Privacy Policy
This Privacy Policy explains what information the mobile game The Wall (the "Game") collects, why, who it is shared with, and the choices and rights you have. It applies to the iOS and Android versions of the Game.
1. Who we are
The Game is published by Maxence Bourdin, an independent developer (sole trader, ABN 86 988 745 013) established at Unit 9, 54 Cheriton Street, Perth WA 6000, Australia ("we", "us"). We are the data controller for the personal data described in this policy.
Contact: studioinspr@gmail.com
2. Summary of the data we process
The Game has no accounts and no login. We do not ask for your name, email address, phone number, contacts, photos or precise location. The data below is collected automatically by the Game and the services it uses.
| Data | Collected by | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Player ID (random identifier created by the Game) | The Game, shared with Firebase Crashlytics, Firebase Analytics (only with your consent where required) and RevenueCat | Link crash reports, gameplay statistics and purchases to the same install so that we can provide support and improve the Game | Legitimate interest; performance of a contract (purchases); consent (analytics, where required) |
| Crash and error reports: stack traces, device model, OS version, app version, orientation, free memory and disk, Firebase installation ID, time of the crash | Firebase Crashlytics (Google) | Find and fix crashes and bugs | Legitimate interest in providing a stable game |
| Gameplay statistics: game launches and finished runs (wave and difficulty tier reached, enemies defeated, why the run ended), in-game currency balances and unlocks, plus session, app version, device model, OS version, language, approximate country (from IP address) and Firebase app instance ID | Firebase Analytics (Google) | Understand how the Game is played so that we can balance and improve it | Consent where the consent form applies (EEA, UK, Switzerland); legitimate interest elsewhere |
| Purchase data: products bought, transaction IDs, store receipts, purchase dates, price, currency and store country | RevenueCat, Apple App Store, Google Play | Deliver purchases, restore lifetime purchases, handle refunds and support | Performance of a contract; legal obligations (accounting) |
| Advertising data: advertising ID (IDFA on iOS, only if you allow tracking; Google Advertising ID on Android), IDFV / app set ID, IP address, device and network information, ad views and clicks, consent choices | Unity LevelPlay (ironSource) and the ad networks it works with: ironSource Ads, Google AdMob, Unity Ads | Show rewarded ads, measure them, prevent fraud and, only with your consent, personalise them | Consent (personalised ads, access to device identifiers); legitimate interest (non-personalised ads, fraud prevention, frequency capping) |
| Consent choices (IAB TCF consent string, ATT status) | Google User Messaging Platform, stored on your device | Remember and apply your privacy choices | Legal obligation |
| Game progress, in-game currencies, upgrades and settings | The Game, stored only on your device | Save your progress | Performance of a contract |
| Emails you send us | Us | Answer your questions and requests | Legitimate interest; legal obligation (privacy requests) |
We do not sell your personal data for money. We do not use analytics data for advertising.
3. Your Player ID
On first launch the Game creates a random identifier (a UUID) and stores it on your device. It is not derived from your device, your identity or any advertising identifier. We use it for three things: it is attached to crash reports sent to Firebase Crashlytics, it is attached to gameplay statistics sent to Firebase Analytics (only when analytics is allowed, see section 5), and it is your customer identifier at RevenueCat, our purchase-management provider. This lets us match a support request about a purchase with the related crash reports.
You can see your Player ID in the Game's Settings menu, and tap it to copy it. The Player ID is deleted when you uninstall the Game. A new one is created if you reinstall it.
4. Game progress stored on your device
Your progress (levels, currencies, upgrades, unlocks) and settings (sound, music) are stored only on your device. We do not receive this data and there is no cloud save. If you uninstall the Game or clear its data, this progress is lost. Lifetime purchases can be recovered with Restore Purchases (see section 6).
5. Crash reporting and analytics (Firebase)
Crash reporting
When the Game crashes or hits a serious error, Firebase Crashlytics, a Google service, sends a report the next time you open the Game. The report contains technical information about the error and your device (listed in section 2), a Firebase installation identifier and your Player ID. We use these reports only to find and fix problems.
Analytics
We use Firebase Analytics, a Google service, to understand how the Game is played: for example how far players get, on which difficulty tier, and how many in-game currencies they hold (see section 2 for the full list). This is linked to your Player ID and a Firebase app instance identifier. We use it only to balance and improve the Game, never for advertising. On Android, Firebase Analytics does not collect your advertising ID.
Analytics is off until your privacy choice is known. Where the consent form applies (for example in the EEA, the UK and Switzerland), analytics is only turned on if you allow storing and accessing information on your device in the consent form. If you refuse, or if the form could not be loaded, nothing is sent to Firebase Analytics. You can change your choice at any time in Settings › Privacy Settings, and analytics stops as soon as you withdraw your consent.
More information: Privacy and Security in Firebase.
6. In-app purchases (RevenueCat, Apple, Google)
The Game offers optional in-app purchases: packs of in-game currency and lifetime unlocks such as Disable Ads and the Lifetime Battle Pass. Payments are processed by Apple (App Store) or Google (Google Play). We never receive or store your payment card details. Apple and Google process your payment information under their own privacy policies.
We use RevenueCat to validate purchases with the store and keep track of which products belong to which Player ID. RevenueCat receives your Player ID, store receipts and transaction details, the app version, device and OS type, store country and currency, and your IP address (used to secure the service). This is what makes Restore Purchases possible after a reinstall or on a new device.
7. Advertising and consent
Rewarded ads
The Game shows rewarded ads: optional ads that you choose to watch in exchange for an in-game reward. Ads are delivered through Unity LevelPlay (formerly ironSource), a mediation platform that selects an ad from its partner networks, currently ironSource Ads, Google AdMob and Unity Ads. These providers collect the data listed in section 2 to deliver, measure and, with your consent, personalise ads. They may act as independent controllers of that data under their own privacy policies (see section 8).
Consent (EEA, UK and Switzerland, and other places where required)
When the Game starts, before any ad is loaded or analytics is sent, it uses Google's User Messaging Platform, a consent management platform registered with the IAB Transparency & Consent Framework (TCF), to ask for your consent where the law requires it. You can accept, refuse, or choose per purpose and per vendor. If you refuse, ads may still be shown but they are non-personalised, meaning they are chosen from the context rather than from a profile of you. Your choice is stored on your device and passed to the ad networks, and it also decides whether analytics is turned on (see section 5). The form is shown to every player where it applies, including players who bought Disable Ads.
App Tracking Transparency (iOS)
On iOS, after the consent form, the Game asks for permission to track through Apple's App Tracking Transparency (ATT) prompt. If you select Ask App Not to Track, your device's advertising identifier (IDFA) is not shared with anyone and ads are not personalised using data about you from other companies' apps and websites.
Changing your choices
- In the Game: where the consent form applies (for example in the EEA and the UK), open Settings › Privacy Settings to review or withdraw your consent, for ads and analytics, at any time.
- Reinstalling: uninstalling and reinstalling the Game resets your consent choices and the consent form is shown again.
- iOS: Settings › Privacy & Security › Tracking lets you allow or deny tracking for the Game.
- Android: Settings › Google › Ads (or Settings › Privacy › Ads) lets you reset or delete your advertising ID or opt out of ads personalisation.
- To stop seeing ads entirely, do not choose to watch rewarded ads, or buy Disable Ads. With Disable Ads, the Game grants the rewards without an ad and does not start the advertising services at all.
8. Third-party services
We only share data with the following providers, for the purposes described above. Each has its own privacy policy:
- Google Firebase Crashlytics and Firebase Analytics: firebase.google.com/support/privacy
- RevenueCat: revenuecat.com/privacy
- Unity LevelPlay, ironSource Ads and Unity Ads (Unity Technologies): Unity Game Player and App User Privacy Policy
- Google AdMob and the User Messaging Platform: policies.google.com/privacy and How Google uses information from sites or apps that use its services
- Apple App Store: apple.com/legal/privacy
- Google Play: policies.google.com/privacy
The full list of advertising vendors that may process data through the TCF is shown in the consent form. We may also disclose data if required by law or to protect our rights.
9. International transfers
We are based in Australia, and the providers listed above process data in other countries, in particular the United States. Your data may therefore be transferred to and processed in countries other than the one where you live. For players in the European Economic Area, the UK and Switzerland, transfers to the United States rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission's Standard Contractual Clauses. Transfers to Australia, and from Australia to other countries, rely on Standard Contractual Clauses or other safeguards recognised by the applicable law.
10. How long we keep data
- Crash reports: kept by Firebase Crashlytics for up to 90 days.
- Analytics data: event data linked to your Player ID is kept by Firebase Analytics for up to 14 months, after which only aggregated, anonymous reports remain.
- Purchase records: kept for as long as needed to provide and restore your purchases, and for the period required by accounting and tax law, unless you ask us to delete them earlier where the law allows.
- Advertising data: kept by the ad providers according to their own policies.
- Game progress, Player ID and consent choices on your device: kept until you uninstall the Game or clear its data.
- Emails: kept for as long as needed to handle your request, then deleted.
11. Your rights
EEA, UK and Switzerland (GDPR)
You have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting processing that took place before. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work.
Australia (Privacy Act 1988)
We handle personal information in line with the Australian Privacy Principles. You can ask to access or correct the personal information we hold about you. If you have a privacy complaint, please contact us first and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).
California and other US states
You have the right to know what personal information we collect and share, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell personal information for money. Sharing device identifiers with ad networks for personalised advertising may be treated as "sharing" or "targeted advertising" under some state laws. You can opt out by refusing tracking (iOS) or ads personalisation (Android) as described in section 7.
Everywhere else
If you live elsewhere, including Canada or Brazil, you have the rights your local law gives you, and we will honour requests to access or delete your data wherever you live.
12. How to make a request
Email studioinspr@gmail.com with your request. For deletion, see Delete your data for the steps and what is deleted or kept. Because the Game has no accounts, we need a way to find your data. Please include one of the following:
- your Player ID, shown in the Game's Settings menu (tap it to copy it), or
- the order or transaction ID of a purchase, shown on your App Store or Google Play receipt.
We will reply within 30 days. Crash reports, analytics data and advertising data that cannot be linked to you are generally not identifiable by us. For advertising data you can also contact the ad providers directly using the links in section 8. You can remove all data stored on your device at any time by uninstalling the Game.
13. Children
The Game is not directed at children under 13, and we do not knowingly collect personal data from them. In the EEA, the age of digital consent may be up to 16 depending on your country. If you are younger, please ask a parent or guardian before playing. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Security
Data is sent to our providers over encrypted connections (HTTPS). We only work with established providers and give them no more data than they need. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
15. Changes to this policy
We may update this policy when the Game or the services it uses change. The "Last updated" date at the top shows when it was last changed. For significant changes we will inform you in the Game or on its store page.
16. Contact
Maxence Bourdin (sole trader, ABN 86 988 745 013)
Unit 9, 54 Cheriton Street, Perth WA 6000, Australia
Email: studioinspr@gmail.com