Privacy Policy

This Privacy Policy explains how Pixel Harbor Studio ("Pixel Harbor", "we", "us", "our") collects, uses, shares, stores and protects information when you download, install or play any of our mobile or web games and apps (the "Games") on Google Play, the Apple App Store, other app stores or the web, or when you visit this website (together, the "Services"). It also explains the choices and rights you have and how to contact us.

We wrote this policy in plain language. If anything is unclear, contact us at moaazafzal.be@gmail.com.

1. Who we are and how to contact us

The Services are developed and published by Pixel Harbor Studio, an independent game developer operated by Moaaz Afzal in Belgium. Pixel Harbor Studio is the data controller responsible for personal data processed through the Services under the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP) and similar laws, except where a partner acts as an independent controller (see section 10).

Some of our Games are published on Google Play under the developer name ParagonGamez, LLC. Those Games are developed and operated by Pixel Harbor Studio, and this Privacy Policy applies to them in full. Privacy questions and requests about any of our Games, whichever developer name appears on the store listing, go to the contact details below.

We have not appointed a Data Protection Officer because we are not required to; the privacy contact above handles all privacy questions and requests.

2. Scope of this policy

This policy applies to every Game developed by Pixel Harbor Studio, whether it is listed under the developer name Pixel Harbor Studio, ParagonGamez, LLC or another developer or seller name on Google Play, the Apple App Store or any other store, and to our websites. Individual Games may show a short in-game privacy notice or consent message; this full policy always applies. Third-party services that you reach from our Games (for example an advertiser's website or an app store) are governed by their own privacy policies.

Games currently covered by this policy include:

The list grows as we release new Games. This policy applies automatically to every Game we develop, including future Games, on every platform (Android, iOS/iPadOS, web and others), from the day it is released, even before it is added to this list.

3. Platforms covered

We may publish our Games on several platforms. This policy applies on all of them; the platform operator also processes data under its own privacy policy.

4. Information we collect

4.1 Information collected automatically from your device

When you use a Game, the Game and the software development kits (SDKs) of our partners built into it automatically collect:

• Device and advertising identifiers: Google Advertising ID (GAID/AAID) on Android; Identifier for Advertisers (IDFA) on iOS, only if you allow tracking; Identifier for Vendors (IDFV); Android App Set ID; and random installation or user IDs created by the Game or a partner.
• Device and technical information: device manufacturer and model, operating system and version, language, time zone, screen size and resolution, battery and memory status, network type (Wi-Fi/mobile), mobile carrier, app name and version, SDK versions, user-agent and IP address.
• Approximate location: country, region or city derived from your IP address. We and our partners do not collect precise GPS location.
• Game activity: game sessions, levels started and completed, scores, progress, in-game currency and items, settings, tutorial steps, features used and in-game events.
• Advertising data: ads requested, displayed, viewed, clicked and installed; whether a rewarded ad was completed; ad placements; and signals used to detect ad fraud and invalid traffic.
• Diagnostics: crash reports, error logs, app start-up time, frame rate and other performance data.
• Purchase records: for in-app purchases, the product, price, currency, time and an order or receipt ID (see section 14).

4.2 Information you give us

• Support and requests: if you email or call us, your email address or phone number and the content of your message, plus any details you choose to include (for example your device model or advertising ID).
• Online leaderboards and events: Games that offer online leaderboards or events sign you in anonymously with Firebase Authentication when you go online, so your entry can appear on public leaderboards and event rankings. This anonymous player profile consists of a random player ID, the player name and avatar you choose in the Game, and your score or event progress. Other players can see your player name, avatar and score. No email, password or real name is required.
• Optional features: if a Game offers multiplayer, cloud save or sign-in through Google Play Games or Apple Game Center, it may process your chosen nickname or gamer profile name, avatar, scores and saved progress. Please do not use your real name or personal details as a nickname.

4.3 Information we do NOT collect

Our Games do not collect your name, postal address, contacts or address book, photos or videos, audio or microphone recordings, camera images, SMS or call logs, calendar, health or fitness data, precise location, or government ID numbers. We do not collect sensitive personal data (such as racial or ethnic origin, religion, health, sexual orientation or biometric data).

4.4 Device permissions

Our Games request only the permissions they need: Internet and network state (to load ads and content and save progress online), com.google.android.gms.permission.AD_ID on Android (to read the Advertising ID for ads and measurement) and, where used, billing (for in-app purchases) and notifications (only if you allow them). On iOS we request tracking permission through App Tracking Transparency before the IDFA is accessed. You can refuse or withdraw any optional permission in your device settings.

5. Data collection overview

This table matches the categories used in the Google Play Data safety section and Apple's App Privacy labels. "Shared" means the data is transferred to a third party (such as an ad network) for the purpose shown.

All data is encrypted in transit. You can request deletion of your data (section 19). On iOS, device identifiers and ad data may be used to track you across apps and websites owned by other companies only if you allow tracking in the App Tracking Transparency prompt.

6. How we use information

• Provide the Games: run the Game, save progress, deliver purchases and rewards, operate leaderboards and cloud saves.
• Advertising: show banner, interstitial and rewarded ads that keep the Games free; personalize ads where you have consented or where the law allows; otherwise show non-personalized or contextual ads; limit how often you see the same ad.
• Measurement and attribution: measure ad performance and which campaigns led to an install, and calculate ad revenue.
• Analytics and improvement: understand how players use the Games, balance difficulty, fix bugs and crashes, and develop new features and Games.
• Security and fraud prevention: detect and prevent cheating, invalid ad traffic, fraudulent purchases and abuse.
• Support and communication: answer your questions and handle privacy requests.
• Legal compliance: meet our legal, tax and app store obligations, and enforce our Terms of Service.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you, and we do not use it for any purpose that is incompatible with the purposes listed here.

7. Legal bases for processing (EEA, UK and Switzerland)

Where we rely on legitimate interests you have the right to object (section 21).

8. Advertising

Our Games show banner ads, interstitial (full-screen) ads, native ads, app-open ads and optional rewarded ads that give you an in-game bonus for watching. Ads are delivered through ad mediation platforms (Google AdMob mediation, AppLovin MAX and/or Unity LevelPlay), which send each ad request to several ad networks that may compete in a real-time auction (bidding) to show an ad.

To do this, the ad SDKs in the Game collect the information described in section 4.1 directly from your device and send it to the ad networks. The networks use it to select, deliver and measure ads, cap frequency, prevent fraud and, only if you consent or where the law allows, show ads based on your interests and build or use profiles across apps and websites. Many ad networks act as independent controllers of this data under their own privacy policies (section 10).

Google. Google AdMob uses cookies and device identifiers to serve and measure ads. Learn more in How Google uses information from sites or apps that use its services and How Google uses advertising data. Google's list of ad technology providers that may receive data via AdMob is at support.google.com/admob/answer/9012903.

Ad content. We use the ad networks' content filters to block inappropriate ad categories. If you see an ad that is offensive or misleading, please tell us (with a screenshot if possible) so we can block it.

Authorized sellers. The companies authorized to sell our ad inventory are listed in our app-ads.txt file, following the IAB Tech Lab standard, to protect advertisers and players from ad fraud.

9. Google Firebase services

Our Games use Google Firebase, a set of app services provided by Google LLC (Google Ireland Ltd. for users in the EEA/UK), to run, measure and improve the Games. Depending on the Game, we use:

Firebase SDKs may use the Advertising ID only for the purposes above and respect your device ad settings and consent choices (we use Google Consent Mode so that Analytics does not use identifiers for advertising when you have not consented). Google processes Firebase data under the Firebase Data Processing and Security Terms. Learn more at firebase.google.com/support/privacy.

10. Third-party partners and their privacy policies

Depending on the Game and your region, the following partners may receive information from the Games. Not every Game uses every partner; the consent screen in each Game lists the partners active in that Game. We choose partners that commit to protecting personal data to a standard comparable to ours, and we encourage you to read their policies.

10.1 Advertising and mediation

Through mediation and real-time bidding, other certified ad networks and demand partners may also bid to show an ad. They are listed in the in-game consent screen and in our app-ads.txt.

10.2 Analytics, attribution, crash reporting and game services

11. Cookies, SDKs and similar technologies

Mobile apps do not use browser cookies in the usual way, but the SDKs in our Games use similar technologies: they store and read identifiers and settings on your device (for example in app storage, SharedPreferences on Android or UserDefaults on iOS), and read device identifiers such as the Advertising ID. In our web Games and websites, we and our partners may use cookies, local storage and pixels.

You control these through the in-game privacy settings, your device's ad settings (section 12) and, on the web, your browser's cookie settings and the cookie banner.

12. Consent, tracking and how to opt out

12.1 Consent in the EEA, UK and Switzerland

When you first open a Game in the European Economic Area, the United Kingdom or Switzerland, we show a consent message from Google's User Messaging Platform, a Google-certified Consent Management Platform (in some Games it is shown as part of the AppLovin MAX consent flow), that is integrated with the IAB Europe Transparency & Consent Framework (TCF) v2.2. You can accept, reject or manage consent for each purpose and each vendor. Rejecting is as easy as accepting. If you do not consent, you will only see non-personalized or limited ads, and you can still play. Your choice is passed to our partners through the TCF consent string and Google's Additional Consent signal. You can change your choice at any time in the Game's Settings → Privacy options where the Game offers it, or by contacting us; clearing the Game's data or reinstalling it also shows the consent message again.

12.2 United States

Where required by US state privacy laws, the Games show a US privacy message and pass your opt-out choice to our partners using the IAB Global Privacy Platform (GPP) signal and Google's restricted data processing mode. See section 22.

12.3 Apple App Tracking Transparency (iOS)

On iPhone and iPad we ask your permission before accessing the IDFA or tracking you across other companies' apps and websites. If you tap Ask App Not to Track, the IDFA is not available to us or our partners, and ads are measured with privacy-preserving methods such as Apple's SKAdNetwork / AdAttributionKit. You can change this any time in Settings → Privacy & Security → Tracking.

12.4 Opt out of personalized ads on your device

• Android: Settings → Google → Ads (or Settings → Privacy → Ads) → Delete advertising ID. On older versions: Opt out of Ads Personalization.
• iOS / iPadOS: Settings → Privacy & Security → Tracking → turn off Allow Apps to Request to Track, or turn off tracking for an individual Game. Also see Settings → Privacy & Security → Apple Advertising.
• Industry tools: DAA AppChoices, Your Online Choices (EU) and Google My Ad Center.
• Stop all collection: uninstall the Game.

Opting out does not remove ads; you will still see ads, but they will be less relevant to you. If you clear app data or reinstall, you may need to set your choices again.

13. Push notifications

Some Games can send notifications (for example when a reward is ready or an event starts). We only send them if you allow notifications in the system prompt (iOS and Android 13+) or in the Game's settings. Notifications are delivered through Firebase Cloud Messaging and Apple Push Notification service using a device token. We do not use notifications for third-party advertising. You can turn them off at any time in your device settings or in the Game.

14. In-app purchases

In-app purchases are processed entirely by Google Play Billing or Apple In-App Purchase. We never receive or store your card number, bank details or billing address. We receive only a transaction confirmation (product, price, currency, time and an anonymous order or receipt ID), which we use to deliver your item, restore purchases, prevent fraud and keep records required by tax law. Refunds are handled by Google or Apple under their policies.

15. Children's privacy

Unless a Game's store listing says otherwise, our Games are intended for a general audience and are not directed to children under 13 (or under 16 in the EEA, or the age of digital consent in your country). We do not knowingly collect personal information from children.

Where a Game may appeal to children, is listed in a family or kids category, or uses a neutral age screen, we comply with the US Children's Online Privacy Protection Act (COPPA), the GDPR, the UK Age Appropriate Design Code, the Google Play Families Policy and Apple's Kids Category guidelines. For players identified as children we:

• show only non-personalized, contextual ads, and no interest-based advertising or remarketing;
• mark ad requests as child-directed ("tag for child-directed treatment" and "tag for users under the age of consent") so ad networks treat the data accordingly;
• use only ad SDKs that are part of Google Play's Families Self-Certified Ads SDK Program;
• do not collect the Advertising ID or IDFA for tracking, and do not ask for the iOS tracking permission;
• do not enable social features, chat or sharing of personal information.

If you are a parent or guardian and believe your child has provided personal information to us, contact us at moaazafzal.be@gmail.com and we will delete it promptly.

16. How we share information

We do not sell your personal information for money and we do not rent it. We share information only:

• with the advertising, mediation, analytics and game-service partners listed in section 10, for the purposes described there;
• with service providers that host data or provide technical services for us, under contracts that require them to protect it and use it only on our instructions;
• with Google and Apple as app store operators and payment processors;
• when required by law, court order or a valid request from public authorities, or to protect the rights, safety and property of players, the public or us;
• in connection with a merger, acquisition or sale of all or part of our business, in which case the buyer must honor this policy;
• with your consent or at your direction.

We may share aggregated or de-identified information that cannot reasonably identify you.

17. International data transfers

We are based in Belgium, but some partners process data in other countries, including the United States, Singapore, China and other countries in Asia. When personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, the transfer is protected by appropriate safeguards such as the EU-US Data Privacy Framework (for certified partners), the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other mechanisms permitted by law. You can ask us for more information about these safeguards.

18. Data retention

19. Data deletion

You can delete your data at any time, free of charge:

1. On your device: uninstall the Game, or clear its data (Android: Settings → Apps → [Game] → Storage → Clear storage; iOS: Settings → General → iPhone Storage → [Game] → Delete App).
2. Account and online profile: in Games that have it, Settings → Delete account erases your progress and, where the Game has an online player profile, deletes that profile and all your leaderboard and event entries from our servers. You can also request account deletion by email as below or on our Data Deletion page; we complete it within 30 days.
3. Data we hold: email moaazafzal.be@gmail.com with the subject "[Game name] – data deletion request", the Game name, the platform and, if possible, your Advertising ID, your in-game player name or the player ID shown in the Game's settings. We delete your data within 30 days and confirm by email.
4. Advertising data: reset or delete your Advertising ID (section 12.4) and contact the ad networks directly using the links in section 10.

Full instructions: Data Deletion page. We may keep limited records where the law requires (for example purchase records for tax purposes).

20. Security

We protect information with appropriate technical and organizational measures, including encryption in transit (HTTPS/TLS), access limited to people who need it, strong passwords and two-factor authentication on our accounts, and working only with reputable partners that maintain their own security programs. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the competent authorities as required by law.

21. Your rights in the EEA, UK and Switzerland

You have the right to:

• access the personal data we hold about you and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict processing;
• object to processing based on legitimate interests, and to direct marketing at any time;
• data portability (receive your data in a structured, machine-readable format);
• withdraw consent at any time, without affecting processing before withdrawal (in the Game's privacy settings or by contacting us);
• lodge a complaint with a supervisory authority. In Belgium: the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be. In the UK: the Information Commissioner's Office, ico.org.uk. In Switzerland: the FDPIC, www.edoeb.admin.ch. You may also contact the authority where you live or work.

How to exercise your rights: email moaazafzal.be@gmail.com. Because our Games do not use names or email accounts, include the Game name and your Advertising ID, in-game player name or player ID so we can find your data. We respond within one month (extendable by two months for complex requests, in which case we will tell you). We may ask for information to verify your request. Requests are free unless they are manifestly unfounded or excessive.

22. Your rights in the United States

This section applies to residents of California (CCPA as amended by the CPRA) and other US states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island.

22.1 Notice at collection

Sources, purposes and retention are described in sections 4, 6 and 18.

22.2 "Sale", "sharing" and targeted advertising

We do not sell personal information for money. However, allowing ad networks to collect identifiers and activity for cross-context behavioral (targeted) advertising may count as a "sale" or "sharing" under some state laws. You can opt out by: (a) using the Game's Settings → Privacy options where available; (b) turning off ad personalization on your device (section 12.4); or (c) emailing us with the subject "Do Not Sell or Share My Personal Information". We honor Global Privacy Control (GPC) signals where technically possible. We do not sell or share the personal information of consumers we know are under 16.

22.3 Your rights

You have the right to know/access, correct, delete, receive a portable copy, and opt out of sale, sharing, targeted advertising and profiling. We will not discriminate against you for exercising these rights. You or an authorized agent can submit a request by email; we will verify the request by matching the identifiers you provide (such as your Advertising ID). We respond within 45 days (extendable once by 45 days when reasonably necessary).

Appeals: if we decline your request, you may appeal by replying to our decision with the subject "Privacy appeal". We respond to appeals within 45 days (60 days in Colorado). If your appeal is denied, you may contact your state Attorney General.

California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.

23. Your rights in other countries

If you live in Brazil (LGPD), Canada (PIPEDA and provincial laws), Australia (Privacy Act 1988), New Zealand, Japan (APPI), South Korea (PIPA), Singapore (PDPA), India (DPDP Act), South Africa (POPIA), Turkey (KVKK) or another country with data protection laws, you have similar rights to access, correct and delete your personal information, to withdraw consent and to complain to your local data protection authority. Contact us and we will respond as required by your local law.

24. This website

Our main website pixelharborstudio.web.app is a static site hosted on Firebase Hosting, a service of Google LLC (Google Ireland Ltd. in the EEA/UK). It does not use cookies, analytics, advertising, tracking pixels or contact forms. To deliver and secure the site, Google's servers process technical request data such as your IP address, browser type and the page requested, under the Firebase privacy terms. Our mirror and blog at pixelharborstudio.blogspot.com is hosted on Blogger, where Google may use cookies to operate, secure and measure the site and shows its own cookie notice to visitors in the EU (see the Google Privacy Policy and How Google uses cookies). If you email or call us, we receive only what you choose to send.

25. Changes to this policy

We may update this policy when we add new Games, partners or features, or when laws change. We will post the new version on this page and update the "Last updated" date. If the changes are significant, we will also notify you in the Games and, where required, ask for your consent again. Previous versions are available on request.

26. Contact us