Vyrtaspire — Privacy Policy

Last updated: [DATE]

1. Introduction

Welcome to Vyrtaspire ("the Game"), a mobile tower defense game available on Android and iOS. This Privacy Policy explains how Vyrtaspire ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Game.

By downloading, installing, or using Vyrtaspire, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use the Game.

This policy applies to all users worldwide. Additional rights may apply to you depending on your jurisdiction (see Sections 7 and 8 for GDPR and CCPA rights).

2. Data We Collect

We collect the following categories of information:

2.1 Account Data

Anonymous identifier — A unique Firebase anonymous user ID is automatically created when you first launch the Game. No personal information is required.
Linked account data — If you choose to link a social account (Google, Facebook, or Apple), we receive your display name, email address, and profile photo URL as provided by the authentication provider.

2.2 Gameplay Data

Game progression (wave reached, prestige count, currencies earned)
Weapon inventory, upgrades, and skill tree state
Cloud save snapshots synced to our servers
Leaderboard scores and weekly league participation
In-app purchase history (items purchased, timestamps)

2.3 Device & Technical Data

Device type, model, and operating system version
Advertising identifiers (IDFA on iOS, Google Advertising ID on Android)
IP address (used for approximate geolocation at country level)
App version and Unity engine version
Language and locale settings
Crash logs and performance diagnostics

2.4 Analytics Data

Session duration and frequency
In-game events (wave starts, prestige resets, ad views, purchases)
Feature usage patterns

3. Third-Party Services & SDKs

Vyrtaspire integrates third-party services that may independently collect data. Each service operates under its own privacy policy:

Service	Purpose	Data Collected	Privacy Policy
Firebase Authentication	User identity & account linking	Anonymous ID, linked account credentials (email, display name)	Firebase Privacy
Cloud Firestore	Cloud save & leaderboards	Game progression, scores, user preferences	Firebase Privacy
Firebase Analytics	Usage analytics & diagnostics	Device info, session data, in-game events, crash reports	Firebase Privacy
Unity Ads	Rewarded video advertisements	Device identifiers, ad interaction data, IP address	Unity Privacy
Google Play / Apple App Store	In-app purchases	Transaction records, payment information (handled by the platform)	Google / Apple

Note on ads: Vyrtaspire only displays voluntary rewarded ads. No interstitial or banner ads are shown. You always choose whether to watch an ad in exchange for an in-game reward.

4. How We Use Your Data

We use the collected data for the following purposes:

Provide and operate the Game — authenticate users, save and restore progress, display leaderboards, and process in-app purchases.
Improve the Game — analyze gameplay patterns, identify bugs, optimize performance, and balance game difficulty.
Serve rewarded advertisements — Unity Ads may use device identifiers and usage data to deliver relevant ads. You may opt out of personalized advertising (see Section 6).
Analytics and diagnostics — understand how players interact with the Game, track crash reports, and monitor stability.
Fraud prevention and security — detect cheating, unauthorized access, or abuse of leaderboard and purchase systems.
Legal compliance — fulfill legal obligations, respond to lawful requests, and enforce our terms of service.

5. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your data based on the following legal grounds:

Contract performance — Processing necessary to provide the Game and its features (account creation, cloud save, leaderboards, purchases).
Legitimate interests — Analytics, security, fraud prevention, and Game improvement, where these interests are not overridden by your rights.
Consent — Personalized advertising and optional social account linking. You may withdraw consent at any time.
Legal obligation — Processing required to comply with applicable laws.

6. Your Choices & Opt-Out

Personalized ads — You can opt out of personalized advertising by adjusting your device settings:
- Android: Settings > Google > Ads > Opt out of Ads Personalization
- iOS: Settings > Privacy & Security > Tracking > disable tracking for Vyrtaspire
Analytics — Firebase Analytics can be limited by disabling diagnostic data sharing in your device settings.
Account linking — Social account linking is entirely optional. You can play the Game using only an anonymous account.
Push notifications — Vyrtaspire does not send push notifications.

7. Your Rights Under GDPR (EEA/UK Residents)

If you are a resident of the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation:

Right of access — Request a copy of the personal data we hold about you.
Right to rectification — Request correction of inaccurate or incomplete personal data.
Right to erasure ("right to be forgotten") — Request deletion of your personal data, subject to legal retention requirements.
Right to data portability — Receive your data in a structured, commonly used, machine-readable format.
Right to restrict processing — Request that we limit processing of your data under certain circumstances.
Right to object — Object to data processing based on legitimate interests, including profiling.
Right to withdraw consent — Withdraw consent at any time for processing based on consent (e.g., personalized ads). Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact us at the email address in Section 12. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to know — Request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
Right to delete — Request deletion of your personal information, subject to certain exceptions.
Right to opt-out of sale — We do not sell your personal information. However, certain data sharing with advertising partners (Unity Ads) may be considered a "sale" under the CCPA. You can opt out of personalized ads using the device-level controls described in Section 6.
Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights.

To exercise your rights, contact us at the email address in Section 12. We will verify your identity and respond within 45 days.

9. Data Retention

We retain your data for the following periods:

Account and gameplay data — Retained for as long as your account exists. If you request account deletion, your data will be permanently removed within 30 days, except where retention is required by law.
Analytics data — Aggregated analytics data is retained for up to 14 months. Individual-level analytics events are retained for up to 2 months in Firebase Analytics.
Crash and diagnostic logs — Retained for up to 90 days.
Purchase records — Retained for the duration required by applicable tax and commercial laws (typically 5-10 years).

Inactive anonymous accounts with no linked social identity and no purchase history may be automatically deleted after 12 months of inactivity.

10. Data Security

We take reasonable measures to protect your data, including:

All data transmitted between the Game and our servers is encrypted using TLS/SSL.
Cloud Firestore data is protected by Firebase Security Rules restricting access to authorized users only.
Authentication tokens are securely managed by Firebase Authentication.
We do not store payment information; all purchases are processed by Google Play or Apple App Store.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Vyrtaspire is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete that information as promptly as possible. If you believe a child under 13 has provided us with personal data, please contact us at the email address in Section 12.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have any privacy-related concerns, please contact us:

Email: privacy@vyrtaspire.com
Developer: Vyrtaspire

We aim to respond to all inquiries within 30 days.

13. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where Firebase and Unity servers are located. These countries may have data protection laws that differ from those in your jurisdiction.

Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection for international transfers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last updated" date at the top of this page.
Provide notice within the Game (e.g., a prompt on launch) for significant changes.

We encourage you to review this Privacy Policy periodically. Your continued use of the Game after changes are posted constitutes acceptance of the revised policy.

This Privacy Policy is effective as of the "Last updated" date shown above.