Effective date: 2026-05-23 | Version: 2.1
This Privacy Policy ("Policy") describes how the publisher of the GridBurst mobile application ("App", "Service", "we", "us", "our") collects, uses, discloses, retains, and protects information in connection with your use of the App. This Policy forms part of, and is incorporated by reference into, the GridBurst Terms of Service ("Terms"). Capitalized terms used but not defined here have the meanings given in the Terms.
This Policy is designed to comply, to the maximum extent applicable, with:
BY DOWNLOADING, INSTALLING, OR USING THE APP YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS POLICY. If you do not agree, do not use the App and uninstall it from your device.
The data controller (GDPR/UK GDPR) and "business" (CCPA/CPRA) responsible for processing personal data described in this Policy is the publisher identified in Section 22 of the Terms ("Publisher"). The Publisher alone determines the purposes and means of processing.
The persons who originally conceived, designed, and developed the App (the "Creator" and, with their respective affiliates, employees, contractors, and licensors, the "Developer Parties") are not data controllers, joint controllers, processors, or sub-processors of personal data described in this Policy and have no role in determining the purposes and means of processing. The Developer Parties do not receive personal data about you in identifiable form. Any data-subject request or complaint must be directed to the Publisher.
For all privacy questions, data-subject requests, or complaints:
Email: [email protected]
EU/EEA users may contact the Publisher at the same address as our representative point of contact for GDPR purposes. We will respond within statutory timeframes (typically 30 days under GDPR/UK GDPR, 45 days under CCPA/CPRA, subject to permitted extensions).
This Policy applies to data processed in connection with the App and the optional online features it offers (such as a leaderboard service or rewarded video advertisements). It does not apply to:
We are not responsible for the privacy practices of any third party.
We collect only the data described in this Section. We do not collect any other category of personal data.
The following data is written to local storage on your device (e.g., localStorage, app sandbox files) and is never transmitted to us except as described in Section 3.2:
This data persists until you uninstall the App or clear its data via your operating system.
If — and only if — you opt into an online feature (such as the online leaderboard or cross-device sync), the following may be transmitted to our servers:
You may decline to opt into online features at any time. Declining does not affect single-player functionality.
When you voluntarily tap a "Watch ad" button to earn an in-game retry, the App requests a rewarded video advertisement from Google AdMob (operated by Google LLC and/or its affiliates). To serve, measure, and report on that advertisement, AdMob may collect or process:
AdMob's processing is governed by Google's privacy policy and policies for advertising:
We display only rewarded video advertisements, only when you voluntarily request them. We do not display banner ads, interstitial ads, native ads, or unsolicited advertisements of any kind. We do not use AdMob's audience-segmentation or remarketing features.
The App may, now or in future versions, collect telemetry, analytics, performance, and crash-reporting data ("Telemetry") to understand how the App is installed, opened, used, and closed; to measure feature engagement, session length, and retention; to identify crashes, errors, and performance issues; to detect fraud and abuse; to measure monetization effectiveness; to run A/B tests; to operate, secure, and improve the App; and to comply with legal or platform requirements.
Categories of Telemetry that may be collected:
Categories of Telemetry that are NOT collected: the content of any communications, real name, email address, phone number, postal address, payment-instrument data, precise geolocation, contacts, photos, calendar, microphone or camera content, or any data the App has not been granted permission to access.
Third-party processors that may handle Telemetry on the Publisher's behalf (each acting as a processor under the Publisher's documented instructions): Apple App Analytics, Google Play Console reporting, Firebase, Google Analytics for Firebase, Sentry, Crashlytics, AppsFlyer, Adjust, Mixpanel, Amplitude, PostHog, or a successor service. The specific set of providers in use at any given time may change; the current set is available on request at [email protected] and, where required by platform policy, is also disclosed in the App Store "Privacy Nutrition Label" and the Google Play "Data Safety" form for the App.
Legal basis (GDPR/UK GDPR): Where Telemetry is strictly necessary to provide the Service or to detect fraud or security incidents, the Publisher relies on legitimate interests (Art. 6(1)(f)) and on performance of a contract (Art. 6(1)(b)). Where applicable law requires consent (for example, where Telemetry involves access to information stored on your device beyond what is strictly necessary, or where it relies on a device identifier subject to ATT/UMP), the Publisher will request your consent through an in-App dialog or platform consent framework before collecting that Telemetry, and you may withdraw consent at any time from the App's settings.
No sale; no behavioral-advertising profiles. Telemetry is not "sold" or "shared" for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA and similar laws.
Aggregation and de-identification. The Publisher may create aggregated or de-identified data from Telemetry and may use, retain, and disclose such data without restriction for any lawful purpose.
Developer Parties. The Developer Parties do not receive Telemetry in identifiable form, do not determine the purposes and means of its processing, and have no obligation or liability in respect of it (see Section 1 and the Terms).
We do not collect or process:
We process data only for the purposes and on the lawful bases set out in our Terms and Privacy documentation. Key purposes include:
We do not engage in any form of automated decision-making (including profiling) that produces legal or similarly significant effects on you.
We do not "sell" personal information for monetary or other valuable consideration, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and similar U.S. state laws.
We may disclose data to:
We do not sell or rent data to advertisers, data brokers, or third parties for marketing.
The App is offered globally. If you access the App from outside the country where our servers are located, your data may be transferred to, stored in, and processed in another country whose data-protection laws may differ from those of your country of residence.
Where personal data of EU/EEA, UK, or Swiss users is transferred to a country not covered by an adequacy decision, we rely on appropriate safeguards — including the European Commission's Standard Contractual Clauses (2021/914), the UK International Data Transfer Addendum, and supplementary technical and organizational measures — to protect your data. A copy of the relevant safeguards may be requested at [email protected].
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods include:
Subject to applicable law and to verification of your identity, you may exercise the following rights with respect to personal data we process about you:
California / CPRA residents additionally have:
To exercise any right, contact [email protected] and include sufficient information to verify your identity. For locally-stored data, you may exercise your right to erasure by uninstalling the App.
The App is not directed to children under the age of 13 (or under the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children below the applicable age without verifiable parental consent.
If you are a parent or guardian and believe that a child under the applicable age has provided personal information to us, contact [email protected] and we will delete the data promptly.
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, including:
No security measure is impenetrable. You are responsible for keeping your device secure.
In the event of a personal-data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours. Where a high risk is determined, we will also notify affected users without undue delay.
The App does not use HTTP cookies. The App does use the device's local storage (localStorage) solely to persist the data described in Section 3.1. These technologies are strictly necessary for the App to function and are not used for tracking across services.
Third-party services used by the App include Apple App Store, Google Play, and Google AdMob, each governed by their own privacy policies. We encourage you to review them.
On iOS, before AdMob can access the IDFA advertising identifier, the operating system will present an App Tracking Transparency prompt. If you decline, the App continues to function and rewarded ads continue to be served on a non-personalized basis.
For users in the EU, EEA, and UK, the first time you request a rewarded video advertisement the App will present a consent dialog explaining AdMob's purposes. You may change your choice at any time from the App's settings screen.
If we discontinue any online service, we will notify users in advance, preserve locally-stored data, and comply with legal data deletion obligations.
We may amend this Policy from time to time. The "Effective date" and "Version" at the top will reflect the latest revision. Material changes will be brought to your attention via the App on next launch. Your continued use of the App after a change takes effect constitutes acceptance of the revised Policy.
For all privacy questions, requests, and complaints:
Email: [email protected]
EU/EEA users who wish to lodge a complaint may contact their local supervisory authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en
This Privacy Policy is incorporated by reference into the GridBurst Terms of Service. By accepting the Terms, you also accept this Policy.