Privacy Policy for our Games

This policy applies to all games by Vitalosaurus, currently Idle Bee: Honey Empire Tycoon and Stickman Base Defense. Deutsche Fassung

The key points:

• You don't need a name or an email address. The game uses an anonymous player ID.
• Ads are only personalized with your consent.
• Payments are handled by Apple or Google, not by us.
• You can have your data deleted at any time (here is how).

A separate privacy policy (in German) applies to this website.

Controller

[Vorname Nachname]
Vitalosaurus
[Straße Hausnummer]
[PLZ] [Ort]
Deutschland

Phone: [+49 …]
Email: [E-Mail-Adresse]

No data protection officer has been appointed because none is required.

Player ID and saved progress

When you first start a game, it creates an anonymous player ID (Unity Authentication). We use it to store your progress in the cloud (Unity Cloud Save) so you don't lose it. No name, email address or login with Apple or Google is needed. The service provider is Unity Technologies.

The legal basis is Art. 6(1)(b) GDPR (providing the game). We keep the data until you ask us to delete it or we discontinue the game.

Consent

When you first start a game, it asks whether you agree to personalized ads and game analytics. In the European Economic Area, the United Kingdom and Switzerland this is handled by Google UMP (IAB TCF standard). On iOS, the system also asks whether the app may track you across apps and websites (App Tracking Transparency).

Without your consent there is no personalization and no tracking. The game remains fully playable.

You can withdraw your consent at any time with effect for the future: in the game under Settings → “Privacy”, and on iOS also in the system settings under “Privacy & Security → Tracking”. Withdrawal does not affect the lawfulness of processing before that point.

Game analytics

With your consent we use Unity Analytics to measure how the game is used: game events (e.g. levels reached, play time, in-game purchases), device type, operating system, country and language, and your anonymous player ID. This helps us improve game balance and content.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). The data is deleted after [Monate laut Unity-Dashboard, z. B. 12] months.

Crash reports

If a game crashes, it sends a report to Unity Cloud Diagnostics: error message, device type, operating system, app version and time. We use it to find and fix bugs.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working game).

Advertising

Our games show ads. They are mediated through Unity LevelPlay. These ad networks receive data from your device:

• ironSource Ads (Unity Technologies): Privacy policy
• Unity Ads (Unity Technologies): Privacy policy
• Google AdMob (Google): Privacy policy
• AppLovin (AppLovin): Privacy policy
• Meta Audience Network (Meta): Privacy policy

The networks receive your advertising ID (IDFA or GAID, only with consent or tracking permission), IP address, device type, operating system, language and information about how you interact with ads. Some networks decide on the purposes and means of their processing themselves; their own privacy policies apply to them (see links).

With your consent we show personalized ads (Art. 6(1)(a) GDPR). Without consent we show non-personalized or limited ads. This is based on our legitimate interest in funding the free game (Art. 6(1)(f) GDPR).

In-app purchases

You pay for purchases through the Apple App Store or Google Play. We do not receive your payment details. We only get a purchase confirmation (product, time, transaction ID) so the game can unlock your purchase. The privacy terms of Apple or Google apply to the payment itself.

The legal basis is Art. 6(1)(b) GDPR. We keep purchase records for as long as commercial and tax law require.

Transfers to third countries

Unity, Google, AppLovin and Meta also process data in the USA. The basis is the adequacy decision for the EU-US Data Privacy Framework or the EU Commission's standard contractual clauses.

Children

Our games are not directed at children under 16. We do not knowingly process data of children under 16. If you are a parent and believe your child has submitted data, contact us and we will delete it (see below).

Delete your data

You can have your data deleted in two ways:

• In the game: Settings → “Delete data”.
• By email: Write to [E-Mail-Adresse] and include your player ID. You can find it in the game under Settings. Without a player ID we cannot match the data to you.

We delete your progress, your player ID and the related analytics data. We must keep purchase records until legal retention periods expire. We process email requests within 30 days.

Uninstalling the app alone does not delete the data on our servers.

Contact

If you write to us, we process your details to reply. More on this is in the website privacy policy (in German).

Your rights

You have the following rights towards us:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)
• Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR)

Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to the processing of your data where it is based on legitimate interests (Art. 6(1)(f) GDPR). We will then stop processing your data unless we can demonstrate compelling legitimate grounds.

For all requests, write to us at [E-Mail-Adresse].

No automated decision-making

We make no decisions with legal effect that are based solely on automated processing. The ad networks only personalize ads with your consent.

Changes

We update this policy when a game starts using new services.

Last updated: October 2026