Privacy Policy

How AsterLab Group handles audio permissions, user accounts, gameplay records, and device safety in MeloPuff.

1. Introduction

AsterLab Group (“we”, “our”, or “us”) develops and publishes MeloPuff: Voice Flappy & Global Leaderboard (“the Game”). This Privacy Policy explains our practices regarding data collection, usage, and safeguarding when you play MeloPuff via our official mobile applications (Android / Google Play) and web portals (melopuff.asterlabgroup.tech and asterlabgroup.tech).

2. Microphone & Audio Input (Crucial Disclosure)

MeloPuff features innovative voice-controlled mechanics allowing your character (Mochi Pink or Mochi Blue) to glide or jump based on vocal amplitude. Here is how your microphone is handled:

• Local Real-Time Processing Only: Audio is captured through the Web Audio API (Web) or Android RECORD_AUDIO runtime permission. It is transformed locally into decibel volume readings (RMS amplitude).
• No Audio Recording: We never record sound clips, spoken words, audio conversations, or biometric voice prints.
• Zero Audio Egress: Audio signals never leave your local device memory and are discarded instantly after the pitch/amplitude calculation.
• Permission Revocation: You can deny or revoke microphone permissions at any time via your device settings or browser preferences. The game provides tactile touch/mouse controls as a seamless fallback.

3. Player Accounts & Google Sign-In

You can enjoy MeloPuff entirely anonymously as a Guest without creating an account. Optionally, players can connect using Google Sign-In to sync high scores to the Global Leaderboard:

• Data Collected via Google Sign-In: Public profile display name, public profile avatar photo URL, and authenticated Google User ID (UID).
• Purpose: Authenticating high score submissions to prevent fraudulent score tampering, displaying your nickname on the public Top Rank leaderboards, and maintaining your personal best records.
• Password Safety: We do not receive, process, or store your Google account password. Authentication is completed securely via Google OAuth / Firebase Auth.

4. Leaderboard Records & Gameplay Data

When participating in global rankings, we store:

• High score (coins accumulated) and highest stage reached.
• Selected character mascot (Mochi Pink or Mochi Blue).
• Timestamp of record achievement and ISO Country Code (determined via Cloudflare edge geolocation for regional ranking flags, without storing precise GPS).

5. Advertising & Third-Party Services

To keep MeloPuff free to play, we utilize trusted third-party service providers:

• Google AdMob & Google Play Services: Serves banner, interstitial, or rewarded video advertisements. AdMob may collect and process device identifiers, advertising IDs (GAID), IP address, and ad interaction telemetry according to Google's Privacy Policy.
• Cloudflare: Provides CDN caching, DDoS protection, edge SSL encryption, and static content hosting for our web application.
• Firebase Realtime Database / Cloud Firestore: Houses the encrypted public leaderboard records.

6. Children’s Privacy (COPPA & Families Policy Compliance)

MeloPuff is crafted for broad audiences and families:

• We do not knowingly collect personal contact information (e.g., physical home address, phone numbers, email inboxes) from children under the age of 13.
• Voice input does not perform speech recognition or language parsing—it functions solely as a mathematical volume meter.
• Parents and guardians may contact us at any time to inspect, modify, or permanently delete their child's leaderboard username and score.

7. Data Security & Retention

We deploy standard security protocols including TLS 1.3 encryption across all network communications. Leaderboard records are retained as long as the global ranking season remains active. Inactive guest scores are routinely purged after 180 days.

8. Your Rights & Data Deletion Requests

Regardless of your geographic jurisdiction (including GDPR in Europe and CCPA in California), you have the right to:

• Request confirmation of whether your Google profile is linked to any active high score.
• Request the total and immediate deletion of your leaderboard entry and linked UID.
• Opt-out of personalized advertisements via your Android OS device settings (Settings > Google > Ads > Delete Advertising ID).

To request data deletion, contact us directly at privacy@asterlabgroup.tech with your in-game nickname and Google account email.

9. Policy Updates

We may update this Privacy Policy periodically to reflect app enhancements or statutory regulations. Any revisions will be published on this page with an updated revision date.

10. Contact Information

If you have any questions, inquiries, or security disclosures regarding this policy:

• Studio: AsterLab Group
• Domain: melopuff.asterlabgroup.tech / asterlabgroup.tech
• Email: privacy@asterlabgroup.tech