Last updated: October 18, 2026
Merge Armada ("the App", "we", "us") is a backpack-management roguelite with arena combat, developed by Volara Lab. This Privacy Policy explains what data the App handles, how it is stored, and what control you have over it.
The App creates a guest (anonymous) account for you automatically the first time you play, so your progress can be saved on our server and, if you choose, restored on another device. A guest account holds no personal information beyond an internal account identifier. You can optionally link an e-mail address, or sign in with Google or Apple, to make sure you can recover your progress on a new device — see Section 2. You are never required to give us your real name.
In Profile > VOLARA ID you can link your guest account to an e-mail address, a Google account or an Apple account. The App then receives only what the provider shares for sign-in purposes — typically your account identifier and, if you allow it, your e-mail address (with Sign in with Apple you can choose to hide it) — through Firebase Authentication (operated by Google; see Google's Privacy Policy). If you use an e-mail and password, the password is handled by Firebase Authentication and is never visible to us. We do not receive your Google or Apple password, and we do not post to those accounts or access any other data on them.
The first time you link a Volara ID the App gives you a one-time bonus of Gems. To make sure the bonus is given only once per person, our server keeps a one-way hash (a scrambled code that cannot be turned back into your e-mail or account identifier) of the linked identity. This code is kept even after you delete your account, and it is used for nothing else.
On iOS the App connects to Game Center and on Android to Google Play Games. When you are signed in to them on your device, the App sends a proof of your platform player identifier (and your Game Center alias or Play Games name) to our server, which checks it with Apple or Google and stores it linked to your account, so that your progress can be restored on that platform after a reinstall or on a new device. We do not access your friends list or any other data from these services, and they do not give us your password.
The App is built on Firebase (operated by Google) and Cloud Functions we control. Your device never talks to our database directly — every request goes through our own server code, which stores:
We also use Firebase Analytics and Firebase Crashlytics (operated by Google) to understand how the game is used and to diagnose crashes. This data is tied to your account identifier, not to your name or e-mail; crash reports also include your device model and operating system version.
Purchases are processed by Google Play or the App Store, and by RevenueCat, the purchase platform we use to manage entitlements across both stores. RevenueCat receives your purchase events from the store and forwards a confirmation to our server so we can credit your Gems or unlock what you bought — RevenueCat does not receive your save data or Gems balance. We never see or store your payment card details; those are handled entirely by Google Play or the App Store.
The App may show optional rewarded video ads (for example, to refill Energy, revive, re-roll a Perk, double a reward or open a free chest) through Google AdMob. These ads are only shown when you choose to watch one — the App does not show interstitial or forced ads. To serve and measure ads, AdMob may collect device identifiers (such as an advertising identifier), information about how you interact with ads, and your approximate location derived from your IP address, governed by Google's advertising policies. Where required by local law (for example in the European Economic Area and the United Kingdom), you will be asked for consent through Google's consent message before ads are shown. On iOS the App does not ask for tracking permission (App Tracking Transparency), so rewarded ads are not personalized with Apple's advertising identifier. Players with an active NO ADS or VIP subscription are not asked to watch ads.
You can delete your account and all of the data described in Sections 2A and 3 at any time from inside the App (Settings > Legal > DELETE ACCOUNT), or see Delete Your Account for the full steps. The only things we keep after deletion are the purchase records described there (unlinked from you) and the one-way bonus code described in Section 2. Uninstalling the App removes everything stored locally on your device, but does not by itself delete your account or cloud save — see Delete Your Data.
Merge Armada is not directed at children under 13. We do not knowingly collect data from children under 13 (or the relevant minimum age in your jurisdiction); if you believe a child has given us data, contact us and we will delete it.
Your device never talks to our database directly — all access goes through server code we control, which enforces who can read or write what. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.
We may update this policy as the App evolves. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.
Questions about this policy or your data can be sent to support@volara.dev.