Minesweeper Museum Privacy Policy

1. Who we are

Minesweeper Museum (“the game”, “we”, “us”) is made by DuoDevApps, an independent app studio in Spain, the controller responsible for the processing described here. Contact: duodevapps@gmail.com · Website: duodevapps.com.

This policy covers the Minesweeper Museum app for iPhone and iPad and the Minesweeper Museum pages of duodevapps.com.

2. What stays on your device and in your iCloud

The game keeps your progress on your device: the boards and stars of the journey and of the modes, your museum (its name, the hanging, the frames and the decor), your Brushes and their history, your statistics and daily streaks, and a note of what you have bought.

If you are signed in to iCloud, the same progress is copied to iCloud's key-value storage in your own Apple Account, so your other devices carry on where you left off. Apple stores it, and we can't read it. Without iCloud, it simply stays on the device.

The museum's name is yours to choose. It never leaves your devices, except on a share card that you decide to send.

3. Game Center

Game Center is Apple's service, and signing in is optional. If you sign in, your scores and achievements go to Apple's leaderboards, where other players can see them with your Game Center nickname.

A live 1 vs 1 race uses Game Center to find an opponent, and exchanges only the race's progress. A ghost challenge link that you share contains the board, your time, your progress curve and your Game Center nickname.

Apple's handling of Game Center data is described in Apple's Privacy Policy.

4. Advertising

The game is free and shows ads through Google AdMob (the Google Mobile Ads SDK). Through AdMob mediation, Unity Ads may also compete to fill an ad. The ads follow the game's ad contract: never on the board, never in the middle of a game, never after a loss and never in your first session.

To show and measure ads and to prevent fraud, these SDKs process data such as your IP address (and the approximate location it implies), device and app information, your interactions with ads and, if you allow it, an advertising identifier.

• Your consent choices. In the European Economic Area, the United Kingdom, Switzerland and the US states with privacy laws, Google's consent message asks first whether ads may be personalised. You can change your answer at any time in the game, in Settings › Privacy choices.
• Tracking. Apple's App Tracking Transparency prompt asks before the advertising identifier (IDFA) can be used. If you say no, it isn't shared, and ads aren't personalised with it. You can change this in your iPhone's Settings › Privacy & Security › Tracking.
• Rewarded videos play only when you ask for one. Remove ads (a one-time purchase) and Museum Patron turn interstitial ads off.

Learn more about how Google uses information from apps that use its services and in Unity's privacy policy for players.

5. Game statistics and settings (Firebase)

To learn which parts of the game work, we record a few anonymous events with Google Firebase Analytics, in its version that doesn't collect the advertising identifier: the first open, the onboarding steps, a board started or won (with its mode, stars and time), a premium mode's door, the purchase screen opening, a purchase (the product only), a rewarded video finished and an interstitial shown.

These events carry no name, email, museum name, Game Center nickname or free text. Firebase links them to a random app-instance identifier, together with general device and app information (model, iOS version, language and country). We see them only as totals.

The game also downloads its settings from Firebase Remote Config (for example, how often interstitials may appear, or a price in Brushes), so we can tune the game without an update. That request carries a random installation identifier and the app version.

Google processes this data on our behalf under Firebase's privacy and security terms, and keeps the analytics events for the retention period set in our project, never more than 14 months.

6. Purchases

Purchases (Museum Patron, Remove ads, the premium modes, themes, hero skins and Brushes) are handled by Apple through the App Store. Apple tells the game what was bought and gives each purchase a transaction number, so it is unlocked or credited exactly once. We never receive your payment details.

Restoring purchases asks Apple again what your Apple Account owns.

7. Crash reports and App Store statistics

If you've chosen, in your iPhone's settings, to share analytics with app developers, Apple may send us crash reports and statistics about how the app performs. We use them only to fix problems. You can turn this off at any time in your iPhone's Settings › Privacy & Security › Analytics & Improvements.

8. When you write to us

If you email us, we receive your email address and what you write, and anything you choose to add, such as your device model. We use it only to answer you and to fix what you report, and we delete it once it's no longer needed, at the latest two years after our last exchange.

9. What we never do

• We don't ask for an account, your name, email, phone number, contacts, photos or precise location.
• We don't sell your personal data, and we don't build profiles of you.
• We don't read what you keep in iCloud.

10. Why we use data (legal bases)

• To run the game, sync your progress and deliver what you bought: performing our agreement with you (the Terms of Use).
• Personalised advertising and tracking: your consent, which you can withdraw at any time.
• Non-personalised ads, fraud prevention, the anonymous statistics and the remote settings: our legitimate interest in offering a free game that works well. You can object by writing to us.
• Answering your messages: your request, and our legitimate interest in helping you.

11. Who receives data, and where

Apple (iCloud, Game Center, the App Store), Google (AdMob and Firebase) and Unity (Unity Ads) receive the data described above, each for its own service. Some of them process data outside the European Economic Area, for example in the United States, under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

12. How long we keep data

• On your device: until you delete the game.
• In your iCloud: until you remove it from your Apple Account.
• Firebase analytics events: for the retention period set in our project, at most 14 months.
• Advertising data: as described in Google's and Unity's policies.
• Your emails to us: up to two years after our last exchange.

13. Your choices and rights

You can change your ad consent in the game (Settings › Privacy choices), stop tracking in your iPhone's settings, remove ads with a purchase, and play without a network (then no ads load).

Depending on where you live, you have the right to access, correct, delete or port your data, to object to or restrict its processing, and to withdraw your consent. Because the game has no account, we hold almost nothing that identifies you. Write to duodevapps@gmail.com and we will help, including with requests to Google or Unity. In the EU you can also complain to your data protection authority (in Spain, the AEPD).

14. If you live in the United States

We don't sell personal information for money. Personalised ads from Google and Unity may count as “sharing” under some state laws: you can opt out through the consent message (Settings › Privacy choices) and by declining tracking on your iPhone. We don't use sensitive personal information.

15. Children

Minesweeper Museum is a game for a general audience and isn't directed at children under 13. We don't knowingly collect personal information from children. If you believe a child has given us personal information, write to us and we will delete it.

16. Security

Your progress is protected by iOS data protection on your devices and by Apple's security in iCloud. Because the game doesn't send your progress to us, there is no copy of it on our side to protect or to lose. No system is completely secure: if a breach ever affects data we hold, we will tell you and the authorities as the law requires.

17. This website

The Minesweeper Museum pages of duodevapps.com use no cookies, analytics or advertising, and load nothing from other companies. If you choose a language, your browser remembers the choice locally. Our hosting provider (Google App Engine) keeps standard server logs (IP address, time and page requested) for security, for up to 30 days.

18. Changes to this policy

If we change this policy, we will update the date at the top. For important changes, we will tell you in the game before they apply.

19. Contact

Questions about your data or this policy: duodevapps@gmail.com.