Privacy Policy

Effective August 14, 2026 · Last updated September 28, 2026

This policy covers the Mecca Gecko iOS/iPadOS and Android apps and the website at meccagecko.com, provided by Valux Games LLC (“we”, “us”), 127 W Hargett St Ste 301 PMB 119, Raleigh, NC 27601, USA. Contact: support@valuxgames.com.

1. The short version

We built a party game, not an ad network. We do not sell your personal information. We do not show third-party ads. Payments go through Apple on iOS and Google Play on Android. Multiplayer uses a player host or, for protected internet matches, a dedicated game server, so people in your match can see what you chose to share in that match (display name, painted gecko, voice if you turn it on).

2. Information we may have

What you type in the game — display name, party codes, optional feedback.
Gameplay in a match — paint, poses, positions. This is exchanged between player devices, passing through our relay for internet parties. We do not run a permanent world database of your hides.
Optional voice — if you allow the microphone, nearby / party voice is processed so others in the match can hear you. We do not record or store voice on our servers.
Purchases — Optional characters, emotes, and consumable diamond packs are billed by Apple on iOS and by Google Play on Android. The store sends a receipt / entitlement so the app can unlock content. We never see your full card number. We do not receive your payment card number from Apple or Google.
Online parties — Google Cloud Run relays gameplay and voice traffic, and Firestore holds short-lived lobby listings (party name, player names, counts, map, code, and host network address). Service infrastructure may retain IP addresses, request metadata, and diagnostic logs. Public listings are visible to other players.
Safety — a random installation credential authenticates your connection; its hash identifies your installation to the party and service. Saved blocks and voice mutes stay on your device. Player reports include installation identifiers, party code, a reason category, and timestamps; moderators can act on them. Reports do not record voice.
Optional local replays — in versions that offer replays, recording is off until you enable it. A replay saves the match as seen by your device, including player display names, character appearances, paint, positions, poses, and tag events. It does not record your screen, microphone, or voice chat. The app does not upload replay files to our servers. Your device backup settings and any destination you choose for export/share control copies outside the app. Other players may also save or share replays of a match you join.
Game Center — when you sign in, Apple processes your Game Center identity, eligible leaderboard scores, and achievement progress. Your Game Center profile and scores may be visible according to your Apple privacy settings. The app stores progress and pending reports locally to retry interrupted submissions.
Support email — if you write us, we keep the thread long enough to help you.
Diagnostics — if you have Apple Analytics / crash reporting enabled, we may receive crash logs and coarse device type so we can fix bugs. Android builds do not include a third-party crash or analytics SDK. Google Play may collect its own install and crash diagnostics under Google’s terms.
This website — GitHub Pages may log standard request metadata (IP, user agent) as part of hosting. This site loads fonts from Google Fonts, which receives your network request, including your IP address. We do not run our own tracking cookies or advertising pixels on this site.

3. What we do not do

We do not sell personal information.
We do not use your data to train unrelated advertising profiles.
We do not require a Mecca Gecko account to play the core hide-and-seek loop.
We do not knowingly collect personal information from children for marketing. The app is a general-audience party game, not a “Made for Kids” product. If you are a parent and think a child sent us personal data, email us and we will delete it.

4. Who else sees data

Apple — App Store, TestFlight, In-App Purchases, Game Center, and optional crash analytics you enable on the device.
Google Play — distribution, Play Billing, Play services, license checks, and Play’s own install and crash diagnostics for the Android app. Google processes purchases and may process device identifiers required to deliver the store and restore owned items.
Other players in your match — your display name, avatar, paint, movement, and voice if you opted in. Players may keep local gameplay replays and share exported videos. Choose a display name and paint you are comfortable sharing.
Google Cloud — hosts the multiplayer relay, lobby registry, safety reports, and operational logs.
GitHub — hosts this website (GitHub Pages). Google Fonts supplies the website fonts.

We may disclose information if required by law or to protect people from harm.

5. Retention

The relay forwards match traffic without a permanent match or voice recording. Lobby listings become stale after approximately 70 seconds without a host heartbeat; database cleanup runs separately. Safety reports are scheduled to expire after 90 days. Automatic database cleanup is enabled; deletion is asynchronous and may occur after expiration. Enforcement records may remain while a restriction applies. Infrastructure logs and support correspondence may remain after a match ends; standard Google Cloud operational logs are configured for 30 days, while required cloud audit logs have a 400-day retention period. Support correspondence is retained as needed to resolve requests or meet legal obligations. Contact us to request deletion of information we hold. Purchase entitlements follow Apple’s and Google Play’s records.

Local replay cleanup keeps up to three recent unpinned replays, subject to a 256 MB storage budget. Replays marked Keep and exported videos remain until you delete them or remove the app’s data. Deleting a replay does not delete an exported video, and deleting an in-app export does not remove a copy saved to Photos, Files, or shared with someone else. Other local saves remain until app data is removed.

6. Your choices

Decline microphone access in iOS Settings or in the Android permission prompt and system app settings. Use Settings → General in the game to mute, report, or block a player. The game still plays if you refuse the microphone.
Use Settings → Game → Replay recording → Record future matches to enable recording for future matches. Turning it off stops and discards the current recording. A red REC · REPLAY indicator appears while recording. Clip Studio lets you delete saved replays and in-app exported videos. Remove separately saved or shared copies in the destination app or service.
Manage Game Center sign-in and privacy in iOS Settings.
Restore purchased characters and emotes in Settings → General using the same Apple Account or Google account that bought them. Review purchases in your Apple or Google Play purchase history; diamond packs are consumable and cannot be restored.
Email support@valuxgames.com to access, correct, or delete information we hold, or to object / request portability where those rights apply (including EEA/UK residents).

7. International visitors

The app and site are operated from the United States. If you play from another country, your information may be processed in the US. Contact us if you need information about the service providers processing your information or wish to exercise applicable privacy rights.

8. California / similar US state laws

We do not sell or share personal information as those laws define “sale” or “share” for cross-context advertising. To exercise access or deletion rights, email us.

9. Changes

If this policy changes in a material way, we will update the date at the top of this page. Where required, we will provide additional notice or request consent before a material change takes effect.

10. Contact

Valux Games LLC
127 W Hargett St Ste 301 PMB 119
Raleigh, NC 27601
USA
support@valuxgames.com