Games privacy policy

"Vulcan Tech", "we", "us" and "our" refer to Vulcan Tech, with registered offices at 124 City Road, London, EC1V 2NX, United Kingdom, and operational offices in Dubai (UAE), Pensacola (Florida, USA), and Lahore (Pakistan). Vulcan Tech is the data controller for the information described in this policy unless a specific game expressly names a different controller.

Depending on the title and the platform, our games may collect the following categories of information:

• Device and technical data — device model, operating system version, screen resolution, language, time zone, country (derived from IP at the country level only), mobile carrier, and an advertising identifier (IDFA on iOS or Advertising ID on Android, only when you have allowed personalised advertising in your device settings).
• Gameplay data — in-game progress, level achievements, session length, in-app purchases, settings and preferences. We use this data to save your progress between sessions and to balance game difficulty.
• Diagnostic data — crash logs, performance metrics, and error reports. Crash logs may contain a device identifier and a stack trace; they do not contain message content or personal contact details.
• Purchase data — when you make an in-app purchase, the store (Google Play or Apple) processes the payment. We receive a transaction confirmation that includes the SKU purchased, time, and currency, but never your card number or full billing address.
• Optional account data — if a game offers an optional account (e.g. for cloud saves, leaderboards, or social features), we additionally collect the identifier you sign in with (e.g. a Sign in with Apple email relay, a Google Play Games player ID, or an email you supply).

Our games do not collect precise geolocation, contacts, calendar, photos, microphone audio, or camera input unless a specific game feature requires it. In that case we ask for the relevant operating system permission at the point of use, and you can deny or revoke that permission at any time from your device settings.

• To operate the game, save your progress, and provide leaderboards or multiplayer features.
• To diagnose crashes, fix bugs, and measure performance.
• To understand which features players use and improve the game accordingly.
• To deliver advertising. If you have allowed personalised advertising at the OS level, ads may be tailored to your interests; otherwise they will be contextual only.
• To process in-app purchases through the platform store.
• To comply with legal obligations and enforce our terms of service.

Where the EU or UK GDPR applies, our legal bases for processing are:

• Contract — to deliver the game you have installed and any optional features you use.
• Legitimate interest — to keep our games working (crash reporting, anti-cheat, basic analytics).
• Consent — for personalised advertising and any non-essential analytics. You can withdraw consent at any time from the in-game privacy menu or your device settings.
• Legal obligation — to comply with tax, accounting, and consumer-protection law.

We integrate third-party software development kits (SDKs) to provide specific functionality. Each is independently responsible for the data it processes. We list the major ones below and link to their policies so you can read them in full:

Provider	Purpose	Policy
Google Play Services / Apple App Store	App distribution, payments, in-app purchases	Google · Apple
Google AdMob / Unity Ads	In-game advertising	AdMob · Unity
Google Firebase / Crashlytics	Crash reporting, analytics, cloud messaging	Firebase
Google Play Games / Apple Game Center	Leaderboards, achievements, cloud save	Google · Apple
GameAnalytics	Gameplay metrics	GameAnalytics

Individual games may use only a subset of the above. Each game's store listing under "Data safety" (Google Play) and "App Privacy" (App Store) shows the exact set used by that title.

Some of our games are designed for general audiences and may be available to players under 13 (under 16 in parts of the EU). For these titles we follow the Google Play Families Policy, Apple's Kids Category requirements, the US Children's Online Privacy Protection Act (COPPA) and, where applicable, the UK Age-Appropriate Design Code.

In games directed to children we do not:

• Collect personally identifying information.
• Show personalised advertising; only contextual ads are displayed.
• Use third-party analytics that profile individual users.
• Enable social or chat features without verified parental consent.

If you believe a child has provided us with personal information without appropriate consent, please contact us at the address in Section 12 and we will delete it promptly.

Free-to-play titles may show advertising. You can control whether ads are personalised:

• On iOS, in Settings → Privacy & Security → Tracking, you can decline App Tracking Transparency prompts.
• On Android, in Settings → Google → Ads, you can opt out of Ads Personalisation or reset your Advertising ID.
• In-game, where offered, the Settings menu contains a "Privacy choices" item that toggles personalised advertising on or off.

When personalised advertising is off, you will still see ads, but they will be contextual (based on the game you are playing) rather than tailored to you.

We share information only as described below:

• Service providers — the SDK partners listed in Section 5 receive the minimum data needed to operate the service they provide. They are bound by contract to use it only for that purpose.
• Platform stores — Apple and Google handle purchase processing, refunds, and family-sharing entitlements for the titles they distribute.
• Legal compliance — we may disclose information if required by law, court order, or to defend our legal rights.
• Business transfers — if Vulcan Tech is involved in a merger, acquisition, or asset sale, your information may transfer to the successor entity; we will notify you and you will retain the same rights under any successor policy.

We do not sell personal information.

We operate in the United Kingdom, the European Economic Area, the United Arab Emirates, the United States, and Pakistan. When we move personal data between these regions we rely on adequacy decisions where they exist, Standard Contractual Clauses where required, and equivalent safeguards otherwise.

Crash logs and aggregate analytics are retained for 90 days, then deleted or fully de-identified. Account data (if any) is retained for as long as the account is active and for up to 24 months after the last sign-in, after which it is deleted unless a longer period is required by law (for example, tax records linked to purchases are kept for 7 years).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Receive a portable copy of your data.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with a supervisory authority — in the UK that's the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email [email protected] from the email address tied to your account, or contact us through the form on vulcantech.co/contact. We respond within 30 days; if your request is complex we may extend the period by two further months and we will let you know.

We protect your data with industry-standard measures including encryption in transit (TLS 1.2+), encryption at rest for cloud services that support it, access controls limited to staff who need it for their role, and routine third-party security reviews of our backend infrastructure. No system is perfectly secure, but we work continuously to keep our defences current.

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. If a change is material we will notify you in-game and through your platform store listing's update notes. Continued use of the game after the effective date of an update means you accept the revised policy.

For any privacy question, request, or concern, you can reach us at:

Vulcan Tech — Privacy Office
124 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected]
Web: vulcantech.co/contact