Privacy Policy
In short
- No account. Your save game stays on your device. Only if you use the leaderboard does our server store the name you chose and your best time.
- You only see ads when you start a video yourself.
- Personalised ads only happen with your consent (Settings › Change ad consent), gameplay statistics only if you say “Yes” in the app (Settings › Send game statistics). You can change both at any time.
- Purchases go through Google Play and are verified via RevenueCat. We never see your payment details.
- We do not sell data.
1. Controller and contact
Controller within the meaning of the General Data Protection Regulation (GDPR):
You can reach us at this email address with any privacy question. We are not required to appoint a data protection officer.
2. Data on your device
The app stores the following in its private storage on your device:
- your save game (including the company name you enter) and a backup copy,
- your settings (e.g. language, appearance, notifications, offer suggestions),
- the status of your purchases (packs you bought) and a random customer ID from RevenueCat (see section 6),
- daily counters for ad videos (for the visible daily limits),
- a randomly generated installation ID (see section 5),
- if you use the leaderboard: a random player ID, your name there and the IDs of players you have hidden for yourself (see section 7),
- a technical error log.
This data is not transferred to us; what the app sends to services is described in the following sections. Storing it is necessary for the game (Art. 6(1)(b) GDPR; § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021)).
You can delete all of it in Android (Settings › Apps › Bootstrapped › Storage › Clear data) or by uninstalling the app. “Reset game” in the app archives the old save on the device instead of deleting it.
3. Consent
For consent, the app uses Google’s User Messaging Platform (standard: IAB Transparency & Consent Framework). Where required – in particular in the European Economic Area, the United Kingdom and Switzerland – the app asks on first launch, before any ad is loaded. Your choice is stored on your device. For gameplay statistics the app asks separately (section 5).
You can change or withdraw it at any time: Settings › Change ad consent. Withdrawal applies to the future. The game remains fully playable without consent.
4. Ads (Google AdMob)
The app only shows rewarded video ads, and only when you tap an offer. There are no banners and no ads that start on their own.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Data: When a video is loaded or shown, Google processes in particular your IP address (and an approximate location derived from it), your device’s advertising ID (Android Advertising ID), device and app information (e.g. model, Android version, language, app version) and your interaction with the ad (viewed, cancelled, tapped). Google may store and read identifiers on your device for this purpose.
Purposes: delivering ads, limiting frequency, measuring performance, preventing fraud and – only with consent – personalising ads.
Legal basis: with consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021. Without consent, Google serves at most limited, non-personalised ads; we base the processing needed for that on our legitimate interest in funding the free app through voluntary ads (Art. 6(1)(f) GDPR). If Google cannot deliver an ad, the offer is simply unavailable.
Transfers to the USA: Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).
You can reset or delete your advertising ID in Android settings (usually under Privacy › Ads).
Learn more: How Google uses information from sites or apps that use our services · Google Privacy Policy
5. Gameplay statistics (GameAnalytics)
To understand where players get stuck and to improve game balance and offers, the app sends gameplay events to GameAnalytics.
Provider: GameAnalytics ApS, Denmark. GameAnalytics processes the data on our behalf (processor, Art. 28 GDPR).
Data:
- a random installation ID (not the advertising ID, no name, no email) and a random session ID,
- time, Android version and app version (not the device model or manufacturer),
- how often and how long you play (session number and length),
- gameplay events, e.g. session started, tutorial step reached, milestone or rank reached (with the in-game day), ad video offered or watched, shop opened, pack purchased (pack, price and currency – without payment details),
- moves and decisions, e.g. product type built, employee hired, loan taken, option chosen in an event, company founded (difficulty, sector, strategy) or restarted, in-game days played per session – never company or product names,
- properties of your game: difficulty, purchased packs and rough in-game progress (e.g. “year 2”),
- if the app hits a programming error, the kind of error and the affected place in the program code (not the error text),
- for technical reasons, your IP address during transmission.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). After the tutorial the app asks you once “Send game statistics?” and only sends data after “Yes” – the same in every country. Without an answer or after “No”, nothing is sent. You can change or withdraw this at any time under Settings › Send game statistics.
The data is used for analysis only. We do not build advertising profiles from it and do not pass it on. If you clear the app’s data or reinstall the app, a new installation ID is created; the old data can then no longer be linked to your device.
Storage location: GameAnalytics stores the data with cloud providers (Amazon Web Services, Google Cloud). Where data is processed outside the EU, this is based on the EU Standard Contractual Clauses (Art. 46 GDPR).
Learn more: GameAnalytics privacy FAQ
6. Purchases (Google Play, RevenueCat)
You buy packs (e.g. Founder Pack, Style pack, ad-free bonuses) through Google Play. Google handles payment, invoicing and refunds; we never receive your payment details.
To verify, unlock and restore purchases, the app uses the RevenueCat service. The app also stores the purchase status on your device so that packs you bought keep working without internet. If Google refunds a purchase, the app locks the pack again on the next start.
Provider: RevenueCat, Inc., USA. RevenueCat processes the data on our behalf (processor, Art. 28 GDPR).
What data:
- a random customer ID created on first start (no name, no email, no account),
- your purchases in this app: product, Google Play purchase token, price and currency, date and status (e.g. refunded),
- technical details: app and Android version, language and country, IP address when connecting.
When: when the app starts, when you buy and when you tap “Restore purchase” in the settings. This happens regardless of your consent to ads and statistics, because purchases would not work otherwise. Legal basis: Art. 6(1)(b) GDPR.
Purchase page views: Only if you agreed to game statistics (section 5), the app also tells RevenueCat when you open the purchase page of a pack you do not own yet – which pack and when, with the same random customer ID. This shows us how many players see a purchase page at all. Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); you can withdraw it under Settings › Send game statistics.
Video ads: Also only if you agreed to game statistics, the app tells RevenueCat when a video ad loads or fails to load (with error code), when it is shown or tapped, and what ad revenue Google reports for it – with ad unit, ad network, placement in the game (e.g. “Boost”) and the same random customer ID, never the advertising ID. This shows us how often videos are available and what ads earn. Legal basis and withdrawal as for purchase page views.
Storage location: RevenueCat stores the data in the USA (Amazon Web Services, Snowflake). The transfer is based on the EU Standard Contractual Clauses (Art. 46 GDPR).
Learn more: RevenueCat privacy policy
In the Google Play Console, Google provides us with order information (e.g. order number, product, price, country, date). We use it for accounting, taxes and refunds. Legal basis: Art. 6(1)(b) and (c) GDPR. The purchase itself is covered by the Google Privacy Policy.
7. Leaderboard (Cloudflare)
The leaderboard is optional. There is no account and no sign-in.
Data:
- a random player ID created by the app (not the advertising ID) and a public short ID that others use to report or hide you,
- the name you choose (3–16 characters, publicly visible – please do not use your real name),
- for each run that reaches rank 1: difficulty level, game days needed, a random run ID, the game’s start seed and the app version (for plausibility checks), and the time,
- if you report a name: your player ID, the reported player, the reported name and the time.
When: As soon as you enter a name, the app sends it with the player ID to the server, which checks it for disallowed words right away; it is only stored with your first rank-1 run. When you open the leaderboard, the app downloads the list. Several credible reports replace a name for everyone with “Player 1234”, while rank and time stay; we can review reported names and block players or entries.
Provider: The server runs at Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, as our processor (Art. 28 GDPR). Cloudflare technically processes your IP address to establish the connection; we do not store it. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More: Cloudflare privacy policy
Legal basis: Art. 6(1)(b) GDPR (you choose to use the leaderboard); for name checks, reports and blocking, our legitimate interest in a fair list without offensive names (Art. 6(1)(f) GDPR).
Deletion: In the leaderboard, tap “Delete my data”; the server then removes your name, all your entries and all reports by you and against you. Without this step, the data is kept for as long as the leaderboard exists. If you no longer have the app, email us with your leaderboard name; since names are not unique, we may ask follow-up questions (e.g. difficulty level and approximate date of your entry).
8. Save backup and achievements (Google Play Games)
If you turn on the backup in the settings, the app signs you in to Google Play Games and stores your save and profile (unlocks, achievements, leaderboard name) as a saved game in your Google account. The data is held by Google and not visible to us; we run no server for this. If you are signed in to Google Play Games, the app reports unlocked achievements there. You can turn the backup off at any time; delete the copy in the Google Play Games settings. Google’s privacy policy applies.
9. Android backup
If you have turned on backup to your Google Account on your device, Android backs up the app’s save game and settings (not the error log) so you can restore them on a new device. Google does this as part of your Google Account; we have no access to it. You can turn backup off in Android settings.
10. Notifications
Reminders (e.g. “offline cap reached”) are created by the app directly on your device. No data is sent and no push service is used. The app only asks for the Android permission when you turn notifications on; you can turn them off in the app or in Android.
11. Error reports and contact
“Copy error report” in the settings copies the technical log to your clipboard. Nothing is sent – you decide whether to send it to us.
If you write to us, we process your email address and the content of your message (including any log) to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the message once your request is resolved, unless a legal retention obligation applies.
We receive crash reports in aggregated form, without reference to you, via the Google Play Console (Android vitals), provided you have allowed Android to share usage and diagnostics data with Google.
12. What the app does not do
- no user account and no required sign-in (signing in to Google Play Games is optional),
- no access to location, contacts, camera, microphone, photos or files,
- no data about you on our server except the leaderboard data listed in section 7,
- no selling of data.
13. Security
Data only leaves your device encrypted (HTTPS/TLS). Save game and settings are kept in the app’s private storage, which other apps cannot access. Our leaderboard server holds only the data listed in section 7; only the controller has access to review and block.
14. Retention and deletion
| Data | How long | How to delete it |
|---|---|---|
| Save game, settings, purchase status | until you delete it | clear app data or uninstall the app |
| Ad data at Google | according to Google’s retention periods | withdraw consent; reset or delete the advertising ID |
| Gameplay statistics at GameAnalytics | as long as we need them for analysis; at the latest when the service ends | switch off game statistics; clear app data (new ID) |
| Leaderboard: name, entries, reports | until you delete them or the leaderboard is discontinued | Leaderboard › “Delete my data”; otherwise by email with your name |
| Save backup at Google Play Games | until you delete it | Google Play Games settings |
| Purchase history, purchase page views and ad events at RevenueCat | as long as we use RevenueCat | on request by email (with order number, see section 15) |
| Order information | statutory retention period (7 years, § 132 Austrian Federal Fiscal Code) | automatically afterwards |
| Emails to us | until resolved | immediately on request, unless an obligation prevents it |
15. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object: Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21).
To exercise these rights, email us at the address above. Because we do not keep accounts, we usually cannot link data held by Google or GameAnalytics to a specific person; the quickest way is therefore the controls in the app and in Android (change ad consent, switch off game statistics, Leaderboard › “Delete my data”, clear app data, reset advertising ID). We find and delete your purchase history at RevenueCat using the order number from your Google Play receipt (starts with “GPA.”).
The simplest way to submit a request is via this page.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live (Art. 77). The authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria (dsb.gv.at).
The app is intended for adults (18 and over).
16. This website
These pages are served via GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit, GitHub processes technically necessary access data such as your IP address to deliver the page and protect against abuse (Art. 6(1)(f) GDPR). GitHub is certified under the EU-US Data Privacy Framework. These pages set no cookies, use no tracking and load no content from other servers. Learn more: GitHub General Privacy Statement.
17. Changes
If the app changes in a way that affects how data is handled, we will update this policy. The version published here applies; the date at the top shows when it was last updated.