Privacy Policy
Effective date: 28 September 2026
Ayush Chaurasia operates GRIDLOCK. This notice explains what the game processes, why it is needed, and how you can control or delete it.
What we process
- An anonymous guest account identifier, a stable GRIDLOCK ID for support, and short-lived session tokens.
- An optional display name and country code used for profiles, matchmaking, leaderboards, and room play.
- Gameplay results, ratings, virtual credits, wallpaper-access records, reward claims, purchase/subscription status, and transaction records.
- When you link a supported sign-in account, an identity service verifies it. GRIDLOCK stores only the provider type and an opaque provider subject needed to restore the account.
- If you allow notifications, reminders (daily rewards, subscription Credits, and an occasional nudge) are scheduled on your device. No notification token or reminder data is sent to our servers.
- The birth year you enter during setup stays on your device and is never sent to our servers. The app uses it only to request ads in child-directed mode for players under 13.
- Optional analytics and crash diagnostics only after you accept analytics/diagnostic consent. These events describe app navigation, gameplay, ads, purchases, and wallpaper-studio actions; they do not include a wallpaper image, board fingerprint, match seed, player name, or file path.
- Wallpaper images are generated on your device and saved to your device gallery only when you choose to export them. The server receives the transaction or reward claim needed to grant access, not the generated image or its editing recipe.
- Advertising services may process online identifiers, IP address, device and app information, ad interactions, and diagnostics needed to serve, measure, limit, and prevent fraud in ads. Where required, we present advertising choices; purchase access is separate from advertising consent.
- Purchase-verification services process the store product identifier, purchase or subscription status, transaction and renewal information, and the GRIDLOCK account identifier needed to verify and deliver purchases. Payment card details are handled by the app marketplace, not by GRIDLOCK.
What we do not require
GRIDLOCK does not require an email address, phone number, password, contacts, biometric data, or precise GPS location to play. Guest play is available without linking for free gameplay. To buy Credits or a Subscription, you must protect the account with a supported sign-in account so the purchase is attached to a recoverable GRIDLOCK account.
Why we use data
We use this information to authenticate sessions, synchronize matches and balances, prevent abuse, process purchases, operate advertising, provide support, and improve reliability when you consent to diagnostics. The GRIDLOCK ID is a support lookup key; it is not an external sign-in identifier or wallet credential.
Advertising and subscriptions
Eligible free accounts may receive banner ads, optional rewarded ads, and post-match interstitial ads. GRIDLOCK Plus subscribers are not served ads, including rewarded ads. Rewarded Credits are granted only after server-side verification. We request advertising consent where required by law.
Sharing and processors
We do not sell personal data. We share the minimum necessary information with service-provider categories that operate our hosting and database, identity verification, analytics and crash diagnostics, advertising, purchase verification, and app-marketplace billing. Those providers process information under their own terms and privacy policies.
Retention and deletion
Active account and economy records are kept while needed to operate the service. Hosting-service operational logs, which can contain request and device-operation information, are retained for 7 to 30 days depending on the service plan. Operational analytics are retained for up to 365 days, failed events up to 90 days, traces up to 14 days, and metric snapshots for up to 30 days. Use Delete account in the app or follow the public instructions on that page. Deletion removes GRIDLOCK-controlled account, economy, linked-provider, reward, receipt, and player-linked match-event records, plus identifying telemetry references. For a linked account, it also deletes the app-specific identity-service profile after fresh sign-in confirmation. It clears local account data and privacy choices, resets optional analytics app-instance data, and disables optional analytics collection. Historical data held by service providers or backups follows their deletion and retention rules.
Your rights
Depending on your location, you may request access, correction, deletion, portability, restriction, or objection. The app provides account export and account deletion. For other requests, contact us at reppopp.games@gmail.com.
Children
GRIDLOCK is not designed to knowingly collect personal information from children under 13. The app asks for a birth year during setup; it stays on the device, and for players under 13 ads are requested in child-directed mode. Contact us if you believe a child has provided personal information.