Privacy policy

PRIVACY POLICY FOR MYSTLINGS

Effective date: September 7, 2026
Last updated: September 7, 2026
Android package: com.solosigma.mystlings

This Privacy Policy explains how SOLO SIGMA GAMING DEVELOPMENT SERVICES L.L.C collects, uses, discloses, stores, and protects information when you play Mystlings or use its related online services.

SCOPE AND CONTROLLER
This Privacy Policy applies to the Mystlings mobile game, its cloud-save features, asynchronous Coliseum battles, and in-app purchases, collectively referred to as the “Service.”

SOLO SIGMA GAMING DEVELOPMENT SERVICES L.L.C (“Solo Sigma,” “we,” “us,” or “our”), located in Dubai, United Arab Emirates, is responsible for the personal information described in this Privacy Policy.

This Privacy Policy does not apply to third-party websites or services governed by their own privacy policies.

INFORMATION WE PROCESS
Anonymous account and profile information

Mystlings uses anonymous Firebase Authentication to create and maintain a game profile. We may process:

A randomly generated Firebase user identifier used to distinguish your game profile.
Your chosen in-game name, avatar, title, language, and settings.
Authentication session information stored locally on your device.
Mystlings currently does not ask you to create a password or provide an email address or telephone number to play.

Game and cloud-save information

We may process:

Game progress.
Owned Mystlings.
Mystling levels, energy, statistics, appearance, and other characteristics.
Inventory contents.
Virtual currencies.
Rewards and achievements.
Manuscripts.
Arena and expedition progress.
Crafting information.
Selected appearance and profile settings.
Battle selections and outcomes.
App version and cloud-save revision information.
Information required to synchronize, restore, and protect your game progress.
Coliseum information

When you participate in asynchronous Coliseum battles, we may process:

Your rating and rank.
Numbers of wins and losses.
Coliseum rewards.
Match state and match outcome.
Your chosen in-game name, title, and avatar.
Your selected Mystling, its level, and appearance.
Selected potions and artifact.
Match creation and completion timestamps.
Purchase information

When you make an in-app purchase through Google Play, we may process:

Product identifier.
Purchase status.
Purchased entitlement.
Transaction or order identifier.
Purchase region.
Whether the transaction is a test transaction.
Information required to verify, acknowledge, consume, restore, or prevent duplicate processing of a purchase.
A Google Play purchase token is sent securely to our server and Google Play for verification. We use a cryptographic hash of the purchase token as our internal receipt key.

A pseudonymous version of your game account identifier may be provided to Google Play to attribute a purchase to the correct game profile and help prevent fraud.

Google handles your payment method and billing details. Solo Sigma does not receive your complete payment-card or bank-account information.

Technical information

Firebase Authentication, Cloud Functions, Google Play, and related infrastructure may process:

Internet Protocol address.
User-agent information.
Request timestamps.
Basic operational and security logs.
App version and package identifier.
Information needed to prevent fraud, abuse, or unauthorized access.
Mystlings may store authentication session data, local game data, preferences, and claimed-reward markers locally on your device.

Information Mystlings does not currently collect

Mystlings does not currently request or collect:

Contacts.
Photos or media files.
Microphone recordings.
Precise location.
Full payment-card details.
Bank-account details.
The current version of Mystlings does not integrate advertising SDKs, Firebase Analytics, or Firebase Crashlytics.

If these practices change, we will update this Privacy Policy and any required in-app or store disclosures before the change applies.

HOW WE USE INFORMATION
We process information to:

Create and maintain your anonymous game profile.
Save, synchronize, restore, and protect your game progress.
Provide matchmaking and asynchronous Coliseum battles.
Calculate ratings, ranks, rewards, and other game results.
Display your chosen public game identity to matched Coliseum opponents.
Process, verify, acknowledge, restore, and prevent abuse of in-app purchases.
Maintain the security, integrity, availability, and performance of the Service.
Diagnose technical problems.
Respond to support and privacy requests.
Comply with applicable laws.
Enforce our terms and protect players, Solo Sigma, and the Service.
Where applicable law requires a legal basis for processing, we rely on:

Performance of our contract with you.
Our legitimate interests in operating and protecting the Service.
Compliance with legal obligations.
Your consent where consent is required.
COLISEUM BATTLES AND VISIBILITY TO OTHER PLAYERS
Coliseum battles are asynchronous. When you enter a Coliseum battle, the Service stores a snapshot of the profile and battle configuration you selected.

Other matched players may see and fight against this snapshot while your actual device is offline.

A matched opponent may see:

Your chosen in-game name.
Your title.
Your avatar.
Your Coliseum rank.
Your selected Mystling.
The Mystling’s level and appearance.
Selected potions.
Selected artifact.
Do not use your real name or include personal contact information in your in-game name.

Mystlings does not currently provide free-form chat between players.

IN-APP PURCHASES
Android purchases are offered through Google Play.

Google processes:

Your payment method.
Billing account.
Payment authorization.
Applicable taxes.
Localized prices and currency.
Purchase receipts.
Google processes this information under Google’s own terms and Privacy Policy.

Solo Sigma receives and processes limited transaction information required to:

Verify that a purchase is genuine.
Attribute a purchase to the correct game profile.
Grant or restore purchased virtual content.
Handle refunds and purchase support.
Prevent duplicate or fraudulent claims.
Meet accounting and legal obligations.
Google Play purchase tokens are verified through the Google Play Developer API before purchased content is granted.

Solo Sigma does not receive your complete payment-card or bank-account details.

SERVICE PROVIDERS AND DISCLOSURE
We do not sell your personal information.

We do not use your personal information for third-party advertising.

We may disclose or make information available in the following circumstances:

Google Firebase and Google Cloud

We use Firebase Authentication, Cloud Firestore, and Cloud Functions to provide:

Anonymous authentication.
Cloud data storage.
Cloud saves.
Coliseum matchmaking.
Purchase verification.
Security and server operations.
Google Play

We use Google Play Billing and the Google Play Developer API to provide:

Localized purchase offers.
Payment processing.
Purchase verification.
Fulfillment.
Purchase restoration.
Refunds.
Fraud prevention.
Other players

Only the Coliseum profile and loadout information described in Section 4 may be visible to matched players.

Legal and safety disclosures

We may disclose information when we reasonably believe it is necessary to:

Comply with applicable law or legal process.
Respond to a lawful government request.
Protect players, Solo Sigma, or other persons.
Investigate fraud or abuse.
Enforce our terms.
Protect the security and integrity of the Service.
Business changes

Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and legal protections.

Google Privacy Policy:

https://policies.google.com/privacy

Firebase privacy information:

https://firebase.google.com/support/privacy

DATA RETENTION AND DELETION
We retain your anonymous account and cloud-save data while your profile is active or for as long as reasonably necessary to provide the Service.

Coliseum profile and match information may be retained as needed to:

Operate matchmaking.
Maintain rating integrity.
Resolve disputes.
Investigate cheating or abuse.
Protect the security of the Service.
Purchase verification and transaction records may be retained after deletion of a game profile where reasonably necessary for:

Refunds.
Accounting and tax obligations.
Fraud prevention.
Dispute resolution.
Enforcement of our agreements.
Compliance with legal obligations.
We retain only the information required for these purposes and delete or de-identify it when it is no longer required.

Technical logs are generally retained for shorter operational and security periods established by the relevant service provider.

Deleted information may remain in encrypted backups until those backups are overwritten under normal backup-retention cycles.

Google states that, after deletion of Firebase Authentication information is initiated, authentication information is removed from live and backup systems within 180 days.

How to request account and data deletion

To request deletion of your Mystlings anonymous account and associated game data, email:

[email protected]

Use the subject:

Mystlings Account Deletion Request

We will provide the steps needed to identify the anonymous profile and verify that you control it.

Do not send payment-card details, bank-account details, passwords, or Google Play purchase tokens by email.

Deleting Mystlings or clearing its local storage may remove the local identifier required to connect your device to its anonymous cloud profile. However, uninstalling the game does not by itself guarantee deletion of server records.

Whenever possible, submit a deletion request before uninstalling the game.

SECURITY
We use administrative, technical, and organizational safeguards designed to protect information.

These safeguards include:

HTTPS encryption during transmission.
Encryption at rest for supported Firebase services.
Authenticated server requests.
Firestore rules that prevent direct client access.
Restricted service accounts.
Server-side purchase verification.
Protection against duplicate purchase claims.
Access limitations based on operational need.
No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.

INTERNATIONAL DATA TRANSFERS
Solo Sigma is based in the United Arab Emirates.

Our service providers operate global infrastructure. Your information may therefore be processed in countries other than the country where you live.

Firebase states that Firebase Authentication is operated from data centers in the United States. Cloud Firestore and Cloud Functions may use Google Cloud locations and global infrastructure.

Where required, we and our providers use legally recognized safeguards for international data transfers.

Privacy protections and government-access rules may differ between countries.

YOUR PRIVACY RIGHTS
Depending on where you live, you may have the right to:

Request access to your personal information.
Request correction of inaccurate information.
Request deletion of your information.
Request a copy of your information.
Restrict or object to certain processing.
Withdraw consent where processing is based on consent.
Submit a complaint to a competent data-protection authority.
Exercise your privacy rights without discriminatory treatment.
To exercise these rights, contact us using the information provided below.

Because Mystlings uses anonymous accounts, we may need limited information to verify that you control the relevant profile.

We will respond within the period required by applicable law.

Some requests may be limited where retention is required by law or reasonably necessary to:

Protect other users.
Prevent fraud.
Complete a transaction.
Maintain security.
Establish, exercise, or defend legal claims.
CHILDREN’S PRIVACY
Mystlings does not ask players to provide a real name, email address, telephone number, or precise location to create an anonymous game profile.

Users who are below the age at which they may consent to digital services in their country should use the Service only with the authorization of a parent or legal guardian.

If you are a parent or guardian and believe that a child provided personal information without the authorization required by applicable law, contact us.

We will investigate the request and take appropriate steps, including deletion where required.

YOUR CHOICES
You may:

Use a nickname instead of your real name in your public game profile.
Choose whether to participate in asynchronous Coliseum battles.
Choose whether to make an in-app purchase.
Control music, sound, language, and other available game preferences.
Request deletion of your account and associated data.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when the Service, our providers, or applicable legal requirements change.

We will publish the updated Privacy Policy at the same location and change the “Last updated” date.

If a change materially affects your rights or how we use personal information, we will provide additional notice in the game or through another appropriate method where required.

CONTACT US
For privacy questions, privacy-rights requests, or account-deletion requests, contact:

SOLO SIGMA GAMING DEVELOPMENT SERVICES L.L.C

Office No. 223, Iridium Tower
Al Barsha One
Dubai, United Arab Emirates

Email: [email protected]

Website: https://solo-sigma.com/