Privacy Policy

1. Controller / Operator

Operator: Indie Heart Games
Contact (email): indieheartgames@gmail.com
Website: https://indieheartgames.blogspot.com

2. Scope

This Privacy Policy describes the collection, use, storage, and third-party sharing of personal data by the Operator for the website and all applications provided by the Operator across platforms. The policy is written in general terms so that it remains applicable if we expand platforms, ad formats, or payment methods. For app-specific features or third-party integrations, we may provide additional, app-specific notices in the app or on the store listing.

3. Types of Data We Collect

We collect the following categories of data, and only the minimum necessary for the intended purpose.

(1) User-provided data (website / forms)

• Contact form inputs: email address, name, inquiry details, etc. (e.g., via Google Forms).

(2) Data collected via the apps

• Device information: device model, OS version, language settings, device configuration.

• Network information: IP address, connection timestamps, etc. (used, for example, for coarse region determination).

• Usage / behavioral data: app usage, interaction logs, session information, screen transitions, purchase / consumption history.

• Analytics & performance data: crash logs, performance metrics, error reports (used in aggregated/anonymized form where possible).

• Purchase data: purchase status, purchase date/time, Product ID, Transaction ID, etc. (payment details such as credit card numbers are handled by the platform and are not stored by us).

• Advertising identifiers: IDFA (iOS) / Advertising ID (Android), only collected with user consent for advertising/personalization.

• Location information (approximate): coarse location such as country or region obtained via IP-based geolocation or via third-party services (e.g., PlayFab). We do not collect precise GPS coordinates.

• Other identifiers: device IDs, which may be anonymized or hashed when used for analysis.

(3) Cookies and similar technologies (website)

• We may use cookies or similar technologies on our website and may use services such as Google Analytics for web analytics.

4. How We Collect Data

• Direct input from users (contact forms, in-app input).

• Automatic collection (app SDKs, server logs, cookies, etc.).

• Collection through third-party services (ad networks, analytics providers, payment platforms, etc.).

5. Purposes of Use

We use collected data for the following purposes:

• Responding to inquiries (replying and record keeping).

• Providing, operating, and maintaining the apps (bug fixes, feature improvements, session management).

• Usage analysis, statistics, and product improvement.

• Ad optimization and ad delivery (only with user consent).

• Fraud detection and abuse prevention (including purchase verification).

• Purchase verification, accounting, and refund handling.

• Legal compliance and enforcement of our rights.

6. Third-party Sharing

We may use third-party services to provide the service. These third parties have their own privacy practices. We share only the minimum data necessary, under contractual safeguards. Examples of third parties we may use:

• Advertising / mediation: Unity Ads, ironSource, Google AdMob, etc.

• Analytics / crash reporting: Microsoft Azure (Application Insights), Sentry, Google Analytics, etc.

• Game servers / user management: PlayFab (Microsoft).

• Form storage: Google Forms.

• Payment processing: platform providers (Apple App Store, Google Play).

We limit third-party access to what is necessary for their service and require appropriate data protection measures.

7. Advertising & Tracking (IDFA / ATT)

Our apps may display ads and may use advertising identifiers (e.g., IDFA) for ad optimization and ad delivery. On iOS, we follow the App Tracking Transparency (ATT) framework; advertising identifiers are used only with the user’s explicit consent. Users may control personalization via device settings or ad network opt-out mechanisms.

8. Location Information (Approximate)

• Purpose: region determination for service delivery, fraud detection/prevention, usage analytics, regional optimization, and legal compliance.

• Method: We obtain approximate location via IP-based geolocation and via third-party services (e.g., PlayFab) that may automatically collect regional information.

• Scope & Accuracy: We collect coarse location only (country/region). We do not collect precise location (GPS coordinates).

• Third-party sharing: We may share approximate location with service providers (e.g., PlayFab, ad/analytics partners) as needed. Please consult the privacy policies of these third parties for details.

• User choices: You may be able to limit or opt-out of location collection via device/platform settings or options we provide. Disabling location collection may affect region-specific features or fraud-prevention functions.

9. Handling of Purchase Data

• Collected items: purchase date/time, Product ID, Transaction ID, purchase status, and related metadata.

• Purpose: purchase verification, fraud detection, item delivery, accounting, and refund handling.

• Payment details: Payment card information is not held by us; payments are processed by the platform (Apple, Google, etc.).

• Refunds: If a refund is issued by the platform, we may adjust in-game paid currency on our servers based on the platform’s reporting. Such adjustments may be delayed due to platform reporting latency.

10. Analytics, Crash & Performance Data

• We collect usage and crash/performance data to improve services. Data is processed in anonymized and aggregated form by default.

• Use cases include bug diagnosis, priority setting for fixes, user behavior analysis, and server load analysis.

• We may use third-party services (e.g., Microsoft Azure Application Insights, Sentry).

• Retention: analytics and log data are generally retained for about 120 days and then deleted or anonymized, unless legal or operational reasons require longer retention.

11. Data Retention (General)

• Contact inquiries: retained approximately 1 year after resolution, then deleted.

• Logs & analytics: retained approximately 120 days, then deleted or anonymized.

• Purchase data: retained as required for accounting and fraud-prevention purposes; contact us for specifics.
  Retention periods may be adjusted per legal requirements or operational needs.

12. International Data Transfers

We may transfer data to servers located outside your country (e.g., US) because we use services from providers such as Microsoft and Google. If you do not consent to such transfers, please contact us.

13. Your Rights

You have the right to request access to, correction of, deletion of, or restriction of processing of your personal data. To exercise these rights, contact: indieheartgames@gmail.com. We will respond within a reasonable timeframe. Please note that deletion may limit your ability to use certain services.

14. Children’s Privacy

Our services are not intended for children under 13. If we learn we have collected personal data from a child under 13, we will delete it upon parental request.

15. Security

We implement reasonable technical and organizational measures (access control, encryption, logging, least-privilege) to protect personal data. However, no internet transmission or storage is 100% secure.

16. External Links & Third-party Sites

Our site and apps may link to third-party websites or services. We are not responsible for their privacy practices; please review their policies.

17. Changes to This Policy

We may update this policy due to legal changes or service updates. Significant changes will be posted on our site. Updated policy takes effect when posted.

18. Contact

For privacy inquiries, access/correction/deletion requests: indieheartgames@gmail.com