Privacy Policy

This Privacy Policy explains what information the games published by Fourbound Games collect, how we use it, and the choices you have. If anything here is unclear, write to support@fourboundgames.com.

Who we are

Our games are developed and published by Fourbound Games, an individual developer based in Türkiye. For any question about this policy or your data, write to support@fourboundgames.com.

Information we collect

We designed our games to collect as little personal information as possible. We do not ask you to create an account, and we do not collect your name, email address, phone number or precise location.

• Anonymous game account. When you first open a game, Firebase Authentication creates a random identifier for it. It is not linked to your real-world identity; it lets us save your progress and run features such as the leaderboard.
• Game progress. Your save — depth reached, equipment, resources — and the player name and tag you choose, which other players see on the leaderboard. It is stored in Google Cloud Firestore. We also note the day you first reach depths 10, 30, 60, 90 and 100, and your depth when you buy something, to count in aggregate how far players get.
• Purchases. Purchases are processed by Google Play or the App Store. We receive confirmation of what was bought, the purchase token and the order number, so we can deliver your items. We never see your card or payment details.
• Advertising. Our games show optional rewarded video ads through Google AdMob (Google Mobile Ads SDK). The ad SDK starts with the game and loads one ad in advance so it is ready; a video plays only when you choose to watch it. The network may collect your advertising identifier, IP address and device details to serve and measure ads, and we pass it your anonymous game account ID so a reward can be verified.
• Gameplay events. The game records what happens as you play — sessions, tutorial steps, fights, levels, chests opened, rewards claimed and purchases — in our own database (Google Cloud Firestore, Frankfurt), tied to your anonymous game account and stamped with your phone’s clock and ours. We use them to improve the game’s balance and tutorial, to answer support requests and to detect cheating. Our legal basis is our legitimate interest in running and improving the game, and, for purchases, rewards and anti-cheat records, the performance of our agreement with you. Nothing is sent until you accept these terms in the game. You can turn gameplay events off at any time in Settings → Share Play Stats; records of purchases, rewards and cheating checks continue, because they are part of your account. All of it is deleted with your account.
• In-game offers. The starter pack is offered to every account that has not bought it. Beyond that, the shop’s special-offer banner and a pop-up offer on the home screen (at most once a launch) can show a product chosen by fixed rules: how deep you have reached in the game, how many times you have played, whether your account has bought something before and, for some offers, a fixed group your account falls into at random. Which shop items you were shown and tapped are recorded with your gameplay events, so we can see whether an offer is useful. We may keep a fixed share of accounts, picked at random, from seeing any chosen offer, so we can compare. Prices are never personalised: a real-money price is set by Google Play and is the same for everyone in your country, and a gem or coin price is never set for a particular player. We never use your age, how much you have spent or any prediction about you, and no offer has legal or similarly significant effects on you. Our legal basis is our legitimate interest in running the game’s shop. You can object at any time: with Settings → Share Play Stats turned off, the game shows no chosen offers and records none of this.
• Google Analytics (only if you agree). The game’s first screen has an optional box for sharing play stats with Google. In the EEA, the UK, Switzerland and Türkiye it starts unticked; elsewhere it starts ticked, and you can untick it before tapping AGREE. If you tick it, Google Analytics for Firebase receives in-game events (how deep you get, how runs end, tutorial steps, season pass progress, purchases), session length, device model, operating system, app version and an approximate location derived from your IP address. It never receives your player name or your account ID, and it receives your advertising identifier only if you also tick the ad-measurement box below. You can withdraw at any time by turning off Settings → Share Play Stats. Crash reports (Firebase Crashlytics) are always sent, because we need them to keep the game working; they carry device details and the state of your run, not your name.
• Ad measurement (only if you agree). A second optional box on the same screen, set the same way, lets us measure our own advertising on Google and on Meta (Facebook and Instagram): which ad brought you to the game, and whether it was worth what it cost. If you tick it, Meta’s SDK receives your advertising identifier, an installation identifier, device and app details, your IP address and these events: installing and opening the game, finishing the tutorial, reaching a hero level, and purchases with their price. If you have also ticked the Google Analytics box, Google Analytics adds your advertising identifier to its events so our Google ads can be measured; Google is told not to use them to personalise ads. In the US states with privacy laws, Meta processes the data under its Limited Data Use option. Your player name and account ID are never sent. Our legal basis is your consent: until you give it, the game makes no call to Meta. You can withdraw at any time by turning off Settings → Share Play Stats, and the game stops sending at once.
• Device integrity. Firebase App Check asks Google Play Integrity or Apple App Attest to confirm that requests come from a genuine copy of the game, to protect against cheating and fraud.

How we use information

• To save and restore your progress.
• To run online features such as the leaderboard.
• To deliver and verify what you buy.
• To show rewarded ads when you choose to watch them, and to verify the reward.
• To understand how the games are played and to improve balance and stability.
• To choose which in-game offer the shop shows, by the rules described above, and to see whether it is useful.
• To measure which of our ads bring players to the game, if you agree.
• To detect and prevent cheating, fraud and abuse.

Legal bases

Where the GDPR or Türkiye’s Personal Data Protection Law (KVKK) applies, we rely on these legal bases:

• Our agreement with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): your anonymous account, saving and restoring your progress, online features such as the leaderboard, and delivering and verifying purchases and rewards.
• Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): gameplay events used to improve the game and answer support requests, the choice of in-game offers, crash reports, and App Check and other checks that protect the game against cheating and fraud. You can object at any time, and gameplay events stop when you turn off Settings → Share Play Stats.
• Consent (GDPR Art. 6(1)(a); KVKK Art. 5(1), explicit consent): Google Analytics, ad measurement with Google and Meta, and personalised ads where the law requires consent. You can withdraw it at any time; this does not affect what was done before.
• Legal obligations (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)): keeping records and answering requests where the law requires it.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects, and we do not ask for sensitive personal data.

Third-party services

Our games rely on the following services, each of which processes data under its own privacy policy:

• Google Firebase — Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics and App Check: anonymous accounts, saving, online features, analytics and crash reporting, plus Firebase Hosting for this website. See Firebase privacy and security.
• Google (Google Play) — processes your payment and tells us whether a purchase token is genuine. Google is the seller of record for Android purchases.
• Google (Google Play Games) — optional, Android only. If you sign in with Play Games, Google shares your Play Games player ID and profile name with us so your save is tied to your Google account and survives a reinstall or a new phone. No email address or contacts are requested. See the Google Privacy Policy.
• Apple — processes App Store payments and device attestation on iOS. See the Apple Privacy Policy.
• Unity Technologies — the game engine; its in-app purchase module sends purchase and diagnostic events (product, store, device model, an installation identifier). See the Unity player privacy policy.
• Meta Platforms — only if you tick the ad-measurement box: measures our app ads on Facebook and Instagram (Meta Platforms Ireland Limited in the EEA, the UK and Switzerland; Meta Platforms, Inc. elsewhere). See the Meta Privacy Policy.
• Google AdMob (Google Mobile Ads SDK) — rewarded video advertising.

Advertising choices

• In the EEA, the UK and Switzerland we ask for your consent before any ad is requested, and you can change your choice at any time in Settings → Privacy → Ad preferences.
• On Android you can reset or delete your advertising identifier in Settings → Google → Ads. On iOS, turn tracking off in Settings → Privacy & Security → Tracking.
• Turning personalised ads off never takes a reward away; the ads simply stop being tailored to you.

Children

Our games are intended for a general audience aged 13 and older and are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Data retention

We keep data only as long as we need it:

• Your save, progress, purchase records, gameplay events and leaderboard entry: while your account exists. They are erased when you delete your account.
• Crash reports (Firebase Crashlytics): 90 days.
• Google Analytics events: at most 14 months.
• Data received by Meta or our advertising partners: under their own retention rules, described in their privacy policies.
• Server and hosting logs: kept by Google for a limited period for security and troubleshooting.

Deleting your data

In the game, open Settings → Delete Account: it erases your save and your anonymous account at once. Without the game, see Delete your data or write to support@fourboundgames.com. Deleting your data does not refund purchases; refunds are handled by Google or Apple.

Your rights

Depending on where you live, you have the right to:

• know whether we process your data, and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• receive your data in a machine-readable format, or have it sent to someone else;
• restrict our use of your data, or object to it where we rely on legitimate interests;
• withdraw your consent at any time;
• not be treated differently for using any of these rights.

Most of these work inside the game. Settings → Share Play Stats stops gameplay events, Google Analytics and ad measurement, and Settings → Delete Account erases your data. For anything else, email support@fourboundgames.com with your player name and tag (for example NAME#1234) so we can find your account. We answer within 30 days, and we may ask a question only the account holder can answer before acting on a request.

If you are not satisfied with our answer, you can complain to a data protection authority: in the EEA, the authority where you live (list of authorities); in the UK, the Information Commissioner’s Office; in Switzerland, the FDPIC; in Türkiye, the Personal Data Protection Board.

Players in Türkiye (KVKK)

This section is our notice under Article 10 of the Personal Data Protection Law No. 6698 (KVKK).

• Data controller: Fourbound Games, an individual developer based in Türkiye. Contact: support@fourboundgames.com.
• Data and purposes: the data and purposes described in this policy.
• How and on what basis: collected electronically through the game and its services, on the bases in KVKK Article 5(2)(c), 5(2)(ç) and 5(2)(f), and with your explicit consent under Article 5(1) for Google Analytics and ad measurement.
• Recipients: our service providers Google (Firebase, Google Play, AdMob), Unity and, with your consent, Meta, including recipients abroad under KVKK Article 9.
• Your rights under Article 11: to learn whether your data is processed and request information about it; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Türkiye or abroad it is transferred to; to have incomplete or inaccurate data corrected; to have it deleted or destroyed under Article 7; to have those corrections and deletions notified to the third parties; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
• How to apply: email support@fourboundgames.com with your player name and tag. We answer free of charge within 30 days at the latest. If your application is rejected, our answer is insufficient or we do not answer in time, you can complain to the Personal Data Protection Board within the time limits in Article 14.

Players in the United States

Some U.S. states, including California, Colorado, Connecticut, Virginia and Texas, give their residents additional privacy rights.

• In the last 12 months we have collected these categories: identifiers (an anonymous account ID, a Firebase installation ID and, with consent, the advertising ID), commercial information (purchases), internet activity (gameplay events and app interactions), approximate location derived from the IP address, and device information.
• We do not sell personal information for money. Letting Meta and Google measure our ads, and AdMob serving ads, may count as “sharing” or “targeted advertising” under these laws. Ad measurement only happens if you agree on the game’s first screen; you can opt out at any time with Settings → Share Play Stats, through Settings → Privacy → Ad preferences where it is offered, or by resetting or deleting your advertising ID in your device settings.
• You can ask to know, correct or delete your personal information as described under Your rights, yourself or through an authorised agent. If we refuse a request, you can appeal by replying to our answer.
• We do not knowingly sell or share the personal information of players under 16, and we do not use sensitive personal information.

Data security

Everything travels over encrypted connections, and we rely on Google Firebase’s security features, server-side purchase verification and App Check to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International data transfer

Your data is processed on Google’s infrastructure. Saves are stored in Frankfurt, Germany. Some services, such as Firebase Authentication and, if you agree to ad measurement, Meta, process data in the United States, so your data may be stored outside your country.

When data leaves the European Economic Area, the UK or Switzerland, Google and Meta rely on the European Commission’s Standard Contractual Clauses and on their certification under the EU-U.S. Data Privacy Framework. For players in Türkiye, data is transferred abroad under Article 9 of the KVKK.

This website

This site sets no cookies and runs no analytics. Firebase Hosting keeps standard request logs, including IP addresses, for security and troubleshooting.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page, and significant changes may also be announced in the game.

Contact

Questions or requests about this policy or your data: support@fourboundgames.com.