This page explains how Last Five uses information to run the game, protect purchases and understand the player experience.
Last updated: 11 September 2026. Developer: hitbones. Contact: aqar@omaralgarni.com.
Information used to run the game
- Account and profile: Google sign-in supplies an authenticated account identifier and account information, including your verified email. Firebase Authentication manages sign-in. We use the first and last parts of your Google display name as your initial public nickname, which you can change in Settings. We store that nickname, chosen appearance and account identifier to save your progress. Your Google password is not provided to the game.
- Gameplay and social features: we process room participation, game actions and results, rankings, experience, Coins, owned items, friend relationships, blocks and player reports. Your nickname, appearance, visible rank and results may be shown to other players and on game leaderboards. Preset phrases and expressions are visible to participants when used.
- Friends and private messages: accepted friends can see your level and online or in-match status, invite you to a party and exchange private text messages. Party membership and friend highlighting are not broadcast to unrelated players. Messages and read markers are stored on our server to deliver the conversation; messages are available for 30 days and expired records are removed periodically. They are encrypted in transit, but are not end-to-end encrypted. Only the two participants can open the conversation; when a player reports abuse, the developer can review recent messages between the reporter and the reported player. You can block or report players from Friends → More. We record acceptance of the chat rules and temporary restrictions used to respond to abuse reports.
- Purchases: Google Play handles checkout. The game server verifies purchase references and payment state to deliver Coins and prevent duplicate grants. Purchase history, product identifiers and verification records are associated with your game account. We do not receive your payment card details.
- Support: a bug report contains the description and reproduction steps you enter, a report reference, and limited technical information such as game version, stage, mode, language, screen dimensions, connection delay and variation, state-delivery gaps, reconnect attempts, network type and game-server region. Only aggregate connection measurements are attached when you choose to send a bug report. It does not automatically attach your email, account identifier, authentication tokens or screenshots. Avoid entering sensitive information in the description.
- Connections and security: network services receive connection information such as IP addresses to deliver requests and limit abuse. The game uses secure HTTPS connections for its online service.
Google services and optional notifications
Google/Firebase provides account authentication. Google Play provides purchases and, when used, Play Games features. These services may process account, app, installation and device information needed for their features. If you enable game news, Firebase Cloud Messaging uses a notification token and your selected news language to deliver announcements. You can turn news off in game Settings or Android notification settings.
Optional analytics and advertising measurement
When configured and allowed by you, Google Analytics for Firebase measures app opens, sessions, instruction completion, stages, active playing time, tournament outcomes, store interactions and verified purchase events. Its SDK can process app-instance identifiers, device and app details, and approximate location derived from an IP address.
The separate advertising choice allows configured Google and TikTok measurement services to use gameplay and purchase events, advertising or installation identifiers, and device/network information to attribute advertising, measure campaign results and improve or personalize advertising. TikTok measurement runs only when both the service is configured and the advertising choice is enabled.
The game's custom analytics events do not include your nickname, email, Firebase account ID, room code, messages or raw purchase token. This does not mean measurement is anonymous: SDK identifiers can distinguish an app installation or device. Refusing optional measurement does not stop information needed for sign-in, online play, payments or requested support.
Changing your choice stops future optional collection through these features; it does not automatically erase information already received by a provider. You can contact us about existing data. Google's processing is also explained in its Privacy Policy.
Monthly ad removal
Where offered, the monthly Google Play subscription removes automatic ads while active. Optional rewarded ads remain available. Google Play displays the local price, renews the subscription monthly unless canceled, and lets you manage or cancel it. We verify purchase tokens, account binding, subscription status and expiry on our server; we do not receive your payment-card details.
Advertising and optional rewards
When enabled, occasional automatic ads may appear after a completed match as you return to the lobby. Rewarded ads are always optional; each verified view grants 15 Coins, available once every two hours. The ad provider can process device identifiers, approximate location, ad interactions and diagnostics to deliver, measure and protect ads. Available privacy choices are shown before ads are requested. A reward is added only after verification. A version without configured rewarded ads does not offer this feature.
Who receives information
Information is processed by the developer and the hosting, authentication, payment, notification or measurement providers needed for the features above. Public game information is visible to other players. Advertising measurement information goes to the configured advertising providers only under your advertising choice. Service providers may process data in countries other than yours.
Retention and deletion
We keep account-linked game information while your account is in use until you request deletion. Deleting your game account removes its profile, saved progress, balance, inventory, linked purchase records, results, friend relationships, private messages sent or received, chat consent and restrictions, and stored notification registrations. It does not delete your Google account, reverse a Google Play payment or automatically delete a separate Google Play Games profile.
For security, we retain a hash of the deleted account identifier and hashes of already-used purchase tokens, without the original account identifier, profile information or receipt-to-account link. These fingerprints have no automatic expiry: they prevent outstanding sign-in requests from recreating deleted game data and prevent the same purchase from being redeemed again. Bug reports are kept separately to investigate problems and are not automatically associated with an account; include your report reference when requesting their removal. Provider records and backups can be subject to the provider's retention and deletion processes.
See Delete your Last Five account for the in-app route and an email request option that does not require reinstalling the game. Contact us for access, correction or deletion requests, or questions about this policy.