Responsible Person

Michael Burian
Tulpenring 21/2/6
3384 Großsierning | Austria
E-Mail: burian@mibu.games
Phone: +43 664 4340089

Privacy Policy for Mobile Apps

General information on data processing

We generally only collect and use our users' personal data to the extent necessary to provide a functional app and our content and services. Individual apps may use additional third-party services, but are not required to do so. Whether and which services are used depends on the respective app version.

Collection and Use of Information

To enhance your experience while using our Services, you may be required to provide us with certain personally identifiable information, including cookies. Please note that third-party services, such as Google AdMob, Unity Ads, or Firebase, may also collect information. The collection and use of data for personalized advertising only occurs with your active consent via the Consent Management System (UMP) integrated into our app.
Third-party providers that may be used – depending on the app:

• Google Play Services
• Google AdMob
• Unity Ads
• Firebase

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory. This Service does not use these “cookies” explicitly. However, the app may use third party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Data processing in the game

Our game automatically collects and stores certain information that your device provides, such as progress data, game statistics and other data related to your gameplay.

Use of Microsoft PlayFab for Multiplayer Games

For multiplayer features in our games, we use Microsoft PlayFab server services. Various data, such as user identifiers and connection data, are processed to provide and manage the multiplayer environment. For more details, please see the PlayFab Privacy & Terms and the general Microsoft Privacy Statement.

Data processing in the game - Online Multiplayer Features

When you use online multiplayer features, our server automatically collects certain information, including your IP address and user identifiers, to create a connection between players and optimize the gaming experience. Additionally, game statistics, communication content (such as in-game chat), and other game-related data and device information may be collected to ensure a safe and appropriate gaming environment and to personalize the gaming experience. This information is used solely for conducting online multiplayer sessions and is not permanently stored or used for other purposes unless a player uses the reporting function. In that case, the relevant data will be stored for a period of 7 days to review the report and take appropriate action if necessary.

Advertising Services

In order to offer our apps free of charge, we may display advertisements. To display ads, we use a mediation service that can deliver ads from providers such as Google AdMob and Unity Ads.

• Providers: Google Ireland Limited ("AdMob") and Unity Technologies, USA ("Unity Ads").
• Personalized Advertising: For this purpose, data (e.g., advertising ID, pseudonymized usage data) is processed in order to show you more relevant advertising.
• Legal Basis: Your express consent (Art. 6 (1) (a) GDPR).
• Non‑personalized ads (NPA): Contextual ads without profiling. If device identifiers or similar technologies are used (e.g., advertising ID), we also obtain your consent under ePrivacy/UMP. Purely contextual delivery without such technologies relies on legitimate interests (Art. 6(1)(f) GDPR).
• Legal Basis: Our legitimate interest in the Monetization of our app (Art. 6 (1) (f) GDPR).
• Platform (iOS ATT): Where required, the AppTrackingTransparency prompt is shown on iOS.
• Your control (consent management): Personalized advertising is displayed exclusively with your consent, which we obtain via a consent management platform (UMP). You can change this decision at any time in the app settings ("advertising settings" or similar) and revoke your consent.
• Privacy policies: Google, Unity

Services to ensure stability (legitimate interest)

• Firebase Crashlytics: To improve the technical stability of our app, we use Firebase Crashlytics (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the event of a crash, anonymized information (e.g., device type, operating system version) is transmitted to Google. These reports help us fix errors.
  • Legal basis: Our legitimate interest in a technically error-free and stable service (Art. 6 (1) (f) GDPR).
  • Your control (opt-out): You can opt out of Crashlytics' data collection in the app's settings.

Services for analysis and improvement (consent required)

• Google Analytics for Firebase: If you have given your consent, we use Google Analytics for Firebase (provider: Google Ireland Limited) to understand how users interact with our app. Pseudonymized data such as your advertising ID and usage events (e.g., levels reached) are collected. This analysis helps us improve the gaming experience. Firebase Analytics for Mobile Apps does not store IP addresses; Google may use IP addresses only transiently for transmission. Consent is collected via a separate analytics panel in the app (not via UMP).
  • Legal basis: Your express consent (Art. 6 (1) (a) GDPR).
  • Your control (revocation): Data is only collected with your consent. You can revoke your consent at any time in the app settings for the future.

Optional User Accounts and Cloud Storage

To provide you with extended, optional features such as cross-device game saves (Cloud Save), online rankings, or a persistent user profile, the respective app can use one of the following backend services:

• Microsoft PlayFab (Provider: Microsoft Corporation, USA)
• Firebase Authentication & Cloud Services (Provider: Google Ireland Limited)

If you actively decide to create an account or use these cloud features, we will process the necessary data. Depending on the provider and function, this may include your email address, a user name, a unique user ID, and your game saves.

• Legal basis: Processing is necessary to fulfill the contract for the provision of these optional functions (Art. 6 (1) (b) GDPR).
• Your control: The use of these functions is voluntary. You can usually manage your account and the associated data via the app settings or request its deletion from us.
• Provider privacy policies: Microsoft, Google

Hosting and processing

Our app backends and the website are hosted by professional infrastructure providers. We have data processing agreements in place with all processors (Art. 28 GDPR). Server locations are — depending on the service — within the EEA and/or in third countries with appropriate safeguards (see “International data transfers”).

International data transfers

Where data is transferred to providers outside the EEA (in particular the USA) — e.g., Google, Microsoft, Unity — we implement appropriate safeguards pursuant to Art. 46 GDPR (e.g., EU Standard Contractual Clauses). Where the provider participates in the EU‑US Data Privacy Framework, transfers may additionally rely on that framework. You can request a copy of the safeguards by contacting support@mibu.games.

Recipients and roles

• Independent or joint controllers: Ad networks and measurement partners (e.g., Google AdMob, Unity Ads) to the extent they process data for their own purposes.
• Processors: Infrastructure/back‑end providers (e.g., hosting/servers, Microsoft PlayFab for server features, Google Firebase Crashlytics/Analytics, FCM) acting on our behalf.
• Other recipients: Public authorities where legally required; legal counsel for the establishment, exercise or defense of legal claims.

Retention periods

We retain personal data only as long as necessary for each purpose:

• Multiplayer report data: 7 days (see above).
• Crashlytics crash reports: typically up to 90 days.
• Firebase Analytics events: typically 14 months (if enabled and consented).
• Ad IDs/consent strings: until you withdraw consent or per OS/partner policies; consent logs generally up to 24 months.
• Push tokens: until you unsubscribe/withdraw or at most 24 months of inactivity.
• Account/cloud data: until account deletion or upon your deletion request.
• Server log data (app/backend): usually 14–30 days unless longer is required for security.

Where statutory retention applies, we comply with those periods.

Profiling and automated decision‑making

Profiling occurs only for personalized advertising and only based on your consent. We do not carry out automated decision‑making that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

Consent Management (UMP - User Messaging Platform)

To manage your preferences regarding personalized advertising, we use Google's User Messaging Platform (UMP) consent management system. This system allows you to give or refuse your consent to the use of your data for personalized advertising. Your choices will be saved and honored. You can change your settings at any time within the app, as described in the "Use of Google AdMob" section.

Consent Management (UMP - User Messaging Platform)

We use UMP for advertising consents (e.g., Google AdMob, Unity Ads).
For Firebase Analytics, consent is collected via a separate in‑app consent panel ("Analytics settings").
You can change/revoke both decisions anytime in the app settings.

Consent management – details (UMP)

UMP (Ads): We log your advertising consent (timestamp, consent UI version, choice) and, where available, IAB TCF 2.2 signals.
Firebase Analytics: The separate analytics panel also logs your decision (timestamp, panel version, choice).
Retention: up to 24 months for documentation; changes apply prospectively.

Security

We take appropriate security measures to protect our users' personal information. However, no method of transmission over the Internet or method of electronic storage can be 100% secure.

Links to other websites

Our Services may contain links to other websites. Please note that these external sites are not operated by us. We have no control over, and assume no responsibility for, the content or privacy policies of these websites.

Children's privacy

These services are not directed to persons under 14 years of age. We do not knowingly collect personal information from children under 14. If we discover that a child under 14 has provided us with personal information, we will immediately delete it from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary action.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time. If there are any changes to the privacy policy, you will be informed within the app via a pop-up window.

Update Notifications for Privacy Policy

To inform you of changes to our privacy policy via a pop-up window, the app attempts to connect to our website each time it starts. There, it checks for the latest version.

Update Notifications for Legal Documents

To inform you of changes to our privacy policy or terms of use via a pop-up window, the app checks when starting – at least every 7 days – by connecting to our web server whether a new version of these documents is available.
We will inform you about significant changes within the app at least 14 days before they come into effect – provided the app is used during this period.

Update checks and server connection

When the app starts (at least every 7 days), it connects to our server to check versions of legal documents. The following data is processed for technical reasons: IP address, timestamp, app version, and request metadata.
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) to inform you about upcoming changes.
Log data is typically retained for 7–14 days.

Your rights

You have the rights of access, rectification, erasure, restriction, objection, data portability, and to withdraw consents at any time. To exercise your rights, contact us at support@mibu.games. To verify your identity, we only request the minimum necessary information and process it solely for this purpose.

Privacy Policy for this Website

General Information on Data Processing

We collect and use personal data only to the extent necessary to provide a functional website and our content and services. This may include technical third‑party services (e.g., hosting/CDN). We do not use personalized advertising or user‑based tracking on the website.

Provision of the website and creation of log files

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

1. Information about the browser type and version used
2. The user's operating system
3. The user's Internet service provider
4. The user's IP address
5. Date and time of access
6. Websites from which the user's system accesses our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The log files are stored for a limited period of time and then automatically deleted.

Use of Cookies

Our website uses functional cookies to ensure an optimal user experience (e.g., to store your language setting). Non‑essential cookies for advertising/tracking purposes are not used on the website.

Links to third-party websites

Our website contains links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly encourage you to review the privacy policy of every website you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third‑party websites or services.

Google Play Store

Our website contains a button that leads to the Google Play Store. If you click on this button, you will be redirected to the Google Play Store website. Please note that Google's privacy policy applies to this website.

No profiling/tracking on the website

Our website does not perform profiling, user‑based tracking, or the delivery of personalized advertising.

Performance measurement for partner links (click tracking)

We provide partners with links (recognizable by the path "/go/..." or similar) that are redirected via our server. These links are placed by our partners outside our own website (e.g., on their websites or on social media).

Purpose of processing: When you click such a link, the redirection is handled by our server. We do this solely to count the number of clicks on these links. This serves the anonymized, internal performance measurement of our marketing partnerships.

Types of data processed: To technically perform the redirection, our server must receive your IP address and, where applicable, referrer and browser information (user agent) for the brief moment of the request.

Data minimization: We do not permanently store personal data such as the IP address during this process or link it with other data. Only an anonymous counter in our statistics is increased.

Legal basis: The legal basis for this processing is our legitimate interests (Art. 6(1)(f) GDPR) in measuring and optimizing our marketing performance.

Rights of the data subject

You have the right to information, rectification, erasure, restriction of processing, objection to processing, and data portability. If the processing is based on your consent, you have the right to revoke this consent with future effect. To exercise any of these rights, please contact support@mibu.games.

Right to complain to the supervisory authority

You have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful. Here is the link to the Data Protection Authority: https://dsb.gv.at/eingabe-an-die-dsb/formulare

Change to our privacy policy

We reserve the right to update this Privacy Policy from time to time.