← Return to XCRAFT STUDIOS Homepage

Privacy Policy

1. Overview & Publisher Identity

This Privacy Policy explains how XCRAFT STUDIOS ("we", "us", "our") collects, uses, shares, and protects information gathered through our mobile applications and games distributed on the Google Play Store (including Crystal Odyssey, Neon Runners, Shadow Protocol, and upcoming releases).

This policy is crafted specifically to meet the high standards of the Google Play Developer Distribution Agreement, Google Play User Data Policies, the Google EU User Consent Policy, and certified Consent Management Platforms (CMP) under IAB Europe Transparency and Consent Framework (TCF v2.2).

2. Information We Collect

A. Technical Identifiers & Device Information

• Google Advertising ID (AAID / GAID): Used for ad measurement, fraud mitigation, and personalized ads only when explicit consent is provided.
• Hardware & OS Telemetry: Device manufacturer, model, Android OS version, screen resolution, locale/language, and network type (Wi-Fi/Cellular).
• IP Address: Processed for coarse regional localization (country/city level) and network fraud prevention.

B. Gameplay & Diagnostics

• Progress & States: Levels reached, high scores, inventory states, and gameplay settings.
• Crash Reports: Application Not Responding (ANR) reports, memory diagnostics, and anonymous stack traces through Google Firebase Crashlytics to resolve crashes.

C. In-App Purchases

All in-app purchases are executed securely through Google Play Billing. XCRAFT STUDIOS does not receive, store, or process your credit card numbers or banking information.

3. CMP & Google EU User Consent Policy (IAB TCF v2.2)

When launching our games in the EEA, UK, or Switzerland, players are presented with a certified CMP consent dialogue requesting granular permission for:

• TCF Purpose 1: Store and/or access information on a device (e.g. cookies, AAID).
• TCF Purposes 2-10: Select basic ads, create/select personalized ads profile, measure ad performance, audience insights, and product improvement.

Personalized vs. Non-Personalized Ads (NPA): If consent is declined or revoked, players will only receive non-personalized ads (contextual ads based on game theme rather than user behavioral profile).

4. How to Manage or Revoke Consent (CMP Settings)

You can revoke or modify your consent preferences at any time:

1. In-Game CMP Menu: Open the game → tap Settings (Gear icon ⚙️) → select Privacy Settings / Manage CMP Consent → modify or withdraw consent.
2. Android System Ad Settings: Go to Settings → Google → Ads → tap "Delete advertising ID" or "Reset advertising ID".
3. Google Ad Settings: Visit adssettings.google.com to manage account-level ad preferences.

5. Third-Party Partners & SDKs

6. Data Retention & Google Play Data Deletion Request

In full compliance with Google Play's Account Deletion and Data Safety policies, users have the right to request deletion of all their account records, saved game progress, and diagnostic logs.

To request permanent erasure of your data, email [email protected] with the subject "Data Deletion Request" along with your in-game User ID or Google Play Games handle. We will permanently delete all records within 30 calendar days.

7. Children's Privacy (COPPA & Google Play Families Policy)

Our games are intended for a general audience and are not directed to children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal data from children. Where age-gates are used, any user identifying as underage will have all personalized advertising and non-essential telemetry disabled. Parents may contact us at [email protected] to review or purge child data.

8. International Rights (GDPR & CCPA/CPRA)

• GDPR (EEA/UK): Rights of access, rectification, erasure, restriction, data portability, and withdrawal of consent.
• CCPA/CPRA (California): Right to know categories of collected info, right to delete, right to opt-out of sharing/sale of personal data, and non-discrimination.

9. Security Measures

All network communications are encrypted with standard TLS 1.3 / HTTPS. Databases are secured with industry-grade access policies and enterprise infrastructure.

10. Contact Us