Crane City Privacy Policy

1. In short

• You don't need to create an account or give us an email address or phone number to play. If Google Play Games is set up on your phone, the Game signs you in with it; we don't receive your Google name, profile picture, email address or friends list.
• Your progress (levels, coins, stars, settings) is stored on your device and in your cloud save, so you can continue on another phone. Your player name, avatar, level, total population and team are shown to other players.
• We use the service providers named below for sign-in and cloud save, gameplay statistics, ads and purchases.
• We do not sell your personal data.

2. Information stored on your device

Your game progress, coin balance, chosen player name, avatar and settings (sound, vibration, language, notifications) are kept in your device's local storage. A copy is kept in your cloud save, and your player name, avatar, level and total population are shown on the leaderboard (section 3); the gameplay events we collect are described in section 4. Uninstalling the Game deletes the information on your device but not your cloud save; to have that deleted, see section 11. If Google backup is turned on for your phone, Android may keep a copy of the information on your device in your Google account and restore it when you reinstall the Game; you can turn this off in your device's backup settings.

3. Sign-in, cloud save, leaderboard and teams (Google Firebase and Google Play Games)

a) Sign-in and player ID. After you accept the terms of use, the Game signs in to Google Play Games if it is available on your phone. The Game only asks Play Games for a one-time sign-in code; Google Firebase Authentication uses it to give you a player ID and to recognise your Play Games account, so the same player ID and progress follow you to another phone. We don't ask for or store your Play Games name, profile picture, email address or friends. If Play Games isn't available, Firebase creates an anonymous player ID that only works on this phone; if you later sign in to Play Games, it is linked to your Play Games account. Your player ID is shown at the bottom of Settings when the Game is connected to the internet; including it in a deletion request helps us find the right data. To provide the service and prevent abuse, Firebase also processes your IP address and basic device information when the Game connects.

b) Cloud save. Your save is stored in Google Cloud Firestore on servers in the European Union (Frankfurt, Germany): levels, stars, coins, power-ups and themes, your player name and avatar, your team, the players and teams you have hidden, your settings and a record of your purchases (Google Play order ID and coin pack). Only you can read your cloud save. If you play on more than one phone, the save with more progress is kept, and coins you bought are added to it so they are never lost.

c) Leaderboard. Your chosen player name, avatar, level, team name and total population score are visible to other players. We recommend not using your real name or other personal details as your player name. You can change your name in Settings at any time.

d) Teams. When you create or join a team, the team name, the team badge chosen by the team leader, the number of members, the team leader, the team's total population (the sum of its members' total population scores) and the time you joined are stored; other players can see the team, its badge, its total population and its members, and the team list is ordered by total population. You can leave a team at any time.

e) Reporting and hiding names. If you see an inappropriate player or team name, tap it on the leaderboard, in the team list or in a team's member list to report it to us or hide it on your screen. A report stores your player ID, the reported player's or team's ID and name, and the time. Only we can read reports, and we delete them after we review them. Names that break the rules are changed or removed, and the player may be blocked from the leaderboard and teams. Without an internet connection, reporting opens your email app with the same details.

• Firebase privacy and security: firebase.google.com/support/privacy
• Google privacy policy (Firebase, Google Play Games): policies.google.com/privacy

4. Gameplay statistics (GameAnalytics)

To make the Game better balanced and more fun, we collect in-game events through GameAnalytics (GameAnalytics ApS):

• which level you play and on which attempt, the result (won / lost / quit), duration, blocks placed, stars earned and boosters used,
• leaving the Game in the middle of a level, running out of lives,
• watching a rewarded ad, and purchases (see section 6).

GameAnalytics also collects session start and end, device model, operating system version, language, game version, a device identifier shared by apps from the same developer (Android App Set ID), automatic reports of errors in the Game and an approximate country derived from your IP address. A random ID that GameAnalytics creates on your device is used to tell players apart; your advertising ID is not used for this, and GameAnalytics does not receive your player name or player ID. We keep a copy of this random ID in your cloud save only so that we can ask GameAnalytics to delete your statistics when you ask us to delete your data; we do not use it to combine your statistics with your account. GameAnalytics processes this data on our behalf, and we only review it in aggregate to improve level design. In the European Economic Area, the United Kingdom and Switzerland, statistics are collected only if you give consent.

• GameAnalytics privacy notice: www.gameanalytics.com/trust/privacy-notice

5. Ads (Google AdMob)

The Game only shows rewarded ads: you choose to watch an ad (for example for extra hard hats or a second chance); the Game never opens ads on its own. Ads are served by Google AdMob, which may use your device's advertising ID, a device identifier shared by apps from the same developer (App Set ID), IP address, device information and ad interactions to show and measure ads and to prevent fraud. Ads are limited to content suitable for all ages.

In the European Economic Area, the United Kingdom and Switzerland, Google's consent form is shown when you first open the Game; personalized ads are only shown if you consent. You can change your choice later in Settings > Privacy options. You can reset or delete your advertising ID in your device settings (Google > Ads).

• Google privacy policy: policies.google.com/privacy
• How Google uses data from apps: policies.google.com/technologies/partner-sites

6. Purchases (Google Play)

Coin packs are purchased through Google Play. Google processes the payment; we never see or store your card or payment details. We only receive confirmation that a purchase was completed, which pack was bought at what price, the order ID and Google's purchase verification token. The order ID and the pack are kept in your save and cloud save, so that each purchase is credited only once and stays with you on another phone; the purchase details are also passed to GameAnalytics for sales statistics.

Purchases in the Game are handled by Unity's purchasing library (Unity IAP). Unity Technologies receives the purchase details (product, price, transaction receipt) and basic device information (model, operating system, language, an installation ID) to provide and improve purchasing.

Google Play privacy policy: policies.google.com/privacy

7. Notifications

If you allow it, the Game schedules local reminders on your device (e.g. "Hard hats are full", "Your daily treasure is ready"). These are created on your device; no information is sent to a server for them. You can turn them off at any time in Settings or in your device's notification settings.

8. Children

The Game is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you are a parent and believe your child has provided data to us, contact us at retiverse@gmail.com and we will delete it.

9. Retention

Your player ID, leaderboard entry, team membership and cloud save are kept for as long as the Game is available, or until you ask us to delete them. Reports are deleted after we review them. GameAnalytics keeps gameplay statistics, including per-player summaries, for at most 12 months and shortened IP addresses for at most 30 days, and then deletes them; anonymous totals that cannot identify anyone (for example, how many players finished level 10) may be kept longer. Information on your device stays until you uninstall the Game.

10. Legal basis and international transfers

The data needed to run the Game, sign-in, cloud save, the leaderboard and teams is processed to perform our terms of use with you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)). Reports and name moderation rely on our legitimate interest in keeping the Game safe for players, and gameplay statistics, error reports and ads on our legitimate interest in offering the Game for free and improving it (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)); in the European Economic Area, the United Kingdom and Switzerland, statistics and personalized ads only run with your consent. Your cloud save, leaderboard entry, teams and reports are stored in the European Union (Google, Frankfurt); sign-in, ads and purchases (Google and Unity Technologies) may be processed in the United States and other countries, and gameplay statistics in the European Union (GameAnalytics). All of these servers are outside Turkey.

11. Your rights and data deletion

Depending on where you live (for example under the GDPR or Turkey's KVKK), you have the right to access, correct or delete your data and to object to its processing. To have your data deleted, use Settings > Delete my data in the Game or email retiverse@gmail.com, and include the player ID shown at the bottom of Settings (visible when the Game is connected to the internet; or your player name if you no longer have the Game). We delete your player ID and its link to your Play Games account, your leaderboard entry, your cloud save (including the copy of your statistics ID), your team membership (a team whose last member leaves is deleted) and the reports you have sent. We will respond within 30 days. After sending the request, uninstall the Game or clear its data: if you keep playing, the Game creates a new player ID and a new cloud save. When you email us (a name report or a deletion request), we use your email address and the details in your message only to handle your request. We also ask GameAnalytics to delete the gameplay statistics stored under the random ID(s) kept in your cloud save. If no such ID can be found, those statistics cannot be matched to you and are deleted automatically within 12 months. To delete the information on your device, uninstall the Game. You can also complain to the data protection authority where you live (in Turkey, the Personal Data Protection Authority, KVKK).

Step-by-step instructions: Delete your Crane City data.

12. Security

All connections to our service providers are encrypted (HTTPS). Access to your cloud save is limited to your own player ID by our database rules. No system is 100% secure, but we take reasonable measures to protect your data.

13. Changes

We may update this policy from time to time. The current version is always published on this page with its "Last updated" date.

14. Contact

Retiverse Games · retiverse@gmail.com