Privacy Policy for Cooking Flow: Conveyor Puzzle

Effective date: July 14, 2026

ROrange Games ("ROrange Games," "we," "us," or "our") publishes Cooking Flow: Conveyor Puzzle (the "Game"). This Privacy Policy explains the information processed when you use the Game, why it is processed, how it is protected and retained, and the choices available to you.

1. Audience

The Game is intended for users aged 13 and older. It is not directed to children under 13.

The Game does not ask for your date of birth and does not use Google Play Games sign-in to determine your age. Because ages and consent requirements vary by country, a parent or legal guardian should review a minor's use of the Game where local law requires their involvement.

If you believe that a child under 13 has provided personal information through the Game, contact us at privacy@rorange.games. We will investigate and delete the information where required.

2. Information We Process

Account and profile information

The Game creates a publisher account so that it can save progress. You may play as a guest without linking a Google account. We may process:

• A publisher-generated player ID, authentication token, and session information.
• An optional player name and avatar selection.
• Your Google Play Games player ID and display name if you choose to link Google Play Games.
• Account-deletion request, cancellation, grace-period, and completion information.

Game progress and settings

We process information needed to operate and save the Game, including:

• Level progress, run state, rewards, virtual items and currencies, entitlements, and event progress.
• Audio, haptic, language, notification, privacy, advertising, and analytics settings.
• Timestamps and operation identifiers used for synchronization, recovery, duplicate prevention, and abuse prevention.

Purchases

If you make a purchase, we process the product ID, purchase status, transaction or order reference, receipt or purchase-token evidence, entitlement, refund or revocation status, and information required to prevent duplicate fulfillment.

Google Play processes your payment method and billing-account information. We do not receive your full payment-card number.

Optional analytics and diagnostics

First-party analytics and sanitized error telemetry are off by default. If you enable "Support & Analytics" under Settings > Privacy & Data, the Game may send pseudonymous information to our Nakama-based backend, including:

• A one-way hashed install identifier, a one-way hashed publisher player ID, and a random session ID.
• App version, build environment, device model, operating system, graphics and memory information, and event timestamps.
• App interactions such as launches, screens, level starts and results, progress operations, ad outcomes, purchase outcomes, and feature use.
• Sanitized error categories, messages, stack information, and health or performance events.

We do not intentionally include authentication tokens, full purchase receipts, raw purchase tokens, full order numbers, or unrestricted free-form text in analytics events. You can disable Support & Analytics at any time. Disabling it stops new optional first-party analytics and error events; information already received remains subject to the retention and deletion rules below.

Advertising information

The Game uses Google Mobile Ads and Google User Messaging Platform (UMP). Google and its advertising services may process:

• The resettable Android Advertising ID when it is available.
• IP address and approximate location inferred from IP address.
• Device, app, ad-request, impression, interaction, and diagnostic information.
• Information used for ad delivery, frequency control, measurement, security, and fraud prevention.

The current release does not enable personalized advertising. Advertising requests are configured for non-personalized treatment for all users, use conservative under-age-of-consent treatment, and request a maximum ad content rating of G. The Game is not enrolled in the Google Play Families program and is not directed to children under 13.

Non-personalized ads still require technical processing and may use contextual information, coarse location, frequency information, identifiers, and anti-fraud signals. Resetting or limiting the Android Advertising ID does not necessarily remove ads.

Support communications

If you contact us, we process the email address, message, attachments, and other information you choose to provide so that we can respond, investigate an issue, or complete a privacy request. Please do not send information that is not necessary for your request.

3. How We Use Information

We use information to:

• Create and maintain game accounts and synchronize progress.
• Operate gameplay, rewards, settings, cloud saves, and optional Google Play Games linking.
• Process purchases, restore entitlements, handle refunds and revocations, and prevent duplicate fulfillment.
• Deliver, measure, secure, and limit the frequency of non-personalized advertising.
• Diagnose technical problems and improve the Game when optional analytics is enabled.
• Protect players, the Game, purchases, advertising, and backend services from fraud, abuse, and security incidents.
• Respond to support, privacy, access, correction, and deletion requests.
• Comply with legal, tax, accounting, security, and Google Play requirements.

Depending on where you live, these activities may rely on performance of the service you request, your consent, our legitimate interests in operating and protecting the Game, or compliance with legal obligations.

4. Service Providers and Disclosure

We use service providers and platform operators to run the Game, including:

• Google Play for app distribution and platform services.
• Google Play Games for optional account linking and game-services identity.
• Google Play Billing for purchases.
• Google Mobile Ads and UMP for advertising, measurement, privacy messaging, security, and fraud prevention.
• Nakama-based backend, database, cloud-hosting, logging, backup, and content-delivery providers for accounts, progress, purchases, optional telemetry, security, and deletion processing.

These providers process information under their own terms, our agreements with them, or both. Google provides additional information at Google Privacy & Terms.

We do not sell personal information for money. We do not enable personalized or interest-based advertising in the current release. We may disclose information when required by law, to protect users or the service, to investigate fraud or security incidents, or as part of a business transaction subject to appropriate safeguards and notice.

5. Retention

We keep information only for as long as needed for the purposes described above:

• Account, profile, and game-progress data: while the account is active, and during the account-deletion grace period.
• Account deletion: deletion is scheduled to complete after a 30-day grace period unless you cancel the request before the deadline.
• Optional first-party analytics and error telemetry: up to 90 days.
• Rejected or invalid telemetry records used for security and schema monitoring: up to 30 days.
• Purchase anti-replay record after account deletion: the player and order references are removed, while a de-identified purchase-token fingerprint may be retained for up to 730 days to prevent the same purchase from being redeemed again.
• Support communications: normally up to 24 months after the request is resolved, unless a longer period is required for a dispute or legal obligation.
• Protected backups: deleted information may remain in access-restricted backups until the normal backup rotation completes, for no longer than 90 days. It is not used for ordinary operations and deletion will be reapplied if a backup is restored.

Google and other platform providers determine their own retention periods for information they process independently. See their privacy documentation for details.

6. Your Choices and Rights

Within Settings > Privacy & Data, you can:

• Confirm that personalized advertising is disabled for this release.
• Enable or disable optional first-party Support & Analytics.
• Open applicable UMP privacy options when Google makes them available for your region.
• Open this Privacy Policy.
• Start the account and data deletion process.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or a copy of personal information. Contact privacy@rorange.games. We may request limited information needed to verify the request and locate the correct account.

7. Account and Data Deletion

In-app path: Settings > Delete Account.

Web request path: https://www.rorange.games/sushiflow/sushiflow-deletion.

When you request deletion:

1. The Game records the request and displays a 30-day grace period.
2. You may cancel the request before the deletion deadline.
3. After the deadline, the backend automatically deletes the Nakama account, profile, progress, operation receipts, and linked first-party analytics and error data without requiring you to return to the Game.
4. Purchase anti-replay information is de-identified as described in the Retention section. Information required by law, or retained for security, fraud prevention, tax, accounting, refunds, or disputes, may be kept only for those purposes.

Uninstalling the Game does not by itself delete your account. Use the in-app path, the web request path, or email privacy@rorange.games.

8. Security

We use safeguards intended to protect information, including encrypted network transport, access controls, service authentication, data minimization, pseudonymous identifiers for optional telemetry, and deletion procedures. No storage or transmission method can be guaranteed to be completely secure.

9. International Processing

The Game's providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws. Where required, we use contractual and technical safeguards for international transfers.

10. Changes to This Policy

We may update this Privacy Policy when the Game, providers, legal requirements, or data practices change. We will publish the updated version at the same URL and change the effective date. When required, we will provide additional notice or request consent again.

11. Contact Us

ROrange Games

Privacy and data requests: privacy@rorange.games

Player and technical support: support@rorange.games

General contact: contact@rorange.games

Website: https://www.rorange.games/sushiflow