Last updated: June 2026
Version 2.0
Plain English summary: This policy tells you what we collect, why, and what rights you have. We're an Australian-based product but our backend runs on Google's servers in the United States. You must be 13 or older to play. We use cookies for ads and analytics — you can change your mind any time via the Cookie Settings link in the game footer.
Quantum Button is operated by:
For European Economic Area (EEA) data subjects: an Article 27 EU representative has not been appointed at the time of writing. If you are an EEA data subject and wish to exercise GDPR rights, please contact the privacy email above and we will respond within the timeframes required by Articles 12–22.
When you use Quantum Button, we collect:
The table below identifies the lawful basis under EU/UK GDPR Article 6 for each processing purpose, as required by Article 13(1)(c). Australian users should treat the same purposes as Australian Privacy Principle (APP) 6 secondary uses where applicable.
| Purpose | GDPR Article 6 basis |
|---|---|
| Save game progress and sync across devices | Contract performance (Art 6(1)(b)) |
| Display your handle / score on public leaderboards | Legitimate interests — running a competitive game (Art 6(1)(f)) |
| Social features (friends, challenges, duels) | Contract performance — you chose to use them (Art 6(1)(b)) |
| Push notifications (challenge alerts, daily rewards) | Consent — you toggle this on in Settings (Art 6(1)(a)) |
| Personalised advertising via Google AdSense | Consent — via the cookie banner (Art 6(1)(a)) |
| Non-personalised advertising via Google AdSense | Legitimate interests — funding a free game (Art 6(1)(f)) |
| Subscriptions and in-app purchases (RevenueCat) | Contract performance (Art 6(1)(b)) |
| Age verification and age-appropriate feature gating | Legal obligation — child safety laws (Art 6(1)(c)) |
| Player reports and safety moderation | Legitimate interests — community safety (Art 6(1)(f)) |
| Bug reports and crash logs | Legitimate interests — product quality (Art 6(1)(f)) |
Quantum Button is operated from Australia, but our backend infrastructure is provided by Google and other US-based services. Your data is therefore disclosed to and stored in the United States by the following recipients:
For Australian users: Under Australian Privacy Principle 8.1, by using Quantum Button you acknowledge that your personal information is likely to be disclosed to the overseas recipients named above and processed in the United States.
For EEA/UK users: Transfers to the United States are made in reliance on Google's certification under the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) for any recipient not covered by DPF.
Quantum Button uses cookies and similar technologies. The table below names the specific cookies and storage keys we use:
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| __Secure-3PSID, NID | Firebase Authentication session | Up to 2 years | |
| IDE, __gads, __gpi | Google AdSense | Personalised advertising (only after consent) | Up to 13 months |
| _ga, _ga_* | Google Analytics (Consent Mode) | Aggregate game-usage analytics | Up to 2 years |
| qb_cookie_consent | Quantum Button (localStorage) | Remembers your cookie choice | Until cleared |
| qb_age_birthYear, qb_age_band, qb_age_v1 | Quantum Button (localStorage) | Age verification cache | Until cleared |
| qb_user_* | Quantum Button (localStorage) | Offline cache of your game progress | Until cleared |
| quantum-button-v3.* (Cache Storage) | Service Worker | Offline app shell | Until SW updates |
Essential cookies (Firebase authentication, qb_cookie_consent, qb_user_*) cannot be disabled because the game cannot function without them. Advertising and analytics cookies are loaded only after you click ACCEPT on the cookie banner. You can change or withdraw your choice at any time via the Cookie Settings link in the game footer or in Settings → Privacy.
You have the following rights:
To exercise any right: email [email protected]. We will respond within 30 days (GDPR) or a reasonable period (APPs).
Complaints:
We retain your game data for as long as your account is active. If you request account deletion, we will remove all personal data without undue delay, and in any case within 30 days.
Specific retention periods:
In the event of an "eligible data breach" under Part IIIC of the Privacy Act 1988 (Cth), we will notify the Office of the Australian Information Commissioner and affected individuals as soon as practicable.
For EEA users, where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware (GDPR Art 33) and notify affected data subjects without undue delay where the risk is high (GDPR Art 34).
Minimum age to play: 13 years old. The game asks for your year of birth at signup. If your year of birth indicates you may be under 13, you cannot create an account and cannot use the game.
Under-16 restrictions. Users between 13 and 15 can play the full game but with the following safety restrictions:
These restrictions reflect our compliance with the Australian Online Safety Act 2021 Basic Online Safety Expectations, US Children's Online Privacy Protection Act (COPPA), and EU GDPR Article 8 (child consent).
If you believe we have collected personal information from a child under 13 in breach of this policy, contact us immediately at [email protected] and we will delete it.
Parents and guardians may contact us to have a minor's account and data removed at any time.
Quantum Button includes optional camera features that are restricted to users aged 16 or older. These features are opt-in and disabled by default.
Solo recording (face in PiP): When you choose to record a solo round with "Show Face" enabled, your camera is activated locally on your device for the duration of that round. The video is composited entirely on your device.
VS Mode camera: When you enable the Camera toggle in a VS duel, your camera feed is transmitted directly to your opponent using peer-to-peer WebRTC. Camera streams are not routed through, copied to, or stored on Quantum Button servers. Free public STUN servers (operated by Google) are used for connection negotiation only.
Bystander notice: If your camera captures other people during a recording or VS session, you are responsible for ensuring they consent to being filmed. Local laws may require consent from each identifiable person.
No audio: All camera features are video-only. We do not capture, transmit, or store audio at any time.
You may revoke camera permissions at any time through your browser or device settings.
All recordings are stored locally on your device only. Quantum Button does not upload, copy, back up, or transmit your recorded videos to our servers or any third party.
If you share a recording outside the app (to a messaging app, social media, etc.), that sharing happens via your device's native share function and is governed by the destination service's privacy policy. We have no visibility into where your recordings go after you share them.
Because recordings never leave your device, we cannot recover them if your device is lost, reset, or replaced.
If you submit a report against another player, we collect: your account ID, the reported player's account ID, the reason category, optional details you provided, the duel code where the incident occurred, and any optional screenshot. Screenshots are resized on your device before submission.
Reports are stored in our Firebase database and reviewed by Quantum Button administrators. Reports are retained for up to 24 months for safety review purposes.
Auto-block: When you report a player, their account ID is added to your personal block list. You will not be matched with blocked players in future quick-join or browse-rooms sessions. Your block list is stored in your user profile and synced to the cloud.
You may request deletion of your submitted reports or block list by contacting us.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): the right to know what personal information we collect, to delete it, to correct inaccuracies, and to opt out of "sale" or "sharing" of personal information.
Do Not Sell or Share My Personal Information: We do not sell personal information. We may share certain identifiers (such as your country code or AdSense identifiers) with Google for personalised advertising; this is considered "sharing" under the CPRA and you can opt out by clicking Cookie Settings in the footer and choosing DECLINE.
We honor Global Privacy Control (GPC) signals where supported by your browser.
Quantum Button includes crates with randomised rewards. The drop rates for each crate type and rarity tier are published at loot-odds.html.
Real-money purchases: Crates cannot be purchased directly with real money. Real money buys coins (or Pro membership); coins can then be spent on crates. Players in countries that prohibit real-money randomised mechanics (currently Belgium and the Netherlands) cannot purchase coin packs — only Pro membership is available there.
No purchase is required to obtain crates — they are also awarded for gameplay achievements, daily rewards, and watching optional rewarded ads.
We may update this policy from time to time. Significant changes will be highlighted in the game or via push notification (if you have enabled them). Your continued use after changes constitutes acceptance of the updated policy.
For privacy questions, data subject requests, breach notifications, or any other privacy matter:
We respond within 30 days for GDPR data-subject requests and within a reasonable period for Australian Privacy Principle requests.