Privacy Policy: Space Tunnel: Endless Runner

The short version

• There is no account and no sign-in. We never ask who you are.
• Your level progress, your gems and cores, and your settings are stored on your device.
• What leaves your device: anonymous gameplay analytics we collect ourselves, Google AdMob when an advert is requested, and Google Play if you choose to buy something.
• Rewarded adverts are ones you opt into by pressing a button that says so. One advert is not optional: a full-screen advert may play when you leave a finished level, never during one. The "No advert breaks" purchase removes the full-screen advert. There are no adverts on opening the app.
• There are optional in-app purchases: in-game cores, boosters, and removing the advert breaks. Levels are never sold, and the gems you earn by playing cannot be bought with money.
• The game is not directed at children under 13.

What is stored on your device

All of this stays on your phone and is removed when you uninstall the app. None of it is sent to us.

• tunnelrun.wallet.v1: which levels you have cleared, your gem and core balances, your boosters, which tunnels and suits you own, your daily streak and gift streak, and your best distance.
• tunnelrun.muted.v1, tunnelrun.nomusic.v1, tunnelrun.vibration.v1 and tunnelrun.reducedmotion.v1: your sound, music, vibration and reduced-motion settings.
• tunnelrun.review.v1: how long you have played and whether the app has already asked you to rate it, so that it does not ask again.
• tunnelrun.telemetry.device.v2 and tunnelrun.telemetry.queue.v1: a random identifier for this install, and any analytics events waiting to be sent.

What is sent to our own servers

The app sends anonymous gameplay analytics to a server we run at playbrain.games. It is switched off during development and on the web, and it is used to understand which puzzles people finish and where they stop, not to identify anybody.

The identifier attached to those events is a random value generated on your device the first time the app runs. It is not your advertising id, not your hardware id, and not tied to any account, because there is no account. Uninstalling the app destroys it, and a reinstall is a new install to us.

The events are:

• first_open, session_start, session_end and first_interaction: that the app was opened, how long the session lasted, and how soon you touched anything.
• install_attribution: where this install came from: a Google ad, the Play Store, another PlayBrain game, or elsewhere, plus the ad campaign name (never the ad click identifier). Sent once, after install.
• screen_view: which screen you are on, and which one you came from.
• level_start, level_complete, level_fail and level_abandon: which run, how it went, and how far through you were if you left.
• ad_offer_shown, ad_offer_hidden, ad_offered, ad_load_result, ad_result and ad_reward_granted: whether an optional advert was offered, whether one was available, how it ended, and whether the reward was given.
• interstitial_check, interstitial_shown and interstitial_result: the same, for an advert between levels.
• ad_revenue: what one advert earned, as reported by the ad network (the advert type, the amount, its currency and how precise the network says that amount is).
• currency_earned, currency_spent and feature_used: which in-game currency was earned or spent, and which tunnel themes and runner suits are bought and used.
• action_blocked: the app refused something you tried, and why, such as not having enough currency.
• review_prompt_shown and review_prompt_skipped: whether the rating prompt appeared.
• reminder_offer_shown: the game offered to send you reminders.
• reminder_offer_result: whether you said yes or not now to that offer.
• reminder_permission_result: whether your phone allowed notifications when asked.
• reminder_scheduled: a reminder was set, what kind and how many hours away.
• reminder_opened: you opened the game from a reminder.
• cross_promo_open and cross_promo_click: whether our other games were looked at.
• app_error: something went wrong, which kind of error and on which screen, with no message and no personal data.
• iap_store_open, iap_offer_shown, iap_purchase_start, iap_purchase_result, iap_restore_start, iap_restore_result, iap_entitlement_changed and iap_unavailable: what was shown in the shop and how a purchase ended. What is recorded is a product identifier our own code chose, such as tunnelrun.cores_small, and a price TIER, which is a code-chosen bucket name such as t1. A tier is not a price. No amount of money, no card number, no billing address and no receipt is collected or sent.

That is the complete list. There is no free-text field, so nothing you type can reach us, and the app never sends the contents of a puzzle or anything about your device beyond the platform it is running on.

Our server also records the country you are in, which it works out from your network address when the app first reports; the address itself is not stored.

Advertising

Adverts come from Google AdMob, in two kinds:

• Rewarded video you choose, which plays only after you pick a hint or boost marked AD: Scout, Shield, Rewind, the carry-on when your three lives are gone, the doubled reward on a win and the streak rescue.
• A full-screen advert (an interstitial), which is not optional: it may play when you leave a finished level, never during one, never in your first few levels, and never more often than a fixed cap allows.

Buying something never removes a rewarded advert, because those are things you asked for. Declining personalised ads or having no advert available does not block play.

Google and its advertising partners may process device or other identifiers, diagnostics, approximate location derived from an IP address, and ad interaction data to deliver, secure, and measure ads. Where required, the Google consent form is shown before the ad SDK requests an advert, and you can change your choice at any time from Settings, Privacy options.

Google acts as an independent controller of the data it collects through those adverts, and its handling of it is covered by Google's own policy. We never receive your advertising id.

In-app purchases

The app offers optional purchases: packs of cores, a bundle of boosters, a starter pack, and the option to remove the full-screen advert between levels. Nothing in the game is locked behind them. Gems are a play currency only and cannot be bought with money.

Purchases are handled entirely by Google Play Billing. No purchase-management service sits between the app and Google Play, and the record of what you own stays with your Google account, so a purchase can be restored on a new device by signing in with the same Google account. We never see, receive or store your card number, billing address, name or receipt, and no third party receives a purchase identifier from us.

Restore purchases is available in the settings menu and in the shop, without an account. Packs of cores are consumable: once spent they are gone. The com.android.vending.BILLING permission is there so that Google Play can take a payment if you choose to buy something. It grants access to nothing else.

What the app does not do

• No account, no email address, no password, no sign-in.
• No selling of your data to anyone, and no advertising identifier used to profile you across other apps.
• No exception messages, stack traces or file paths. The app does report its own errors, as the app_error event above, but only the KIND of error and the screen it happened on. Optional gameplay recording is described in the notice above.
• Optional local reminders: the app can tell you your daily gift is ready, and nudge you if you have not played for a couple of days. It is off until you switch it on in Settings, and that switch is the only thing that ever asks Android for notification permission. The reminder is scheduled on your own device and fires there: nothing is sent to a server, there is no push service and no token, and we cannot tell whether one was delivered or opened.
• No location (other than the country our server works out, described above), no contacts, no photos, no microphone. The app plays sound and never records: the microphone permission is explicitly blocked, along with storage, media and the permission to draw over other apps.
• No selling or sharing of personal information, because none is collected.

Deleting your data

Uninstalling the app removes everything it stored, including the random analytics identifier. Events already sent are anonymous and not linked to you, so there is nothing tied to a person for us to delete. If you would like the events from a particular install removed, write to us at the address below with the install id, and we will delete them.

Children

Space Tunnel is not directed at children under 13 and we do not knowingly collect information from them. There is nothing in the app that asks a player for personal information.

Changes to this policy

If the app's data practices change, for example if a different advert format or an analytics tool is ever added, this policy will be updated before that version ships, and the date at the top will change.

Contact

Questions about this policy: [email protected]