Privacy Policy

This policy covers the Critter Royale game for iPhone, iPad and Android, listed on the App Store and Google Play as "Critter Royale: Plush Battle" ("the game"). Critter Royale is made by Joel Jaimon, an individual developer publishing as LexaApps ("we", "us"). We decide how the game's data is used, so for data protection law we are the controller. You can reach us at joel.jaimon99@gmail.com.

The short version: the game gives you an anonymous player id instead of asking for your name or email. It sends what it needs to keep your progress, check your purchases, run online matches near you and show the ads you choose to watch. We don't sell your data. You can delete your account inside the game at any time.

• An anonymous player id, created the first time you open the game. It isn't your name or email. It keeps your critters, Buttons, Season Road progress and purchases yours. Sent to Unity Gaming Services.
• Your game profile: level, XP, Buttons, Stars, critters, skins, Season Road and mission progress, trophies, the rewards you claimed, your purchase records and whether you own No Ads. This is the game itself. It is saved on our servers so it survives a reinstall. Sent to Unity Gaming Services.
• Purchases: the receipt from the App Store or Google Play (transaction id, product and time) and a coded version of your player id that we attach to each purchase. We never see your card or payment details. We use them to check each purchase with Apple or Google, give you what you paid for once, handle refunds and stop one purchase being used on several accounts. Sent to Unity Gaming Services, Apple or Google.
• Match stats: your placement, knockouts, eliminations, damage, restitches and time survived. We use them to pay match rewards and track missions and trophies. Sent to Edgegap (match servers) and Unity Gaming Services.
• Your moves during an online match, and a short-lived match pass that contains a coded version of your player id. They are used to run the match. Sent to Edgegap (match servers).
• Your IP address when you play online. The game looks up your public IP address with api.ipify.org and sends it to the matchmaker, so the matchmaker can start your match on a server near you. Every server you connect to also sees it. Sent to ipify, Unity Gaming Services and Edgegap.
• If you choose "Save your progress": a sign-in token from Sign in with Apple or Google Play Games. The game asks Apple for no name and no email. It links your player to that account so you can get it back on a new phone. Sent to Apple or Google, and Unity Gaming Services.
• Ads you choose to watch: your device's advertising ID (on Android) or an app-specific device id (on iPhone), your IP address, device and app information, how you interact with the ad, and diagnostics. These are used to pick the ad, count the view and prevent fraud (see Ads, below). Sent to Google AdMob.
• Game settings requests and technical diagnostics from the Unity services, such as crash information that isn't linked to you, and an installation id. They load the game's settings and keep the services working. Sent to Unity Gaming Services.

When you first open the game it asks for your year of birth. It keeps only whether you are old enough to play and whether you are 18 or older. Your year of birth is never saved or sent anywhere. Your sound, vibration and camera settings, your chosen critter and play mode also stay on your phone.

We don't ask for your name, email, phone number or address. The game doesn't use your precise location, contacts, photos, camera or microphone. It has no chat. We don't use an analytics service of our own, and we don't sell your personal data.

Critter Royale only shows rewarded video ads, and only when you tap to watch one for a bonus. There are no banner ads and no ads that interrupt play. The ads come from Google AdMob.

• If you are under 18, the game tells Google you are under the age of consent and asks for ads that aren't based on your activity.
• On Android, if you are 18 or older, ads may be personalised, but only as far as your consent choices allow.
• Every ad request asks for content suitable for a general audience with parental guidance (AdMob's "PG" setting).
• On iPhone and iPad, ads are never personalised, whatever your age. The game never asks for permission to track you, so AdMob doesn't get Apple's advertising identifier.

In the European Economic Area, the UK, Switzerland and some US states, the game shows Google's consent message the first time it is needed. To change your answer later, open Settings, then Privacy, then "Privacy choices".

Google explains how it uses data from apps that show its ads at https://policies.google.com/technologies/partner-sites.

• Unity Technologies (Unity Gaming Services: sign-in, our server code, cloud saves, matchmaking and game settings). Unity's privacy policy for game players: https://unity.com/legal/game-player-and-app-user-privacy-policy
• Edgegap Technologies (hosts the online match servers): https://edgegap.com/
• Google (AdMob ads, Google's consent message, Google Play purchases, Google Play Games sign-in). Google's privacy policy: https://policies.google.com/privacy
• Apple (App Store purchases, Sign in with Apple). Apple's privacy policy: https://www.apple.com/legal/privacy/
• ipify (api.ipify.org tells the game its public IP address). ipify says it logs no visitor information: https://www.ipify.org/

Unity and Edgegap work on our behalf. Google and Apple also act under their own policies when you buy something, sign in with them or watch an ad.

If you are in the EEA, the UK or another place with similar law, we rely on these legal bases:

• To provide the game you asked for (contract): your player id, profile, purchases, match data and matchmaking.
• Our legitimate interests in keeping the game fair and secure: checking purchases, stopping cheating and fraud, and placing you on a nearby server.
• Your consent, where the law requires it, for personalised ads. You can withdraw it in Privacy choices.
• Legal obligations: keeping purchase records for refunds and accounting.

• Your player id, profile and match records: until you delete your account.
• Purchase receipts (transaction id, product and time): kept after you delete your account, with your player id removed, because we need them for refunds, accounting and to stop the same receipt being used twice. Nothing left in them points back to you.
• Match passes expire after five minutes. Matchmaking tickets and server logs are kept by Unity and Edgegap for a limited time under their own terms.
• Ad data: kept by Google under its own policy.

Uninstalling the game doesn't delete your data on our servers. Delete your account first if that is what you want.

In the game: tap the gear on the home screen, then "Delete my account", then "Yes, continue", then "Delete forever". This deletes your profile, your progress, your purchases and your match records on our servers, deletes your sign-in account, and clears your player data from the phone. It can't be undone, and purchases can't move to a new account afterwards.

Without the game: email joel.jaimon99@gmail.com with the subject "Delete my Critter Royale account" and your player id, which is shown on the Profile screen. Since we don't know your name or email, the player id is how we find your account. More help is on the support page: https://lexaapps.com/apps/critter-royale/support#delete-account

Critter Royale is for players 13 and up. The game asks for a year of birth before anything else and doesn't let younger players in. We don't knowingly collect data from children under 13. If you think a child under 13 has played, email us and we will delete the account.

Players aged 13 to 17 only get ads that aren't based on their activity.

EEA, UK and Switzerland

You can ask to see the data we hold about you, correct it, delete it, get a copy in a portable format, restrict or object to how we use it, and withdraw consent at any time. You can also complain to your local data protection authority. To use these rights, email us with your player id.

California and other US states

In the last 12 months the game has collected these categories: identifiers (player id, device and advertising ids, IP address), commercial information (purchase records), internet and app activity (gameplay and ad interactions) and approximate location (from your IP address). We use them for the purposes above.

We don't sell personal information for money. When personalised ads are allowed (players 18 and over who agreed), sending data to Google AdMob may count as "sharing" for cross-context behavioural advertising under California law. You can opt out with Privacy choices in the game's Settings, or by emailing us. We don't sell or share the data of players under 16, because every player under 18 only gets ads that aren't based on their activity.

You can ask to know, delete or correct your personal information, and we won't treat you differently for doing so. Email us with your player id. An authorised agent can ask for you if they show us your written permission.

Unity, Edgegap, Google and Apple run servers in several countries, including the United States. Where the law requires it, these companies use safeguards such as the European Commission's standard contractual clauses for transfers out of the EEA and the UK.

The game talks to Unity, Google, Apple and ipify over encrypted HTTPS connections. Online match traffic between your phone and the match server is sent without encryption. It carries your moves and the short-lived match pass with a coded player id, not your name or contact details. Purchases are checked with Apple or Google before anything is granted.

If we change what the game collects, we will update this page and the date at the top before the change reaches the game. Big changes will also be mentioned in the game's update notes.

Developer: Joel Jaimon (LexaApps)

Email: joel.jaimon99@gmail.com