Privacy Policy for FirstPlay

1. Introduction & Overview

Welcome to FirstPlay. Your privacy is fundamental to our design philosophy. FirstPlay is an instant web game, application, and digital product discovery platform.

This Privacy Policy explains how we handle technical and operational data when you access or use the FirstPlay mobile application on iOS and Android devices, as well as our official web portal.

2. Information We DO NOT Collect

To maintain complete transparency and strictly comply with Apple App Store Review Guidelines (Guideline 5.1) and Google Play User Data Policies:

• No Personal Identifiers: We do not ask for or store your legal name, username, email address, password, or physical address.
• No Contact Information: We do not collect phone numbers or address book contacts inside the mobile app.
• No Financial / Payment Data: We do not process credit cards, bank account details, or in-app payments. FirstPlay contains zero in-app purchases (IAP).
• No Device Tracking / Advertising Identifiers: We do not access or track your IDFA (Identifier for Advertisers) or GAID (Google Advertising ID) across third-party apps or websites.
• No Precise Geolocation: We do not access GPS coordinates or location sensors.

3. Information Handled Strictly On Your Device (Local Storage)

To provide you with a fast, personalized experience, certain preference data is stored locally on your device via secure local storage (SharedPreferences / iOS NSUserDefaults):

• Favourites & Recents: A list of game and application IDs you bookmark or view, allowing you to return to them instantly.
• Gameplay Time Counter: A local counter that aggregates the minutes you spend actively playing games in the app. This is used solely to verify eligibility for the daily reward spin (requiring 2 cumulative hours of daily activity).
• Cache & Performance Assets: Standard app cache (such as cached banner images) stored on your local device storage to minimize network bandwidth usage and prevent reloading delays.

None of this local data is uploaded to our servers alongside your identity or sold to data brokers.

4. Cloud Data & Server Interactions (Google Firebase)

FirstPlay uses Google Cloud Firebase (Firestore) as its cloud infrastructure backend:

• Public Catalog Retrieval (Read-Only): The app reads curated game listings, app showcases, and promotional banners stored in public Firestore collections (apps, promotion_banner).
• Anonymous Reward Voucher Generation: When an eligible user spins the daily reward wheel and wins a non-zero mobile data reward, the app generates a randomized, unlinked cryptographic voucher code (e.g. FP-DATA-XXXXX).
• The prize type (e.g., 500 MB, 1 GB) and the voucher code are stored in the Firestore spin_gift collection with a status of unused.
• No user identifiers, phone numbers, device serials, or identities are attached to this record in the mobile app.

5. External Web Redemption

If you win a reward code from the Fortune Gifts wheel:

• The redemption code is displayed in the app with an external link to our official website (https://firstplay.fun/redeem).
• You can copy the code and visit the website via your standard web browser (Safari, Chrome, etc.) to claim the mobile data package on your preferred telecom network.
• Any interaction on the external website is governed by the website's respective terms and secure web submission protocols.

6. Third-Party Web Content & In-App Browser (WebViews)

When you launch an instant game or view a partner app within FirstPlay:

• The content runs inside a secure, sandboxed mobile WebView (WKWebView on iOS, Android System WebView on Android).
• The web content is hosted on external partner game servers.
• These third-party game servers may process standard technical HTTP request headers (IP address, user-agent, session cookies necessary to render the game canvas and maintain high frame rates).
• We strongly recommend reviewing the privacy notices of any individual third-party web games you choose to play.

7. Diagnostic & Technical Log Data

Like most mobile applications, our infrastructure may receive transient network telemetry when requests are made to Firebase servers (such as IP address and timestamp) solely for network security, DDoS prevention, and rate-limiting. This telemetry is automatically handled by Google Cloud Firebase under Google's Privacy and Security standards.

8. Children's Privacy (COPPA & GDPR-K Compliance)

FirstPlay is designed for general audiences and does not knowingly collect personally identifiable information from children under the age of 13 (or under 16 in applicable European jurisdictions). Because we do not collect personal data from any user, we do not profile or track minors. If a parent or guardian believes their child has submitted personal information, please contact us immediately at [email protected] and we will take prompt remedial action.

9. Data Retention & Deletion

• Local Data: You may delete your local preferences (favorites, playtime counter, cache) at any time by clearing the app cache/data in your device settings or by uninstalling the application.
• Voucher Data: Voucher codes stored in spin_gift are cryptographic reference records that contain no user identity or contact information.

10. Your Rights (GDPR, CCPA/CPRA, NDPR)

Depending on your jurisdiction, you may have legal rights regarding your personal data, including the right to know, access, correct, or delete personal data. Because FirstPlay does not collect or store your personal identity, we do not hold personal dossiers on individual users. For any privacy-related inquiries, reach out to [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect app enhancements or legal requirements. Any modifications will be posted to this document with an updated "Last Updated" date. Continued use of FirstPlay constitutes acceptance of the revised policy.