• Google Play Services
• Google AdMob
• Unity Ads
• Firebase

Advertising Services

In order to offer our apps free of charge, we may display advertisements. To display ads, we use a mediation service that can deliver ads from providers such as Google AdMob and Unity Ads.

• Providers: Google Ireland Limited ("AdMob") and Unity Technologies, USA ("Unity Ads").
• Personalized Advertising: For this purpose, data (e.g., advertising ID, pseudonymized usage data) is processed in order to show you more relevant advertising.
• Legal Basis: Your express consent (Art. 6 (1) (a) GDPR).
• Non‑personalized ads (NPA): Contextual ads without profiling. If device identifiers or similar technologies are used (e.g., advertising ID), we also obtain your consent under ePrivacy/UMP. Purely contextual delivery without such technologies relies on legitimate interests (Art. 6(1)(f) GDPR).
• Legal Basis: Our legitimate interest in the Monetization of our app (Art. 6 (1) (f) GDPR).
• Platform (iOS ATT): Where required, the AppTrackingTransparency prompt is shown on iOS.
• Your control (consent management): Personalized advertising is displayed exclusively with your consent, which we obtain via a consent management platform (UMP). You can change this decision at any time in the app settings ("advertising settings" or similar) and revoke your consent.
• Privacy policies: Google, Unity

Services to ensure stability (legitimate interest)

• Firebase Crashlytics: To improve the technical stability of our app, we use Firebase Crashlytics (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the event of a crash, anonymized information (e.g., device type, operating system version) is transmitted to Google. These reports help us fix errors.
  • Legal basis: Our legitimate interest in a technically error-free and stable service (Art. 6 (1) (f) GDPR).
  • Your control (opt-out): You can opt out of Crashlytics' data collection in the app's settings.

Services for analysis and improvement (consent required)

• Google Analytics for Firebase: If you have given your consent, we use Google Analytics for Firebase (provider: Google Ireland Limited) to understand how users interact with our app. Pseudonymized data such as your advertising ID and usage events (e.g., levels reached) are collected. This analysis helps us improve the gaming experience. Firebase Analytics for Mobile Apps does not store IP addresses; Google may use IP addresses only transiently for transmission. Consent is collected via a separate analytics panel in the app (not via UMP).
  • Legal basis: Your express consent (Art. 6 (1) (a) GDPR).
  • Your control (revocation): Data is only collected with your consent. You can revoke your consent at any time in the app settings for the future.

Optional User Accounts and Cloud Storage

To provide you with extended, optional features such as cross-device game saves (Cloud Save), online rankings, or a persistent user profile, the respective app can use one of the following backend services:

• Microsoft PlayFab (Provider: Microsoft Corporation, USA)
• Firebase Authentication & Cloud Services (Provider: Google Ireland Limited)

• Legal basis: Processing is necessary to fulfill the contract for the provision of these optional functions (Art. 6 (1) (b) GDPR).
• Your control: The use of these functions is voluntary. You can usually manage your account and the associated data via the app settings or request its deletion from us.
• Provider privacy policies: Microsoft, Google

Hosting and processing

Our app backends and the website are hosted by professional infrastructure providers. We have data processing agreements in place with all processors (Art. 28 GDPR). Server locations are — depending on the service — within the EEA and/or in third countries with appropriate safeguards (see “International data transfers”).

International data transfers

Where data is transferred to providers outside the EEA (in particular the USA) — e.g., Google, Microsoft, Unity — we implement appropriate safeguards pursuant to Art. 46 GDPR (e.g., EU Standard Contractual Clauses). Where the provider participates in the EU‑US Data Privacy Framework, transfers may additionally rely on that framework. You can request a copy of the safeguards by contacting support@mibu.games.

Recipients and roles

• Independent or joint controllers: Ad networks and measurement partners (e.g., Google AdMob, Unity Ads) to the extent they process data for their own purposes.
• Processors: Infrastructure/back‑end providers (e.g., hosting/servers, Microsoft PlayFab for server features, Google Firebase Crashlytics/Analytics, FCM) acting on our behalf.
• Other recipients: Public authorities where legally required; legal counsel for the establishment, exercise or defense of legal claims.

Retention periods

We retain personal data only as long as necessary for each purpose:

• Multiplayer report data: 7 days (see above).
• Crashlytics crash reports: typically up to 90 days.
• Firebase Analytics events: typically 14 months (if enabled and consented).
• Ad IDs/consent strings: until you withdraw consent or per OS/partner policies; consent logs generally up to 24 months.
• Push tokens: until you unsubscribe/withdraw or at most 24 months of inactivity.
• Account/cloud data: until account deletion or upon your deletion request.
• Server log data (app/backend): usually 14–30 days unless longer is required for security.

Profiling and automated decision‑making

Profiling occurs only for personalized advertising and only based on your consent. We do not carry out automated decision‑making that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

Consent Management (UMP - User Messaging Platform)

We use UMP for advertising consents (e.g., Google AdMob, Unity Ads).
For Firebase Analytics, consent is collected via a separate in‑app consent panel ("Analytics settings").
You can change/revoke both decisions anytime in the app settings.

Consent management – details (UMP)

UMP (Ads): We log your advertising consent (timestamp, consent UI version, choice) and, where available, IAB TCF 2.2 signals.
Firebase Analytics: The separate analytics panel also logs your decision (timestamp, panel version, choice).
Retention: up to 24 months for documentation; changes apply prospectively.

Update checks and server connection

When the app starts (at least every 7 days), it connects to our server to check versions of legal documents. The following data is processed for technical reasons: IP address, timestamp, app version, and request metadata.
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) to inform you about upcoming changes.
Log data is typically retained for 7–14 days.

Your rights

You have the rights of access, rectification, erasure, restriction, objection, data portability, and to withdraw consents at any time. To exercise your rights, contact us at support@mibu.games. To verify your identity, we only request the minimum necessary information and process it solely for this purpose.

No profiling/tracking on the website

Our website does not perform profiling, user‑based tracking, or the delivery of personalized advertising.