Cloudflare provides the Worker and D1 database infrastructure. Google provides Play Billing, Play Integrity, Play Age Signals, and Play In-App Updates. Play In-App Updates lets the Play Store app on your device check whether a newer Maze67 version is available and download it; Google processes device metadata, the app version, and installed modules for that check under Google Play's terms, and Maze67 receives only whether an update is available, its version number, and whether it has downloaded. Unity provides age-restricted advertising with optional adult personalization and its related data processing. We do not sell leaderboard account data.

Retention and deletion

Scores and active account data are retained while the account exists. Issued Ranked authorizations expire after 48 hours; terminal authorization records and credential-recovery receipts expire after 30 days. Rate-limit records expire automatically. Reports and moderation audit records are retained as needed for safety and service integrity. Account deletion removes public username, credentials, scores, and reports involving the account. A non-public player tombstone and keyed username fingerprint may remain to prevent identity reuse, preserve moderation integrity, and defend against abuse.

Use the saved Recovery code to restore the same username on a replacement device or to permanently delete the identity through the app's account controls or web deletion tool. Recovery does not transfer campaign progress. Local Scores are not transferred. Without the code, Maze67 and support cannot restore the identity.

Your choices

You may play offline without a public username, choose basic or personalized ads, revisit Ad privacy in Settings, restore purchases, update locally stored age information, block leaderboard players locally, report usernames, or delete the leaderboard account.

Children

Maze67 is intended for players age 13 and older. A reported under-13 player cannot activate gameplay, leaderboard accounts, purchases, or advertising. Teens ages 13–17 retain free gameplay, with restrictive basic advertising only where the applicable age and regional privacy requirements are met. Teen advertising cannot be personalized. The app does not ask for a real name, email address, precise location, contacts, microphone, camera, or phone data.

Contact

Maze67 is published by Gravestory Labs. For privacy or support questions, email j3k420@gmail.com.

Policy changes

Material changes will be published on this page with a new effective date before the related app behavior is released.