Internal documentation for the privacy policy of the mobile game.
Purpose: This document lists all systems that process user
data.
It serves as the source for:
Last updated: YYYY-MM-DD Responsible: Kilde Studio UG
Company name: Kilde Studio UG (haftungsbeschränkt)
Address: Kaiserswerther Straße 115 3rd floor 40880 Ratingen Germany
Contact email: privacy@kildestudio.games
Register court: Amtsgericht Düsseldorf
HRB number: TBD
VAT ID: TBD
App name: TBD
Platform: - iOS - Android
Game engine: Unity
App functionality summary: - word puzzle gameplay - optional ads - optional in-app purchases - analytics for gameplay balancing - optional cloud save / login
The application may process the following categories of personal data:
Device information - device model - OS version - language - screen resolution
Identifiers - advertising ID - device identifier - Unity player identifier
Usage data - gameplay progress - level completion - session duration - help usage statistics
Purchase data - purchase status - transaction identifiers - receipt verification
Network data - IP address - approximate region
Diagnostics - crash logs - performance metrics
Service name: Unity Engine
Provider: Unity Technologies
Purpose: Game runtime and technical infrastructure
Data processed: - device information - crash diagnostics - performance metrics
Legal basis: Legitimate interest (service operation)
Data transfer outside EU: Possible
Retention: Defined by provider
Service name: Unity Analytics
Provider: Unity Technologies
Purpose: Understanding gameplay behavior and improving game balance
Data processed: - Unity Analytics player identifier (e.g., unityPlayerID) - app-generated session identifier - gameplay events - session duration - device information
Example events collected:
Example event parameters:
Legal basis: User consent
Retention: Unity Analytics retention varies by data type - raw event data: approximately 13 months - aggregated / dashboard metrics: retained according to provider policy until deletion or account termination
Ad mediation platform: Unity LevelPlay
Provider: Unity Technologies
Purpose: Ad mediation and delivery of advertisements from multiple advertising networks.
Data processed: - advertising identifier (Android GAID / iOS IDFA) - device information - IP address - approximate geographic region - ad engagement data (impressions, clicks, rewarded completions)
Legal basis: User consent
Retention: Defined by the respective providers
Provider: Unity Technologies
Purpose: Serving rewarded, interstitial, and banner advertisements.
Data processed: - advertising identifier - device information - ad interaction events
Provider: ironSource Ltd.
Purpose: Ad delivery and ad mediation through LevelPlay.
Data processed: - advertising identifier - device information - IP address - ad interaction data
Provider: Google LLC
Purpose: Mobile advertising and ad performance measurement.
Data processed: - advertising identifier - device information - IP address - ad engagement metrics
Notes: These advertising partners are loaded through the Unity LevelPlay mediation platform. They may process personal data required for ad delivery, frequency capping, fraud prevention, and measurement of advertising performance.
Provider: Google LLC
Purpose: App distribution, in-app purchases, authentication
Data processed: - purchase receipts - Google account identifiers - device integrity checks
Provider: Apple Inc.
Purpose: App distribution and in-app purchase processing
Data processed: - purchase transactions - transaction identifiers
Provider: Apple Inc.
Purpose: Authentication, achievements, and optional cloud-related identity
Data processed: - Game Center player identifier - achievement and leaderboard identifiers
Service name: Google Play Games
Provider: Google LLC
Purpose: Cloud save and achievements
Data processed: - player ID - save data - leaderboard data
Service name: Apple Game Center
Provider: Apple Inc.
Purpose: Cloud save and achievements
Data processed: - player identifier - save data
Service name: Unity Cloud Diagnostics
Provider: Unity Technologies
Purpose: Crash reporting and performance diagnostics
Data processed: - crash stack traces - device type - OS version
Legal basis: Legitimate interest
Example analytics events logged by the game:
level_completed session_end session_crash level_abandoned ad_event gift_event economy_event daily_diamonds_collected iap_purchase
Purpose: - game balancing - feature improvement - bug detection
Identifiers used: - session_id generated by the app for each analytics session - anonymous Unity service-side player identifier may exist at provider level
Ad formats used:
Ad triggers:
Ads are disabled if the player purchases “No Ads”.
Types of purchases:
Payments are processed by the platform provider:
The developer does not process payment card data.
Typical retention periods:
Analytics data: - raw event data retained approximately 13 months by the analytics provider - aggregated analytics metrics retained according to provider policy
Crash reports: until resolved
Account data: until user deletes the app or account
Some services may process data outside the European Union.
Safeguards used: Standard Contractual Clauses (SCC)
Users may request:
Requests can be sent to: privacy@kildestudio.games
The application is not specifically directed at children under 13.
If such data is identified, it will be deleted.
Custom gameplay analytics events are sent only after user consent. Advertising personalization is also controlled by user consent.
Consent can be withdrawn through the in-game settings.
The privacy policy may be updated periodically.
The latest version will always be available at:
https://kildestudio.games/privacy
This section is internal and used to ensure consistency between documentation and store submission forms.
Google Play requirements: - Google Play Data Safety declarations must match the data categories listed in this inventory. - Advertising ID usage must be declared where applicable. - Third-party SDK data practices must be reflected in disclosures.
Apple requirements: - App Privacy answers in App Store Connect must include data collected by third-party SDKs. - SDK privacy manifests may be required for certain commonly used SDKs.
Maintenance rule: This inventory must be updated whenever: - a new SDK is added - an SDK is removed - analytics events change materially - login, cloud save, or advertising partners are added