Privacy Policy — Arrow Maze Escape: Mintline

1. Who we are

Arrow Maze Escape: Mintline is published by Medhantara Technologies (“we”, “us”). For privacy questions, account requests or complaints, contact contact@medhantara.com or WhatsApp +91 88858 60111.

2. Scope

This policy covers mintline.medhantara.com, the online account and leaderboard service used by the game, and enquiries sent through our support form. The game also has an offline mode. Local progress, settings, stars, hints and daily streaks are stored on your device and are not transmitted unless you explicitly sign in and sync.

3. What we collect

Account details

email address and display name;
a salted, slow hash of your password — never the password itself;
your selected country and, if you sign in with Google or Apple, the account identifier, email and basic profile name returned by that provider;
terms acceptance time, account creation time and last sign-in time.

Authentication and security

a hash of your refresh token, session timestamps and expiry;
IP address and browser or game client user agent associated with a session, used for security, rate limiting and session management;
an approximate country derived from the connection (for example, Cloudflare’s country header or your browser language) to pre-select your country. We do not use GPS or precise location.

Game progress and rankings

the progress save you choose to upload, such as unlocked level, stars, hints, settings and daily streak;
ranked run data: level, start and finish times, active-play duration, moves, mistakes, hints used, score, stars, country at completion and client version;
derived standings, personal bests and weekly totals.

Enquiries

When you use the support form or email us, we collect your name, email address, country if provided, topic, message, consent and, for abuse prevention, a hashed IP address. The support form also opens WhatsApp with your message; WhatsApp is operated by Meta and is governed by its own privacy terms.

Technical logs

Our servers may record request paths, timestamps, response codes and a request identifier. We avoid logging passwords, tokens, message bodies or full email addresses. The website is served by Cloudflare Pages, which processes standard request metadata as our hosting provider.

4. Cookies and local storage

We do not use advertising cookies, tracking pixels or third-party analytics scripts. The website stores your access and refresh tokens in your browser’s local storage so you can stay signed in. Clearing site data signs you out. The game stores its save in the app’s local data directory. If we add analytics or ads in a future release, we will update this policy and, where required, ask for consent first.

5. Why we use it

Purpose	Data	Basis
Create and secure your account	Email, password hash, OAuth IDs, sessions, IP/user agent	Contract; legitimate interests in security
Sync your progress	Uploaded save data	Your request / contract
Operate rankings	Display name, country, run timing and score	Contract; legitimate interests in fair play
Pre-select your country	Approximate country from connection or language	Legitimate interests; you can change it
Answer support enquiries	Contact details and message	Consent; legitimate interests in support
Prevent abuse and fraud	Hashed IPs, sessions, run metadata	Legitimate interests
Comply with law	Records required by applicable law	Legal obligation

6. Who we share with

We do not sell your personal information. We share only what is needed with:

Cloudflare — website hosting, network security and country-level request metadata;
Google — if you choose “Continue with Google”; Google authenticates you and returns basic account details;
Apple — if you choose “Continue with Apple”; Apple authenticates you and may use a private relay email;
WhatsApp / Meta — when you choose to send an enquiry through WhatsApp;
professional advisers, authorities or a successor entity where required by law or a genuine business transfer.

These providers may process data outside your country. Where required, we rely on their contractual safeguards and standard data-protection terms.

7. How long we keep it

Data	Retention
Active account and progress	Until you delete the account or ask us to remove it
Deleted account (restore window)	Up to 30 days, then permanent removal
Sessions and refresh tokens	Up to 30 days from issue, or until revoked
OAuth hand-off codes and states	Minutes; invalidated after use
Support enquiries	Up to 24 months after the enquiry is closed
Server/security logs	Up to 30 days, unless needed for an investigation
Public leaderboard records	While the account exists; removed from view immediately on deletion

8. Account deletion and restore

You can delete your account from the account page. We then:

revoke all active sessions and sign you out on every device;
remove your name and results from public leaderboards;
keep the account and its data in a deleted state for up to 30 days so it can be restored if the deletion was accidental.

To restore during that window, contact contact@medhantara.com from the email address on the account. We may ask for verification. After 30 days the account, progress backup, sessions, personal details and leaderboard entries are permanently deleted. Local progress on your device is separate; uninstalling the app or clearing its data removes that copy.

Important: deleting your account does not automatically delete the local save on your phone. Remove the app or clear its storage if you also want the local copy gone.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, export, delete, restrict or object to the processing of your personal data, and to withdraw consent. You can:

edit your display name and country on the account page;
delete your account from the account page;
sign out and clear local storage at any time;
email contact@medhantara.com to request a copy of your data, correction, or deletion, or to object to processing.

You also have the right to complain to your local data-protection authority. We will respond to verified requests within the time required by applicable law.

10. Children

The game is a general-audience puzzle. Online accounts are intended for people aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it. A parent or guardian may also ask us to remove a child’s account.

11. Security

We use HTTPS, salted scrypt password hashing, short-lived access tokens, rotating refresh tokens, hashed one-time OAuth codes, exact redirect-URI allowlists, parameterised database queries and rate limits. No system is perfectly secure; if you suspect a problem, email contact@medhantara.com with “Security” in the subject.

12. International users

Our service may be hosted and processed in countries other than yours. Where required, we use contractual safeguards for these transfers. The website is operated from India, where Medhantara Technologies is based.

13. Changes

We may update this policy when features change. The effective date and version at the top will change, and material changes will be announced on this site or by email where appropriate. Continuing to use the online service after an update means you accept the revised policy.

14. Contact

Medhantara Technologies
Email: contact@medhantara.com
WhatsApp: +91 88858 60111
Support: mintline.medhantara.com/support

This policy is provided in English. If it is translated, the English version controls to the extent permitted by law.