← Bendigo Games

ONE SHOT

Cascade

Privacy Policy

Last updated: 19 August 2026 · Applies to One Shot Cascade on Android and iOS.

One Shot Cascade has no sign-in: it never asks for your email, phone number, contacts, location, or photos, and there is no password to forget. It does have leaderboards and leagues, so that other players can see how they rank against you. To make that work, when you play, the game sends your scores, a short replay of the run so the score can be verified, a display name you choose, and a randomly generated player number to our leaderboard service. The game also sends an automatic crash report if it crashes. That is the whole list, and the rest of this page explains each item.

What stays on your device

Most of what the game remembers never leaves the phone. It is stored locally, in the app's own private storage, and we cannot see it:

• Lifetime career stats — boards cleared, one-shots, longest chain, and so on
• Which achievements you have unlocked
• Your settings — sound, music, haptics, reduce motion
• An in-progress run, so closing the app does not cost you the run
• Your full local run history

These stay on your device, are not sent to any server we operate, and are deleted when you uninstall the app. One caveat that belongs to your phone rather than to us: your device's own backup system (Android's backup to your Google account, an iPhone backup) may include the app's files along with everything else it backs up. Those backups are between your device and your Google or Apple account — we never see them.

What leaves your device

Leaderboards and leagues

The game's leaderboards and leagues run on Google Firebase (Cloud Firestore). So that other players can be ranked against you, when you finish a ranked run the game submits:

• The run's score and your accrued Charge (the number that moves you up the league ladder)
• The run's details and a replay — when it was played, boards cleared, one-shots hit, and the sequence of taps with their timings. The replay is how the server checks that a score was earned rather than invented. It describes what happened inside the game and nothing outside it — no location, no device details, nothing typed.
• A display name — one you choose in the game's settings. If you do not choose one, the game uses a neutral default such as “Player 1748”, and that default is submitted too — a name is always sent with your scores, it just does not contain anything about you unless you put it there. Because it is shown to other players, it is filtered for profanity when you set it, and other players can report it.
• A player number — a random identifier created the first time you open the game (using Firebase Anonymous Authentication). It is what keeps your rows together on the boards. It is not linked to your real identity, your email, or any account, because there is no account.

Alongside each run, the game keeps a single player row up to date on the server: your display name, Charge, league division, best run, and lifetime run count — the numbers the ladder is built from.

This is the information other players may see next to your rank: your display name, your score, and your league standing. It is stored so that the boards persist between sessions — run entries are stamped with an expiry when they are posted and deleted 90 days later, while your player row persists (so your league standing does) until you ask us to remove it. It is processed by Google as our service provider under Firebase's data processing terms.

Taking part is on by default, but you can turn league participation off at any time in the game's settings. When it is off, the game stops submitting your runs and your display name; runs queued but not yet sent are held on your device and go out only if you turn the switch back on. (The app still signs in to Firebase anonymously when it starts — that is where the player number comes from — but it submits nothing while the switch is off.) See Your choices and your rights below for how to also remove data already submitted.

Reporting a display name

If you report another player's name from the boards, the report sends their player number, the name as you saw it, the time, and your own player number — so that misuse of the report button can be spotted. Reports go into a store that no player can read and are used only for moderation.

Crash reports (Firebase Crashlytics)

The game uses Firebase Crashlytics, a Google service, to report crashes so they can be fixed. When the game crashes, Crashlytics sends:

• The stack trace — the line of code the crash happened on
• Your device model, operating system version, and the app version
• Device state at the moment of the crash: free memory and storage, whether the device was rooted or jailbroken, orientation
• A randomly generated Crashlytics installation identifier, which is not linked to you and is reset if you reinstall the app
• A short log of the last game events before the crash — run started, tile tapped, score shared, achievement unlocked — so the crash can be traced to what the game was doing. It describes gameplay only: no name, nothing typed, nothing from outside the game

These reports do not contain anything you typed. They are processed by Google as our service provider under Firebase's data processing terms, and Crashlytics retains them for 90 days.

The connection itself

Whenever the game talks to Firebase — submitting a run, fetching a board, reporting a crash — Google's servers see your device's IP address, the way any server sees the address of anything that connects to it. We never see or store it. Google processes it as our service provider, on servers that may be outside your country, under the data processing terms linked above, which include the EU's standard contractual clauses for international transfers.

Advertising

Advertising is not active in the current release. The game shows no ads today and contains no ad network that requests one.

When advertising is enabled in a future update, the game will use Google AdMob. AdMob collects an advertising identifier (the Android Advertising ID or Apple's IDFA) and ad-interaction data (which ads were shown, tapped, and whether they led to an install) in order to serve and measure ads. We describe that here in advance so this policy does not need to change when ads are switched on; the store data-safety disclosures will be updated to match at that time, and where the law requires it you will be asked for consent before personalised ads are shown.

Sharing your score

The share button hands a short block of text to your device's own share sheet. What happens next is entirely between you and whichever app you pick. The game does not see where you sent it. It does count that you shared — the counter behind the sharing achievement — but that count lives in your local career stats and stays on your device.

Summary

Children

One Shot Cascade is not directed at children under 13, and we do not knowingly collect personal information from them. The game has no chat and no way to send a message to another player; the only thing you can make public is a short display name, which is filtered and can be reported. If you believe a child has provided a display name or other personal information through the game, contact us and we will delete it.

Your choices and your rights

• Stop appearing on the leaderboards: turn off league participation in the game's settings. The game stops submitting new runs and your display name straight away.
• Delete your leaderboard data: contact us at the email below and we will delete the row tied to your player number. Your player number is shown in the game's settings so you can tell us which one is yours.
• Delete everything on your device: uninstall the app. That removes the local data immediately; email us if you also want your leaderboard row removed, since that copy lives on the server.
• Change or remove your display name: you can edit it in the game's settings at any time.
• Crash reports: to ask what crash data is held for your device's installation identifier, or to have it deleted before the 90-day retention expires, contact us with that identifier.
• See or correct what we hold: the same email works for a copy of the rows tied to your player number, or to correct them.
• Under the GDPR, UK GDPR, CCPA/CPRA, or Australian Privacy Act: we do not sell your personal information, and we do not use it for targeted advertising. The lawful basis for the leaderboard data is our legitimate interest in running the leagues the game is built around, balanced by the switch that turns them off; the basis for crash diagnostics is our legitimate interest in keeping the game from crashing. You also have the rights to access, correct, export, and object — the email below honours all of them — and the right to complain to your local data protection authority.

Changes to this policy

If this policy changes, the date at the top changes with it, and we keep every previous version — email us for any of them. A change that widens what is collected will not be applied retroactively to a version of the app already installed — it takes effect with the release that makes the change.

Contact