BrickBalls Privacy Policy
BrickBalls is made by Steenfeldt Holding ApS, Rougsøvej 1, 8940 Randers SV, Denmark, CVR 37283681 ("we", "us"). We are the data controller for the personal data described here. Contact: brickballs@nullbase.eu.
This policy explains what BrickBalls does with data, in plain language. BrickBalls has no accounts, never asks for your name or email, and contains no analytics or tracking SDK beyond what is listed below.
1. Summary
| What | Where it goes | Why |
|---|---|---|
| Game Center player ID, display name, avatar | Apple (Game Center) and, for the player ID, our CloudKit results database | Leaderboards, achievements, Versus matches |
| Gameplay results (world, level, score, objects destroyed, shots, duration, app version, device model, time) | Apple CloudKit (our public database) | Understand how the game is played and tune difficulty |
| Settings and progress | Your device only | Remember your preferences and level |
| Points wallet, daily streak and unlocks (earned, bought and spent point totals, streak days, boosters and styles you own, worlds unlocked with points, and the Apple transaction IDs of bought point packs) | Your device and your own iCloud key-value storage | Keep your points, streak and unlocks across reinstalls and devices; never credit a purchase twice |
| In-app purchase transaction IDs | Apple (StoreKit); verified on your device | Unlock BrickBalls Premium or a single world, credit point packs |
| Advertising data (free version only) | Google AdMob | Show ads that fund the free version |
2. Game Center
BrickBalls uses Apple's Game Center for leaderboards, achievements and live Versus matches. When you are signed in to Game Center, Apple gives the app a game-scoped player identifier (gamePlayerID), your Game Center display name and avatar. We never see your real name, email or Apple Account. In Versus mode you are matched with another player at random; only display names and avatars are shown and there is no chat. Game Center respects the restrictions set by Apple and by Screen Time, including for underage accounts. Apple's handling of Game Center data is described in Apple's privacy policy.
3. Gameplay results in CloudKit
When you finish a level or a Versus match, the app stores a result record in a public database in Apple's iCloud (CloudKit). A record contains: world, level number, score, objects destroyed, shots used, duration, game mode, your Game Center player ID (if signed in), app version, device model and a timestamp. We, as the developer, can see all records. Other players cannot look up your records from within the game; CloudKit's default permissions let other players read the database, so do not assume these records are private.
Records are written only when your device is signed in to iCloud. If it is not, the app keeps playing normally and simply queues the records. The results database never affects your ability to play.
4. Data on your device
Your settings (music, sound effects, haptics), level progress, best scores and queued results are stored on your device and are included in your normal iCloud or iTunes device backups. The year of birth you give before the first ad is stored the same way, on the device only. Deleting the app deletes them.
Your points wallet (how many points you have earned, bought and spent, plus the Apple transaction identifiers of the point packs you bought), your daily streak, and what you have unlocked with points (boosters, cannon and trail styles, and worlds) are also mirrored to the iCloud key-value storage of your own Apple Account, so that it survives a reinstall and follows you to another device. This data is stored by Apple under your account; we cannot read it, and no third party receives it. If you are not signed in to iCloud, the wallet is kept on the device only. Deleting the app does not delete the iCloud copy; you can remove it by deleting the app's iCloud data in iOS Settings → your name → iCloud → Manage Storage.
Reminders (an optional daily reminder, a streak reminder and a reminder before a season world closes) are local notifications scheduled on your device. There is no push server: nothing about them is sent to us. You can turn them off in the game's Settings or in iOS Settings → Notifications.
5. In-app purchase
BrickBalls Premium, and each world that can be bought on its own, is a one-time purchase handled entirely by Apple through the App Store. Apple processes the payment and gives the app a signed transaction. We never receive your card or billing details. Restore Purchases in Settings asks Apple to re-send your transactions to the device.
Point packs are consumable purchases handled the same way. The app keeps the transaction identifier of each pack in your wallet (see section 4) only to make sure a pack is credited exactly once; it is not sent anywhere except your own iCloud storage.
6. Advertising (free version only)
The free version of BrickBalls shows rewarded videos (which you choose to watch) and occasional interstitial ads between levels. BrickBalls Premium removes all ads, and the advertising SDK is not even started for Premium players.
Ads are served by Google AdMob (Google Ireland Ltd for EEA/UK users; Google LLC elsewhere). Before the first ad, the game asks once for your year of birth. The answer is stored only on your device and is never sent to us or to Google; the game only uses it to decide which of the two ad settings below applies.
Under 16: AdMob is told to treat you as a child. Ads are limited to general audiences (rated G), Google applies child-directed treatment, no personalised advertising takes place, no advertising identifier is used, no consent form is shown and the App Tracking Transparency prompt is never shown.
16 or older: in the EEA, the United Kingdom and Switzerland, Google's User Messaging Platform shows a consent form before any ad is loaded, where you can choose personalised or non-personalised ads and change your choice later with the "Ad Privacy Choices" button in the game's Settings. Only after consent (or where no consent is required) may the App Tracking Transparency prompt be shown; if you choose "Ask App Not to Track", no tracking takes place. Ad attribution uses Apple's privacy-preserving SKAdNetwork.
Google may collect device information, approximate location derived from IP address, ad interaction data and, where permitted, advertising identifiers. See Google's privacy policy and how Google uses data from partner apps.
7. Children
BrickBalls is rated 4+ and suitable for all ages. We do not knowingly collect personal data from children beyond the gameplay results and Game Center identifiers described above, which are not used for marketing. Children do not receive behavioural advertising, there is no chat, and no real names are displayed. Parents and guardians can contact us at brickballs@nullbase.eu to review or delete data relating to a child; see section 10 for what we need.
8. Legal bases (GDPR)
- Performance of the contract (providing the game, Game Center features, Premium): Art. 6(1)(b).
- Our legitimate interest in understanding and improving the game through gameplay results, and in funding the free version with non-personalised ads: Art. 6(1)(f).
- Your consent for personalised advertising and tracking: Art. 6(1)(a). You can withdraw it at any time with the "Ad Privacy Choices" button in the game's Settings (shown to players aged 16 or older in the EEA, the United Kingdom and Switzerland), or in iOS Settings → Privacy & Security → Tracking.
9. Retention
Gameplay results are kept for as long as the game is maintained, then deleted. Game Center data is retained by Apple under Apple's terms. Google's retention of advertising data is described in Google's policy. Local data is deleted when you delete the app.
10. Your rights and deleting your data
You can ask us to access, correct, delete or export the gameplay results linked to you, or object to our processing. Because we do not store names or emails, please email brickballs@nullbase.eu with your Game Center display name and the approximate dates you played, so we can locate your records. We respond within 30 days. You can also complain to the Danish Data Protection Agency, Datatilsynet (www.datatilsynet.dk), or to your local supervisory authority. California residents have equivalent rights under the CCPA; we do not sell personal data.
11. International transfers
Apple and Google may process data outside the EEA. Both rely on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
12. Security
Data in transit is encrypted. Our CloudKit database is accessed only with Apple-managed credentials. Purchases are verified with Apple's signed transactions on the device.
13. Changes
We will post changes here with a new version number and effective date, and note significant changes in the app's update notes.