Privacy Policy

1. Scope

This Privacy Policy explains how Space Tower Defense ("the game", "we", or "us") accesses, collects, uses, protects, retains, deletes, and shares information when you use the Android app, iOS app, or web version.

You may play as a guest without creating an account. Account, cloud-save, feedback, and purchase-related features are optional.

2. Information we process

• Account information: a player ID/name and a salted one-way password hash for password accounts, or a Google account identifier and display name for Google sign-in. We never receive or store your Google password.
• Game and app activity: cloud-saved progress, upgrades, achievements, task progress, unlocked tiers, virtual currency balances, and related timestamps.
• Feedback and support: messages you choose to send, language, player name or guest label, page, browser/device user-agent, approximate country derived from the request, and any optional reply email you include in a privacy inquiry.
• Purchase and order information: product, amount, currency, order status, payment-provider transaction references, and virtual-item fulfillment. Full payment-card details are handled by the payment provider and are not received or stored by us.
• Rewarded advertising: when you voluntarily request a rewarded ad, Google Mobile Ads may process device or advertising identifiers, IP address, approximate location, app interactions, ad performance, consent choices, and diagnostic information to select, deliver, measure, secure, and limit advertising. The exact information depends on your device, region, settings, and consent choices.
• Technical and security information: network request information such as IP address may be processed transiently by our hosting provider for delivery, abuse prevention, and security.
• On-device information: language, audio and display settings, local progress, and session data may be stored locally on your device. Information that remains only on your device is not collected by us.

The game only offers opt-in rewarded ads at clearly labeled reward or revive controls. We do not display banner ads, launch ads, exit ads, or unsolicited interstitial ads.

3. Why we use information

We use information to authenticate optional accounts, provide cloud saves, operate and improve the game, restore purchases, deliver rewards you request, measure and secure rewarded advertising, respond to feedback and privacy requests, prevent fraud or abuse, secure the service, and comply with legal obligations. We do not sell personal information.

4. Service providers and disclosure

Information may be processed by service providers acting for us:

• Cloudflare: website/app API hosting, storage, database, content delivery, and security.
• Google: optional Google sign-in authentication and Google Mobile Ads for voluntary rewarded ads on supported platforms. Google provides account information needed to sign you in and may process advertising information as described above. Where required, Google's User Messaging Platform presents consent choices before ads are requested. See Google's Privacy Policy and My Ad Center.
• ECPay: payment processing for authorized payment flows. ECPay receives payment information directly under its own terms and privacy practices.

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

5. Security

Data is transmitted using HTTPS. Passwords are salted and hashed before storage, session tokens expire, and administrative access is restricted. No security method is perfect, but we use reasonable technical and organizational safeguards appropriate to the information processed.

6. Retention and deletion

Account and cloud-save data is retained while the account remains active. Remembered sign-in session records expire after approximately 30 days of inactivity. Feedback is retained only as long as reasonably needed to respond, improve the game, prevent abuse, and meet legal obligations. Transaction records may be retained where required for legal, accounting, fraud-prevention, or dispute purposes.

You can permanently delete an account and its associated cloud-save data using the form below or the in-game account deletion control. Deletion does not remove information stored only on your device; you can remove that information by clearing the app's storage or uninstalling the app. Limited records may remain temporarily in backups or when retention is legally required.

7. Delete your account

Deletion is permanent and cannot be undone. Enter the player ID and password used for the account.

8. Children and younger users

The game is not designed for children under 13. Younger users should use the game only with permission and supervision from a parent or legal guardian where required by local law. If you believe a child provided personal information without appropriate permission, submit a privacy inquiry below so we can review and delete it.

9. Privacy inquiries

Use this form to ask a privacy question or request access, correction, or deletion help. A reply email is optional but is needed if you want a direct response.

You may also open Space Tower Defense and use its feedback feature. Begin the message with “Privacy request”.

10. Changes

We may update this policy when the game or legal requirements change. The updated date above will show the latest revision.

Return to Space Tower Defense