Privacy Policy — Roller Coaster Ride: Walletmix

In-Game Title: Roller Coaster Ride • by Walletmix • Launcher Label: Coaster Ride

1. Zero Child Personal Data, Advertising, or Behavioral Tracking

During normal gameplay, Roller Coaster Ride: Walletmix does not collect, transmit, or share names, email addresses, birthdays, phone numbers, precise or coarse geolocation, photos, camera feeds, microphone audio, contacts, device advertising identifiers (Apple IDFA or Google AAID), session screen recordings, or behavioral analytics profiles.

• No Third-Party Ad SDKs: The application contains zero third-party advertising or cross-app tracking SDKs.
• No Social Chat or Public Profiles: There are no chat rooms, leaderboards, user-generated content uploads, or social logins.
• No Unprotected External Links: Gameplay, Home, World Select, Toy Cart Garage, and Sticker Album screens contain no external web links. Official informational links are placed exclusively inside the math-protected Parent Area.

2. Local Gameplay Saves & Settings (On-Device Only)

All gameplay progress and family preferences are stored locally on your device inside the application's private sandbox directory:

• Gameplay & Settings File (user://rollermix_save_v1.json): Stores completed levels, star ratings, best times, unlocked stickers, selected toy cart/paint/pattern/trail, audio volume, control mode (Drag vs. Buttons, Auto-Roll vs. Hold-to-Roll), comfort settings (Reduced Motion, Haptics, 30 FPS Battery Saver), and parent-configured Haunted Ride settings (haunted_rides_enabled, defaulting to false, and haunted_parent_max_profile).
• Verified Entitlement Cache (user://rollermix_entitlements_v1.dat): Stores an integrity-protected local record of whether the optional Premium Adventure Pack has been verified on your device so that unlocked worlds and carts remain playable offline.

Parents can reset local gameplay progress at any time via Home → Parents → Parental Gate → Reset Local Gameplay Progress (which clears level stars and stickers while preserving verified purchase ownership), or remove all local files by uninstalling the application.

3. Store Payment Processing (Apple App Store & Google Play)

The game offers a single optional, parent-gated, one-time non-consumable expansion: the Premium Adventure Pack (Google Play Product ID: premium_adventure_pack; Apple App Store Product ID: com.walletmix.rollermix.premium_adventure_pack).

• All payment transactions and currency conversions are processed directly by Apple (via StoreKit 2) or Google (via Google Play Billing) under your platform store account.
• Walletmix Limited never receives, processes, or stores your credit card number, debit card number, bank account details, or billing address.

4. Purchase-Token & Transaction Verification

When a parent initiates a purchase or taps Restore Purchases inside the Parent Area, the app verifies the transaction before unlocking the expansion:

• iOS & iPadOS (StoreKit 2): Cryptographic JWS transaction signatures are verified directly on the device using Apple's native StoreKit 2 VerificationResult APIs.
• Android (Google Play Billing Verification API): When production Google Play purchase verification is active, the client transmits only the application package identifier (com.walletmix.rollermix), product identifier (premium_adventure_pack), and the opaque Google Play purchase token over HTTPS to Walletmix Limited's isolated verification endpoint (https://game.walletmix.com/api/v1/games/rollermix/purchases/google/verify) to confirm purchase state and acknowledge the order with the Google Play Developer API.
• Token Hashing & Data Minimization: The verification service never logs or stores raw purchase tokens in its database. It stores only a one-way SHA-256 digest of the token (token_hash), the Google Play order_id, product ID, verification status (ACTIVE, PENDING, or REVOKED), and verification timestamps to support idempotent restore and refund reconciliation. No player name, email address, or advertising ID is included in verification requests.

5. Website & API Operational Logs (game.walletmix.com)

When an adult visits https://game.walletmix.com or when the app communicates with the verification API on game.walletmix.com:

• Zero Marketing Cookies or Third-Party Trackers: The Walletmix Games website is a static-first informational site. It sets no advertising or tracking cookies and loads no third-party analytics scripts.
• Minimal Operational Server Logs: The reverse proxy (Nginx) records standard operational access and error log entries (client IP address, HTTP method and URL path, response status code, timestamp, and browser User-Agent) strictly for network security, abuse prevention, rate limiting, and TLS/HTTP troubleshooting.
• No Request Body or Token Logging: The purchase verification service suppresses request query/body logging so that purchase tokens and headers are never written to application log files.
• Log Retention: Operational web server logs on game.walletmix.com are automatically rotated and purged after 14 days via system logrotate.

6. Support Information Voluntarily Supplied by an Adult

If a parent or adult guardian voluntarily contacts Walletmix Limited at info@walletmix.com or via WhatsApp at +8801335556688 (WhatsApp chat only) for technical or billing assistance, we receive the adult's contact identifier and any details included in the message (such as device model, OS version, or a store order ID).

• We use this information solely to respond to and resolve the support request.
• We do not add support contacts to marketing mailing lists or sell contact information to third parties.
• Parents and guardians may request deletion of their support correspondence at any time by emailing info@walletmix.com.

7. Children's Privacy (COPPA / GDPR-K Compliance)

We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has submitted personal information to us (for example, by sending an email directly to our support address), please contact us at info@walletmix.com and we will promptly delete the correspondence from our records.

8. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact:

Walletmix Limited
House 2/B (2nd Floor), Road 8, Nikunja-2, Khilkhet, Dhaka 1229, Bangladesh
Email: info@walletmix.com
WhatsApp: +8801335556688 (WhatsApp chat only)