This Privacy Policy explains how Nikolai Bondarev, an individual entrepreneur ("we", "us", or "our") collects, uses, stores, and shares personal information when you use our games, applications, websites, and related online services (collectively, the "Services").
Nikolai Bondarev is the controller of the personal information described in this Privacy Policy unless a Service identifies a different controller in a service-specific notice.
This Privacy Policy applies to all Services we operate unless a particular Service provides a separate privacy notice. A Service may use only some of the features and providers described below. The disclosures shown in the Service and in its app-store listing identify the data practices applicable to that Service.
1. Information We Collect
Account and Authentication Information
When you create an in-game account or sign in using Google or another authentication provider, we may receive or create:
- an internal account or player identifier;
- the unique identifier supplied by the authentication provider;
- your name or display name;
- your email address;
- your profile picture, if made available by the provider;
- authentication tokens and session information; and
- account settings and account status.
We receive only the information covered by the permissions shown to you during sign-in. We do not receive or store your Google account password.
Game and Usage Data
We collect information about use of the Services, including:
- game sessions and application launches;
- gameplay events, in-game actions, and feature interactions;
- game progress, achievements, scores, and level completion;
- multiplayer, matchmaking, and leaderboard activity, where those features are available;
- session duration and application exits;
- advertising impressions, interactions, and related measurement events; and
- other analytics events generated through use of the Service.
Technical, Device, and Diagnostic Data
We and our service providers may automatically collect:
- device model and manufacturer;
- operating system, application version, and build number;
- device language, locale, screen resolution, and similar device characteristics;
- IP address, network information, and timestamps;
- application installation, internal user, and session identifiers;
- device identifiers and advertising identifiers, where permitted;
- crash reports, error reports, stack traces, logs, and application state; and
- performance and other diagnostic information.
An IP address may be used to infer an approximate location, such as a country or city. We do not use IP addresses to determine precise location unless a Service separately explains and requests permission for that use.
Advertising Data
Our Services display advertising. Advertising and attribution providers may process advertising identifiers, IP addresses, device and application information, approximate location inferred from an IP address, consent choices, ad impressions, ad interactions, and conversion or attribution events.
Depending on your location, age, platform settings, and consent choices, advertising may be contextual or personalized. Where consent is required, personalized advertising and related tracking are not enabled until the required choice has been obtained.
Google account information obtained through Google Sign-In or another Google API is not used for advertising, retargeting, personalized advertising, or advertising measurement.
Information You Provide
We collect information that you voluntarily provide when you contact support, send feedback, report a problem, participate in testing, or otherwise communicate with us. This may include your contact details, the contents of your message, and files or screenshots you choose to send.
2. How and Why We Use Information
We use personal information for the following purposes:
| Purpose | Typical information used | Legal basis where required |
|---|---|---|
| Create accounts, authenticate users, maintain sessions, and synchronize progress | Account information, identifiers, game progress | Performance of our contract with you |
| Operate gameplay, multiplayer, leaderboards, and other requested features | Account, game, usage, and technical data | Performance of our contract with you |
| Diagnose errors, maintain security, prevent fraud and cheating, and protect users | Technical, diagnostic, account, and usage data | Our legitimate interests in operating a secure and reliable Service; legal obligations where applicable |
| Analyze and improve gameplay, balancing, interfaces, stability, and performance | Usage, analytics, technical, and diagnostic data | Our legitimate interests in improving the Services; consent where required |
| Display, measure, and attribute advertising | Advertising identifiers, device data, approximate location, and advertising events | Consent where required; otherwise our legitimate interests or those of our advertising partners, where permitted by law |
| Respond to support requests and communications | Contact information and message contents | Performance of our contract, our legitimate interests in supporting users, or consent, depending on the request |
| Comply with law and enforce our agreements | Information relevant to the request, dispute, or violation | Compliance with legal obligations and our legitimate interests in protecting our rights and users |
Where we rely on legitimate interests, we consider the impact of the processing on your rights and do not rely on those interests where they are overridden by your interests or fundamental rights.
3. Analytics, Crash Reporting, and Logs
We use analytics and diagnostic services to understand how the Services are used and to identify crashes, errors, abuse, and performance problems.
Reports may contain application state, error messages, stack traces, device and operating-system information, application version, timestamps, internal identifiers, network-related diagnostics, and events immediately preceding an error.
We do not intentionally include passwords or full authentication credentials in application logs. Access to logs is limited to people and providers who need it to operate, secure, or support the Services.
4. Third-Party Services
Depending on the Service, we use providers for authentication, analytics, crash reporting, advertising, attribution, hosting, networking, infrastructure, distribution, and support. These may include:
- Google Sign-In, Google Play services, and Google Play Games Services;
- Firebase Authentication, Google Analytics for Firebase, and Firebase Crashlytics;
- Adjust for attribution and analytics;
- AppLovin SDK for advertising delivery, mediation, attribution, and measurement; and
- app stores, hosting providers, and cloud infrastructure providers used by the relevant Service.
These providers may process information on our behalf or, where stated in their own notices, for their own purposes. Their handling of information is also governed by their applicable terms and privacy notices. Relevant notices include the Google Privacy Policy, the Adjust Privacy Policy, and the AppLovin Privacy Policy.
We work with AppLovin to deliver ads in our mobile applications. AppLovin may collect and use device, advertising, IP-address, approximate-location, consent, ad-interaction, and related technical information to deliver, personalize where permitted, secure, mediate, attribute, and measure advertising. For more information about AppLovin's collection and use of your information, visit the AppLovin Privacy Policy.
We are responsible for ensuring that the providers and SDKs we integrate are used consistently with applicable law, platform rules, and the disclosures made in this Privacy Policy and in the relevant app-store listing.
5. Google User Data
When you choose Google Sign-In or another Google API feature, we request only the permissions necessary for the feature presented to you. Depending on the sign-in configuration, this may include your Google account identifier, name, email address, and profile picture.
We use Google user data only to:
- authenticate you;
- create or identify your in-game account;
- display account information you chose to share;
- maintain your authenticated session; and
- provide account synchronization or another Google-connected feature that is clearly shown to you.
We do not sell Google user data, use it for advertising, or transfer it to data brokers or advertising platforms.
We transfer Google user data only:
- to service providers acting on our behalf when necessary to provide or secure the user-facing feature;
- when you direct or explicitly consent to the transfer;
- when necessary to investigate abuse or protect the Service; or
- when required by applicable law.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including applicable Limited Use requirements.
6. How We Share Information
We may share information with providers that help us operate the Services, including providers of authentication, cloud hosting, analytics, crash reporting, advertising, attribution, multiplayer networking, customer support, infrastructure, and security services.
We may also disclose information where reasonably necessary to:
- comply with law, legal process, or a lawful government request;
- protect our rights, safety, or property, or those of our users or others;
- investigate fraud, cheating, abuse, or security incidents;
- enforce our agreements; or
- complete a merger, acquisition, financing, reorganization, or transfer of all or part of our business, subject to applicable notice and consent requirements.
We do not sell personal information for money. Interest-based advertising may be treated as a "sale", "sharing", or targeted advertising under some privacy laws. Where those laws apply, we provide the controls and notices required by law.
7. Advertising Choices
You can control advertising personalization and, where applicable, withdraw advertising consent through the privacy or consent settings made available in the relevant Service. You can also limit or reset advertising identifiers through your device settings.
Changing these settings does not necessarily remove all advertising; it may result in contextual rather than personalized ads. A platform or advertising provider may offer additional controls under its own privacy notice.
8. International Data Transfers
We and our providers may process information in countries other than the country where you live. Those countries may have different data-protection laws.
Where required, international transfers are protected through an adequacy decision, contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism. You may contact us for information about the safeguards relevant to your information.
9. Data Retention
We retain information only for as long as necessary for the purposes described above:
- account information and synchronized game progress are generally retained while your account remains active and until the account is deleted;
- support communications are retained for as long as needed to resolve the request and maintain an appropriate record of the resolution;
- analytics, advertising, crash, and diagnostic data are retained according to the retention settings configured for the relevant provider and Service; and
- information needed for security, fraud prevention, dispute resolution, or compliance with law may be retained for longer where reasonably necessary.
When information is no longer required, we delete or anonymize it. Aggregated or anonymized information that can no longer reasonably identify you may be retained.
10. Account and Data Deletion
You may request deletion of your in-game account and the personal information associated with it:
- through the account or privacy settings in the relevant Service; or
- by emailing admin@nacid.me if you cannot access the Service.
Public instructions for submitting an account-deletion request are available at Delete Account page.
Deleting an application from your device does not by itself delete your account. When we complete an account-deletion request, we delete or anonymize the account and associated personal information, including synchronized progress, except for information that must be retained for legal obligations, security, fraud prevention, or the establishment, exercise, or defense of legal claims.
We may verify your identity before completing a request. We will confirm receipt and provide information about the expected completion time. If third-party processors hold information on our behalf, we instruct them to delete it where required.
Account deletion does not automatically cancel an app-store subscription. If a Service offers a subscription, you must manage or cancel it through the platform through which it was purchased.
11. Your Privacy Rights
Depending on your location, you may have the right to:
- access personal information we hold about you;
- correct inaccurate or incomplete information;
- request deletion of information;
- restrict or object to certain processing;
- withdraw consent at any time, without affecting processing performed before withdrawal;
- receive certain information in a portable format;
- opt out of targeted advertising or certain forms of sharing where applicable;
- appeal our refusal of a request where applicable; and
- lodge a complaint with a competent data-protection authority.
To exercise these rights, email admin@nacid.me and identify the relevant account and Service. We may request information reasonably necessary to verify your identity. We will respond within the period required by applicable law.
You will not be discriminated against for exercising a privacy right. Some rights are subject to exceptions under applicable law.
12. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, and destruction. These include access controls, restricted access to production and diagnostic information, and protection of information in transit where supported by the relevant platform and provider.
No method of storage or transmission over the Internet is completely secure, and we cannot guarantee absolute security.
13. Children's Privacy
The Services are intended for a general audience and are not directed to children under 13. A higher minimum age applies where required by the law of the user's country.
We do not knowingly collect personal information from a child below the applicable minimum age without legally valid parental consent. If we learn that we have done so, we will take reasonable steps to delete the information and, where applicable, the associated account.
Parents or guardians who believe that a child has provided personal information may contact admin@nacid.me.
14. Information You Must Provide
Account and authentication information is required if you choose to create an account or use an account-dependent feature. If you do not provide it, we cannot create the account or provide that feature. Other information may be optional unless the relevant Service explains that it is needed for a requested feature, security, or legal compliance.
We do not make decisions that produce legal or similarly significant effects about you solely through automated processing unless a Service separately discloses that processing and the safeguards available to you.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to the Services, providers, law, or our data practices. We will update the "Last updated" date when we do so.
If a change materially affects your rights or introduces a materially different use of personal information, we will provide additional notice and obtain consent where required before applying the new use.
16. Contact
The controller responsible for this Privacy Policy is:
Nikolai Bondarev, individual entrepreneur
Registration jurisdiction: Republic of Armenia
Registration number: 286.1492856
Address: 26A Movses Khorenatsi Street, Office 201, Yerevan, Republic of Armenia
Website: https://nacid.me
Privacy email: admin@nacid.me