Crackd
Draft status. This is a working draft prepared for internal review. Items marked Review depend on the RC-1B production-services audit or on legal review and must be resolved before the game is submitted to app stores. Review markup is removed cleanly for publication by tools/build-public.mjs; this document has not been reviewed by an attorney.

1. Scope of this Policy

This Privacy Policy applies only to the CRACKD mobile game and this website (crackd.cuya.ai), both published by Cuya, Inc. ("Cuya," "we," "us").

Cuya also operates an AI routing platform at cuya.ai. That platform is a separate product with its own privacy practices and its own privacy policy. This Policy does not describe, modify, or apply to the Cuya AI platform, and nothing here should be read as a statement about how that product handles data.

This website is a static informational site. It sets no cookies, runs no analytics, and loads no third-party resources.

2. Information CRACKD May Process

CRACKD 1.0 does not require a player account and does not currently offer cloud save. Some information never leaves your device; other information is transmitted to us or to third-party service providers as described below.

Stored on your device

Information that may be transmitted

We do not claim that Cuya centrally collects gameplay or progression data: in CRACKD 1.0 that information is processed and stored on your device, and is transmitted to us or our providers only where a production service (such as analytics, crash reporting, or purchase verification) is configured to do so, as described in this Policy.

3. Purchases

Purchases in CRACKD (the one-time Remove Ads purchase and Jewel consumables) are processed by Google Play on Android and the Apple App Store on iOS, using the store's own billing systems (including Unity IAP as the purchase framework). We do not receive or store your full payment card details. Payment processing is governed by Google's or Apple's terms and privacy policies.

To provide and verify your purchased content, CRACKD may receive and process transaction and product information from the stores — such as the product purchased, a transaction/receipt identifier, purchase date, and entitlement status. We use this information to provide, verify, and — where the applicable store supports it — restore your purchased entitlements, and to detect transaction errors or fraud. CRACKD requires no player account; purchase entitlements are associated with your store account.

4. Advertising

CRACKD is free to play and may display interstitial advertising. You can remove CRACKD interstitial advertising through a one-time Remove Ads purchase. Remove Ads applies to CRACKD interstitial advertising; it does not disable messages from the app stores, publisher notices, or legal notices, which are not advertising.

Third-party advertising and mediation services are being integrated for launch — currently Unity LevelPlay and Unity Ads. When active, these services may collect and use device, gameplay-context, and advertising-related information (as described in Section 2) to serve ads, decide which ads to show (which may involve personalized advertising where permitted), frequency-cap ads, and measure ad performance. Their handling of data is governed by Unity's privacy policies.

Review The final mediation configuration, the exact list of active ad-network partners behind LevelPlay, personalized vs contextual advertising behavior, Apple App Tracking Transparency (ATT) behavior on iOS, and Android consent behavior are pending the RC-1B production-services audit. This section must be completed to match the shipped configuration before store submission. We deliberately do not list advertising partners that CRACKD does not actually use, and we make no claim about the presence or absence of tracking beyond what the shipped SDK configuration supports.

Your choices: on iOS, you can control the tracking permission for each app in Settings → Privacy & Security → Tracking; on Android, you can reset or opt out of advertising-ID-based personalization in your device's Google/Ads settings.

5. Analytics and Crash Diagnostics

CRACKD includes architecture for gameplay analytics and crash diagnostics, used to understand how the game is played, measure performance, and find and fix crashes and bugs. If production analytics is enabled, selected gameplay events may be transmitted to the analytics provider.

Review The production analytics and crash-reporting providers, the exact fields transmitted, and provider retention periods are pending the RC-1B production-services audit. This section will be finalized — naming each provider and the data it receives — once that configuration is locked. No provider is named here until it is actually configured for production.

6. How We Use Information

We may use the information described in this Policy to:

7. Third-Party Services

The following third-party services are used in CRACKD or are being integrated for launch. We list only providers actually used in production; this list will be finalized before launch.

ServicePurpose
Google Play / Google Play BillingDistribution and purchase processing on Android; transaction and entitlement verification.
Apple App Store / StoreKitDistribution and purchase processing on iOS; transaction and entitlement verification.
Unity IAPIn-app purchase framework across both stores.
Unity LevelPlayAdvertising mediation. Review
Unity AdsAdvertising network. Review
Analytics / crash diagnostics provider(s)Gameplay analytics and crash reporting. Review — to be named once confirmed.

8. Data Retention

Information stored only on your device (such as gameplay progression and, currently, consumable Jewel balances) remains there until you delete the app or its data. Information transmitted to us or our providers is retained only as long as needed for the purposes described in this Policy, and as required by applicable law, tax/accounting obligations, or app-store requirements (for example, transaction records associated with purchases). When information is no longer needed, we delete it or de-identify it. Review specific retention periods per data category and provider retention will be documented once production providers are confirmed; we do not publish periods we cannot substantiate.

9. Children

Review This section must be finalized against the Google Play Target Audience and Content declarations and the Apple age-rating decision before store submission. The advertising configuration described in Section 4 also depends on those classification decisions.

CRACKD is a general-audience puzzle game. We have not designated it as child-directed, and we do not knowingly collect personal information from children. If the final store classifications differ, or if you believe a child has provided us personal information, contact us at the address in Section 11 and we will promptly delete it.

10. International Users and Your Rights

CRACKD is distributed worldwide through the Apple App Store and Google Play. Information may be processed in the United States and in other countries where our service providers operate. Review processing locations to be confirmed with the final provider configuration.

Depending on where you live, applicable law may grant you rights regarding your personal information, such as the right to access, correct, delete, restrict or object to certain processing, receive a portable copy, or withdraw consent. To exercise any right available to you, contact us as described in Section 11 and we will respond in accordance with applicable law. We do not make representations about specific legal regimes beyond what applies to us.

11. Contact

Privacy questions or requests about CRACKD can be sent to:

Cuya, Inc. — CRACKD Privacy
support@cuya.ai

General game support: see the Support page.

12. Changes to This Policy

We may update this Policy as the game and its configuration evolve. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced where appropriate, including through app-store update notes or in-game notices.