This policy explains what data Cybervore: Apex Mech Idle RPG (the "game") processes, why and how. The game is developed and published by Mech App Studio (independent developer), contact: admin@mechappstudio.com.
In short
- Your game progress is stored on your phone first.
- Once you reach level 4, your progress is backed up to the cloud so it isn't lost (Google Firebase, European Union servers).
- You can optionally create an account (Google or email) to continue on another device.
- Purchases are made through Google Play; your card details never reach us.
- The game shows optional rewarded ads and occasional full-screen ads (Google AdMob). If you buy "Ad-Free Game", no ads are shown.
Data we collect
| Data | When | Why |
|---|---|---|
| Anonymous user ID (a random code) | When you first open the game | To link the cloud backup to your device |
| Game save (level, resources, items, settings) | After level 4, at infrequent intervals | To back up your progress and restore it on a new device |
| Random device ID | While cloud backup is on | To make sure an account is played on only one device at a time |
| Username | If you create an account | To identify your account (unique for everyone) |
| Email address | If you sign up with Google or email | To sign in and reset your password |
| Purchase token (code issued by Google Play), product and order number | When you make a purchase | To verify with Google Play that the payment is genuine and prevent the same payment from being used twice |
| App integrity check (Play Integrity / App Check) | When connecting to our server | To stop fake or modified apps from abusing the server |
| Advertising ID, IP address, device information and ad interactions | When ads are loaded and shown (Google AdMob) | To show and measure ads and prevent ad fraud |
We do not collect your name, phone number, location, contacts or photos.
Data that stays on your phone
Your game save, settings (sound, language) and notification preferences are stored on your phone. Notifications (e.g. "storage full") are scheduled locally on your phone; no data is sent to a server for them.
To prevent time cheating, the game sends a simple request to a Google server at startup to learn the real time; this request contains no personal information (only your connection's IP address is visible).
Services we use
- Google Firebase (Authentication, Cloud Firestore, Cloud Functions, App Check): sign-in, cloud backup and purchase verification. Data is stored in the europe-west1 (Belgium) region. Google processes the data only to provide the service.
- Google Play Billing: payments. Your payment details are processed by Google; we only receive the token needed to verify the purchase.
- Sign in with Google: only if you choose it; we receive your email address and Google account ID.
- Google AdMob: ads. AdMob processes data under Google's policies: https://policies.google.com/technologies/partner-sites
We do not sell your personal data. When ads are shown, the ad data above is shared only with our advertising partner Google (AdMob) and with no one else.
Ads
The game shows optional rewarded ads (watch one to earn an in-game reward) and occasional full-screen ads. Ads are served by Google AdMob. To show and measure ads and prevent fraud, AdMob may process your device's advertising ID, IP address (to infer approximate location), device and app information and ad interactions.
- Consent: in the European Economic Area, the UK and Switzerland we ask for your consent before showing personalized ads. You can change it anytime in the game under Settings → Ad privacy options.
- Advertising ID: you can reset or delete it in your phone settings (Google → Ads).
- Ad-free: if you buy "Ad-Free Game", no ads are shown and rewarded-ad rewards are granted without watching.
- Content: ad content is limited to suit the game's age rating.
Retention
- Your cloud backup and account are kept until you ask us to delete them. Anonymous backups without an account may be deleted after 24 months of inactivity.
- Purchase records (token digest, product, order number) may be kept for up to 10 years for tax and legal obligations.
Account and data deletion
You can request deletion of your account and all game data in the cloud on the account deletion page or by emailing admin@mechappstudio.com. Requests are completed within 30 days. Uninstalling the game removes the data on your phone.
Children
The game is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe such data exists, contact us and we will delete it.
Security
Data is transferred over encrypted connections (HTTPS/TLS). Cloud saves can only be accessed by their owner; server rules prevent other players from reading or changing your save.
Your rights (GDPR and KVKK)
You have the right to access, correct or delete your data, to object to its processing and to request a copy. Email admin@mechappstudio.com. You may also lodge a complaint with your local data protection authority.
Changes
We may update this policy. We will announce significant changes in the game or on this page. The current date is shown at the top of the page.