GlowboxThe short version
- You don't need an account to play. Your game progress is saved on your device.
- Our games don't use analytics or crash-reporting tools.
- When ads are switched on, Google AdMob processes device information, including an advertising identifier where your choices allow it, to show and measure the optional reward ads. This can start shortly after the game opens so an ad is ready when you tap.
- Buying Remove ads or the Supporter Pack stops the ad service from starting.
- Purchases are handled by Apple or Google. RevenueCat checks them for us so they can be restored.
- You can see and change your privacy choices in the game's Settings. Your device's settings give you extra controls.
- Email support@glowboxgames.com to ask what we hold, or to have it corrected or deleted. Quote the Support ID shown in the game's Settings.
Contents
- Who we are
- What we collect
- Why we use it and our legal bases
- Ads and your choices
- Who we share it with
- Overseas processing
- Children
- How long we keep it
- Security
- Your rights and requests
- Regional information
- Complaints
- Changes to this policy
- Contact us
1. Who we are
Glowbox Games is a business name of Luminary Group Aus Pty Ltd (ABN 65 668 790 814), based in Sydney, New South Wales, Australia ("Glowbox Games", "we", "us"). We decide how and why personal information is handled in our games and on glowboxgames.com, and we're responsible for it under this policy. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and other privacy laws where they apply to us.
This policy currently covers Rolling Siege and this website. If a future game handles information differently, we'll describe the differences here before it launches.
2. What we collect
Stored on your device
Your game progress, settings, and a record of what you've unlocked are stored on your device, with a backup copy in the app's own storage. Save codes you create are made on your device. We don't receive any of this unless you choose to email it to us. Your device's own backups, such as iCloud or Google backups, may also include it, depending on your device settings.
Processed by Google AdMob when ads are switched on
For players who haven't bought Remove ads or the Supporter Pack, Google AdMob may process the following to request, show, measure and protect the optional reward ads:
- your IP address, which can show your general location
- device and app information, such as device model, operating system, language and app version
- your device's advertising identifier (IDFA on iPhone only if you allow tracking; Advertising ID on Android unless you've deleted it), along with other device or app identifiers
- information about ad requests and ads you view or tap
We see only summary reports from AdMob, such as how many ads were shown. We don't receive your advertising identifier.
Processed by RevenueCat, Apple and Google for purchases
When you buy something or restore purchases, Apple or Google processes the payment under their own terms. We never see your card or bank details. RevenueCat, our purchase-checking service, receives:
- an anonymous ID it creates for your app installation (shown as your Support ID in Settings)
- purchase receipts or tokens, transaction IDs, what was bought, when, the price, currency and store country
- basic device and app information
We can see these purchase records in RevenueCat's dashboard.
Reports from Apple and Google
If you've chosen to share analytics with app developers in your device settings, Apple or Google may give us summary statistics and crash reports about our games. We can't use these to identify you.
When you contact us
Your email address, your message, and anything you attach. If you send screenshots, images or receipts, we receive whatever they show.
When you visit this website
Our hosting provider, Cloudflare, processes your IP address and request details (such as the page requested, your browser and the time) to deliver the website and protect it from abuse. Cloudflare may set strictly necessary security cookies. The website has no analytics, advertising or tracking scripts and doesn't set its own cookies.
What we don't collect
Our games don't ask for your name, contacts, precise location, or access to your photo library, microphone or camera, and we don't use analytics or crash-reporting tools in our games.
3. Why we use it and our legal bases
Where a law requires us to have a legal basis for using personal information (for example, in the European Economic Area, the UK or Switzerland), these are the bases we rely on:
| Purpose | Information | Legal basis |
|---|---|---|
| Saving your progress and settings | Stored on your device only | Not applicable: we don't receive it |
| Delivering, checking and restoring purchases | Purchase records, Support ID | Performance of a contract with you |
| Showing personalised ads | Advertising and device identifiers, ad interactions | Your consent |
| Storing or accessing information on your device for ads, including non-personalised ads, measurement and frequency capping | Device identifiers, ad request information | Your consent where the law requires it. Otherwise, our legitimate interest in funding a free game with optional ads, balanced against your choices. |
| Preventing fraud and keeping our services secure | Purchase records, website request data | Our legitimate interest in protecting players and our business |
| Answering support and privacy requests | Your email and message | Our legitimate interest in helping players. Where a privacy law gives you the right, our legal obligation to respond. |
| Keeping business and tax records | Sales records | Legal obligation |
Where we rely on consent, you can withdraw it at any time (see section 4). Withdrawing consent doesn't affect anything we did lawfully before you withdrew it. Where we rely on legitimate interests, you can object (see section 10).
4. Ads and your choices
Our games show an ad only when you tap to watch one for a reward. So that an ad is ready when you tap, the game may start Google AdMob and request an ad shortly after it opens, before you choose to watch one. Choosing to watch an ad isn't consent to tracking. Your privacy choices below still apply.
- Personalised ads are shown only where the law and your choices allow it.
- Non-personalised ads aren't based on your past behaviour, but they may still use device identifiers or storage for things like measuring ads, limiting how often you see an ad, and preventing fraud. Where consent is needed for this, we respect your choice.
- Depending on your choices and which ads are available, you may be shown limited ads, which use less information, or an ad may not be available. If an ad can't be shown, you'll still get the reward.
Your choices:
- In the game (EEA, UK and Switzerland): the first time ads are set up, we show Google's consent message. You can change your choice any time in Settings › Ad privacy choices. This button appears where the law requires it.
- iPhone and iPad: we ask before tracking under Apple's App Tracking Transparency. You can change this in Settings › Privacy & Security › Tracking.
- Android: you can delete or reset your Advertising ID in Settings › Google › Ads (or Settings › Privacy › Ads).
- Remove ads or the Supporter Pack: once bought, the game doesn't start Google AdMob or request ads. Ad rewards are given instantly instead.
Your device's settings give you extra control, but they don't necessarily stop all processing by ad services. Ads in Rolling Siege are limited to content suitable for a "parental guidance" audience.
5. Who we share it with
We disclose personal information only to the providers below, for the purposes described. Some process information on our behalf and on our instructions. Others also use certain information for their own purposes under their own privacy notices.
| Recipient | Information and purpose | Role |
|---|---|---|
| Google (AdMob and Google's consent tools) | Device and ad information, to show, measure and protect ads and to record your consent choices | Google also uses some information for its own purposes. See how Google uses information from apps that use its services and the Google Privacy Policy. |
| RevenueCat | Purchase records and Support ID, to check and restore purchases | Processes on our behalf. See the RevenueCat Privacy Policy. |
| Apple and Google (app stores) | Downloads, payments and refunds | Independent, under their own terms: Apple, Google |
| Zoho | Our support email | Processes on our behalf. See the Zoho Privacy Policy. |
| Cloudflare | Website hosting and security | Processes on our behalf. See the Cloudflare Privacy Policy. |
We may also disclose information where the law requires it, to protect someone's safety, or to establish or defend legal claims. If our business, or a game, is sold or restructured, personal information may pass to the new owner. It would remain protected under applicable law, and we'd tell you about any material change to how it's handled.
We don't sell personal information for money. Some laws treat letting an advertising partner use device identifiers for personalised ads as a "sale" or "sharing". See section 11 for how to opt out.
6. Overseas processing
Our providers may store or access personal information outside Australia, mainly in the United States, and in other countries where they or their support teams operate. This includes Cloudflare's global network and the data centre region Zoho uses for our email. We choose established providers and take reasonable steps to make sure they handle information in line with the Australian Privacy Principles.
Where information from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on the transfer safeguards our providers make available, such as standard contractual clauses or a recognised certification framework, where applicable. Contact us to find out which safeguards apply and how to get a copy.
7. Children
Rolling Siege is made for a general audience of teens and adults. It isn't designed for or directed at children under 13, and our store listings are set up to match. Ads are limited to "parental guidance" content.
If we learn that personal information has been collected from a child in a way that needed parental consent or other protections that weren't in place, we'll take appropriate steps to stop that processing and delete the information, or otherwise bring it into line with the law. This includes information collected through the services built into our games, not just emails sent to us. Parents and guardians can contact support@glowboxgames.com.
8. How long we keep it
We keep personal information only as long as described below. After that we delete it, or make sure it can no longer identify anyone, subject to any legal requirement to keep it longer.
| Information | Held by | How long |
|---|---|---|
| Game progress, settings and save backup | Your device | Until you use Start over in Settings or delete the game. Copies in your device backups follow your backup settings. |
| Ad request and measurement information | Under Google's retention practices, which Google describes in its privacy policy. We only receive summary reports. | |
| Purchase records and Support ID | RevenueCat | While the game is available, so purchases can be restored. If you ask us to delete them, restoring those purchases may no longer work. |
| Payment records | Apple and Google | Under their own retention practices |
| Sales and tax records | Us | As long as Australian tax law requires. These are mainly summary sales reports from the app stores. |
| Support emails and attachments | Us (through Zoho) | Up to 2 years after your last message, so we can help if a problem comes back |
| Privacy request records | Us | 2 years after the request is completed, to show we handled it properly |
| Website request and security logs | Cloudflare | Under Cloudflare's short-term log retention. We don't keep separate website logs. |
9. Security
We use reasonable technical and organisational measures to protect personal information. These include encrypted connections and two-step sign-in on the accounts we use to run our games, and limiting access to the people who need it. No system can be guaranteed to be completely secure. If we suspect a data breach, we'll assess it promptly and notify affected people and regulators where the law requires it.
10. Your rights and requests
Depending on where you live and the circumstances, you may have the right to:
- access the personal information we hold about you, and correct it
- ask us to delete it, or restrict how it's used
- receive certain information in a portable format
- object to processing based on our legitimate interests
- withdraw consent you've given
- complain to a privacy regulator
These rights have conditions and exceptions under the law.
How to make a request: email support@glowboxgames.com with the subject "Privacy request". Our games don't use accounts, so to find records linked to your device please include the Support ID shown in the game's Settings (tap Copy), plus the game and device you use. We'll ask only for information reasonably needed to find your records and confirm the request is yours. If we can't identify the information, we'll explain why.
We'll respond within the time the law requires. Under the Australian Privacy Principles that is usually within 30 days, and we'll tell you if we need longer and why. If we need to keep some information, for example for tax law, we'll explain that when we respond.
Deleting a game removes the progress stored on your device, but it doesn't delete information already held by us or our providers. After a deletion request you can avoid future optional collection by buying Remove ads, refusing ad consent or tracking, or resetting your advertising identifier.
11. Regional information
European Economic Area, UK and Switzerland
The rights in section 10 apply to you, and you can complain to your local data protection authority at any time. You don't need to contact us first. If we're required to appoint a representative in the EU or UK, we'll list their details here.
United States
If you live in a US state with a consumer privacy law that applies to us, you may have rights to know, access, correct and delete personal information, and to opt out of its "sale" or "sharing" for targeted advertising. To opt out, refuse tracking on iPhone, delete your Advertising ID on Android, or email support@glowboxgames.com with the subject "Opt out" and your Support ID. We'll honour your request for future processing. You won't be treated differently for using these rights. If someone else is making a request for you, we may ask for proof they're authorised.
12. Complaints
You're welcome to raise any concern with us first at support@glowboxgames.com, and we'll try to resolve it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992, or to your local privacy regulator, at any time.
13. Changes to this policy
When this policy changes, we'll update the date at the top and keep earlier versions. For important changes, we'll also tell you in the game. If a change means using your information for a new purpose that needs your consent, we'll ask for it first.
14. Contact us
Glowbox Games (Luminary Group Aus Pty Ltd, ABN 65 668 790 814)
Sydney, NSW, Australia
Email: support@glowboxgames.com