Privacy Policy

1. Introduction

This Privacy Policy explains how GCS Technology Ltda. ("GCS Technology," "we," "us," or "our") collects, uses, and discloses information in connection with your use of Another Tower Defense (the "Game"), our mobile application available on Google Play.

By downloading, installing, or playing the Game, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with this policy, please do not use the Game.

2. Information we collect

The Game does not require you to create an account, and we never ask for your name, email address, or password.

• Anonymous player ID. When you first open the Game, we automatically create an anonymous identifier tied to your installation. It lets our servers keep your progress in sync and, on its own, does not identify who you are.
• Game progress and activity. Your crystal and token balances, permanent upgrades, unlocked cards and achievements, and a summary of each run (waves reached, enemies defeated, duration) are stored on our servers, linked to your anonymous player ID.
• Technical information. Platform (Android), app version, device language, and an approximate time-zone offset are sent to our servers to keep your game state consistent.
• Purchases and advertising interactions — see Sections 3 and 4.
• Aggregated analytics. We use anonymized, aggregated statistics (for example, how often a given perk is picked, or the distribution of waves reached) to balance and improve the Game. These aggregates do not identify individual players.
• Certain technical information may also be automatically collected by Google Play Services and the third-party providers described in this policy, such as your advertising identifier, IP address, approximate location, device model, operating system version, crash reports, and general app usage or performance data.

3. Advertising

The Game displays advertisements served through Google AdMob, a service operated by Google LLC.

AdMob and its advertising partners may collect and process data such as your advertising ID, IP address, device information, and app interaction data in order to serve ads — including personalized ads based on your interests — measure ad performance, and prevent fraud.

You can control ad personalization at any time:

• On Android, go to Settings > Google > Ads and select "Opt out of Ads Personalization," or reset your advertising ID.
• Learn more about how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites and about AdMob specifically at support.google.com/admob.

To grant rewards reliably and prevent abuse, we also record on our own servers, linked to your anonymous player ID, when a rewarded ad is opened, completed, and closed, together with the ad unit shown and the confirmation from AdMob's server-side verification that the ad was actually watched.

4. In-app purchases

The Game offers optional in-app purchases, including virtual currency (crystals and tokens), an option to remove advertisements, and other in-game items.

All purchases are processed and billed entirely by Google Play Billing. We never see or store your payment card number, billing address, or other financial details — that information is handled directly by Google under its own Privacy Policy and the Google Play Terms of Service.

To verify a purchase and grant the corresponding reward (tokens or the ad-free/premium entitlement), we store a record of each purchase — the product purchased, its status, the purchase token used to verify it with Google Play, and the date — linked to your anonymous player ID.

We may access aggregated, anonymized purchase and revenue data through the Google Play Console to operate, support, and improve the Game.

5. Data storage & retention

Local settings and a cached copy of your progress remain on your device until you uninstall the Game or clear its app data.

The data described in Section 2 is stored on our servers, hosted by our database provider, Supabase (see Section 6), and is kept as follows:

• Your anonymous player ID, balances, and progress are kept while your installation remains active, or until you request deletion (Section 8).
• Detailed records of individual runs are kept for up to 90 days; after that, only anonymized, aggregated statistics are kept.
• Records of a rewarded ad are kept for up to 30 days after its reward has been granted.
• Abuse-prevention logs (rate limits) are kept for up to 2 days.
• When you delete your account, we remove the link between your purchase records and your player ID, but keep a de-identified financial record for legal and accounting purposes and to prevent the same purchase from being redeemed twice.

6. Third-party services

The Game relies on the following third-party services, each governed by its own privacy policy:

• Supabase (database and backend hosting for game progress, purchases, and ad-reward records) — supabase.com/privacy
• Google Play Services — policies.google.com/privacy
• Google AdMob (advertising) — support.google.com/admob
• Google Play Billing (in-app purchases) — Google Play Terms of Service

7. Children's privacy

The Game is intended for a general audience and is not directed to children under the age of 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address below so we can take appropriate action.

8. Your rights (GDPR / LGPD)

Depending on where you live, you may have rights under applicable data protection laws, including the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD) or the EU General Data Protection Regulation (GDPR), such as the right to access, correct, delete, or restrict the processing of your personal data, and to withdraw consent at any time.

How to delete your data. You can permanently delete your account and all associated game, purchase, and advertising data from our servers at any time, directly in the Game, under Settings > Support > Delete my account. Deletion is immediate and cannot be undone. If you prefer, you can request deletion by emailing us at the address in Section 12; since the Game does not require a login, please include details that help us locate your player ID, such as roughly when you started playing.

Because most technical data collected in connection with the Game is processed by Google as an independent controller (through Google Play Services, AdMob, and Google Play Billing), requests relating to that data should be directed to Google through the resources linked above.

9. Data security

We take reasonable measures to protect information under our control from unauthorized access, alteration, or disclosure, including encrypted connections (HTTPS) between the Game and our servers, and database access controls that restrict each player to their own data. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

10. International data transfers

Because the Game is distributed globally, data processed through our backend (Supabase) and through Google's services (advertising, billing, and Play Services) may be transferred to and processed in countries other than your own, including the United States, in accordance with those providers' own privacy and data-transfer practices.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Your continued use of the Game after changes are posted constitutes your acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or how the Game handles data, contact us at: