Privacy Policy
Odd Castle · Developer: gicrosoft.com · Contact: info@gicrosoft.com
Effective date: October 28, 2026
This policy covers Gicrosoft: Maze Defense (formerly Odd Castle) on Android, iPhone and iPad, and its account support pages. Basic offline play does not require an account.
What we process and why
| Data | Purpose and visibility |
|---|---|
| Email, account identifier and authentication information | Supabase provides registration, email verification, password reset and sign-in. In versions offering Google sign-in, you can choose Google instead of an email/password account. Google provides basic identity information such as email and account identifier for authentication; the game does not request Gmail, Drive or contacts access. Passwords are sent over HTTPS for authentication; the game does not save your password. Login tokens saved by the Android game are encrypted. On iPhone and iPad, login tokens and local-save encryption keys are stored in the system Keychain; local game saves are encrypted. |
| Maps, inventory, progress and latest cleared-round backup | The game saves progress locally. When you sign in, cleared-round progress is backed up to your account. Cloud restore is a separate action. Other players do not receive your map or inventory. |
| Nickname, leaderboard results, invitation code, friend and help records | Rankings publish nicknames and scores. Friend nicknames and comparison results are available to friends and friend-request recipients. Invitation and help records enforce rewards and limits. Your email is not published to players. |
| IP address, approximate location, device/account identifiers, product interactions and diagnostics | Google advertising and consent services may process these for advertising, measurement, security and fraud prevention. Infrastructure providers may process connection and operational information. |
Ads and your choices
Rewarded ads are optional: you may choose an ad to retry a failed wave or earn a milestone coin bonus. The game requests non-personalized ads. The Android version also sets a teen-appropriate maximum ad content rating. These settings do not eliminate SDK data processing, including device identifiers, ad interactions and diagnostics. Where required, Google's consent flow collects your choice before ads are requested. Required ad privacy choices can be reopened in game Settings.
Purchases
In versions offering the optional Lifetime Ad-Free Pass, purchases and payments are handled by Google Play. The game receives purchase details, including the product identifier, purchase token, purchase status and signed receipt, to verify and restore access. It stores a verified receipt encrypted on your device; it does not upload purchase receipts to Supabase. Google processes payment and transaction information under its policies. We do not receive your full payment-card details. The pass belongs to the purchasing Google Play account and is separate from your game account. Deleting your game account does not cancel or erase your Google Play purchase. Uninstalling or clearing app storage removes the local receipt; use the purchasing Play account to restore access. Contact Google Play for purchase-history and refund options, or info@gicrosoft.com for game support.
iPhone and iPad purchases
In iOS/iPadOS versions offering the pass, Apple handles purchases and payments through the App Store. The app uses StoreKit product and verified transaction information, including purchase status and revocation status, to determine and restore access. It does not upload Apple purchase transactions to Supabase or receive your full payment-card details. The pass belongs to the purchasing Apple Account, separately from the game account; deleting the game account does not cancel the App Store purchase. Restore purchases using the purchasing Apple Account. Android and Apple purchases are separate and are not automatically transferred between stores. Apple manages purchase history and refund requests.
Service providers and transfers
We use Supabase for accounts and game data, Google Workspace for account emails and support, Apple for App Store purchases on iPhone/iPad, and Google advertising and consent services. Their infrastructure may process information outside your country. These providers receive the information needed to deliver their services; the app does not sell your email or game account data. Advertising data handling is described in Google's policies.
Retention and deletion
Active cloud account data remains until you delete your account or request removal. New cleared-round uploads replace your latest cloud backup; legacy history may remain until replaced or the account is deleted. Account deletion removes the authentication account, cloud backups, public ranking records, wealth records, invitation relationships, friends and help records from the active database. Already issued login tokens may remain cryptographically valid until expiry, but removed account records cannot be recreated through game functions without a valid account.
Deletion in the game clears that account's normal local online queue and caches. Offline maps and achievements remain on your device. Other devices may retain local copies; use Android app storage controls or uninstall the app; on iPhone and iPad, delete the app to remove its local game files. Keychain items may persist after uninstall and are managed separately by the operating system. Provider-managed operational logs, security records and backups may persist under the providers' retention and legal requirements; this policy does not promise immediate erasure from their backups.
You can delete an account in Settings → Cloud save & game account → Delete game account, or use the web deletion page. Both require identity verification and explicit confirmation. For help accessing your account or requesting deletion, contact info@gicrosoft.com. We verify ownership before acting on support requests.
Audience and permissions
The game is intended for teens aged 13 and older and adults, not children under 13. If you believe a child provided account information, contact us. The game does not request access to contacts, microphone, camera or precise location. Google SDKs may use advertising-related permissions included in the app.
Changes and contact
We update this page when practices change. Contact info@gicrosoft.com for access, correction, deletion or privacy questions.
隐私政策
怪奇城堡 Odd Castle · 开发者：gicrosoft.com · 联系邮箱：info@gicrosoft.com
生效日期：2026 年 10 月 28 日
本政策适用于 Android、iPhone 和 iPad 上的 Gicrosoft: Maze Defense（原名 Odd Castle）及账号支持页面。基础离线游戏无需账号。地图、进度和成就保存在本机；登录后，Supabase 提供邮箱注册、验证、密码重设、身份验证与最新通关云备份。支持 Google 登录的版本还允许选择 Google 账号进行身份验证，使用邮箱和账号标识等基本身份信息，不申请 Gmail、云盘或联系人访问权限。游戏不保存密码，本机保存的登录令牌经过加密；iPhone/iPad 使用系统钥匙串保存登录令牌和本地存档加密密钥，游戏存档经过加密。
排行榜公开昵称和成绩。好友及好友申请接收方可看到好友昵称和比较成绩，不会获取邮箱、地图或库存。邀请码、好友和助力记录用于功能与奖励限制。
Google 广告与同意管理服务可能处理 IP 地址、大致位置、设备/账号标识、互动及诊断信息，用于广告、衡量、安全及反作弊。奖励广告由玩家自选，游戏请求非个性化广告，Android 版还设置了适合青少年的最高广告内容等级；这不代表广告服务不会处理数据。适用的隐私选择可以在设置中重新打开。
购买
在提供永久免广告通行证的版本中，购买和付款由 Google Play 处理。游戏获取商品标识、购买令牌、购买状态及签名收据等购买信息，用于验证和恢复权益。已验证的收据加密保存在本机，不上传到 Supabase。Google 按其政策处理付款及交易信息，我们不会收到完整银行卡信息。通行证属于购买时的 Google Play 账号，与游戏账号分开；删除游戏账号不会取消或删除 Google Play 购买记录。卸载或清除应用存储会移除本机收据，可用购买时的 Play 账号恢复。购买记录与退款选项请通过 Google Play 处理，游戏支持请联系 info@gicrosoft.com。
iPhone 和 iPad 购买
在提供通行证的 iOS/iPadOS 版本中，购买和付款由 Apple App Store 处理。应用使用 StoreKit 商品及已验证的交易信息（包括购买和撤销状态）判断与恢复权益，不向 Supabase 上传 Apple 购买交易，也不会获取完整银行卡信息。通行证属于购买时的 Apple 账户，与游戏账号独立；删除游戏账号不会取消 App Store 购买。请使用购买时的 Apple 账户恢复购买。Android 与 Apple 商店购买相互独立，不自动跨商店转移。购买记录与退款申请由 Apple 管理。
账号和游戏数据使用 Supabase，邮件和支持使用 Google Workspace，广告和同意管理使用 Google，iPhone/iPad 商店购买由 Apple 处理；服务可能在所在国家以外处理数据。服务商按各自隐私政策处理必要信息，游戏不出售邮箱或账号数据。
云端账号数据通常保留至账号删除。新通关上传覆盖最新备份；旧版历史可能保留至替换或删除账号。删除账号会从活跃数据库移除身份账号、云备份、排行榜、财富、邀请、好友和助力记录。已签发令牌可能保留至到期，但缺少有效账号时游戏功能不能重建已移除的账号记录。
游戏内删除会清理当前账号正常的本机联网队列和缓存。本机离线地图与成就保留；其他设备也可能保留本地副本，Android 可清除应用存储或卸载；iPhone/iPad 可删除应用以移除本地游戏文件。钥匙串项目可能在卸载后保留，由操作系统单独管理。服务商运维日志、安全记录及备份按其保留和法定规则处理，不承诺这些备份即时擦除。
在“设置 → 云存档与游戏账号 → 删除游戏账号”或网页账号删除入口操作，需要身份验证与明确确认。无法登录或需要其他帮助时，请联系 info@gicrosoft.com；处理前会核实账号归属。
游戏面向 13 岁及以上青少年与成人，不面向 13 岁以下儿童。不申请联系人、麦克风、摄像头或精确位置权限；广告 SDK 可能使用广告相关权限。隐私、访问、更正与删除请求请联系上述邮箱。