This Privacy Policy explains how Dmitrij Bučkovský, an independent game developer
based in the Czech Republic trading as Belligerator ("we", "us"), handles your data in
the mobile game Dead Vector: Space Shooter (package cz.belli.madshooter) on Android and iOS.
Contact: dead.vector.dev@gmail.com.
Summary
- We create an account so you can save your progress and sync it across devices.
- We use Google Firebase (Authentication, Analytics, Crashlytics) and our own backend.
- We show ads via Google AdMob. We do not sell your data; in the EEA/UK (and on iOS) we ask your consent before an advertising identifier is used to personalize ads.
- We offer optional in-app purchases (crystals, Remove Ads, music packs), processed by Google Play / Apple and verified via RevenueCat; we never receive or store your payment-card details.
- The game is intended for players aged 16 and over and is not directed to children.
- You can delete your account and your data at any time (see below). The only exception: if you bought something, a record of your purchases is kept for up to 3 years after your last purchase (see Data retention).
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account identifiers — Firebase user ID (UID), in-game Player ID | Create your account, save and sync progress | Contract (Art. 6(1)(b)) |
| Email address — when you sign in with Google or Apple | Link your account so you don't lose progress; we receive it via the sign-in provider and do not store it in our own database | Contract (Art. 6(1)(b)) |
Profile data — the nickname you choose (an automatic Pilot-… name until you change it), chosen avatar | Display your pilot identity in-game | Contract |
| Gameplay data / telemetry — levels played, results, in-game economy events, tied to your Player ID | Run the game (progress, rewards), balance and improve levels | Contract; Legitimate interest (Art. 6(1)(f)) |
| Feedback — only if you send it: what you write to us about the game or a level, a thumbs up / down, and your app version, platform, device model and OS version, tied to your Player ID | Read your feedback and improve the game | Legitimate interest (Art. 6(1)(f)) |
| Analytics — a pseudonymous app instance ID and usage events (Firebase Analytics), associated with your Firebase UID | Understand how the game is used and improve it | Consent (Art. 6(1)(a)) — opt-in, see Analytics & your choices |
| Crash & performance data — crash logs, device model, OS version (Firebase Crashlytics) | Diagnose crashes and keep the game stable | Legitimate interest (Art. 6(1)(f)) — on by default, you can switch it off, see Analytics, crash reports & your choices |
| Advertising ID (Android GAID / iOS IDFA) + ad-interaction & coarse signals (e.g. IP-derived approximate location used by ad networks) | Show and measure ads; if you consent, personalize them | Consent (Art. 6(1)(a)) for personalized ads / advertising IDs in EEA/UK; Legitimate interest for non-personalized |
| Apple sign-in token (iOS only) — an encrypted Apple refresh token, stored at rest (AES-256-GCM) | Required so we can revoke Apple access when you delete your account | Contract / Legitimate interest |
| Purchase data — products bought, store purchase token / receipt, transaction timestamps, tied to your Player ID (via Google Play Billing / Apple StoreKit and RevenueCat) | Deliver and restore your purchases, prevent fraud, support, keep legally required records | Contract (Art. 6(1)(b)); Legal obligation (tax/accounting); Legitimate interest — refunds, disputes and legal claims (Art. 6(1)(f), Art. 17(3)(e)) |
We do not collect precise location, contacts, photos, or microphone.
Who processes your data
- Google (Firebase / Google Cloud) — Authentication, Analytics, Crashlytics, and our backend hosting. Google acts as our processor — see Google's Privacy Policy.
- Google AdMob (and its advertising / mediation partners) — when ads are shown, your advertising identifier and ad-interaction/device signals are shared with AdMob to serve and measure ads, and — only with your consent — to personalize them. See Advertising below.
- Neon (database) / Google Cloud Run (backend) — store and process your account and gameplay data.
- RevenueCat — verifies your in-app purchases and tracks which items your account owns, on our behalf (our processor). It receives the store purchase token / receipt and your pseudonymous Player ID; its servers are in the United States. See RevenueCat's privacy policy.
- Google Play Billing / Apple App Store — process the payment itself. We do not receive or store your payment-card details; we only receive the store's purchase token / receipt and your entitlement. Refunds are handled by the store.
These providers operate servers in the EU and the United States, so your data may be transferred to the US. Such transfers rely on the appropriate safeguards (e.g. Standard Contractual Clauses).
Apart from Google AdMob for advertising (described below), we do not share your data with third parties for their own marketing.
Analytics, crash reports & your choices
These are two separate controls, both in the game's settings, changeable at any time.
Analytics is off until you turn it on. We ask on first launch and collect nothing until you agree; if you decline, no analytics data leaves your device. This is consent (Art. 6(1)(a)), and withdrawing it is as easy as giving it.
Crash reports are on by default, because we rely on a legitimate interest (Art. 6(1)(f)) in keeping the game from crashing: a crash log tells us what broke and on which device, and without it a bug that only happens on your phone stays invisible to us. Crash logs contain no advertising identifier and are never used for marketing or profiling. You may object at any time — switch Crash reports off in the game's settings and collection stops immediately.
Both choices are separate from the advertising consent described below.
Advertising
We use Google AdMob (and its mediation/advertising partners) to show ads. AdMob may collect your advertising identifier and device/usage signals to serve and measure ads, and — only with your consent — to personalize them. This is sharing with a third party for advertising. In the EEA/UK we ask for your choice through a Google-certified consent prompt (UMP) before serving ads; on iOS we also ask via Apple's App Tracking Transparency before using your IDFA for personalized ads. If you decline, we may still show non-personalized ads. You can change your choice anytime in the game's settings (privacy options) or your device's privacy settings.
In-app purchases
The game offers optional purchases — crystals, Remove Ads, and music packs. Payments are processed by Google Play or the Apple App Store; we never receive or store your card details. To deliver, restore, and protect purchases we use RevenueCat, which verifies the store receipt and records which items your account owns (linked to your pseudonymous Player ID). Restoring purchases and refunds go through the store.
Data retention
We keep your account, game progress, feedback and purchases for as long as your account exists. Detailed gameplay records are deleted automatically sooner: individual level sessions after 30 days (sessions flagged by our anti-cheat checks after 180 days, so we can investigate cheating) and per-level run telemetry after 90 days. When you delete your account, the associated data is deleted as described below. Analytics data (only if you turned analytics on) is deleted automatically 2 months after your last activity in the game; what remains are aggregated statistics that no longer identify you. Crash reports are deleted after 90 days.
Backups. To recover from data loss, we keep backups of our database in Google Cloud, and our database provider keeps a short recovery history of a few days. Data you delete, including a deleted account, can remain in these backups for up to 90 days, after which it is deleted automatically. Backups are used for nothing else.
Purchase records. When you delete your account, we keep the purchase history that our purchase processor RevenueCat holds for your former Player ID: which products you bought, when and for what price, the store's transaction IDs and purchase receipts, and basic technical data RevenueCat stores with them, such as country and platform. In our own database we keep only your former Player ID(s), the date of your last purchase and, if you merged accounts, the link between those accounts' Player IDs — so we know which records to delete and when. We keep all this only to handle refunds, disputes and legal claims related to those purchases (our legitimate interest; Art. 17(3)(e) GDPR), and for no longer than 3 years after your last purchase — the general limitation period under Czech law. If you never bought anything, nothing is kept. Everything else is deleted as described in Deleting your account and data below.
Deleting your account and data
You can delete your account and all associated personal data:
- In the app: open Profile → Delete account. This permanently removes your account, your game progress, and (on iOS) revokes the linked Apple sign-in.
- By request: if you cannot use the in-app option, email dead.vector.dev@gmail.com from the address linked to your account, or include your Player ID (shown in the app under Profile), and we will delete your data within 30 days.
If you play as a guest (not signed in with Google or Apple) and sign out, your guest account is deleted in the same way, because nothing could sign back into it.
Deletion removes your players record together with all game data linked to it, your
Firebase user, and any stored Apple token. The one exception is the record of your purchases, kept
for up to 3 years after your last purchase to handle refunds and disputes (see
Purchase records under Data retention); if you never bought
anything, nothing is kept. If Firebase is temporarily unavailable, we complete the
deletion of the Firebase user later. The game also gives your device a new analytics ID, so analytics
data linked to the deleted account is no longer added to and is deleted automatically within
2 months.
Your rights (EU/EEA — GDPR)
You have the right to access, correct, delete, restrict, or object to the processing of your data, and to data portability. To exercise these rights, contact dead.vector.dev@gmail.com. You also have the right to lodge a complaint with your data protection authority (in the Czech Republic: Úřad pro ochranu osobních údajů, ÚOOÚ).
Children
Dead Vector: Space Shooter is intended for players aged 16 and over and is not directed to children. We do not knowingly collect data from anyone under 16. If you believe someone under 16 has provided us data, contact us and we will delete it. Ads are configured for this audience: the app is not a Families/child-directed app, and we instruct AdMob not to treat traffic as child-directed.
Security
Data in transit is protected with HTTPS/TLS. The Apple sign-in token (iOS) is encrypted at rest. Our providers (Firebase, Google Cloud Run) also process your IP address transiently in operational and security logs for diagnostics and abuse prevention.
Changes
We may update this policy. Material changes will be reflected by a new "Last updated" date on this page.
Contact
Dmitrij Bučkovský, trading as Belligerator (Czech Republic) — dead.vector.dev@gmail.com.