| Processor | Purpose | Data Categories | Region | Reference |
|---|---|---|---|---|
| Supabase Inc. | Backend database, authentication, storage, edge functions | Account, in-game activity, audit log, FCM tokens, consent records | Frankfurt, Germany (eu-central-1) | Privacy · DPA |
| Google LLC (AdMob) | Advertising display, frequency capping, fraud heuristics | Device advertising identifier (GAID), IP, general location, ad interaction | USA (with EU SCCs / EU-U.S. DPF) | Privacy |
| Google LLC (Sign-In) | Optional federated authentication | Google account email, basic profile (when user opts in) | USA (with EU SCCs / EU-U.S. DPF) | Privacy |
| Google LLC (Play Billing) | In-app purchase processing | Purchase confirmation (product ID, order ID, timestamp). No payment details. | USA (with EU SCCs / EU-U.S. DPF) | Privacy |
| Google LLC (Firebase Cloud Messaging) | Push notification delivery | FCM token, message delivery metadata, basic device diagnostics | USA (with EU SCCs / EU-U.S. DPF) | Privacy |
| Google LLC (Firebase Crashlytics) | Crash & stability reporting (release builds only) | Crash stack traces, exception signatures, device model / OS version, app version, crash timestamps | USA (with EU SCCs / EU-U.S. DPF) | Privacy |
| Unity Technologies (Unity Ads) | Advertising mediation via Google AdMob (serving & measuring ads) | Device advertising identifier (GAID), IP, device info, ad interaction | USA (with EU SCCs) | Privacy |
| Google LLC (Firebase Analytics) | Aggregate usage analytics for product improvement (release builds only) | App usage events, app-instance ID, device model / OS version, app version, coarse location from IP | USA (with EU SCCs / EU-U.S. DPF) | Privacy |
| proxycheck.io | Server-side VPN/proxy detection & risk scoring (security and abuse prevention only; not used for advertising) | IP address (checked at login and when earning ad rewards); returns a VPN/proxy risk assessment | International (with SCCs / adequacy safeguards) | Privacy |
▸ Change Notification
When we add, replace, or materially change a subprocessor, we provide at least 30 calendar days' advance notice through the in-app notification system and/or your registered email. If you object, your remedy is to stop using the App and delete your account before the change takes effect.
For data subject requests or questions about subprocessing, contact: metic.apps@gmail.com