SWARMZSwarmZ ("the game") is made by LBC Studios Inc., [POSTAL ADDRESS] ("we", "us"). This policy explains what the game and our website send to us and to others, why, how long we keep it and how to have it deleted. You can write to us at support@lbcstudios.ca. This page is at https://lbcstudios.ca/swarmz/privacy.
Harrow Industries is the fictional company you play in the game. It is not a separate business and it does not process your data.
1. The short version
- You do not create an account, and the game never asks for your name, email address, phone number or contact list.
- The game gives you an anonymous Player ID automatically. Your save, your stats and an activity log are stored against that ID.
- If you choose a player name, other players see it next to your scores.
- If your phone is signed in to Google Play Games, the game links your account to your Play Games profile by itself shortly after it starts, and we store your Play Games player ID against your account, so you can restore your progress on a new phone. You can also link it yourself in Settings. The game never opens a Google sign-in for this on its own: if your phone is not signed in to Play Games, nothing is linked. Your progress is only replaced by a Play Games profile's progress if you agree when the game asks.
- The game has no ads and contains no ad SDK. We use Singular, a measurement service, to learn which of our own ad campaigns bring players. It receives your Android advertising ID and some device data (section 3).
- If you buy something, Google Play handles your payment. We never see your card.
- We do not sell your data.
- You can delete everything yourself in the game (Settings > Delete my data), or on the web (section 8).
- The game is for people aged 13 and over.
2. What the game collects
| What | Details | Why |
|---|---|---|
| Anonymous Player ID | A random identifier created by our backend the first time the game opens, kept on your device with a sign-in token. It is not linked to your name or email. | To store your save and your scores, and to tie your activity log together. |
| Google Play Games player ID (only if your phone is signed in to Google Play Games, or you tap LINK in Settings) | The ID of your Play Games profile in this game, which Google gives us when the game links your profile: automatically shortly after the game starts when your phone is already signed in to Play Games, or when you tap LINK in Settings. It is stored against your Player ID. We use the one-time sign-in code Google issues only to ask Google which profile it is, and we do not keep the code. We store only the ID, not your Play Games name or your Google account email. It is never shown to other players and never sold. | To restore your progress on a new phone: when the same profile is linked there, the game asks, and you agree, we bring your save and purchases to the new phone. |
| Game save | Your progress: currencies, cards, upgrades, level results, loadout, achievements and statistics. Saved on your device and copied to our backend. | So your progress is kept and can follow you to a new phone. |
| Display name (optional) | A name of 3 to 20 letters, digits, spaces, underscores or hyphens that you pick. | To show you to other players next to your scores. Do not use your real name. |
| Scores and rewards | Your kill totals, your best endless-mode wave on each level, and the in-game rewards you earn or collect. | To show scores and give event rewards (in-game items only). |
| Install ID and device details | A random install ID made on first run, your device model, Android version, language and region setting (locale), the graphics mode you chose and the quality tier the game picked for your device. The game sends them with your Player ID once per session. | To fix bugs on particular devices, tune performance, and tell apart one player on two devices. |
| Activity log | Events such as: app opened, session start and end, level started and finished (level, result, waves, kills, duration), upgrades bought, cards picked, packs opened (which pack and which odds version), score views, and which screens you open and which buttons you tap, with the screen's name and the button's label, plus taps on the battlefield (screen coordinates). Each event carries the game version, your platform (for example Android), the session number, a running sequence number and a time. We never read text you type. | To understand where players get stuck or quit, fix bugs and balance the game. |
| Purchase records | If you buy something in the game: the product, the Google Play order ID and purchase token, and the time. Your card or payment details go to Google and never to us. | To check with Google that a purchase is real, grant it exactly once, and keep our books. |
| Attribution data | Singular receives your Android advertising ID, the install information Google Play gives it (which campaign led to the install), your IP address, basic device and app data, a few game milestones and your purchases. Section 3 has the list. | To measure which of our ad campaigns bring players. |
| Server logs | Our hosting provider records technical request data such as your IP address when the game contacts our backend. | Security and operating the service. |
Google Play itself tells us how many people installed the game, and crash and slowdown reports (Android vitals). That information is collected by Google under its own policy.
We do not collect your precise location, contacts, photos, files, microphone or camera input, or your email address in the game. Your IP address reaches us and the services in section 5 only as part of ordinary internet requests; it gives a rough location at most.
3. Attribution (Singular) and the advertising ID
The game contains no ads and no ad SDK. If we ever add ads, we will update this policy first and ask for any consent the law requires.
We advertise the game elsewhere, and we use Singular (Singular Labs, Inc.) to measure which campaigns work. The Singular SDK in the game:
- reads your Android advertising ID (the build declares the
AD_IDpermission for this), and reads the install information that Google Play provides, which says which campaign or link led to your install; - sends them with your IP address and basic device and app data (such as device model, Android version and app version);
- is told when you finish the tutorial, when you win a level (and which level), when you collect an achievement (and which), when you buy an unlock (and which one) and when you make a purchase (the product, price and currency, plus the purchase data Google Play gave the game, so that Singular can check it is real).
It does not receive your Player ID, your display name or your save. Singular passes install and event results ("postbacks") to the ad networks we buy from, so they can count the install. Singular's own handling of data is described at https://www.singular.net/privacy-policy/.
Your choices. - In the EEA, the United Kingdom and Switzerland, Singular only shares data with advertising partners if you agree. The game keeps this choice as "limit data sharing" and applies it to Singular. - You can reset or delete your advertising ID, or turn off ad personalization, in your Android settings (Settings > Google > Ads, or Privacy > Ads). A deleted advertising ID reads as zeros, so attribution stops matching you. - To have Singular's records about you deleted, see section 8.
Everything else in the game works whatever you choose.
4. Our website and the support form
The page at https://lbcstudios.ca/swarmz has a support form. If you send it, we receive:
- your email address (required) and, if you give them, your name and your Player ID;
- the topic you pick and your message;
- your browser's user agent, and a one-way hash of your IP address, which we use only to limit how many requests one connection can send per hour. We do not store the IP address itself.
Your message is stored in our backend (section 5), and a copy is posted to a private channel on Discord that only our support team can read; we reply to you by email. We use it only to answer you, fix the problem and keep a record of what we told you. We do not use advertising or tracking cookies on the site.
5. Who receives your data
| Recipient | What | Role |
|---|---|---|
| Supabase (database, sign-in, Edge Functions) | Player ID, Google Play Games player ID (if your phone is signed in to Play Games or you link it), save, display name, kill score, install ID and device details, activity log, purchase records, support-form messages, server logs | Our service provider. It processes data for us under its data processing addendum. |
| Google (Google Play, Google Play Billing, Google Play Games) | Purchase and billing data, and Play's own install and crash reports. If your phone is signed in to Google Play Games: your Play Games sign-in, which Google handles under its own policy | Independent controller for Play; our verification of a purchase asks Google's Play Developer API about the purchase token, and linking asks Google's Play Games service which profile you signed in with. |
| Singular | See section 3 | Our measurement service provider; passes results to the ad networks you came from. |
| Discord | A copy of each support-form message: your email address, name, Player ID, topic and message | Where our support team reads requests, in a private channel. Discord holds it under its own policy. |
| Authorities and advisers | Only if the law requires it, or to protect our rights |
We do not sell personal data for money. Singular's postbacks to ad networks (section 3) are measurement. Some US state privacy laws call that kind of sharing "sharing" for advertising; if you live in such a state, you may ask us not to do it (section 8).
6. Where it is processed
LBC Studios Inc. is in Canada. Our game backend (the project is called "swarmz") runs on Supabase in the Amazon Web Services US West (Oregon), United States region. Singular, Discord and Google process data in the United States and other countries. If you are in the EEA or the UK, your data is therefore transferred outside your country; where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses, which are part of our providers' data processing terms.
7. How long we keep it
| Data | Kept |
|---|---|
| Player ID, save, player name, scores, endless-mode bests | While your anonymous account exists. We delete accounts that have been inactive for 24 months, unless the account is linked to a Google Play Games profile, in which case we keep the account until you delete your data in Settings (or ask us to). |
| Google Play Games link (your Play Games player ID) | While the account it is linked to exists, which for a linked account means until you delete your data in Settings (or ask us to). Deleting your data removes the link. |
| Install ID, device details and activity log | 24 months after the event, or until you delete your data in Settings (or ask us to). |
| Purchase records | 6 years after the end of the tax year of the purchase, because Canadian tax law requires us to keep our books. After you delete your data, the record no longer points to your Player ID. |
| Support-form messages | 24 months after you send them, in our backend and in our Discord channel. A deletion request is kept for the same time, as our proof that we carried it out. |
| Server logs | Up to 30 days. |
| Backups | Our hosting provider's daily backups age out within 7 days; deleted data is gone from them by then. |
| Data held by Google, Singular and Discord | Kept by each under its own policy. |
If you uninstall the game, the data on your device is removed with it, but the copy on our backend stays until you delete it in Settings (or ask us to) or it expires.
8. Deleting your data and your other rights
In the game: open Settings and tap "Delete my data", then confirm. This deletes your account on our backend at once: your save, player name, scores, rewards, endless-mode bests, install ID, device details, activity log and your Google Play Games link, if there is one. The game then starts again on your device as a new anonymous player.
Google Play Games. The game links your Play Games profile by itself only when your phone is already signed in to Play Games; it never opens Google's sign-in for this. To stop it, sign out of Google Play Games on your phone before you start the game. To remove a link that exists, delete your data as above: after that the game does not link the new anonymous player by itself, and you can still tap LINK in Settings if you want to.
On the web, without the game: go to https://lbcstudios.ca/swarmz/delete (or the support form at https://lbcstudios.ca/swarmz with the topic "Delete my data"). Give the Player ID shown in the game under Settings and an email address to reach you. If you no longer have the game, email support@lbcstudios.ca with the subject "Delete my SwarmZ data" and tell us what you remember. We delete the same data within 30 days and confirm by email. A Player ID is the only way we can find your data, because we hold no name or email for it.
What we keep after you delete:
- Purchase records (Google order ID, purchase token, product, time), without your Player ID, for the period in section 7.
- If you held a level's all-player endless record, the record's wave number stays and shows as "Former Pilot"; your name is removed.
- Your support-form messages, for the period in section 7. You can ask us to delete them sooner unless we need them to prove a refund or a deletion.
- Anything Google, Singular or Discord hold under their own policies.
Singular's records. Singular never receives your Player ID, so we cannot find your record from it. Send us your Android advertising ID (Settings > Google > Ads) and we will pass a deletion request to Singular.
Your other rights. Where the law gives you the rights, you may also ask us for a copy of your data, to correct it, to restrict or object to how we use it, or to withdraw consent you gave (withdrawing does not affect what we did before). Write to support@lbcstudios.ca. We answer within 30 days.
- Canada: you may ask for access to your personal information and challenge our handling of it, and complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or, in Quebec, the Commission d'accès à l'information.
- EEA and UK: you may complain to your data protection authority.
- US states with privacy laws, including California: you have the rights that law gives you. We will not treat you differently for using them.
9. Legal bases (EEA and UK)
- Running the game, your save and your scores, and restoring your progress through a Google Play Games link (made automatically when your phone is signed in to Play Games, or by you in Settings, and only applied to your progress when you agree): performing our contract with you (the game's terms of service).
- Install ID, device details and activity log; security and fraud prevention: our legitimate interest in improving and protecting the game.
- Advertising ID and attribution: your consent in the EEA, the UK and Switzerland, and our legitimate interest in measuring our campaigns elsewhere.
- Purchase records: our legal obligations and performing the contract.
- The support form: our legitimate interest in answering you, and your request.
10. Children
SwarmZ is intended for people aged 13 and over. If your country sets a higher age for using a service like this without a parent's permission, you must meet it. We do not knowingly collect data from children under 13. If you believe a child under 13 has used the game, write to us and we will delete the data.
11. Security
Data between the game or the website and our backend travels over HTTPS (TLS). Access to our database is restricted by row-level security so a player can only read their own rows; administrators use a separate, role-checked path. No system is perfectly secure.
12. Changes
If we change this policy in a way that matters, we will update the date above and, for material changes (including ads, or a new service that receives your data), say so in the game or on the store listing.
13. Contact
LBC Studios Inc., [POSTAL ADDRESS], support@lbcstudios.ca.