Privacy policy
Last updated 2026-11-03
This policy explains what personal data the Mobile Defense game (Android and iOS) and this website collect, why, who we share it with, how long we keep it, and the choices and rights you have.
- You play with a nickname and a password. We do not ask for your name, email or phone number.
- We keep your game progress, match results and the technical details we need to run the game.
- Ads are provided by Unity LevelPlay. They are only personalised if you say yes, and you can change that in Settings at any time.
- Location (approximate, only if you allow it) is used once to show your country. We keep only the country.
- When the game crashes or hits an error, a technical report goes to Firebase Crashlytics so we can fix it.
- We do not sell your data. There is nothing to buy in the game.
- You can delete your account and its data at any time, in the game or on this website.
- Who we are
- What we collect and why
- Ads
- Who we share data with
- Transfers outside the EEA
- How long we keep data
- Your rights and choices
- Deleting your account
- Children
- Security
- This website
- Changes and contact
1. Who we are
The data controller for the game and this website is [COMPANY NAME AND LEGAL FORM], [REGISTERED ADDRESS, COUNTRY], company number [COMPANY REGISTRATION NUMBER] ("we", "us"). You can reach us about anything in this policy at md.game@ace-web.biz.
2. What we collect and why
| Data | What for | Legal basis (GDPR) |
|---|---|---|
| Account: your nickname and password. The password is stored only as a secure (bcrypt) hash, never in readable form. | Creating your account and signing you in. | Performing our agreement with you (Art. 6(1)(b)). |
| Game data: your commander classes, ranks and experience, armies and their levels, perks and upgrades, rewards, missions, login streak, chests, achievements, tutorials seen, Skip Ad tokens, matches (opponent, result, lives, kills, units sent), and your ranked ladder rating. | Running the game, saving your progress, matchmaking, the ladder and leaderboards. | Performing our agreement with you (Art. 6(1)(b)). |
| Device data: a device identifier the operating system gives the game (not your advertising ID), the device manufacturer and model, operating system version, graphics chip and memory size, and on iPhone and iPad the device name. A random sign-in key per device, of which we keep only a hash. | Keeping you signed in on each device, choosing the right graphics quality for your device, and preventing abuse. | Performing our agreement (Art. 6(1)(b)); our legitimate interest in a game that runs well and safely (Art. 6(1)(f)). |
| Approximate location, only if you allow it: one coarse position, rounded on your device to about 10 km before it is sent. We work out your country from it and keep only the country, never the position. | Showing your country next to your nickname and on the ladder. | Your consent, given through your phone's location permission (Art. 6(1)(a)). You can say no; the game works the same without it. |
| Push token (Firebase Cloud Messaging), only if you allow notifications, and a record of which notifications we sent. | Telling you when your supply chest is ready, when your login streak is about to break, and about ladder seasons; not sending the same notification twice. | Your consent, given through your phone's notification permission (Art. 6(1)(a)). |
| Settings: your ads choice, graphics level, sound and tutorial settings. Kept on your device; the language setting is also kept with your account. | Remembering your choices. | Performing our agreement (Art. 6(1)(b)). |
| Crash and error reports (Firebase Crashlytics): when the game crashes or hits an error, the technical details of what went wrong (stack trace, a short log of the moments before it, the screen you were on), the device model, operating system and app version, a random Crashlytics installation identifier, and your player number. | Finding and fixing crashes and bugs. | Our legitimate interest in a game that works (Art. 6(1)(f)). |
| Server logs: IP address, time and the request made, and match server logs (nicknames and game events of a match). | Keeping the service secure and working, and investigating faults and cheating. | Our legitimate interest in a secure, fair game (Art. 6(1)(f)). |
| Messages you send us by email. | Answering you. | Our legitimate interest in helping players (Art. 6(1)(f)). |
What other players see: your nickname, country (if known), commander class and rank, army, ladder rating, and what happens in matches you play with them.
What we do not collect: your real name, email address, phone number, contacts, photos, precise location or payment details. The game has no purchases.
3. Ads
The game is free and paid for by rewarded ads, which you choose to watch in exchange for in-game rewards. Ads are delivered by Unity LevelPlay (Unity Technologies) and the ad networks it works with, such as Unity Ads.
- To show and measure ads, the ad SDK in the game collects data from your device, such as your advertising ID, IP address, device and app information and how you interact with the ads.
- The first time you start the game we ask whether ads may be personalised (based on your interests). If you say no, you still see ads, but they are not based on your data. You can change this at any time in Settings > PERSONAL ADS. A "no" is also passed to the ad networks as a "do not sell or share" signal.
- To confirm that you finished an ad and should get its reward, we give LevelPlay your player number and a one-time code for that ad, and LevelPlay tells our server when the ad was watched.
- You can also reset or delete your advertising ID, or opt out of interest-based ads, in your phone's settings (Android: Settings > Privacy > Ads; iPhone: Settings > Privacy & Security > Tracking).
Personalised ads are based on your consent (Art. 6(1)(a)); non-personalised ads and reward checks on our legitimate interest in funding a free game (Art. 6(1)(f)). Unity's handling of this data is described in the Unity Game Player and App User Privacy Policy.
4. Who we share data with
We do not sell your personal data. We share it only with:
- Our hosting provider, which runs our servers and database in the European Union on our behalf (a processor under a data processing agreement).
- Unity Technologies (LevelPlay, Unity Ads) for ads, as described above.
- Google (Firebase Cloud Messaging and Firebase Crashlytics) to deliver push notifications and to collect crash reports. See Privacy and Security in Firebase.
- Apple and Google as the app stores, which handle downloads under their own policies.
- Other players, who see the profile details listed above.
- Authorities, when the law requires it.
5. Transfers outside the EEA
Unity and Google may process data in the United States and other countries outside the European Economic Area. They do so under the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, which require them to protect it to EU standards.
6. How long we keep data
- Your account and game data: until you delete your account. Records of matches you played stay in your opponents' history, with your account removed from them.
- Push tokens: until they stop working, you turn off notifications, or you delete your account.
- Server logs: up to 14 days; match server logs up to 7 days.
- Crash reports: 90 days in Firebase Crashlytics.
- Backups: our database backups are kept for up to 12 months, then deleted. A deleted account disappears from them as they expire, and is not restored from them.
- Emails: as long as needed to help you, and at most 2 years.
7. Your rights and choices
Under the GDPR and similar laws you have the right to:
- access the data we hold about you, and get a copy of it in a portable format;
- correct it if it is wrong;
- delete it (see section 8);
- restrict or object to how we use it, including where we rely on legitimate interests;
- withdraw consent at any time: personalised ads in Settings > PERSONAL ADS, location and notifications in your phone's settings for the app. Withdrawing does not affect what was done before;
- complain to a data protection authority, in the country where you live or ours: [DATA PROTECTION AUTHORITY OF THE COMPANY'S COUNTRY, e.g. the Commission for Personal Data Protection, Bulgaria].
To use these rights, email md.game@ace-web.biz with your nickname. To make sure a request comes from the account owner, we may ask you to confirm it from inside the game. We answer within one month.
California and other US states: we do not sell personal data for money. Personalised ads may count as "sharing" for cross-context behavioural advertising under some US laws; turning off PERSONAL ADS opts you out. We do not use sensitive personal information.
8. Deleting your account
You can delete your account and all the data linked to it at any time:
- In the game: Settings > DELETE ACCOUNT, then confirm with your password.
- Without the game: on our account deletion page, with your nickname and password.
- If you no longer know your password: email md.game@ace-web.biz.
Deletion is immediate and permanent: your account, progress, rewards, ratings, devices and push tokens are deleted. It cannot be undone. Only backups keep a copy until they expire (section 6).
9. Children
Mobile Defense is not meant for children. You must be at least 16 years old to play. We do not knowingly collect data from anyone younger; if we learn that we have, we delete the account. If you think a child is using the game, contact us.
10. Security
Passwords and sign-in keys are stored only as secure hashes, connections to our servers are encrypted, and access to the servers and to player data is limited to the people who run the game. No system is perfectly secure: use a password you do not use anywhere else.
11. This website
This website does not use analytics, advertising or tracking cookies. It sets two strictly necessary cookies, a session cookie and a security token, which let forms such as the account deletion page work securely; they expire after two hours. Web fonts are loaded from Google Fonts, which receives your IP address when you visit. Our web server logs requests as described above.
12. Changes and contact
We will update this policy when the game or the law changes, and change the date at the top. If a change matters for how we use your data, we will also tell you in the game.
Questions or requests: md.game@ace-web.biz, [COMPANY NAME AND LEGAL FORM], [REGISTERED ADDRESS, COUNTRY].