Steampunk Bridge: Kinematic Overload — Privacy Policy

Effective date: 29 October 2026. Last updated: 29 October 2026 (Daily leaderboards, §6a). This policy is published at https://terrasys.dev/steampunk-bridge/privacy.

This policy explains what information the game Steampunk Bridge: Kinematic Overload (Android package and iOS bundle com.steampunkbridge.kinematicoverload, "the game") collects, why, who receives it, how long it is kept and what choices you have. The game is published by Tran Quoc Bao, Ho Chi Minh City, Vietnam ("we", "us"). Contact: quocbao.uit@gmail.com.

1. Summary

• You do not create an account with us. The game does not ask for your name, e-mail address, phone number, contacts, photos, camera, microphone or precise location.
• Most game data stays on your device.
• Data leaves your device only for: in-app purchases (the app store and our receipt server), advertising (Google AdMob, after your consent where the law requires it) and, when available, online matches (Photon), cloud save and Daily leaderboards (Google Play Games or Apple Game Center).
• The game contains no analytics SDK and no crash-reporting SDK of its own.

2. Data stored on your device

The game saves, in its private app storage: your campaign progress (stars, best scores and golden gears per level and mode, daily challenge results, unlocked robots); unfinished bridges; levels and drafts from the Level Editor; your in-game wallet (Cogs, Gems, pass points), the ledger of rewards already paid, and a record of each purchase (store product, store transaction id and receipt, status); settings (language, sound, haptics, camera options, notices already shown); a random install id used for purchases (§3); a random device id used by cloud save (§6); your best Daily times waiting to be sent to a leaderboard (§6a); and the consent choice stored by Google's consent tool (§4).

We cannot see this data. It is deleted when you uninstall the game or clear its data. Your device's own backup (for example Android backup or iCloud Backup) may include it, under your Google or Apple account and their terms.

3. In-app purchases

Payments are handled by Google Play (Android) or the Apple App Store (iOS). We never receive your card, bank or billing details.

To deliver each purchase exactly once and to handle refunds, the game sends to our receipt server (Google Firebase Cloud Functions and Cloud Firestore, run by Google for us in the asia-southeast1 region, Singapore):

• the store's proof of purchase: the Google Play purchase token, or the App Store signed transaction, and its transaction id;
• the product id, the game's package / bundle id and version, and your device's clock time;
• a purchase attempt id created by the game, and a pseudonymous install id: a random value created on this installation the first time the shop starts. It is not derived from your device, your advertising id or any account.

Our server checks the purchase with Google or Apple and keeps a record of it: store, transaction id, product, order id, purchase time, refund time and reason, test or live environment, the install id(s) that redeemed it, and the attempt id. It does not keep the full receipt. Our server logs contain the install id and a short hash of the transaction id, never the full purchase token.

When the shop is available, the game also asks our server, about once per session and with the install id, whether a purchase made on this installation was refunded, so it can take back what a refunded purchase gave.

The game also gives the store a reference so the store's record can be matched to the request: the attempt id on Google Play ("obfuscated account id"), and on the App Store a code derived from the install id and the attempt id ("app account token").

Our server sees your IP address when the game connects. It uses it in memory to limit request rates; Google Cloud's standard request logs may also record it.

Why (for users in the EEA / UK): to perform our contract with you (deliver what you bought), our legitimate interest in preventing fraud and abuse, and our legal obligations (tax and accounting records).

4. Advertising and your consent

The game shows ads from Google AdMob: a rewarded video that you may choose to watch after a won level to double its Cogs, and full-screen ads between levels (never in the first five levels; the "No Ads" purchase removes them). There are no banner ads.

Where the law requires consent (the EEA, the UK, Switzerland, and US states with such rules), the game first shows Google's consent message (User Messaging Platform) and requests no ad until your answer allows it. You can review or change your choice at any time in Settings > Privacy options (shown where the consent message applies). On iOS, after Google's message, Apple's App Tracking Transparency prompt asks whether ads may use your device's advertising identifier (IDFA); if you decline, it is not used.

The Google Mobile Ads SDK in the game collects, as described by Google: your device's advertising identifier (Android advertising ID; on iOS the IDFA only if you allow tracking) and app-scoped identifiers, your IP address (used to estimate an approximate location), your interactions with ads (for example views and taps) and diagnostic data (crashes and performance of the SDK). Google and the ad partners shown in the consent message use it to show, limit, measure and personalise ads (personalisation only where you allow it) and to prevent fraud, under their own policies: https://policies.google.com/technologies/partner-sites.

We do not add any personal information to ad requests and we do not receive your advertising identifier. The game does not mark ad requests as directed to children (see §11).

Your choices: Settings > Privacy options; your device settings (Android: Settings > Google > Ads, delete or reset the advertising ID; iOS: Settings > Privacy & Security > Tracking); the No Ads purchase (removes full-screen ads; rewarded videos stay optional).

5. Online matches (Photon, when available)

Online matches run through Photon Cloud, a relay service of Exit Games GmbH (Germany). One player's device hosts the match and decides the result; the other device shows what the host sends. When you play online, your device connects to Photon's servers, which receive your IP address and give the connection a random id for that session. Through Photon the game sends the room code, matchmaking settings (game version, rules version, region, mode and queue) and the match data (your bridge, robot moves and the result) to the other player. The game sends no name, account or chat. Region: Photon's Asia region (Singapore). Photon's privacy policy: https://www.photonengine.com/privacy.

6. Cloud save (when available)

When cloud save is available and you are signed in to Google Play Games (Android) or Game Center (iOS), the game keeps one copy of your progress in your Play Games saved games or, through Game Center, in your iCloud. The copy holds your stars, best scores and golden gears per level and mode, your daily challenge results, the robots you have unlocked, and a random device id with a save counter for each of your devices (so progress from two devices can be combined without losing any). Google or Apple store it under your account; we do not run a server for it and cannot read it.

The game reads your player id only to notice when a different account signs in; it keeps a salted hash of that id on the device and never sends it to us. Your settings (language, sound, haptics, graphics and camera options) are not synced: they stay on each device. Wallet balances, rewards already paid and purchases are not part of the cloud save either.

On Android, Google Play Games may sign you in by itself when the game starts if you already use Play Games on your phone; on iOS you sign in from Settings. To stop cloud save on a device, use Settings > Cloud save > Sign out: the game then makes no cloud save requests on that device until you sign in again. Your progress on the device is kept. The cloud copy stays in your Play Games or iCloud account until you delete it there; uninstalling the game does not delete it.

6a. Daily leaderboards (when available)

When Daily leaderboards are available and you are signed in to Google Play Games (Android) or Game Center (iOS) (the same sign-in as cloud save), the game submits your completion time for each Daily Build and Daily Arrange challenge you win to that day's leaderboard on Google Play Games or Game Center. The score is linked to your Play Games or Game Center player profile, and other players can see it, with your profile name and picture, as the visibility settings of your Play Games or Game Center profile allow. Google and Apple store and show these scores under their own terms and privacy policies (https://policies.google.com/privacy, https://www.apple.com/legal/privacy/); we do not run a server for them and receive nothing.

The game sends only the time, the leaderboard id and, on Play Games, a tag with the challenge's date. It sends no other data and adds no new identifier. While you are signed out or offline, your best time of the day waits on your device and is sent once you are signed in, but only on the same day (UTC); otherwise it is discarded. To stop sending times, do not sign in, or use Settings > Cloud save > Sign out. Who can see the scores already posted is set in your Play Games or Game Center profile settings.

7. Level Editor and Level Codes

Levels you make in the Level Editor are saved on your device only; we do not upload them. You can share a level by copying its Level Code (a text code that contains the level, its title and its hint) and pasting it wherever you like. The game reads the clipboard only when you tap Import or Paste. Please do not put personal information in level titles or hints.

8. Crash reports and diagnostics

The game has no crash-reporting or analytics SDK of its own, and Unity's cloud diagnostics and analytics are switched off. If you allowed it in your device settings, Google Play and Apple share crash and performance reports with us under their own terms. The ads SDK collects its own diagnostics (§4).

9. Who receives data

• Google (Google Play, Firebase / Google Cloud for our receipt server, AdMob and the ad partners listed in the consent message).
• Apple (App Store, Game Center / iCloud).
• Exit Games GmbH (Photon), for online matches.
• The other player in an online match receives the match data.
• Other players on Google Play Games or Game Center see your Daily leaderboard times with your platform profile (§6a).
• Authorities, when the law requires it.

We do not sell your personal information for money. Under some US state laws, personalised advertising may count as "selling" or "sharing"; you can opt out through the Privacy options / consent message where they are offered, or through your device's ad settings.

10. Where data is processed and how long it is kept

Our receipt server runs in Singapore (asia-southeast1). Google, Apple and Exit Games may process data in other countries under the safeguards they provide (for example the European Commission's standard contractual clauses).

• Data on your device: until you delete the game or its data.
• Purchase records on our server: up to 10 years after the purchase, for as long as tax and accounting law requires, then deleted or anonymised.
• Our server logs: 30 days.
• Data held by Google, Apple and Exit Games: as described in their privacy policies.

11. Children

The game is not directed to children under 13 and is not set up for children's advertising. If you believe a child has given us personal information, contact us and we will delete it.

12. Your rights and choices

Depending on where you live (for example under the EU / UK GDPR, Vietnam's personal data protection rules, China's Personal Information Protection Law or US state privacy laws), you may have the right to access, correct or delete your personal information, to object to or restrict its use, to receive a copy, to withdraw consent, and to complain to a data protection authority. Write to quocbao.uit@gmail.com. Because you have no account with us, please include the order number of your purchase (Google Play: starts with "GPA."; App Store: the order id or transaction id from Apple's receipt) so we can find the records. We answer within 30 days. To delete the data on your device, uninstall the game. For ads, use Privacy options or your device settings.

13. Security

Purchase validation and ads use encrypted connections (HTTPS). Purchase records can be read only by our server; the store keys it needs are kept in Google Secret Manager, never in the game.

14. Changes

We will post any change on this page with a new effective date, and point to important changes in the game or its store listing.

15. Contact

Tran Quoc Bao, Ho Chi Minh City, Vietnam. E-mail: quocbao.uit@gmail.com.