MARCH never stores your name, email, phone number, location, photos or contacts. Your progress (medals · captured cells · squad) is stored on your device, and in your account only if you choose to sign in (section 5). The app sends only the five kinds of information below off your device.
1. Run records
- What is sent: a random device number the app creates on first launch, app version and build, platform (Android · iOS · web), the run result (sector reached · time · kills · cards picked), what happened in the run and your inputs (so the run can be replayed), pause and screen-change times, frame-rate figures and the start of your browser/device string (User-Agent)
- Why: to tune difficulty and items, to replay a run that went wrong under the same conditions, and to verify the daily challenge ranking.
- What is public: the daily challenge board shows only the first 6 characters of the device number and that run's sector, kills and time.
2. Feedback
- What you write in the Feedback tab and its kind (bug, idea …), the device number from section 1, the game situation at the time (progress · screen · last run result), and the browser/device string
- Why: we read it and reply in the same tab.
3. Usage statistics
- What is sent: random install and session identifiers, the same device number as in section 1, app version, platform, and what happens in the app (opening it, moving between screens, tutorial steps, starting and ending a run with its result)
- Why: to see where people stop and how far they get in the tutorial.
4. Error reports
- What is sent: when the app hits an error, the error message and where it happened, device model and OS version, and the install identifier
- Before sending, cookies, request headers and URL query strings are removed, and strings that look like email addresses or long tokens are masked.
5. Sign-in and cloud save (optional)
- Applies only if you sign in from Settings with Google (or Apple, in the iOS app). Everything works without signing in.
- What is stored: the random account identifier the sign-in service (Google Firebase) gives, the device numbers you linked to that account, and a copy of your progress (medals · captured cells · stars · squad; settings such as sound and vibration stay on the device)
- Not stored: email or name. Your Google profile photo is shown only on your device and never sent to our server.
- Why: so you can keep playing with the same account after uninstalling the app or changing devices.
IP addresses
The servers that receive records use your IP address only to check whether requests are coming in too fast, and do not store it with the records.
How long
Run records, feedback, usage statistics and account data are kept while the game is running and deleted as soon as you ask. If the game shuts down, all of it is deleted.
Third parties and processors
We do not sell this information, use it for advertising or give it to anyone else. It is stored and processed on Cloudflare (United States · run records, feedback, usage statistics, account progress copy), Google Firebase Authentication (United States · the account identifier, if you sign in) and an error-collection server run by the developer (Republic of Korea). If you sign in with Apple, Apple handles that sign-in.
Deleting or seeing your data
Write "delete my records" in the Feedback tab or email help@mainpy.dev, and we delete the run records, feedback and usage statistics sent from that device. Through the Feedback tab the device number comes along, so you do not need to look it up. The same way you can ask to see what was sent or to stop processing. If you signed in, Settings → Delete (press twice) removes the account identifier, linked devices and progress copy from our server and the sign-in service at once (an Apple sign-in is also disconnected). If you already removed the app, sign in with the same account on the web (march.mainpy.dev) and delete it the same way. Uninstalling the app also deletes the device number, so anything recorded after a reinstall is not linked to earlier records.
Security
Everything is sent over HTTPS. Stored records can be read only by the developer with an admin key.
Children
MARCH is not designed for children under 14.
Changes
If this policy changes, the change and the new effective date are written on this page.
Privacy contact
mainpy · help@mainpy.dev