Privacy Policy: Cannon Crowd: Smash the Castle

Crowd Cannon is published by PlayBrain. The game has no account system and does not ask for a name, email address, location, contacts, photos or free text. Your coins, levels, cannons, champions, mobs and their cards, cannon skins, daily streak and settings stay on your device. Nothing can be won or cashed out, and nothing random is ever sold for money.

The app is built to offer optional in-app purchases (none are on sale in the first version). If you buy something, Google Play handles the payment and we never see your card or billing details: see the "In-app purchases" section below.

Data used for analytics

The app uses a random identifier that it generates for itself on first launch. It is not the advertising ID, a hardware ID, or derived from either. We use it to tell one installation from another for retention analytics. The app records a limited vocabulary of gameplay events with a timestamp and the app version:

• first_open, session_start, session_end and first_interaction
• install_attribution: where this install came from: a Google ad, the Play Store, another PlayBrain game, or elsewhere, plus the ad campaign name (never the ad click identifier). Sent once, after install
• screen_view
• tutorial_step and tutorial_complete
• level_start, level_complete, level_fail and level_abandon
• currency_earned
• ad_offer_shown, ad_offer_hidden, ad_offered, ad_load_result, ad_result and ad_reward_granted
• interstitial_check, interstitial_shown and interstitial_result
• ad_revenue: what one advert earned, as reported by the ad network (amount and currency only)
• iap_offer_shown, iap_purchase_start, iap_purchase_result, iap_restore_start, iap_restore_result, iap_entitlement_changed and iap_unavailable
• feature_used
• review_prompt_shown and review_prompt_skipped
• reminder_offer_shown, reminder_offer_result, reminder_permission_result, reminder_scheduled and reminder_opened
• cross_promo_open and cross_promo_click
• app_error

Our server also records the country you are in, which it works out from your network address when the app first reports; the address itself is not stored.

In this game a "level" is one battle: a campaign level, the daily battle or the first guided level. The level events record which level it was, whether it was a campaign level, the daily battle or the guided first level, what share of the level's castles were smashed, how long it took, how many shots were fired and whether a heart was lost.

The app records its own errors, as the app_error event above. What is sent is the KIND of error and the screen it happened on. No message text, no stack trace, no file path and nothing you typed or did is included, and no third-party crash-reporting SDK is used.

The five reminder_ events record, in turn: the game offered to send you reminders; whether you said yes or not now to that offer; whether your phone allowed notifications when asked; that a reminder was set, what kind and how many hours away; and that you opened the game from a reminder. They carry no time of day.

Properties are limited to values chosen by the app, such as a level number, the mode, the step of the guide, the outcome of an advert, which bonus an advert was offered for, and the name of the in-game currency, which is coins.

Once the store opens, coins can be bought. A purchase is recorded as a PRODUCT IDENTIFIER such as mobrush.coins_s together with a price TIER, which is a code-chosen bucket name such as t1. A tier is not a price. No amount of money, no card number, no billing address and no receipt is ever collected or sent.

No player-entered text is sent. The events are sent to PlayBrain's first-party endpoint at playbrain.games and used to understand retention, progression, feature use and aggregate cross-promotion performance.

Advertising

The app shows two kinds of Google AdMob advert, and no banner.

A rewarded video plays only after you choose a bonus marked AD: multiplying the coins a won level paid (CLAIM on the win card), doubling the coins in a reward chest, collecting today's daily gift twice, keeping a daily streak going after a missed day, carrying on a lost battle (REVIVE, once a battle), or skipping a level after losing it twice in a row. Declining costs you nothing you already had: the coins a level paid are yours before any advert is offered.

One advert is not optional: a short full-screen advert may play when you leave a finished battle's card. It never plays during a battle, never on the first levels (not before four levels have been won), never right after a rewarded advert on that card, and never more often than a fixed cap allows.

Your consent choice can be changed at any time from Settings, Privacy options, where that row is shown in your region.

For any of these, Google and its advertising partners may process device or other identifiers, diagnostics, approximate location derived from an IP address, and ad interaction data to deliver, secure and measure ads. Where required, the Google consent form is shown before the ad SDK requests an advert. Declining personalised ads, or having no advert available, does not block play.

Google's privacy policy is available at https://policies.google.com/privacy.

Buying "No adverts" does not take the bonuses away. It removes the full-screen advert between battles. The optional bonuses above stay available, exactly as before.

In-app purchases

Nothing can be bought in the first version of the app: the store stays closed until the products exist on Google Play. When it opens, the app will offer optional purchases: No adverts, and coin packs. Nothing is locked behind them: coins, every cannon, champion and mob, and every level are earned by playing.

Payment is handled entirely by Google Play. We never see, receive or store your card number, billing address, name or receipt. No purchase-management service sits between the app and Google Play, and the record of what you own stays with your Google account, so a purchase can be restored on a new device by signing in with the same account.

Restore purchases will be available in Settings and in the store once it opens. Coin packs are consumable: once spent they are gone.

We record, for our own analytics, which product was shown and which was bought, as the product identifier and a price tier, exactly as described above. We never record an amount of money.

The com.android.vending.BILLING permission is in the app's manifest so that Google Play can take a payment if you choose to buy something. It grants access to nothing else.

Daily reminders

The app can send you optional reminder notifications, for example that the daily battle is ready, but only if you agree. After a win it asks first, in its own words, and only if you say yes does your phone ask for permission to show notifications. You can also switch the reminder on or off in Settings. The app never asks at launch, and never asks while you are in a battle.

The reminders are LOCAL: they are scheduled on your own device by Android and fire there. Nothing is sent to a server, there is no push service and no third party involved. The time is worked out on the device from when you usually play (the times of day your last few sessions started are kept on the device and are never sent), at most one a day, never between 21:30 and 09:00, and they stop if you have not played for two weeks. Turning the switch off cancels everything already scheduled, and you can also turn notifications off in your phone's settings at any time.

One install in ten is chosen at random, on the device, not to receive reminders, so that we can measure whether they help; everything else works the same for them.

Storage, sharing and retention

Analytics data is encrypted in transit. We do not sell it. It is shared only with infrastructure providers acting for PlayBrain and, for adverts, Google and its advertising partners. Local progress is deleted when the app's storage is cleared or the app is uninstalled; Settings, Reset progress erases it on request and keeps anything you bought. Server analytics is retained only as long as reasonably needed for the purposes above.

Deletion and contact

To request deletion of analytics connected to an installation, email [email protected]. Include the app name and the installation identifier if available. We may ask for information needed to locate the record, but never an account password, because the game has no accounts.

We may update this policy when the app or its service providers change. The effective date above will change with it.

Gameplay diagnostics and optional session recording

The app reports a closed error category and a hashed code-location fingerprint so PlayBrain can identify bugs. Exception messages, stack traces, account details and typed text are not transmitted.

Gameplay recording is optional and off until you choose Allow. In the EEA, the UK and Switzerland the question is one toggle inside Google's consent form, and Settings, Privacy options reopens that form so you can withdraw at any time. Everywhere else the app asks once itself, and Settings, Gameplay recording lets you withdraw at any time. Declining changes no gameplay, reward or purchase. A capture contains screen changes, taps, timing and the gameplay events listed above. There is no screen video and no audio.

A random session identifier is generated for each capture, without an advertising or hardware identifier. Captures last at most ten minutes, use the existing PlayBrain backend, become unavailable after seven days and are deleted in daily cleanup. Nothing is shared with a third-party replay service or used for advertising.

Contact

[email protected]