Fourfold — Privacy policy
Last updated 19 October 2026 · Spintech Studio
Fourfold is a four-in-a-row game: online with fifteen seconds a move, against the computer, or with a friend on one phone. This page says exactly what it collects, why it needs each thing, who else sees it, how long it is kept, and how to have all of it deleted.
Who we are
Spintech Studio publishes Fourfold. For anything about this policy or your data, write to spintechstudio@gmail.com.
What we collect, and why
| Your name, if you sign in with Google | Your Google account's name is shown to opponents beside your games and kept on your profile. You can play without it, as a guest. |
|---|---|
| Your email address, if you sign in with Google | Held by Firebase Authentication to identify your account, for example when you change phone. It is never shown to anyone. |
| Your Google profile picture | Fourfold does not use, store or show it: every player appears with initials. Google sends the picture's address with your sign-in, so Firebase Authentication keeps it in its sign-in record; your phone and our server receive it with your sign-in and discard it. |
| A guest account | If you play without signing in, we create an anonymous account: an identifier tied to the app on this phone, with no name and no email. You appear to opponents as a generated name such as "Guest 1234". |
| Your games | Matches, moves, results, your rating, your record by seat (first or second player), and your head-to-head record with each opponent. This is the game itself, kept while your account exists. |
| Reports and blocks you make | If you report a player: who you reported, which of four reasons you chose, in which match, and the name you saw. If you block a player: who you blocked. Kept to review reports and to keep you apart. There is no free text in a report. |
| A notification token, only if you allow notifications | So we can tell you when a friend joins your game or asks for a rematch. Stored where no player can read it, your own account included; removed when you sign out, when you delete your account, and when it stops working. |
| Game events, without your name or account | When you lose an online game on time, your phone's network type (Wi-Fi, mobile data, and so on); at the end of each game, whether an ad was shown and for how long. Sent to the game server's logs with no name, no account and no match, kept 30 days, to check that the clock is fair and how often ads appear. |
| Crash reports | If the app crashes, Firebase Crashlytics sends the device model, the Android version, the crash's technical details and an installation identifier, so we can fix it. Kept by Google for 90 days. |
| Advertising | Fourfold is free and shows ads through Google AdMob. Google's Mobile Ads SDK uses your device's advertising ID and collects your IP address (from which an approximate location is estimated), how you interact with ads, and diagnostics — to show and measure ads and, where you allow it, to personalise them. In the EEA and the UK your consent is asked first, and Settings › Advertising choices takes you back to that choice. You can reset the advertising ID or opt out of personalised ads in Android's Settings › Privacy › Ads. |
Who else sees it
- Other players see your name, the rating and record on your profile, your moves in a game with them, and your head-to-head record with them.
- Google processes it on our behalf: Firebase Authentication for sign-in, Cloud Firestore for the game's data, Cloud Run and its logs for the game server, Firebase Cloud Messaging for notifications, Firebase Crashlytics for crash reports, and Google AdMob for advertising. For ads, Google also receives the advertising ID, IP address and ad interactions and uses them for its own purposes, such as measuring and, if you allow it, personalising ads: that is the data our Play listing marks as shared. How Firebase handles data · How Google uses data from apps that show its ads.
- Nobody else. We do not sell your data, and apart from Google as described above, nobody else receives it.
Where it is kept, and for how long
Game data (profiles, matches, reports, blocks) and the game server's logs are stored on Google Cloud in India (asia-south1). Sign-in, notifications, crash reports and advertising are handled by Google's own services (Firebase Authentication, Cloud Messaging, Crashlytics, AdMob), which may process data in other countries. Everything Fourfold sends is encrypted in transit (HTTPS/TLS).
Your games, profile, reports and blocks are kept while your account exists. Server logs are kept 30 days and can include your account identifier, game identifiers and the network address you connected from, but not your email; they are not edited when you delete your account, they age out. Crash reports are kept 90 days. Finished games stay in your opponents' history after you delete your account, with your name and identifier removed, because they are their games too.
Reports and blocking
You can report a player from a game or its result. A report records who you reported, why (cheating, harassment, an inappropriate name, or other), in which match, and the name as you saw it. We review reports, usually within 48 hours. The reported player is not told who reported them, or that they were reported. Blocking a player means you will not be matched with them again, by quick play, an invite or a rematch; they are not told.
Deleting your account
In the app, at once: Profile › Settings › Delete account (your profile opens from your rating, at the top right of the home screen). This works for guest accounts too. Without the app: email us — the deletion page says how, what is deleted and what is kept.
Children
Fourfold is for a general audience and is not directed at children under 13. Ads may be personalised where you allow it.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it, by writing to spintechstudio@gmail.com. You can delete your account yourself at any time, in the app or by email.
Changes
If this policy changes, this page changes with it and the date at the top moves.