The short version: we never ask for your name, email or phone number, and there is no account. Your progress, your wallet and your league place live on your device and nowhere else. The game does use Google AdMob for the optional rewarded videos, Firebase to count crashes and basic gameplay events, and RevenueCat to process the one-off purchase β those services see technical identifiers, not who you are.
Basketball Duel: One Finger (package name com.patpat.onefingerbasket) is developed and published by PatPat Games. For anything in this policy, write to contact@patpatgames.com.
Playing the game requires no sign-up and no login. We do not collect or store your name, phone number, contacts, photos, files, precise location, microphone or camera input. We do not sell data to anyone, and we do not share it with anyone beyond the service providers listed below.
There is one exception to "no account", and it is entirely your choice: cloud save. If you turn it on, we receive the email address and the account identifier that Google gives us for signing in, and your game progress is stored under it. The section below says exactly what that means. If you never turn it on, nothing in this paragraph applies to you.
The game keeps everything on your phone. That is fine until the phone is lost, and a league you have climbed for months goes with it β so Settings → Cloud save offers to back the profile up to your Google account.
Everything the game remembers is saved in the app's own private storage:
None of it is uploaded to us unless you switch cloud save on yourself, as described below. Uninstalling the game removes all of it from the phone.
The weekly league is not a live multiplayer table. Your hundred rivals and their scores are generated on your own device from the week number and your tier, which is why the game works with no connection at all and why no score of yours is ever sent anywhere.
To run the game we rely on a few well-known providers. Each has its own privacy policy, linked below.
| Service | Why it is there | What it can see |
|---|---|---|
| Google AdMob Ads policy |
Serves the rewarded videos β the ones you tap on purpose: to carry on after a miss, to double a round's coins, to unlock two more duels, or to top up a powerup in the shop. There are no banners and no interstitials. | Advertising ID, IP address, device type and OS, and ad interaction events β used to select and measure ads. |
| Firebase Analytics Firebase privacy |
Tells us in aggregate how rounds end and which offers people take, so we can balance the game. | A randomly generated app instance ID, device model, OS version, country, and four event types: a finished round, a finished duel, a watched ad and an offer shown or bought. No name, no email, no handle. |
| Firebase Crashlytics Firebase privacy |
Reports crashes and handled failures so we can actually fix them. | Stack traces, device state at the moment of the failure, and an anonymous installation identifier. |
| RevenueCat RevenueCat privacy |
Validates the one-off pack purchase and remembers that you own it, so a reinstall can restore it. | An anonymous app user ID and the purchase receipt from Google Play. Card details never reach us or RevenueCat β Google handles payment. |
| Firebase Authentication Firebase privacy |
Signs you in with Google when β and only when β you turn cloud save on. | The email address and account identifier of the Google account you chose, plus the times you signed in. |
| Cloud Firestore Firebase privacy |
Holds the cloud save itself, in one document per signed-in account. | Your game progress β the same save the phone keeps β and the time it was last written. Readable only by your own signed-in account. |
| Google Play Google privacy |
Distributes the app and processes payments. | Install, update and purchase information under Google's own terms. |
Under the GDPR every purpose needs a legal basis, and under the KVKK a hukuki sebep. Ours, in the same order as the table above:
Google and RevenueCat process data on servers outside TΓΌrkiye and outside the European Economic Area, mainly in the United States. We do not transfer anything ourselves β the transfer happens between your device and those providers β but you should know it happens.
Both rely on the European Commission's Standard Contractual Clauses, and Google is additionally certified under the EUβUS Data Privacy Framework. Their own policies, linked in the table above, set out the safeguards in full. If you would rather none of it left your device, the game is fully playable with no connection at all: the league, your progress and every mode work offline, and buying the one-off pack removes the advertising side entirely.
Ads are how the game stays free, and every one of them is optional β nothing interrupts a round. You can limit ad personalisation at any time in Android Settings β Privacy β Ads, where you can also delete or reset your advertising ID. Resetting it breaks the link between you and any previously collected ad data.
Where local law requires it (the EEA, the UK and comparable regions) the game asks for your consent before requesting personalised ads, using Google's own consent form. You can decline and still play the whole game, and you can change your answer later from Settings β Privacy options inside the app.
Buying the one-off pack turns off all advertising in the game, and with it the AdMob data collection described above.
The game is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided data through one of the services above, contact us and we will pass the deletion request on to the relevant provider.
There is no account to close. To remove everything associated with the game:
We answer data requests within 30 days. The same steps, with the exact menus and an email template, are on the Delete your data page.
A cloud save is kept until you delete it β that is the point of it. Everything else: Firebase Analytics events are retained for a limited window set in the Firebase console, Crashlytics reports for 90 days, and purchase records for as long as tax and consumer law requires.
Unless you turn cloud save on, nothing about you is stored on a server of ours at all. If you do, the save sits in Google Cloud Firestore behind rules that allow one account β yours β to read or write it, and we hold no copy anywhere else. Data in transit to every service above travels over encrypted connections that those providers operate.
Under the GDPR, the KVKK and comparable laws you may ask us to:
Since we hold no directly identifying data, most requests are handled through the steps on the deletion page β but write to us either way and we will help. We answer within 30 days.
If you think we have handled your data badly, tell us first at contact@patpatgames.com β it is usually faster. You also have the right to go straight to a regulator: in TΓΌrkiye the KiΕisel Verileri Koruma Kurumu (KVKK), and in the EEA or the UK the data protection authority of the country you live in. You do not need our permission and you do not lose any other right by doing so.
patpatgames.com sets no cookies and runs no analytics or tracking scripts. It does load its two typefaces from Google Fonts, which means your browser's IP address and user agent reach Google's servers when a page loads β the same as any site that embeds a Google font. Nothing else on these pages contacts a third party.
If a game update changes what is collected, this page is updated before that version ships and the date at the top changes with it.
contact@patpatgames.com β a person reads it.