Privacy Policy

Important: Not every app uses every service described below. The functions and SDKs actually enabled, app-specific notices, and the Google Play Data safety section determine the processing for each app.

1. Controller

2. Scope

This policy applies to games, mobile apps, websites, and related services provided by Garlic Flame Games. Individual products may have additional privacy notices.

3. Data

Depending on the product and enabled features, we or our providers may process device and technical data, IP address, approximate region, device or advertising identifiers, gameplay and usage data, saves, achievements, diagnostics and crash logs, consent and advertising data, account information, purchase status, and support communications.

4. Purposes and legal bases

Data may be processed to provide and improve services, save progress, handle purchases, diagnose errors, secure services, prevent fraud, provide advertising and analytics, and respond to support requests. Under the GDPR, the legal basis may be consent, performance of a contract, compliance with law, or legitimate interests.

5. Google Play and Google services

Google may process account, device, IP, diagnostic, and transaction information when users download or update apps or use licensing, Google Play Billing, Play Games, cloud functions, or other Google services. Google’s privacy terms also apply.

6. Google Mobile Ads / AdMob

Some apps may use AdMob. Data may include IP address, device and advertising identifiers, diagnostics, ad interactions, and fraud-prevention information. Personalised advertising in the European Economic Area is used only where the required consent has been obtained.

7. Firebase

Some apps may use Firebase Analytics, Crashlytics, Cloud Messaging, Remote Config, Authentication, or cloud storage. Depending on the service, technical identifiers, usage events, crash logs, push tokens, account data, or stored content may be processed.

8. Unity and Unity Gaming Services

Our games may be built with Unity and may use Unity Analytics, Unity Ads, Cloud Diagnostics, Authentication, Cloud Save, Leaderboards, Remote Config, or other Unity Gaming Services. These services may process device information, IP address, player and advertising identifiers, usage, diagnostic, crash, and advertising-interaction data.

9. Purchases

In-app purchases are normally processed by Google Play or another platform provider. We generally do not receive complete payment details, but may receive purchase status, product identifiers, and transaction references.

10. Cookies and similar technologies

Our websites may use essential cookies. Analytics, marketing, or advertising cookies are used only where legally permitted and, where required, after consent. Mobile apps commonly use SDKs, local storage, or device identifiers instead of traditional browser cookies.

11. Permissions and notifications

Apps may request permissions such as notifications, storage, camera, microphone, or network access only for specific features. Users can manage permissions and push notifications in their device settings.

12. Recipients and international transfers

Data may be disclosed to platform, hosting, analytics, advertising, support, and technical providers. Google, Unity, and others may process data outside the EEA. Where required, transfers rely on an adequacy decision, EU Standard Contractual Clauses, or another lawful mechanism.

13. Retention

Data is retained only for as long as required for its purpose, legal obligations, or legal claims. Local game saves may remain on the device until the app or its data is deleted.

14. Children

The target audience is specified separately for each app. Where children are included, applicable requirements concerning advertising, consent, and data minimisation are observed.

15. Account and data deletion

Where an app provides accounts, users may request deletion in the app or by emailing games@codemagic.net. Verification may be required to prevent unauthorised deletion.

16. Rights

Subject to applicable law, individuals may have rights of access, rectification, erasure, restriction, portability, and objection. Consent may be withdrawn for the future, and users may lodge a complaint with a competent supervisory authority.

17. International users

We do not sell personal data for money. Under some US state laws, certain personalised-advertising activities may nevertheless be treated as a “sale,” “sharing,” or “targeted advertising.” Applicable choices will be provided where required.

18. Security and changes

We use appropriate technical and organisational safeguards. This policy may be updated when our services, providers, or legal requirements change.

19. Contact