Privacy Policy for {{GAME}}#

Effective date: {{EFFECTIVE_DATE}}

This policy explains what data {{GAME}} (the "Game"), made by {{COMPANY}} ("we", "us"), uses, why, and what choices you have. Contact: {{EMAIL}}, {{ADDRESS}}.

For the developer (delete this box before publishing). Sections marked (Only with ...) describe an optional service; each names the switch that turns it on (an installed package, with Unity Gaming Services also its toggle in Adapters/Ugs/Resources/IdleRpgUgsSettings.asset and a linked project, or a Project Settings toggle; see Documentation/Manual/Backend.md, "How adapters switch on"). Delete every marked section your build does not use. A build with no switch on (the template as shipped: fake ads, fake store) sends nothing off the device: keep only sections 1, 2, 10, 11, 13 and 14, and write in section 1 that the Game has no online account and no cloud save. The store forms that must match this text: Documentation/Manual/Publishing.md.

1. The short version#

You can play without creating anything. When you are online, the Game gives you an anonymous online player so your progress can be saved in the cloud, checked for fairness and ranked. You can link it to Sign in with Apple or Google Play Games so it follows you to a new phone.
Your display name and your scores can be seen by other players on the leaderboards and by your friends. Nothing else you type leaves your device. There is no chat.
The Game shows ads. Our advertising partners collect some device data to show and measure ads. You choose in Settings > Privacy choices (where your region requires it) and in your device settings.
With your consent, the Game sends gameplay statistics so we can balance it. You can withdraw that consent in Settings > Privacy choices.
Purchases are processed by Apple or Google. We never see your payment details.
You can delete your online data at any time in Settings > Delete cloud data, or by writing to {{EMAIL}}.
We do not sell your data.

2. Data that stays on your device#

Data	Why	Where
Game progress (heroes, currencies, settings, purchase records) and the player name you type	To save your game	A file on your device, included in your device's own backups (Android Auto Backup, iCloud / device backup)
Reminder notifications	To remind you when a chest is full or an event starts, if you allow notifications	Scheduled on your device by the operating system; nothing is sent to us

Uninstalling the Game deletes the local file. Settings > Reset save also deletes it.

3. Unity Gaming Services: who processes your online data#

The online parts of the Game run on Unity Gaming Services, provided by Unity Technologies (and its affiliates) as our service provider (processor): Unity processes this data on our instructions and for no purpose of its own. Unity's privacy policy: https://unity.com/legal/privacy-policy. Data may be processed in the United States and other countries where Unity operates, under the safeguards Unity offers (such as the EU Standard Contractual Clauses). Each service is described below: what it uses, why, and how long it is kept.

Service	What	Why	Kept
Authentication (Only with cloud save, UGS Cloud Save)	A random player ID, an installation ID, and, if you link one, the ID that Apple or Google Play Games gives the Game for your account (never your password or email)	To recognise your online player and restore it on a new phone	Until you delete your online data
Cloud Save (Only with UGS Cloud Save)	A copy of your save file (the same data as section 2)	So a reinstall or a new phone keeps your progress	Until you delete your online data
Player Names (Only with UGS Leaderboards or Friends)	Your display name, with a 4-digit tag (`Name#1234`)	To show you on leaderboards and to let friends add you	Until you change it or delete your online data
Cloud Code (our game server) (Only with the UGS game server, Cloud Code)	The server time; a summary of your progress (best wave, prestiges, gems earned and spent, heroes, summons, days played, season, name, avatar and frame); the random seed of each summon; your scores; season rewards	To stop clock changes and edited saves from giving unfair rewards, to make summons fair and verifiable, to rank you, and to pay season rewards once	While your online player exists; fairness flags and summaries are deleted with it
Leaderboards (Only with UGS Leaderboards)	Your display name, scores (best wave of the month, lifetime prestiges), your leader hero, avatar and frame	To show the monthly and lifetime rankings	Monthly boards are archived when the month ends so season rewards can be paid; deleted with your online data
Friends (Only with UGS Friends)	Your friend list, friend requests and your block list (player IDs and names)	To show your friends' best waves	Until you remove the friend, or delete your online data
Remote Config (Only with UGS Remote Config)	Your player or installation ID, the platform, the Game's version and your country (from your IP address)	To change game settings (balance, event timers) without an update	Not kept beyond the request logs Unity keeps to run the service
Analytics (Only with UGS Analytics, and only after your consent; see section 6)	A fixed list of gameplay events (tutorial steps, every 10th wave, boss results, prestiges, summons, offers shown, purchases with product and price, rewarded ads watched), an installation ID, device model and OS, and your approximate location (country, from your IP address)	To understand how the Game is played and tune its balance	{{ANALYTICS_RETENTION}}, then deleted by Unity
Diagnostics (Only if Diagnostics is on in Project Settings)	Crash and error reports: device model, OS version, app version, the error and the code location	To find and fix crashes	{{DIAGNOSTICS_RETENTION}}

No event, report or record carries anything you type except the display name.

In Settings, you can link your online player to Sign in with Apple (iPhone) or Google Play Games (Android). Linking is optional. Without it, your online player lives only on this installation: on iPhone, deleting the Game loses it.
When you link, Apple or Google tells the Game only an ID for your account. With Apple you may hide your email; we never receive your email or password.
Linking keeps the same player and save. If your Apple or Google account already has a player (for example from an earlier install), the Game switches to that player and asks which save to keep.
The Friends screen needs a linked account, so your friends never see an entry you can no longer recover.

5. Leaderboards and friends (Only with UGS Leaderboards / Friends)#

What other players see: your display name, your rank and score, your leader hero, avatar and frame. Friends also see your best wave of the month. Nothing else: no location, no online status, no messages.
Your display name: you choose it (a random one is given until you do). Names are checked against a list of words that are not allowed. Do not use your real name if you do not want it to be public.
Friend codes: your friend code is your display name with its tag (Name#1234). Someone can send you a request only with this code; you decide whether to accept.
Block and remove: on the Friends screen, Remove ends a friendship and Block stops a player from sending you requests.
Report: press and hold a player on a leaderboard, then Report, to email us about an offensive name or a suspicious score. We review reports and may rename, hide or remove the player (see the Terms).
Fairness checks: the game server compares each progress summary with the last one. A player whose progress is not possible (for example an edited save) is hidden from the leaderboards and does not receive season rewards. The account keeps playing.
Deleting: Settings > Delete cloud data removes your name, scores and friend list with your online player (section 8).

The Game sends no analytics event before you answer the consent form, and none if you refuse. Events from before your answer are dropped, not kept.
In the EEA, the UK and Switzerland, the question is part of the consent form shown at first launch (Google's certified consent form, the same one that asks about ads). Elsewhere, where no consent is required, analytics may be on by default and you can still turn it off.
To withdraw: open Settings > Privacy choices and refuse the measurement (analytics) purpose. The Game stops sending at once and tells Unity to stop collecting for your player.
Crash reports (Diagnostics) are not analytics: they are needed to keep the Game working and do not depend on this choice.

7. Advertising (Only with a real ad adapter, LevelPlay)#

We use Unity LevelPlay as our ad mediation platform with these advertising partners: {{AD_PARTNERS}} (name each network and link its privacy policy).

To show ads, cap how often you see them, measure them and prevent fraud, these partners may collect:

device identifiers: the advertising ID (Android advertising ID; Apple IDFA only if you allow tracking) and the vendor ID;
your approximate location, derived from your IP address;
your interactions with ads (views, taps, rewarded ads completed);
device and app diagnostics (model, OS version, crashes related to ads).

Each partner processes this data under its own privacy policy, as an independent controller.

Your choices:

EEA, UK and Switzerland: at first launch the Game asks for your consent before personalised ads, using a consent form certified by Google (UMP). Change your choice at any time in Settings > Privacy choices. Without consent you may still see non-personalised ads.
United States: where state law gives you the right to opt out of the "sale" or "sharing" of personal data for targeted advertising, do so in Settings > Privacy choices.
iPhone (IDFA and App Tracking Transparency): after the consent form, iOS asks whether the Game may track you. If you choose Ask App Not to Track, no partner receives your IDFA. The Game works the same whatever you answer. Change it in iOS Settings > Privacy & Security > Tracking.
Android: reset or delete your advertising ID in your device settings.
No More Ads (a purchase) removes the need to watch rewarded ads; it does not change the consent choices above.

8. Purchases (Only with the real store, Unity IAP)#

In-app purchases are processed by Apple or Google, under their privacy policies. We never see your payment details. The Game uses Unity IAP (Unity Technologies, as our service provider) to talk to the store: it receives a receipt (product, transaction ID, date, price and currency) and uses it only to deliver what you bought, to restore purchases and to prevent fraud. Unity IAP may also process device data and, on Google Play, briefly read your Google account email to complete the purchase without storing it.

9. Deleting your data#

In the Game: Settings > Delete cloud data. It asks twice (the second time you hold the button) and shows your Support ID. It deletes your cloud save and your online player: your link to Apple or Google Play Games, your display name, your scores on the leaderboards, your friend list and the server's records about your progress. The Game then starts a new anonymous player. The save on your device stays; delete it with Settings > Reset save or by uninstalling. Leaderboard rows and server records that are not removed at once are removed within 30 days.
Without the Game: write to {{EMAIL}} with your Support ID (shown in Settings; if you no longer have it, tell us your display name and roughly when you last played). We delete your online data within 30 days and confirm by email.
Advertising partners: they delete data under their own policies. Resetting your advertising ID breaks the link to past data.
Deleting is permanent. Purchases stay recorded by Apple or Google; restorable purchases (No More Ads) can still be restored with Settings > Restore purchases.

10. What we do not do#

We do not sell your data.
We do not collect your email address, contacts, photos, messages, precise location or health data.
There is no chat and no way to send messages to other players.

11. Children#

The Game is not directed to children. It is for players aged 13 or older (or the minimum age in your country, if higher). Because the Game sells random items (hero summons), its age rating in Europe is PEGI 16 and in some countries higher; in the EU, parents should expect the Game to be rated for ages 16 and over.
We do not knowingly collect data from children under 13. If you believe a child has used the Game's online features, write to {{EMAIL}} and we will delete that online player.
Players under 18 need a parent's or guardian's permission to make purchases. Apple and Google parental controls can require approval for every purchase.

12. Legal bases (EEA and UK)#

Contract (running the Game you chose to play): the online player, cloud save, game server, leaderboards, friends, Remote Config, delivering purchases.
Legitimate interest (keeping the Game fair and working): fairness checks, fraud prevention, crash reports (Diagnostics), non-personalised ads that fund the Game. You may object by writing to us.
Consent, which you can withdraw at any time in Settings > Privacy choices: personalised ads and analytics.

13. Your rights#

You can ask for access, correction, deletion, portability or restriction of your data, and object to processing based on legitimate interest. Write to {{EMAIL}} with the Support ID shown in Settings so we can find what relates to your player. We answer within 30 days. You may also complain to your data protection authority.

14. Security, changes, contact#

All data the Game and its partners send travels over encrypted connections (HTTPS/TLS). Online data is protected by Unity's access controls; players cannot write to the leaderboards directly, only through our game server.
We will post any change on this page and update the effective date. Significant changes will also be announced in the Game.
{{COMPANY}}, {{ADDRESS}}, {{EMAIL}}