Last updated: 9 October 2026
The short version. Hiding Flow! has no account. We never ask for your name, your email address or your phone number, and your progress is saved on your phone. Players are anonymous to us. The game does use device identifiers — a random identifier of this installation and, if you allow it, your advertising ID — so that we can produce anonymous, aggregated statistics (levels, retention, ads, purchases), send the notifications you allowed, show ads and get them paid for, and process purchases. Each partner involved is named below, with a link to its own policy, and you can say no.
Hiding Flow! (the “game”, package com.onelagames.hidingflow on Android
and iOS) is published by ONELA MARKET CO., LTD.
(บริษัท โอเนล่า มาร์เก็ต จำกัด), a company registered in Thailand under number
0505568000722, trading as Onela Games. We are the data controller
for the data described below.
Registered address: 54/1 Traswong Road, Mueang Chiang Mai, Chiang Mai 50000, Thailand.
For any question about this policy or your data, write to onelamarket@gmail.com.
There is no sign-up and no Onela user profile. This is everything the game, and the services built into it, collect.
| What | Why | Who processes it |
|---|---|---|
| Your progress Levels completed, coins, lives, boosters and settings. |
To let you continue where you left off. | Stored only on your device. It is never sent to us. |
| Gameplay statistics Levels started, won and lost, boosters and coins used, sessions and retention, ads shown and what they earned, purchases made. Firebase attaches them to a random identifier of this installation (app instance ID), with basic device information: model, operating system version, language and the country derived from your IP address. No name, email or account is attached. |
To understand, in anonymous and aggregated form, which levels are too hard or too easy, how many players come back, and how ads and purchases perform, so that we can improve the game. | Google Firebase Analytics (Google Analytics 4), with an export to Google BigQuery that only Onela Games can access |
| Game settings The game downloads a few switches (for example, the difficulty of a level or whether an offer is shown). |
To adjust the game without an update. | Google Firebase Remote Config |
| Push notification token A random token that lets a notification reach this installation. |
To send the notifications you allowed (for example, a reminder that your lives are back). You can turn them off in your phone settings. | Google Firebase Cloud Messaging, Apple Push Notification service; our own server (games.onelamarket.com) decides when a notification is sent, using only the token or a topic, never your identity |
| Advertising identifier, device data and approximate location Your device's resettable advertising ID (on iOS, only if you allow tracking), IP address and the approximate location (country, region) derived from it, device model, operating system version, language, and which ads were shown, clicked and what they earned. |
To show ads (rewarded videos you choose to watch, and short full-screen ads between levels), to avoid showing you the same ad repeatedly, to prevent ad fraud, and to measure what an ad earned. | Unity LevelPlay (ironSource), and through it Google AdMob and Unity Ads |
| Purchases Which product was bought, its price and currency, and the order number. |
To deliver what you paid for and to restore permanent purchases (such as Remove Ads). | Apple App Store, Google Play (we never see your card details); Unity In-App Purchasing |
| App installs, opens, purchases and ad revenue (advertising measurement) That the game was installed and opened, which product was bought with its price, currency and order number, and what each ad shown earned — together with your advertising ID (on iOS, only if you allow tracking), IP address, device model, operating system version, language and time zone. Test purchases are never sent. |
To measure which of our own ads on Facebook and Instagram brought players to the game, and to show those ads to people likely to enjoy it. The game does not use Facebook Login and does not share anything you see or do in the game on Facebook. | Meta Platforms (Facebook SDK for Unity) |
| Crash and performance diagnostics Technical reports produced by the advertising SDKs when they fail or run slowly. |
To keep ads working and the game stable. | Unity LevelPlay (ironSource), Google AdMob, Unity Ads |
| Feedback you choose to send The text you type in the in-game feedback form, with the level you were on, the game version, platform and language. The form never asks for your email address. Our server also sees your IP address, which it uses only to limit abuse. |
To read your feedback and fix what you report. | Our own server (games.onelamarket.com) |
We do not collect your name, email address, phone number, contacts, photos, files, microphone, camera or precise GPS location, and we never attach a name or an account to the identifiers above. The game asks for no such permission, and you can verify that in the permission list on its store page. If you write to us by email, we receive your email address and use it only to answer you.
The game is free and is paid for by ads: rewarded videos you choose to watch in exchange for a bonus, and full-screen ads between levels once you are past the first levels (never after you have just watched a rewarded video). Buying Remove Ads switches off the ads between levels.
Ads are supplied through Unity LevelPlay (ironSource), which requests them from Google AdMob and Unity Ads. These partners use the advertising identifier to select ads and to count them. Statistics and notifications go through Google Firebase. Meta (Facebook SDK) receives install, open, purchase and ad-revenue events so that we can measure our own advertising on Facebook and Instagram. Each partner's own privacy policy applies to its processing:
In the European Economic Area, the United Kingdom and Switzerland, the game shows a consent screen (Google's User Messaging Platform, through LevelPlay) before personalised ads are requested; the Meta SDK is also started only after that screen. On iPhone, the game asks your permission to track (App Tracking Transparency) before the advertising and Meta SDKs are started. If you choose “Ask App Not to Track”, your advertising identifier is not shared with anyone.
You can switch personalised advertising off at any time, from your phone.
Ads still appear after you opt out — they are simply less relevant to you.
Personalised advertising relies on the consent you give, or refuse, in the consent screen (and on iPhone in the “Allow tracking” prompt); you can withdraw it at any time. Non-personalised ads, fraud prevention and diagnostics rely on our legitimate interest in keeping the game free and working, as do the anonymous statistics and the notifications you allowed. Purchases rely on the contract you enter into when you buy something.
We do not sell personal information for money. Sharing the advertising identifier and ad events with advertising partners may count as “sharing” for cross-context behavioural advertising under the CCPA/CPRA. You can opt out by deleting or resetting your advertising ID (Android) or by turning tracking off (iOS), as described above, or by writing to us. We will not treat you differently for exercising your rights.
This game is not directed at children under 13 (or the higher age of digital consent in your country), and we do not knowingly collect personal information from them, in line with the US Children's Online Privacy Protection Act (COPPA) and the GDPR. If you believe a child has provided us with data, write to us at the address above and we will delete it.
The services above may process data on servers outside your country, including in the United States, under the safeguards they describe in their own policies (such as the European Commission's standard contractual clauses). Firebase Analytics data, and its copy in our BigQuery project, is kept for 14 months and then deleted; we use it only in aggregated form. Advertising and store partners retain data according to their own policies, linked above. Your progress stays on your phone until you uninstall the game. All data travels over encrypted connections (HTTPS).
Depending on where you live, you may have the right to access the data held about you, to have it corrected or erased, to object to or restrict its processing, to withdraw consent, and to complain to your data protection authority. Because the game holds no account and we cannot link any data to your name, the practical way to exercise these rights is:
For any other request — for example to ask Firebase to delete the statistics linked to your installation — write to onelamarket@gmail.com and we will answer within 30 days.
If we change what the game collects, we will update this page and change the date at the top. The date is the honest test: if it has not moved, nothing has changed.