Fast Collect Challenge ("we", "our", or "us") operates the website and game hosted at fastcollectchallenge.com. This Privacy Policy explains what personal data we collect when you play, how we use it, who it is shared with, and the choices you have.

1. Information We Collect

Depending on how you play, we collect the following information:

• Account Data: your username, and your email address if you sign up or log in with an email, Google, or GitHub. If you play as a guest, an anonymous account ID is created for you. Passwords are handled by Google Firebase Authentication and are never visible to us.
• Profile Picture: the picture URL you enter, or the image you upload. Uploaded images are resized and stored on Google Firebase Storage. Your username and profile picture are visible to other players.
• Game Progress & Inventory: your money, apples, potions, index, autosell settings, and in-game achievements.
• Trading Data: trade requests and offers you send or receive, the usernames of the players involved, and the result of each trade.
• Moderation Data: warnings, bans, and information needed to detect cheating or abuse.
• Technical Data: your IP address, browser type, and connection data, which are processed by our service providers to deliver the game, real-time features, and security.
• Data Stored on Your Device: your language choice and local game saves, kept in your browser's local storage.

2. How We Use Your Information

The information we collect is used strictly for the following purposes:

• To create, manage, and secure your player account.
• To save and synchronize your game progression and inventory across devices.
• To enable community features such as trading between players and live game events.
• To prevent cheating, abuse, and unauthorized access, and to apply warnings or bans when needed.
• To maintain and improve game performance and provide technical support.

3. Third-Party Services

We rely on the following providers to run the game. Each processes data according to its own privacy policy:

• Google Firebase: authentication (including Google sign-in and guest accounts) and storage of uploaded profile pictures.
• GitHub: optional sign-in, and hosting of the site's files and images.
• Cloudflare: the server that processes your game actions, economy, and trades.
• Ably: real-time messaging for live events and multiplayer features.

When you sign in with Google or GitHub, you authorize us to access basic profile information (such as your email and name). Our use of information received from Google APIs follows Google's API Services User Data Policy, including its Limited Use requirements.

4. Data Sharing and Security

We do not sell, trade, or rent your personally identifiable information. We share data only with the service providers listed above, as needed to operate the game, or when required by law. We use appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, but no online service can guarantee absolute security.

5. Local Storage

The game stores a few items in your browser's local storage, such as your language preference and offline save data. We do not use advertising or tracking cookies. You can clear this data at any time from your browser settings, which may remove local progress that has not been synchronized to your account.

6. Data Retention and Deletion

We keep your account data for as long as your account exists. You can ask us to delete your account and the data linked to it at any time by contacting us at the address below. Some data may be kept for a limited time when needed for security or to comply with legal obligations.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

8. Children's Privacy

Fast Collect Challenge is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version is always available on this page, with its date at the top.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, you can contact the site administrator at felixrougee@gmail.com or via our official community channels.