Merge BattlesPrivacy Policy
Last updated: September 25, 2026
Merge Battles is a game made by Doop Woop ("we", "us"). This policy explains what information the game collects, why, and what your choices are. We try to collect as little as we can to run the game.
What we collect
| Information | Why we need it |
|---|---|
| A guest ID. When you first open the game, an anonymous account is created for you automatically. | So your progress and stats can be saved on your device's account. |
| Username and password, if you make an account. Your password is stored securely by our login provider and we can't read it. | To sign you in and keep your progress if you change phones. |
| Recovery email (optional). | Only to send a one-time code if you forget your password. It is never shown to other players. |
| Gameplay data: match results, scores, ranks and points, XP and level, match history, merge statistics, badges, the theme you have equipped, and your VIP status. | To run matches, the ladder and the leaderboard, and to show your profile. |
| Mailbox, poll and safety data: which messages you have read or claimed, your votes on feature polls, players you have blocked, and reports you send about other players. | To make those features work and to keep the game safe. |
| Purchase records. Payments are handled entirely by Apple. We only receive a transaction ID and the product you bought. | To unlock what you bought (such as VIP) and prevent it being counted twice. |
| Anti-cheat records. If a match breaks the game's rules, we may log details of that match. | To keep matches fair. |
| Connection details. When you play online, our game server sees your device's IP address. | To connect you to matches and to limit abuse. We don't keep it as part of your profile. |
What other players can see
Your username, rank, points and badges can appear on the leaderboard and on your profile. During a match your opponent only sees you as "Opponent" and never your name. Nothing else in your profile is visible to other players.
Who helps us run the game
We use a small number of services to operate Merge Battles. They handle information only for the purposes described here:
- Supabase hosts our accounts and database.
- DigitalOcean hosts the game server that runs matches.
- Cloudflare runs our domain and this website.
- Resend delivers password-reset emails, only if you have saved a recovery email.
- Apple provides the App Store, TestFlight and purchases.
We do not sell your information, and we do not share it for advertising.
How long we keep it
We keep your account information for as long as your account exists. Anti-cheat records may be kept for a limited time after an account is deleted, without being linked to the account, so we can keep matches fair.
Deleting your data
You can delete your account in the game: open your profile, choose Account, then Delete Account. This permanently removes your account, stats, match history, badges, votes, mailbox records and recovery email. If you can't get into the app, email us and we'll delete it for you.
Your choices and rights
You can ask us to show you the information we hold about you, correct it, or delete it. If you live in California, the EU, the UK or another place with privacy laws, those laws may give you additional rights, and we will honor them. To make a request, email support@playmergebattles.com. We may need to confirm it's you before we act.
Children
Merge Battles is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.
Security
Our account and database connections use encryption. No system is perfectly secure, so please use a password you don't use anywhere else.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the game.
Contact us
Questions about privacy? Email support@playmergebattles.com.