Short version: you can play without an account. If you sign in, we keep your account ID, the email address your sign-in method gives us, and your game progress, so your progress is safe and can move to a new phone. We do not sell your data, we show no ads, and we use no tracking or analytics in this version of the game.
1. Who we are
Tower Drop: Balance ("the game") is made by DevStudio, the controller of the personal data described here. You can reach us through the developer contact email shown on the game's Google Play store page.
2. What we collect
- On your phone only: your progress (levels, stars, coins, diamonds, items), settings and loadout. This stays on your device unless you sign in.
- If you sign in (optional): sign-in is handled by Firebase Authentication (Google). We receive an account ID
and, depending on the method you choose, your email address:
- Guest - an anonymous account ID only.
- Google - your Google account ID and email address.
- Facebook - your Facebook user ID and, if you allow it, your email address. We never post to Facebook.
- Email and password - your email address; your password is handled by Firebase and never stored by us.
- Cloud save: for a signed-in player we store your game progress and the time it was saved on our server, so you can restore it on another device.
- Redeem codes: when you redeem a code we store the code and your player ID so each code is used once.
We do not collect your location, contacts, photos, microphone or camera, and we do not use advertising IDs.
3. Why we use it
- to sign you in and keep you signed in;
- to save your progress to the cloud and restore it on a new device;
- to deliver rewards from redeem codes and stop codes being reused;
- to keep the service secure and prevent abuse.
Our legal basis is the performance of our service to you (GDPR Art. 6(1)(b)) and our legitimate interest in keeping it secure (Art. 6(1)(f)).
4. Who processes it for us
- Google (Firebase Authentication, Google Sign-In) - account sign-in.
- Meta Platforms (Facebook Login) - only if you choose to sign in with Facebook.
- Cloudflare - hosting of our game server and the cloud-save database.
We do not sell or rent your personal data, and we share it with no one else except where the law requires it. Some of these providers may process data outside the EU under the European Commission's standard contractual clauses or an adequacy decision.
5. How long we keep it
Account and cloud-save data are kept while your account exists. When you delete your account they are deleted, normally at once and at the latest within 30 days. Data that stays only on your phone is removed when you uninstall the game.
6. Deleting your account
In the game: Settings → Account → Delete account. This deletes your account and your cloud save. You can also ask us to delete it for you: see how to delete your account and data.
7. Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to restrict or object to its use, and you can take your data with you. If you are in the EU or UK you can also complain to your data-protection authority. Contact us through the developer email on the game's Google Play page.
8. Children
The game is made for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13; if you believe a child has given us data, contact us and we will delete it.
9. Security
All traffic between the game and our server is encrypted (HTTPS). Secrets on our server are stored only as salted hashes.
10. Changes
If we add advertising, in-app purchases or anything else that changes what we collect, we will update this policy before that version of the game is released, and change the date above.