Skeleton Shield Smash

Skeleton Shield Smash (“the game”) is made by Elbe Games (“we”, “us”). This policy explains what data the game processes, why, who else receives it, and what you can do about it. It applies to the game on Android and iOS and to its online services at sss.elbe.games.

You can play without an online account. Most of what follows only applies once you choose to connect one.

1Playing without an account

Your bones stay in your closet.

Your progress (coins, skins, shields, scores, achievements, settings) is stored only on your device. We don't receive it. Uninstalling the game deletes it.

Reminder notifications (for example the daily gift) are scheduled locally on your device. No notification server is involved and you can turn them off in your device settings.

2Online account (optional)

If you tap Connect in Settings, the game creates an account on our server so you can appear on the leaderboards, add friends, and keep a cloud copy of your progress. A new account is a guest account: it has a random ID and a generated username and doesn't need any personal details. You can later secure it with an email address and a password so that you can log in on another device.

For an account we store:

We don't send emails to the address you provide. It is used only as your login name. We can't reset a forgotten password automatically; contact us (section 9) and we'll help after confirming the account is yours.

3Technical data when the game contacts our server

Whenever the game talks to our server, your device's IP address and the time and kind of request are processed so the connection can work. We also use the IP address and, when you log in, the email address entered, for a short time to limit repeated login and sign-up attempts (protection against abuse). These rate-limiting counters are kept only in memory and reset within hours. Server and proxy access logs may record IP address, time and requested path; we use them only to operate and secure the service and keep them only as long as needed for that.

4Advertising (Google AdMob)

The game shows ads through Google AdMob, provided by Google Ireland Limited / Google LLC. Before ads are shown, a consent form from Google (where required, for example in the EEA and the UK) lets you choose whether Google may use your data for personalized advertising. Without your consent, only non-personalized ads are shown. You can change your choice at any time in Settings → Privacy options.

Google receives device data such as the advertising ID, IP address, device and app information, and ad interactions. We don't receive this data and don't combine it with your account. See how Google uses data from apps that use its services and Google's privacy policy. The game doesn't track you across other companies' apps and websites, and it doesn't use any analytics or crash-reporting service.

5Purchases

In-app purchases are processed by Google Play or the Apple App Store. We never receive your payment details. The store tells the game which item was bought, and the game unlocks it. Purchase receipts are kept on your device to prevent double grants; they aren't sent to our server. If you buy Remove Ads or a paid skin, the unlock is also saved in your cloud save when you have an account. The store's own privacy policy applies to the payment.

6Sharing

When you share an achievement, the game opens your device's share sheet with an image and text. What happens next is up to you and the app you share to; we don't receive anything.

7Legal bases (EEA / UK)

• Providing the account, leaderboards, friends and cloud save: performance of the service you asked for (Art. 6(1)(b) GDPR).
• Personalized advertising: your consent (Art. 6(1)(a) GDPR), which you can withdraw in the Privacy options.
• Non-personalized ads, security, abuse protection and server logs: our legitimate interests in funding a free game and keeping the service secure (Art. 6(1)(f) GDPR).

8How long we keep data, and deleting your account

One tap and it's dust.

Account data is kept until you delete your account. You can do that in the game at any time: Settings → Account → Delete account. Deletion is immediate and permanent and removes your account, username, email address, password hash, scores, statistics, friendships, inbox messages, friend requests you sent, device logins and cloud save from our server. Progress stored on your device stays there until you uninstall the game. You can also ask us to delete your account by email (section 9).

Signing out of a secured account removes the account from that device only; your account and cloud save remain until you delete them.

9Your rights and contact

You have the right to access, correct and delete your data, to restrict or object to its processing, to receive your data in a portable format, and to withdraw consent at any time. You can change your username in the game and delete your account there. For anything else, contact us at firegate666@googlemail.com. You also have the right to lodge a complaint with a data protection supervisory authority.

10Children

The game is not directed at children under 13, and we don't knowingly collect personal data from them. If you are a parent or guardian and believe your child has given us personal data, contact us and we'll delete it.

11Security

Connections to our server are encrypted (HTTPS). Passwords and login tokens are stored only as hashes. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

12Changes

We'll update this page when the game's data handling changes, and change the date at the top.