Privacy Policy

1. Introduction

Orchard Drop: Fruit Merge ("Orchard Drop", "the game") is a casual drop-and-merge puzzle game published by Into Hash ("we," "our," or "us") for iOS and Android. You drop fruit into a bin, matching fruit merge into larger fruit, and you play for a high score. This Privacy Policy explains what the game collects, what our service providers collect, and the choices you have.

The short version: there is no account and no login, your scores and progress live on your device, the game sends anonymous usage data to our analytics provider (Amplitude), and the free app may show ads served by Google AdMob, which can use your device's advertising identifier where you allow it. Optional in-app purchases are paid through Apple or Google and managed by RevenueCat; we never see your payment details. The game asks for no camera, microphone, contacts, photo library, or location permission.

Please read this Privacy Policy carefully. If you do not agree with it, please do not play the game.

2. No Account Required

Orchard Drop is playable end to end without signing in. There is no email registration, no Google or Apple sign-in, no social login, and no player profile stored on our servers. We do not ask for your name, email address, phone number, date of birth, or postal address.

Your high scores, saved game, coins, unlocked fruit sets and themes, daily challenge and streak progress, and sound and music settings are saved locally on your device. Uninstalling the game removes them.

3. Information We Collect

3.1 Usage Analytics and Feature Settings

The game uses Amplitude to measure play sessions and to switch features (such as ads) on or off remotely without a new release. Amplitude receives:

• Device identifier: a random ID that Amplitude generates and stores in the game's local storage to group events from the same install. It is not your advertising ID and is not linked to a name, email, or account.
• Session events: when a play session starts and ends. The game does not record taps, typed text, or page content.
• Device and app details: operating system and version, device type, language, and app version, derived from the app's web view.
• IP address and approximate location: Amplitude receives your IP address with each request and may use it to estimate your country, region, and city. The game never reads your precise location.
• Feature settings: the device identifier is used to fetch the game's current feature settings from Amplitude Experiment.

3.2 Advertising Data (Google AdMob)

When ads are enabled in the iOS or Android app, Google AdMob collects data directly from your device to serve ads, measure them, and prevent fraud. This can include:

• Advertising identifier: the Google Advertising ID on Android, or Apple's IDFA on iOS only if you allow tracking.
• Device and network information: device model, operating system, language, IP address, and approximate location derived from it.
• Ad interactions: which ads were shown, clicked, or dismissed, and diagnostics such as ad load failures.
• SDK diagnostics: crash logs and performance data such as launch time, hang rate, and energy use. Google may use these for advertising, analytics, and improving its SDK, and performance data can be associated with a device.

We do not receive your advertising identifier ourselves; we see only aggregated ad reports from Google. See Section 6 for your advertising choices.

3.3 Data Stored On Your Device

Game state — best score, current run, coins, unlocked fruit sets and themes, missions, daily challenge results, a launch counter used to pace ads, and audio settings — is written to local storage on your device. It is not uploaded to us, there is no cloud save, and we cannot read it.

3.4 What We Do Not Collect

Orchard Drop does not request or collect:

• Precise location — the game has no location features and requests no location permission.
• Camera or microphone — nothing in a merge puzzle needs them, so they are never requested.
• Photos, media, or files — the game does not read, scan, or index your photo library or storage.
• Contacts, calendar, call logs, or SMS.
• Health, fitness, or sensor data. The game uses your device's vibration for haptic feedback only.
• Payment card or bank details — payments are handled by Apple or Google; see Section 7.

4. How We Use This Information

• Running the game: turning features such as ads on or off remotely.
• Improving the game: seeing how often and how long people play, and spotting builds or platforms with problems.
• Counting players: approximate install and active-player counts, derived from the pseudonymous device identifier.
• Keeping the game free: showing ads through Google AdMob, which may be personalized only where you have consented (see Section 6).

We do not use analytics data to build advertising profiles or to make any decision about you as an individual.

5. Analytics Provider

Analytics and feature settings are delivered over encrypted HTTPS to Amplitude, which processes them on our behalf as a service provider. See the Amplitude Privacy Policy. If Amplitude cannot be reached, the game keeps working with its default settings.

6. Advertising

The iOS and Android apps are free and may show ads from Google AdMob: a banner at the bottom of the screen during play, an occasional full-screen ad at the end of a game, and an ad when the app opens (never on your first launch). Ads can be switched off remotely, and the game is fully playable either way.

Your choices:

• Consent (EEA, UK, Switzerland, and other regions where required): before ads are requested, the game shows Google's consent message. If you do not consent, Google serves non-personalized or limited ads.
• iOS: the game asks for permission to track through Apple's App Tracking Transparency prompt. If you decline, your IDFA is not shared. You can change this at any time in Settings > Privacy & Security > Tracking.
• Android: you can reset or delete your advertising ID, or opt out of personalized ads, in your device's Settings > Privacy > Ads (or Settings > Google > Ads).

Google uses this data under its own policies. See How Google uses information from sites or apps that use its services and the Google Privacy Policy.

7. Purchases

Orchard Drop offers optional in-app purchases: permanent ad removal and consumable coin packs. Apple App Store or Google Play processes payment. We do not receive or store your payment card or bank details.

We use RevenueCat to validate purchases, manage permanent ad-removal access, retrieve product prices, and support purchase restoration. RevenueCat receives purchase and transaction history, receipt or purchase-token information, product identifiers, and a persistent anonymous app user identifier. We do not connect that identifier to a name, email address, or player account. Purchase information is used for app functionality, purchase analytics, and fraud prevention. See the RevenueCat Privacy Policy.

Coins are saved on the current device. Coin balances are not restored after reinstalling or shared between devices or platforms. Restore Purchases can restore eligible permanent ad removal through the same store account; it does not replenish consumed coins. Coins cannot be redeemed for money.

8. Information Sharing and Disclosure

We do not sell your personal data. Data is shared only in these circumstances:

• Amplitude: as our analytics and feature-settings provider, receiving the data described in Section 3.1.
• Google AdMob: as our advertising provider, collecting the data described in Section 3.2 directly from your device. Where you consent, Google may use it to personalize ads.
• RevenueCat: as our purchase-management service provider, receiving the purchase information described in Section 7 to validate transactions and manage access.
• Apple and Google: as the platform stores that distribute the game and process in-app payments, under their own privacy policies.
• Legal Compliance: if required by law, or to investigate abuse and protect our rights.
• Business Transfers: in connection with a merger, sale, or asset transfer, in which case this policy continues to apply until the acquirer publishes its own.

9. Data Retention

Analytics data is kept in Amplitude only as long as it is useful for understanding how the game is played, after which it is deleted or aggregated into counts that no longer identify an install. Google retains advertising data under its own retention policies.

Purchase records and entitlement information are retained by the stores and RevenueCat to validate transactions, restore eligible purchases, prevent fraud, and meet applicable recordkeeping obligations. These records are separate from the coin balance and game progress stored on your device.

Game progress stored on your device is kept until you delete it or uninstall the game.

10. Security

Data sent by the game is transmitted over encrypted HTTPS connections. Access to our Amplitude and AdMob accounts is limited to the people who need it and protected by account credentials. Because the game holds no accounts, passwords, payment details, or contact information, there is very little about you for an attacker to obtain. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on where you live (for example under the GDPR, UK GDPR, or US state privacy laws such as the CCPA), you may have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, to opt out of targeted advertising, and to obtain a copy of your data.

To exercise any of these rights, email contact@intohash.online. Because the game holds no account, please tell us the approximate dates and the platform you played on so we can locate the right records. We will respond within the period required by applicable law. For ad data, you can also use the device settings in Section 6.

You can stop all data collection at any time by uninstalling the game.

12. International Data Transfers

Into Hash operates internationally, and our service providers process data on servers that may be located outside your country, including in the United States. Where data is transferred out of the European Economic Area, the United Kingdom, or another region with transfer restrictions, we rely on our providers' safeguards for such transfers, such as the European Commission's Standard Contractual Clauses.

13. Children's Privacy

Orchard Drop is a casual merge puzzle intended for a general audience. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@intohash.online and we will delete the associated records promptly. The game offers no chat, messaging, or social features through which a child could share personal information with us or with other players.

14. Changes to This Privacy Policy

We may update this Privacy Policy as the game changes. We will post the revised policy on this page and update the "Effective Date" above. Material changes, such as a new category of collected data, will be reflected here and in the store listings' privacy disclosures before they take effect in a released build. You are advised to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or about Orchard Drop: Fruit Merge, please contact us at contact@intohash.online.