Your next adventure.
Your privacy, explained.

1. Who is responsible

Melio App Studio operates EchoBlast: Rocket Cave Escape and this website. For privacy questions or requests, contact melioAppStudio@gmail.com. This policy describes the current version; future features may require changes and additional notices before they are enabled.

2. What stays on your device

EchoBlast saves level progress, best distances, coins, owned ships, country-themed paint, upgrades, ability passes, reward limits, sound and vibration settings, and review-prompt history in app storage. We do not operate a cloud-save account or upload your recorded flight paths.

Up to three failed flights are temporarily held in memory to animate ghost rockets. Leaving a level clears these attempts. A new installation does not require a name, email address, phone number or account.

A neutral age-range screen offers under 13, 13–17, 18 or older, and prefer not to say. Only the selected range is saved locally; we do not request a date of birth or transmit the range to our servers. Dismissing the screen is treated as unknown age. Every range receives the same gameplay and child-directed ad settings.

EchoBlast does not request access to your contacts, photos, microphone, camera or precise location. Country paint is a cosmetic choice, not a request for your nationality or location. Coins are virtual gameplay currency, not money; real-money purchases are not implemented in this version.

3. Children and families

EchoBlast is intended for players approximately eight years old and above, including children. We use the same conservative ad settings for all players, including people whose age is unknown. Choosing an older age does not enable personalized ads or analytics.

We do not provide social profiles, public chat, direct messaging, behavioral-advertising profiles or a child-facing analytics opt-in. We configure Google ad requests for child age treatment, general-audience (G) ad content, and non-personalized ads. These settings are intended to limit processing to contextual ad delivery and supporting operations such as security, frequency control and fraud prevention, rather than tracking a child’s interests across apps.

Parents and guardians can contact us to ask about information associated with their child, request review or deletion of information we hold, or object to further processing. Please do not send a child’s birthday, identification documents, password or sensitive information in an initial email. We will request only what is reasonably needed to handle and verify a request.

4. Advertising and Google services

EchoBlast integrates Google AdMob (Google Mobile Ads SDK) for ads between runs and optional rewarded videos for in-game coins or passes. A reward is issued only when the SDK confirms it was earned. An unavailable or skipped ad does not prevent ordinary play. Ad serving depends on account approval, inventory and applicable privacy requirements.

The ad SDK may process your IP address (including an approximate area inferred from it), app and device information, SDK or installation identifiers, ad interactions such as video views, and technical diagnostics. These support contextual ads, ad delivery and measurement, security and fraud prevention. Non-personalized advertising does not mean that no data is processed.

EchoBlast removes Android advertising-ID permission and does not request iOS tracking authorization. Child age treatment and the G content limit are set before ad SDK initialization and ad loading. Google’s privacy-message SDK is also told to apply under-age-of-consent treatment. We do not pass your name, contact information, chosen age range or recorded flight paths to ad requests, and have not integrated additional mediation-network SDKs.

Firebase Analytics and Crashlytics libraries are included for technical integration, but gameplay analytics and crash-report uploads are disabled in this child-inclusive build, regardless of earlier saved opt-ins. Pending local reports are discarded. Google SDK setup may still involve technical app or installation data; this is not a claim that all Google services are network-free. EchoBlast does not send its gameplay-event stream or software-error reports while these controls are disabled.

Read Google’s Privacy Policy, how Google uses information from partner apps, and Firebase privacy information for the provider’s practices. App stores, your operating system and websites opened from ads have their own policies.

5. This website and support email

This website is hosted with Google Firebase Hosting. Hosting processes incoming network requests, including IP addresses, to serve pages and detect abuse. Firebase states that Hosting retains IP data for a few months. We have not added website analytics, ad pixels, cookies for tracking, embedded videos or third-party fonts.

If you email support, we receive your email address, message and any attachments you choose to send. We use them to answer your request and resolve support or privacy issues, not to add you to marketing lists. Please have a parent or guardian contact us on behalf of a child.

6. Sharing, retention and security

We do not sell player contact information or create cross-app behavioral advertising profiles. Google processes technical data as described above. We may disclose information we actually hold when required by law, to protect people or service security, or to respond to a verified rights request. We do not publish a player directory or share local ghost-flight recordings.

Local saves remain until you clear app data or remove the app, subject to your operating system’s backup and restore settings. Ghost recordings last only for the current level visit. Support correspondence is retained while needed to resolve the issue and for necessary security or legal recordkeeping; you can request deletion. Google controls retention of data processed by its services under its policies; deleting the app does not automatically delete provider-held records.

Network services use encrypted connections. No system can guarantee absolute security. Google and email providers may process information on servers outside your country. Relevant protections and transfer arrangements are described in their privacy information.

7. Your choices and privacy rights

You can change sound and vibration in Settings, read this policy from Settings, and use any advertising privacy options that Google requires us to show. Analytics and crash uploads are not user-enableable in this version. Optional rewarded ads can be declined; ordinary gameplay and coin-based purchases remain available.

To erase local progress, use Android’s app-storage controls or delete the app on iOS (offloading alone may retain data). Your operating system may restore backed-up saves. We cannot remotely identify or erase an anonymous local save from an email address.

Depending on where you live, you or a parent or guardian may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw applicable consent, or complain to a data-protection authority. Email us to exercise applicable rights. We will explain what information we can identify, and help with provider-related requests where possible. We do not promise that every provider-held record can be located from your email alone.

8. Changes to this policy

We will update the date on this page when our practices change. Material changes, such as enabling new data collection or real-money purchases, will require an updated notice and any permissions or parental consent required before that processing starts.