Privacy Policy for Thumb Ball
Thumb Ball is a free mobile game developed and operated by Thumb Things ("Thumb Things", "I", "me" or "my"). I am the data controller for the personal information described in this Privacy Policy.
This Privacy Policy explains what information is collected when you use Thumb Ball, why it is collected, how it is used and shared, and the choices and rights available to you.
Information Collected
You do not need to provide your name, email address, phone number or create a personal account to play Thumb Ball.
However, Thumb Ball and the third-party services it uses may collect or process the following information automatically:
App and device information, such as device model, operating system and version, app version, language, country or approximate location, and information about how the app was installed.
Identifiers, such as a Firebase app-instance identifier, Firebase installation identifier, Crashlytics installation UUID, Unity player identifier and, where available and permitted, an Android advertising identifier. These identifiers generally identify an app installation or device rather than identifying you by name.
Gameplay and usage information, such as app launches, sessions, game starts and finishes, scores, high-score rankings, game duration, screens or features used, notification interactions and other in-game events.
Leaderboard information, including a pseudonymous Unity player identifier, submitted scores and leaderboard rank.
Advertising information, such as ads requested, displayed or interacted with, ad performance, and information used to provide personalised or non-personalised advertising, depending on your consent, location, age settings and device choices.
Crash and diagnostic information, such as stack traces, crash logs, non-fatal errors, relevant app state, device metadata, app version and diagnostic events or breadcrumbs leading up to a crash.
Third-party providers may process an Internet Protocol (IP) address to deliver and secure their services or derive an approximate location. I generally receive aggregated reports and technical diagnostics rather than your raw IP address or information that directly identifies you by name.
If you contact me for support, I will receive the email address and any other information you choose to include in your message.
Firebase Analytics
Thumb Ball uses Google Analytics for Firebase, provided by Google LLC, to understand how the game is used. Firebase Analytics may automatically collect app-instance identifiers, device and app information, session information, approximate location and usage events. On Android, it is also capable of collecting the Android advertising identifier when that identifier is available.
I use Analytics information to:
understand how many people install and use Thumb Ball;
measure engagement and player retention;
understand game starts, completions, scores and feature usage;
assess notification and advertising performance;
identify areas where players encounter difficulty or stop playing; and
improve gameplay, reliability and monetisation.
Analytics reports are primarily aggregated or pseudonymous. I do not send your name, email address or other directly identifying information to Firebase Analytics.
Firebase Crashlytics
Thumb Ball uses Firebase Crashlytics, provided by Google LLC, to identify, diagnose and fix crashes, application-not-responding events and other technical problems.
Crashlytics may automatically collect stack traces, relevant application state, device metadata, Firebase installation identifiers and a Crashlytics installation UUID. It may also receive developer-provided diagnostic logs, custom keys, non-fatal error reports and Analytics breadcrumbs describing actions immediately before a crash.
I use this information only to monitor the stability of Thumb Ball, investigate technical faults and improve the game. Google states that Crashlytics generally retains crash stack traces and associated installation identifiers for 90 days before beginning deletion from live and backup systems.
Leaderboards and Unity Gaming Services
Thumb Ball uses Unity Gaming Services, including anonymous authentication and leaderboards. Unity may process a pseudonymous player identifier, submitted scores, leaderboard rank, device or network information and service diagnostics to authenticate the game installation, operate the leaderboard, prevent abuse and maintain its services.
The leaderboard does not require you to provide a real name.
Advertising
Thumb Ball is supported by advertising delivered through Google AdMob. AdMob may use mediation partners, including Unity Ads, to provide advertisements.
Google, Unity and participating advertising partners may process device information, IP address, advertising identifiers, approximate location, ad impressions, ad interactions and related usage information to deliver ads, measure their performance, prevent fraud and, where permitted, personalise advertising.
Where required, you will be given choices about personalised advertising and related data processing. If personalised advertising is not permitted or is declined, you may still receive contextual or non-personalised advertisements.
I do not receive money in exchange for providing your name or contact details to another company. However, some privacy laws may classify certain transfers of device identifiers for personalised advertising as a "sale" or "sharing" of personal information. Advertising providers offer privacy choices as described in their own policies and through applicable in-app or device controls.
Local Notifications and On-Device Information
Thumb Ball may ask for permission to display comeback notifications. These notifications are scheduled locally on your device and may use locally stored information, such as your latest known high-score rank.
You can allow or block notifications through your device settings. Local preferences and scheduled notification information remain on your device and are normally removed if you clear the app's data or uninstall it.
How and Why Information Is Used
I use the information described above to:
provide and operate Thumb Ball and its leaderboard;
save or retrieve appropriate game and service state;
understand usage and improve the player experience;
diagnose crashes and technical problems;
deliver, measure and protect advertising;
detect fraud, misuse and security threats;
communicate with you when you request support; and
comply with legal obligations and enforce applicable terms.
Where UK or European data-protection law applies, the lawful basis depends on the purpose:
I rely on my legitimate interests in operating, securing, diagnosing and improving a free game, where those interests are not overridden by your rights.
I rely on consent where applicable law requires consent for analytics, device storage or access, personalised advertising or similar technologies. You may withdraw consent without affecting processing that occurred before withdrawal.
I process information where necessary to comply with a legal obligation or respond to a lawful request.
Third-Party Service Providers
Thumb Ball uses the following third-party services, which may process information under their own terms and privacy policies:
Google Privacy Policy
Firebase Privacy and Security
Google Analytics data privacy and security
Google AdMob privacy information
Google Play Services
Unity Game Player and App User Privacy Policy
Unity Game Player and App User Privacy FAQ
These providers process information to perform services on my behalf or, in some circumstances such as advertising, for purposes described in their own privacy notices. They may use subprocessors to help provide their services.
I may also disclose information where required by law, to protect users or the public, to investigate fraud or security issues, or in connection with a sale or transfer of the app or business. I do not otherwise disclose personal information except as described in this Privacy Policy.
International Data Transfers
Google, Unity and their subprocessors operate internationally. Information may therefore be processed in countries outside the United Kingdom or European Economic Area, including the United States. Where required, transfers are protected using recognised legal safeguards, such as adequacy regulations or decisions, the UK Extension to the EU-US Data Privacy Framework, and approved contractual clauses.
Please refer to the providers' privacy notices for more information about their processing locations and transfer safeguards.
Data Retention
I retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, security and operational requirements.
Google Analytics user-level event data may be retained for up to 14 months according to the configured Analytics retention settings. Aggregated reports may be retained for longer.
Google states that Firebase Crashlytics generally retains crash stack traces and associated installation identifiers for 90 days before beginning deletion.
Leaderboard scores and associated pseudonymous player identifiers may be retained while the leaderboard and related Unity services remain active, unless deletion is requested and can reasonably be completed.
Support correspondence is retained only for as long as necessary to respond, maintain an appropriate record and meet legal requirements.
Information held by advertising and platform providers is retained according to their respective policies and your privacy choices.
Your Choices and Rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or a copy of your personal information, and to object to certain processing. Where processing is based on consent, you may withdraw that consent.
You can also:
manage notification permission in Android's app settings;
manage advertising privacy and advertising-identifier settings through your device and any privacy controls presented by advertising providers;
clear Thumb Ball's local app data or uninstall the app; and
contact me using the address below with a privacy request.
Because Thumb Ball does not require a named account and most service information is associated with pseudonymous installation or player identifiers, I may need additional information to locate relevant records and may sometimes be unable to associate a particular service record with you.
Security
I and my service providers use reasonable technical and organisational measures designed to protect information. Data collected by Firebase is encrypted in transit using HTTPS. Nevertheless, no method of transmission or electronic storage is completely secure, and absolute security cannot be guaranteed.
Links to Other Sites
Thumb Ball or advertisements displayed within it may contain links to external websites or apps. Those services are not operated by me, and their privacy practices are governed by their own notices. I am not responsible for the content or privacy practices of third-party services.
Children's Privacy
Thumb Ball is not directed to children under the age of 13, and I do not knowingly request names, email addresses or other directly identifying information from children under 13.
The app's third-party services may nevertheless collect the technical, usage and advertising information described in this Privacy Policy. If you are a parent or guardian and believe that a child has provided personal information directly to me, please contact me so that I can investigate and take appropriate action.
Changes to This Privacy Policy
I may update this Privacy Policy from time to time, including when Thumb Ball's features, service providers or legal obligations change. I will post the revised policy on this page. Material changes may also be communicated through the app or its store listing where appropriate.
Contact
For questions, suggestions or privacy requests, contact:
Email: thumbthingsgames@gmail.com