Grid Duel privacy policy.

01 Who we are

Grid Duel is published by Mobilebytesensei Private Limited ("Mobile Byte Sensei", "MBS Studio", "we", "us"), a company incorporated in India. For the personal data described here we are the Data Fiduciary under the Digital Personal Data Protection Act 2023 and the controller for the purposes of the GDPR and UK GDPR, except where this policy says Google acts as a separate controller.

This policy covers the Grid Duel app for Android phones. Our website has its own policy, which does not apply to the game.

02 In short

• There are no accounts. We never ask for your name, email address, phone number or age.
• Your progress, collection, settings and any player names you type stay on your phone. We do not receive them.
• The game uses Google services for anonymous usage measurement, crash reports, ads and the Remove ads purchase.
• Ads, personalised ads, usage measurement and crash reports each have their own switch in Settings > Privacy settings. Where the law requires your consent first, nothing is switched on until you choose, and every choice lets you play.
• We do not sell your personal data for money.

03 What stays on your device

Your level, stars, medals, statistics, collection, settings, privacy choices, any match in progress and the names typed for a Two players match are stored only on your device. We do not receive them, and uninstalling the game deletes them.

If Android backup is switched on for your device, Google may back up this data to your Google account under Google's own terms. You control this in your Android settings.

The game asks for no access to your location, contacts, camera, microphone, photos or files. It uses network access, the network state (to know when you are offline) and vibration (for haptics).

04 What is collected, by whom, and why

The following data leaves your device. It is sent over encrypted connections, and only while the matching switch is on and, where consent is required, after you have given it.

05 Our legal basis

• In the European Economic Area, the United Kingdom, Switzerland and anywhere else the law requires consent first: your consent, asked before any ad request, usage measurement or crash reporting begins. Until you have answered, and until the first successful consent check has finished (for example if your phone is offline when you first open the game), the game requests no ads and switches on neither usage measurement nor crash reporting.
• Elsewhere: our legitimate interests in keeping the game working and stable, understanding how it is used, and funding a free game with advertising. These are on by default, and you can switch each of them off at any time.
• Remove ads: performing the purchase you asked for.
• You may withdraw consent or object at any time, as easily as you gave it, from Settings > Privacy settings. Withdrawal does not affect what happened before it.

06 Your choices in the game

You can also reset your advertising ID or opt out of ad personalisation in your Android settings.

Some Google components the game includes, Firebase Installations and Firebase Sessions, handle an installation identifier and basic session information and have no switch of their own. When the game starts they may contact Google to register the installation, including before you have made a choice. They do not send usage events, crash reports or ad requests until your choices allow them.

07 Google's role

For Firebase Analytics, Firebase Crashlytics and Firebase Sessions, Google acts as our service provider and processor under the Firebase data processing terms, and uses the data only to provide those services to us.

For advertising, Google acts as a separate controller and may combine ad data with other information it holds to personalise and measure ads, where you allow it. Google explains this at policies.google.com/technologies/partner-sites, and its own privacy terms are at policies.google.com/privacy. Google Play handles purchases under Google Play's terms.

08 Sale and sharing of personal data

We do not sell personal data for money, and we do not use it for our own marketing. Some laws, including those of several US states, treat giving advertising data to an ad network for personalised advertising as a "sale" or "sharing" of personal data. To opt out of that, switch off Personalised ads, or switch off Ads entirely, in Settings > Privacy settings.

09 How long data is kept

10 Transfers outside India

Google processes this data in the United States and other countries where it operates. We transfer personal data outside India only as permitted under section 16 of the DPDP Act. For players in the EEA, the UK and Switzerland, Google LLC is certified under the EU-US Data Privacy Framework and its UK and Swiss extensions, and its terms incorporate standard contractual clauses.

11 Security

Data sent by the game travels over encrypted connections, and the game stores nothing on our own servers. We restrict access to the Firebase and advertising consoles to people who need it, with multi-factor authentication. If a personal data breach occurs, we will notify the Data Protection Board of India, the affected players where we can identify them, and any supervisory authority, as the law requires.

12 Your rights

Depending on where you live, and subject to the conditions the law sets, you have the right to:

• Obtain a summary of the personal data held about you and how it is processed
• Have it corrected, completed or erased
• Withdraw consent, and object to or restrict processing
• Receive your data in a portable format, where the GDPR applies
• Nominate someone to exercise your rights in the event of your death or incapacity, under section 14 of the DPDP Act
• Complain to the Data Protection Board of India once our grievance process is exhausted, or to the data protection authority where you live

13 Exercising your rights

Because the game has no accounts and holds no names, we cannot find your data from your name or email address. The data on your device is erased by Start fresh or by uninstalling the game.

For data held in Firebase, write to privacy@mobilebytesensei.com with your request and, if you can, the game's app instance identifier, and we will use Firebase's tools to access or delete the data linked to it. For advertising data, use your Android ad settings or contact Google, which controls it. We respond within thirty days and charge no fee.

14 Grievance Officer

Under the Information Technology Act 2000, the rules made under it, and section 13 of the DPDP Act, grievances about how the game processes personal data may be addressed to our Grievance Officer. We acknowledge a grievance within forty-eight hours and resolve it within thirty days of receipt.

15 Age

Grid Duel is intended for people aged thirteen and older. It is not directed to children, does not ask for your age, and tells Google not to treat its ads as directed to children. If you are under thirteen, please do not use the game. Where the law of your country sets a higher age for agreeing to the processing of personal data, a parent or guardian should make the privacy choices in the game.

If you believe a child under thirteen has used the game and data about them has been collected, write to privacy@mobilebytesensei.com and we will delete what we can link to them.

16 Changes to this policy

When we change what the game collects or why, we update this page and the date at the top before the update reaches players. If a change requires your consent, the game asks for it before applying the change.

17 Governing law

This policy is governed by the laws of India. Subject to any non-waivable right you have to approach the Data Protection Board of India, a data protection authority or a court where you live, disputes relating to it are subject to the exclusive jurisdiction of the courts at Delhi, India.