Privacy Policy

This policy explains what data the mobile game Stitchionaire: Fashion Tycoon (the "Game") for Android collects, why, who receives it, and what choices you have.

Who we are. The Game is published by BigDuck18 ("we", "us"), an independent developer based in Poland. We are the data controller. Contact: support@bigduck18.games.

1. Data we collect and why

a) Your game account and progress (our servers)

On first launch the Game creates a random installation ID and a player account on our server. You do not register or give us your name, email or phone number.

We store:

• the installation ID and player ID;
• technical tokens that keep your session secure;
• your game progress and settings;
• records of in-app purchases: product, time, Google Play order ID and purchase token;
• technical data sent with each request: app version, platform and OS version, language, and the IP address in server logs.

We use this data to run the Game, save and restore your progress, check that purchases are genuine, run in-game events, and protect the Game against fraud and abuse.

Legal basis (GDPR): performance of our contract with you (Art. 6(1)(b)) and our legitimate interest in security and fraud prevention (Art. 6(1)(f)).

Our servers are hosted by Vultr in the Netherlands (EU).

b) Advertising (AppLovin MAX)

The Game shows ads through AppLovin MAX (AppLovin Corp.). Some ads give you an in-game reward if you choose to watch them.

AppLovin and its demand partners may collect:

• your device's advertising ID and App Set ID;
• IP address and approximate location derived from it;
• device and app information;
• ad interactions.

They use it to show, measure and, where you allow it, personalize ads.

In the EEA, UK and Switzerland we ask for your consent through Google's consent message before personalized ads; you can change your choice at any time in Settings → Privacy settings.

In US states with privacy laws you can opt out of the sale or sharing of personal information for targeted advertising in the same place.

You can also reset or delete your advertising ID in your Android settings.

AppLovin privacy policy: https://www.applovin.com/privacy/

c) Consent management (Google)

The consent message is provided by Google's User Messaging Platform, part of the Google Mobile Ads SDK. It stores your choices on your device and shares them with our ad and analytics partners.

Google privacy policy: https://policies.google.com/privacy

d) Analytics and crash reports (Google Firebase)

We use Firebase Analytics and Firebase Crashlytics to understand how players use the Game and to fix errors. They collect:

• an app instance ID and device information;
• game events (for example levels reached, purchases, ads watched);
• performance data (frame rate, freezes);
• crash reports.

Analytics storage follows your consent choices.

Information: https://firebase.google.com/support/privacy

e) Attribution (AppsFlyer)

We use AppsFlyer to learn which ads or campaigns brought players to the Game, to measure revenue and to detect fraud. AppsFlyer may collect:

• advertising ID, App Set ID, IP address and device information;
• install referrer data;
• in-game events, including purchases (product, price, currency) and ad revenue.

Your consent choices are passed to AppsFlyer.

AppsFlyer privacy policy: https://www.appsflyer.com/legal/services-privacy-policy/

f) Purchases (Google Play)

Payments are processed by Google Play; we never see your card or payment details.

We receive the order ID, product and purchase token and send them to our server to verify the purchase and deliver the item.

g) Notifications

The Game can schedule local reminders on your device (for example when production is ready). They are created on the device; no notification data is sent to us.

You can turn them off in the Game's settings or in Android settings.

The Game does not collect your contacts, photos, precise location, microphone or camera data.

h) This website

This website (bigduck18.games) uses no cookies, no analytics, no advertising or social-media trackers, and loads no fonts, scripts or images from third parties. Our hosting provider, Cloudflare, Inc., delivers the pages and, like any web host, processes technical data such as your IP address in its server logs for security and operation. If you email us, we use your address only to answer you.

2. Legal bases for personalized ads and analytics

Where the law requires it (EEA, UK, Switzerland), personalized advertising and related storage on your device rely on your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time in Settings → Privacy settings.

Non-personalized ads, security and fraud prevention rely on our legitimate interests.

3. Who receives your data

• Service providers acting for us: Vultr (hosting), Google Firebase.
• Independent partners under their own policies: AppLovin and its advertising partners, AppsFlyer, Google (consent message, Google Play).

We do not sell your personal data for money. Some laws treat sharing data for targeted advertising as a "sale" or "sharing"; you can opt out as described above.

Some partners process data outside your country, including in the United States. They use legal safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

4. How long we keep data

• Game account and progress: while the account is in use, and deleted 24 months after your last activity (last session), or earlier if you ask us to delete it.
• Purchase records: 5 years, in anonymised form (no installation ID, no link to your player account), to meet tax and accounting obligations under Polish law and to handle refunds.
• Server logs: 30 days.
• Partners keep data according to their own policies.

5. Your rights

Depending on where you live, you have the right to:

• access, correct or delete your data;
• restrict or object to processing;
• receive your data in a portable form;
• withdraw consent.

Write to support@bigduck18.games. You can also complain to your data protection authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych, UODO, https://uodo.gov.pl).

6. Deleting your data

To delete your game account and progress, email support@bigduck18.games with the subject "Delete my data".

Include the Support code shown at the bottom of the Game's Settings screen; without it we cannot find your account, because we do not know your name or email.

We will delete your account, progress and related data on our servers within 30 days and confirm by email.

We keep only what the law requires us to keep (for example purchase records for tax, accounting and refunds), in anonymised form and for the period stated above.

Uninstalling the Game removes the data stored on your device.

To delete data held by our partners, you can also contact them directly through the links above.

7. Children

The Game is intended for players aged 16 and over. It is not directed at children under 16, and we do not knowingly collect their data.

If you believe a child has provided data, contact us and we will delete it.

8. Security

Data is sent over encrypted connections (HTTPS). Saves on the device are signed and encrypted. Access to our servers is restricted.

9. Changes

We may update this policy. The current version is always at this address, with the date at the top. Important changes will be announced in the Game.

10. Contact

BigDuck18, independent developer, Poland — support@bigduck18.games