Privacy Policy

Echo Protocol: Dark Sonar (com.echoprotocol.game)
Effective 15 July 2026 · Last updated 16 July 2026

This policy explains what Echo Protocol: Dark Sonar ("the game") collects, why, and who it is shared with. The game is published by Edward Paolo Guevarra, trading as BoardPass PH, based in Cavite, Philippines ("we", "us").

The short version: you can play without telling us anything — no name, no email, no phone number. The game shows ads and has an online leaderboard, and those two features are the only reasons any data leaves your device. One optional feature adds one datum: if you choose to secure your callsign with Google Sign-In, our authentication service receives the email address of the Google account you pick — nothing else.

1. What the game collects

Data	Why	Where it goes
Advertising ID (a resettable ID your device provides)	To show ads and to measure and prevent ad fraud.	Google (AdMob)
Anonymous player ID (a random ID created for you)	To recognise your device as the owner of your callsign and your scores. Unless you secure your callsign (next row), it is not linked to any Google account, email, or name.	Google (Firebase Authentication); stored alongside your scores
Google account email (optional — only if you tap "Secure callsign" and sign in with Google)	To let you recover your callsign after a reinstall or on a new phone, and to recognise your account if you ask us to delete it. We never see your password.	Google (Firebase Authentication). Never stored on our leaderboard server, never shown publicly.
Callsign (the short name you choose)	To show who holds a place on the leaderboard.	Our leaderboard server. Publicly visible.
Game results (nodes reached, run time, deck reached)	To rank runs on the leaderboard.	Our leaderboard server. Publicly visible.
Device and ad-request data (device type, operating system, coarse region derived from IP address)	Collected by Google's ad system to select and measure ads. We never see or store this.	Google (AdMob)

2. What stays on your device

These never leave your phone and are not sent to us or anyone else:

Your audio, brightness, and touch-control settings.
Your personal best runs (the on-device records list).
The sign-in token for your anonymous player ID.

Uninstalling the game deletes all of it.

3. What we never collect

Your name or phone number — the game never asks.
Your email address — unless you choose Google Sign-In to secure your callsign; even then we receive only the address of the account you picked, never your password.
Your contacts, photos, files, microphone, or camera.
Your precise location.
Your IP address — our leaderboard server does not record or store it.

4. Your callsign and scores are public

The leaderboard is the point of the game. When you claim a callsign and finish a run, that callsign and that score may be shown publicly to other players. Choose a callsign you are happy for strangers to see, and do not use your real name.

A callsign is unique and permanent. Once claimed it cannot be changed or transferred, because the leaderboard would be meaningless if names could be swapped or reused.

5. Who we share data with

Service	What they receive	Their policy
Google AdMob	Advertising ID, device and ad-request data	policies.google.com
Google Firebase Authentication	Player ID; your Google account email if you use Google Sign-In	firebase.google.com/support/privacy
Cloudflare (Workers)	Serves our leaderboard requests	cloudflare.com/privacypolicy
Neon (database)	Stores callsigns and scores	neon.tech/privacy-policy

We do not sell your data, and we do not share it with anyone other than the services above.

6. Advertising

The game shows a full-screen ad after some runs end. Ads are served by Google AdMob, which may use your Advertising ID to personalise them.

You can turn personalised ads off at any time, on the device itself:

Android: Settings → Privacy → Ads → "Delete advertising ID" or "Opt out of Ads Personalisation".

Doing this does not remove ads. It makes them less relevant.

7. Children

Echo Protocol: Dark Sonar is a horror game. It is not directed at children and we do not knowingly collect data from anyone under 13 (or the equivalent minimum age in your country). If you believe a child has provided data to us, contact us and we will delete it.

8. How long we keep things

Callsigns and scores: kept while the leaderboard runs, so records stand over time. Deleted on request (see below).
On-device data: until you uninstall or clear the app's data.
Ad data: held by Google under Google's own retention policy, not ours.

9. Your rights, and how to delete your account and data

You can ask us what we hold about you, ask us to correct it, or delete it yourself at any time.

Delete in the game: on the title screen, tap the SECURED chip → DELETE MY ACCOUNT → confirm. This permanently removes your account, your callsign, and every score, immediately.

Delete from the web (works even if the game is uninstalled): follow the steps at agentnoah.dev/echo-protocol/delete-account, or email privacy@agentnoah.dev with the subject "Delete my data" and your callsign (or the Google email you secured it with). We will remove your account, callsign, and all associated scores within 30 days. Deleting the game from your phone removes the on-device data immediately, but does not remove your leaderboard entry — use either path above.

Depending on where you live, you may also have rights under laws such as the Philippine Data Privacy Act of 2012 (RA 10173). To exercise any of them, use the same address above.

10. Changes to this policy

If this policy changes materially, we will update the "Last updated" date at the top and, where the change is significant, note it in the game's store listing. Continuing to play after a change means you accept the updated policy.

11. Contact

Edward Paolo Guevarra (BoardPass PH)
Cavite, Philippines
privacy@agentnoah.dev