Privacy Policy
1. Who we are and what this covers
This policy explains what personal data Tibith Ltd ("Tibith", "we", "us") collects when you play our games (each a "Game") or use tibith.com, why we collect it, who we share it with, and what you can do about it.
Tibith Ltd is the data controller. We are a private limited company registered in England and Wales (company number 13367852), registered office Level 5a Maple House, 149 Tottenham Court Road, London, W1T 7NF, United Kingdom. Privacy questions go to support@tibith.com.
This policy applies to every Game we publish, now or in the future, on every platform, and forms part of our Terms of Service.
2. What we collect and why
We collect only what the Games need to run. We never ask for your name, email address, phone number, or payment details inside a Game; payments are handled entirely by the Apple App Store or Google Play.
| Data | Where it comes from | What we use it for | Legal basis (UK/EU GDPR) |
|---|---|---|---|
| Player ID: a random account identifier created when you first play, linked to your Game Center or Google Play Games account if you sign in | Created by the Game; sign-in from Apple or Google | Saving your progress, restoring it on a new device, running multiplayer | Contract |
| Player name and character names you choose | You | Showing you to other players in multiplayer and rankings | Contract |
| Purchase history, Virtual Currency balance, and purchase receipts | Apple or Google when you buy something; verified by a receipt-validation service | Delivering what you bought, verifying purchases are genuine, handling refunds, reversals, and chargebacks, preventing fraud | Contract; legitimate interest (fraud prevention) |
| Gameplay data: match results, rank, progression, in-game stats | Generated as you play | Matchmaking, rankings, balancing the Games, fixing bugs | Contract; legitimate interest (improving the Games) |
| Device and log data: device model, OS version, app version, language, IP address, crash and error logs | Your device, via Firebase and our game servers | Running the Games, diagnosing problems, security | Legitimate interest (running and securing the Games) |
| Country or region, approximate, from your IP address or store | Derived by Firebase and our servers | Matchmaking to nearby servers, analytics, regional pricing and content | Legitimate interest |
| Advertising identifier (IDFA on iOS, GAID on Android) and ad interaction data | Your device, via the ad SDKs listed in section 5, only where you have consented | Showing ads, measuring them, and limiting how often you see the same one | Consent |
| Analytics events: sessions, screens, feature use, purchases | Firebase Analytics | Understanding how the Games are used so we can improve them | Legitimate interest; consent where required |
| Support emails: your email address and whatever you tell us | You, when you contact support@tibith.com | Answering you, restoring progress, granting purchases, handling data requests | Contract; legal obligation (for data-rights requests) |
We don't sell your personal data, and we don't use it to make decisions about you that have legal or similarly significant effects.
3. What other players can see
In multiplayer and on leaderboards, other players can see your player name, your character names, your rank, and your match results against them. They may also see your country or region. They never see your Player ID, your purchases, your email address, or anything else from the table above.
Player names are public. Don't put personal information in them.
4. Advertising and your choices
Some Games show ads. The ad networks listed in section 5 may collect your advertising identifier, IP address, device information, and how you interact with ads, and use that data to show you ads, measure them, and, where you've allowed it, personalise them. Each network is its own data controller for the data it collects; their policies are linked below.
Your choices:
- iOS: the Game asks for permission to track through Apple's App Tracking Transparency prompt. If you say no, you still get ads, but not personalised ones based on tracking. You can change this any time in Settings > Privacy & Security > Tracking.
- Android: you can reset or delete your advertising ID and opt out of personalised ads in Settings > Google > Ads.
- EU, EEA, UK, and Switzerland: the Game shows a consent prompt before loading ads, and you can change your answer later from the Game's privacy settings.
- Do not sell or share: the Game's privacy settings include a "do not sell my data" switch. Turning it on passes a do-not-sell signal to every ad network listed in section 5 so they stop using your data for personalised advertising. It's available to everyone, not only in California.
- Remove Ads: where a Game offers an ad-free purchase, buying it stops ads and the ad SDKs from being shown or called.
Analytics for Firebase also collects your advertising identifier unless you've declined tracking, in which case it uses a non-advertising app instance ID instead.
5. Who we share data with
We use the following companies to run the Games. They process data on our behalf or, in the case of ad networks and app stores, as controllers in their own right. We don't share your data with anyone else, except where the law requires it or to protect our rights, the Games, or other players.
| Provider | What they do | Data they receive | Policy |
|---|---|---|---|
| Google Firebase (Authentication, Realtime Database/Firestore, Cloud Functions, Analytics, BigQuery) | Accounts, saved progress, game backend, analytics | Player ID, player name, purchases and balance, gameplay data, device and log data, country, analytics events | |
| Apple Game Center / Google Play Games Services | Sign-in and progress restore | Your Apple or Google account identifier for the Game | Apple / Google |
| Apple App Store / Google Play | Payments, downloads, refunds | Handled under their own terms; we receive a purchase receipt, not your payment details | Apple / Google |
| IAPGUARD (Flobuk) | Server-side purchase verification | Purchase receipts, Player ID | IAPGUARD |
| Photon (Exit Games) | Real-time multiplayer networking | Player ID, player name, IP address, match data | Photon |
| Edgegap | Hosting game servers near you | IP address, approximate location, match data | Edgegap |
| Google AdMob | Ads | Advertising identifier, IP address, device info, ad interactions | |
| Unity Ads | Ads | Advertising identifier, IP address, device info, ad interactions | Unity |
| AppLovin | Ads | Advertising identifier, IP address, device info, ad interactions | AppLovin |
| ironSource (Unity) | Ads | Advertising identifier, IP address, device info, ad interactions | ironSource |
| Pangle | Ads | Advertising identifier, IP address, device info, ad interactions | Pangle |
| Google Workspace | Support email | Your email address and the contents of your messages to us |
We may add or change providers as the Games evolve; we'll update this table when we do.
6. Where your data goes
We are based in the UK and our providers run servers around the world, mainly in the United States and the EU, so your data may be transferred outside the country you live in. Where data leaves the UK or EEA, we rely on the safeguards built into our providers' contracts: the UK International Data Transfer Addendum and EU Standard Contractual Clauses, and, for US providers certified under it, the EU-US Data Privacy Framework and its UK extension.
7. How long we keep it
- Account and gameplay data (Player ID, names, progress, purchases, balance, rank, match history): for as long as your account exists. If you ask us to delete it, we remove it within 30 days. We may also delete accounts that have been inactive for a long time.
- Purchase receipts: for as long as needed to handle refunds and disputes, and up to 6 years after the purchase for tax and accounting records, as UK law requires.
- Analytics data: Firebase Analytics keeps user-level data for 14 months; aggregated reports may be kept longer.
- Server and crash logs: up to 90 days.
- Support emails: up to 2 years after the ticket is closed, so we can handle follow-ups and repeat requests.
- Ad data: held by the ad networks under their own retention periods, not by us.
8. Children
Our Games are not directed at children. Each Game carries an age rating set per store and per country, and you must meet it to play. We do not knowingly collect personal data from anyone under 13, or under the age at which they can consent to data processing where they live. Our ad networks are configured on that basis.
If you're a parent or guardian and believe a child has given us personal data, email support@tibith.com and we'll delete it.
9. Security
Your data is stored with Google Firebase and our other providers, who encrypt it in transit and at rest and are independently certified against recognised security standards. Access on our side is limited to what's needed to run the Games and answer support. No system is perfectly secure, so we can't guarantee absolute security, but we take reasonable steps to protect your data and will tell you and the relevant regulator if a breach affects you in a way the law requires us to report.
10. Your rights and how to delete your data
Wherever you live, you can email support@tibith.com to ask us to:
- tell you what data we hold about you and give you a copy;
- correct it;
- delete it;
- stop or restrict how we use it, or object to our use of it;
- give it to you in a portable format;
- withdraw consent where we rely on it (for example, for personalised ads), without affecting what we did before you withdrew.
We'll respond within one month. We may ask you to confirm which Game and which Game Center or Google Play Games account you mean, so we delete the right data and not someone else's. We won't charge you, and we won't treat you differently for exercising your rights.
Deleting your account and data. Your in-game account is tied to your Game Center or Google Play Games account; there is no separate Tibith account or password. To delete everything we hold about you, email support@tibith.com from any address with the Game's name and your player name, and we'll delete your Player ID and all data stored under it, including progress, purchases, and Virtual Currency. This can't be undone, and purchases aren't refunded. Deleting the Game from your device does not delete your data on our servers; emailing us does.
UK and EU/EEA. The rights above come from the UK GDPR and the EU GDPR. You can also complain to the UK Information Commissioner's Office at ico.org.uk or to your local data protection authority.
California and other US states. Under the CCPA/CPRA and similar laws in Virginia, Colorado, Connecticut, Utah, and other states, you have the right to know, access, correct, and delete your data, and to opt out of the sale or sharing of personal information for targeted advertising. We don't sell personal information. Showing you personalised ads through the networks in section 5 may count as "sharing" under California law; you can opt out using the ad choices in section 4, or by emailing us. We don't knowingly share personal information of anyone under 16.
Brazil. Under the LGPD you have the rights above plus the right to know who we share data with and to be informed about the consequences of refusing consent.
Everyone else. If your country gives you similar rights, email us and we'll honour them.
11. Support emails
When you email support@tibith.com we keep your email address and your message so we can reply and handle follow-ups. Support is run through Google Workspace. We may use software tools, including AI assistants, to help sort and draft replies to support requests; any action on your account, such as restoring progress or deleting data, is reviewed by a person before it happens. Please don't send us passwords, payment details, or anything you wouldn't want stored in a support inbox.
12. This website
tibith.com is hosted on Squarespace, which collects standard server logs and may set cookies for site function and, if enabled, analytics; see Squarespace's privacy policy. The contact form sends what you type to us by email. Links to other sites, including app stores and YouTube, take you to services with their own privacy policies.
13. Changes to this policy
We'll update this policy when our data practices or providers change. Significant changes will be announced in the Games or on tibith.com, and the date at the top of this page tells you when it last changed.
14. Contact
Tibith Ltd, company number 13367852, Level 5a Maple House, 149 Tottenham Court Road, London, W1T 7NF, United Kingdom.
Email: support@tibith.com, or use tibith.com/contact.