Last updated: October 19, 2026
This Privacy Policy applies to the CumuLab Android application (package io.conic.ninebang), published by Conic (France). The browser version of CumuLab is covered by a separate policy.
CumuLab has no sign-up form, no in-app purchases and no messaging features. We never ask you to provide your name, email address, phone number or any other personal detail. The information involved is what is collected automatically by the advertising and analytics services described below, and the leaderboard data held on our server (section 1.4).
None. The app contains no registration, no contact form and no free-text field. We hold no email address, no name and no postal address relating to you.
Signing in to Google Play Games is optional and handled entirely by Google. If you sign in, your Play Games profile (gamer name and avatar), your scores and your achievements are processed by Google in order to display leaderboards and achievements. Your gamer name and your scores are then visible to other players on the public leaderboards. You can review or delete this data from your Google account settings.
The app keeps its own leaderboards, per combination of game modes, on a server we operate on Cloudflare. For each player it holds:
When a guest signs in to Play Games on the same device, the guest’s results are merged into the Play Games account and the guest’s own entry is deleted. Only the link between the former guest identifier and the account is kept, so that the players who opened that guest’s shared moves still find the account on their “Friends” leaderboard. Daily statistics (number of players per combination, distribution of results) are computed from this data and contain no identifier.
Friends. The players whose shared moves you open, and those you remove from your friends, are remembered on your device. If you allow it, the app also reads the list of your Play Games friends. To show the “Friends” leaderboard, the app sends these players’ identifiers to our server; the server does not store these lists.
Shared links. A shared move is contained entirely in its link: the starting grid, the moves, your gamer name, your leaderboard identifier and a summary. The people who receive the link can see your gamer name, and you join their “Friends” leaderboard. When you share moves you played, your result on those moves is recorded on our server, like a challenge attempt, so that you appear on that move’s leaderboard. When you install the app from a link, the app reads, on its first launch, the information the Play Store passes along (Play Install Referrer) to open the same challenge or move, and records that the installation came from a link in Google Analytics for Firebase.
You can turn off the sending of your results with the switch at the top of the Leaderboards screen: your results and identifiers are then no longer sent to our server. You can delete this data at any time: see Delete your leaderboard data.
Your game progress, high scores, unlocked modes and settings are stored locally, part of it encrypted with the Android Keystore, and are deleted when you clear the app data or uninstall the app. If you sign in to Google Play Games, a copy of your progress is also saved in your Play Games account (Saved Games), held by Google.
The app may show a weekly local reminder while a new game mode is still locked, and, on days celebrated around the world, a notification announcing that day’s special challenge. These notifications are generated on your device; they involve no server and no transmission of data. The permission is requested only after you finish the tutorial, and you can revoke it at any time in the Android settings.
We do not sell your personal data. We do not build advertising profiles ourselves, and we have no access to any database that identifies you individually.
The app integrates the following services, each acting under its own privacy policy:
The Google services are provided by Google Ireland Limited and Google LLC. Depending on the processing concerned, Google acts as our processor or as an independent controller, as set out in its own terms. Cloudflare, Inc. acts as our processor for the leaderboard server. The app integrates no advertising network other than Google AdMob, and no social network SDK.
Advertising is displayed through Google AdMob in three formats: a banner, interstitials between games, and a rewarded video that you choose to watch in exchange for an in-game bonus.
Depending on your choices and your region, this advertising may be personalized (selected on the basis of your advertising identifier and the interests inferred from it) or non-personalized (selected on the basis of context alone, such as the app content and your approximate location).
Advertisements may link to third-party websites or store listings that we neither operate nor control. Once you open such a destination, the privacy policy of that third party applies.
If you use the app from the European Economic Area, the United Kingdom or Switzerland, a consent form is displayed on first launch, through a Consent Management Platform certified by Google. It lets you accept or refuse the use of your data for advertising purposes and for audience measurement, and lets you manage your choices partner by partner.
You may change or withdraw your choices at any time using the “Privacy” link displayed at the top of the game screen, which reopens the same form. As long as you have not consented, no personalized advertising request is issued.
The services used are provided by Google and Cloudflare, whose infrastructure is located in several countries, including outside the European Union. These transfers are governed by the safeguards implemented by these providers, in particular the European Commission's standard contractual clauses. Google's applicable terms are available at business.safety.google.
Where the GDPR applies, you have the right to access your data, to have it rectified or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. The most direct ways to exercise these rights:
You may also contact us at the address below. If you believe your rights are not respected, you have the right to lodge a complaint with a supervisory authority — in France, the CNIL.
The app is not directed to children. It is not intended for anyone under the age of 16, is not listed in the Play Store family programs, and we do not knowingly collect data relating to a child. No personalized advertising is served to a user identified as a child.
If you are a parent or guardian and believe your child has used the app, contact us: we will delete any data concerned insofar as it is identifiable.
We take reasonable measures to protect the information handled by the app: the game data stored on your device is partly encrypted using the Android Keystore, and the app reaches our leaderboard server only over HTTPS, with a signed token. However, no method of transmission over the Internet or of electronic storage is completely secure, and we cannot guarantee absolute security.
We may disclose information in the good faith belief that such action is necessary to comply with a legal obligation, to respond to a valid request from a public authority, to protect our rights or property, to investigate possible wrongdoing in connection with the service, or to protect the safety of users.
If the company is involved in a merger, acquisition or asset sale, the data concerned may be transferred. We will publish notice of this before the data becomes subject to a different privacy policy.
We may update this Privacy Policy from time to time. Any change will be published on this page, with the “Last updated” date revised accordingly. As we hold no email address for you, this page is the sole means of notification: you are advised to review it periodically.