Undead Surge Privacy Policy

Publisher: CODINGJET LLC · Contact: [email protected] · Effective from the date of the game's first release

Undead Surge is a single-player game by CODINGJET LLC ("we"). There are no accounts to create: your progress is saved on your device, and a backup copy is kept on our servers so it can be restored (see "Cloud save"). The game shows optional rewarded video ads and sells a few items through the App Store and Google Play. Our advertising partners collect some data from your device to provide those ads. The game also sends us crash and error reports so we can fix problems, and gets event information and online features from our servers. This policy explains what is collected, why, and the choices you have.

The game talks to us in two ways: it sends crash and error reports (see "Crash and error reports"), and it gets event information and online features from our servers (see "Statistics and online features"). Apart from those, its network traffic comes from the ad services and the store purchase services described below. A run itself never needs a connection.

What stays on your device

• Your progress: gold, talents, achievements, settings, the items you own and any run in progress, stored in the app's private storage on your device.
• A local gameplay log: run results and the choices you make in the game, such as the cards picked, with the time of each entry. It is kept in the app's private storage, and the same entries also go to your device's system log. The game never uploads the log itself; a crash or error report carries only its most recent entries (see below).
• Share card: when you tap Share, the game creates an image of your run and a short line of text (mode, survival time, kills and level), then opens your device's own share sheet. Nothing is shared unless you choose where to send it. The latest image stays in the app's storage until you share again.

Apart from the cloud-save copy described below, we don't receive this data. Deleting the app removes it. Device backups (iCloud or Google) may include the app's storage according to your device's backup settings.

Crash and error reports

When the game crashes, stops responding or hits an error, it sends a report to our own error-reporting server, run by CODINGJET LLC (not a third-party service). A report contains:

• technical details of the problem: where in the game's code it happened, the app version, the device model and operating system, and its memory and storage state;
• the recent steps that led to it: the screens you opened and game events such as a run starting or ending, a level reached, a boss appearing, or an ad or purchase starting or failing;
• a random install ID the game creates when it is installed, so we can tell how many players a problem affects. It is not linked to your name, e-mail, advertising ID or any account. You can see it in the game: Settings, under the Version line.

Reports never contain your name, e-mail, contacts, photos or precise location, and our server doesn't store your IP address. We use them only to find and fix problems and to see how stable each version is. They are deleted automatically after 90 days. We rely on our legitimate interest in keeping the game working (GDPR Art. 6(1)(f)). You can ask us to delete them at any time (see "Delete your data").

Statistics and online features

• Event information. The game downloads its event information, such as the weekly challenges, from our servers. These requests carry no identifier; your IP address is used only to deliver them, and we don't keep it.
• Your permission first. In the EU, the EEA, the UK and Switzerland the game asks before it sends gameplay statistics. Elsewhere statistics are on by default, and you can turn them off in Settings → Privacy at any time; turning them off also deletes the statistics already sent. Without your agreement, or with statistics off, the game sends only anonymous totals (such as how many runs ended in a chapter) that carry no identifier and can't be linked to you (we don't keep the connection's IP address with them; as with any internet service, the network providers that carry the connection see it); the online features you use, such as notifications, leaderboards, cloud save and a linked Game Center or Google Play Games account, keep working. Our legal basis is your consent where we ask for it, and otherwise our legitimate interest in running and improving the game (GDPR Art. 6(1)(a) and (f)).
• What is collected. A random install ID (not linked to your e-mail or advertising ID) with the app version, platform, operating system, language and time zone; gameplay statistics tied to it: game events such as runs started and ended, levels, bosses and cards picked, the screens you open, session times, and the country your connection comes from (never GPS); and your Weekly scores and best-run replays for the leaderboards.
• Game Center and Google Play Games. If you're signed in to Game Center (iPhone and iPad) or Google Play Games (Android), that account's player ID and player name (your gamer nickname) are linked to your install ID, so your progress can be restored. Other players never see it. Deleting your data removes the link.
• Why. To deliver event news, in-game messages and leaderboards, to balance the game, to plan events and to see which features are used.
• Notifications. If you allow notifications, the game sends us your device's push token (from Apple or Google) and your notification choices, so we can send you event news and, while Special offers is on in Settings, occasional offers. You can turn notifications off in your device settings at any time.
• Cloud save. A copy of your progress (gold, talents, items and unlocks) is saved to our servers after your runs, tied to your install ID and, if linked, your Game Center or Google Play Games account, so it can be restored on a new device. It is deleted with your data.
• Records we always keep. Purchases, ad rewards, your privacy choices and deletion requests, so rewards and choices are applied correctly.
• What we never store: your real name, e-mail, contacts, photos, precise location or IP address (which is used only for a few minutes to limit abuse). This data is held by CODINGJET LLC on our own servers, not by a third-party service.

Ads

• Rewarded ads only. Ads play only when you tap a button to watch one, for example to double the gold from a run. They never play during a run, and the game has no banner or pop-up ads.
• Our ad partner. Ads are served by Google AdMob, which may show ads from Google's advertisers and partners it works with.
• What Google may collect:
  • your device's advertising ID (on iOS, the IDFA, only if you allow tracking; on Android, the Google advertising ID) and other device identifiers;
  • your IP address and the approximate location it indicates;
  • device and app information, such as the device model, operating system, language, network type and game version;
  • ad interactions, such as which ads were requested, shown, watched to the end or tapped.
• Why: to deliver ads, to measure them and pay for them, to prevent fraud, and, if you allow it, to personalize ads to your interests.
• When: the ad service starts with the game, after any consent choices, and loads an ad so one is ready. It can send the data above at that point, even if you never watch an ad.
• Google's policies: Google uses the data under its own privacy policy:
  • Google: how Google uses information from apps that use its services
  • Google Privacy Policy

Your choices

• Privacy & ads choices. Where privacy law requires a consent or opt-out choice (for example in the EEA, the UK, Switzerland and some US states), the game asks when you first start it, using Google's consent form. Settings then has a "Privacy & ads choices" entry where you can change your answer at any time. No answer is rewarded or penalized; without consent, ads are less relevant to you, or fewer ads may be available.
• Tracking on iPhone and iPad. The game asks for permission to track with Apple's prompt, after the consent form where one applies. If you choose "Ask App Not to Track", ad partners can't use your IDFA. You can change this at any time in Settings → Privacy & Security → Tracking. Allowing tracking earns nothing in the game.
• Advertising ID on Android. You can reset or delete your advertising ID in your device settings (usually under Privacy → Ads, or Google → Ads).
• Not watching ads. You never have to watch one. Instant Rewards, sold in the game, skips the video and gives the same reward, with the same daily limits.

Delete your data

You can ask us to delete the data Undead Surge has sent us, the crash and error reports, the statistics and the online-feature data:

• Step 1: in the game, open Settings. Under the Version line you see your Install ID.
• Step 2: e-mail it to [email protected] and ask us to delete your data. Send feedback in Settings opens a mail that already contains it.
• Step 3: we delete every crash and error report, the statistics and the online-feature data for that install ID within 30 days and reply to confirm.

What is deleted, and what is kept:

• Crash and error reports: all reports with your install ID are deleted on request. Without a request they are deleted automatically 90 days after they were sent.
• Statistics and online-feature data: your statistics, leaderboard entries, cloud save, push token, Game Center / Google Play Games link and the install's record are deleted on request. Without a request, detailed statistics are deleted after 90 days, the main game events after 13 months, and purchase, reward and privacy-choice records and the install's record 25 months after the game last connected. We keep a record that a deletion was done (with the install ID, no other data) for 3 years, as proof that we handled it.
• Ad data: we don't hold it. Google controls it: use Privacy & ads choices in Settings, your device's ad settings (reset or delete your advertising ID), or Google's own tools at https://myadcenter.google.com.
• On your device: progress (its cloud-save copy is covered above), purchase records and the gameplay log stay on your device until you delete the app, which removes them.
• E-mails to us: we keep your e-mail only as long as needed to answer it (see "Emails to us").

Purchases

• Purchases are made through the App Store (Apple) or Google Play (Google), under their terms and privacy policies. They process the payment; we never see your card or billing details.
• The store tells the game what you bought. The game keeps that record on your device to unlock your items, and sends it with your install ID to our servers, which check it with the store and handle refunds. Restore Purchases brings back one-time purchases on a device signed in to the same Apple ID or Google account.
• Apple and Google handle refunds.

Permissions

On iPhone and iPad, the game may show Apple's tracking prompt (see Your choices). If you choose to save a share card to Photos from the share sheet, iOS asks you to allow adding it to your photo library. The game never reads your photos. On both, the game may ask to send you notifications (see "Statistics and online features"). On Android, the game uses internet access for ads, purchases, crash reports, event information and online features, the advertising ID, and vibration for haptics.

Children

Undead Surge is meant for players aged 13 and over and is not directed at children under 13, and its ads are not set up for children. We don't knowingly collect personal information from children under 13. If you believe a child under 13 is playing, contact us.

Emails to us

If you email [email protected], we receive your email address and whatever you send. We use them only to answer you and keep them only as long as needed for that.

How long data is kept

• On your device: until you delete the app. The gameplay log keeps only its most recent entries.
• Crash and error reports: 90 days on our server, or less if you ask us to delete them.
• Statistics and online-feature data: as listed under "Delete your data", or less if you ask us to delete it.
• With ad partners: as their privacy policies describe.
• Emails to us: as described above.

Your rights

Depending on where you live (for example the EEA, the UK or some US states), you may have rights to access, correct or delete personal data, to object to or limit its use, to opt out of its "sale" or "sharing" for targeted advertising, and to withdraw consent.

• For data on your device, delete the app.
• For ad data, use Privacy & ads choices, your device's ad settings, or the partner's privacy policy.
• For crash and error reports, statistics and online-feature data, see "Delete your data". Apart from those (which carry only a random install ID) and emails you send us, we hold no personal data about you. Email us with any request and we'll help.
• You can also complain to your local data protection authority.

Ad partners may process data outside your country, including in the United States.

Changes

If a future version changes what data the game handles, for example new ad partners, analytics or online features, we will update this policy and the store privacy labels before that version is released.

Contact

CODINGJET LLC · [email protected]