Quest for Elira Privacy Policy

1 Summary

The Game does not create player accounts or cloud saves, and your progress stays on your device. The Game shows ads from Unity Ads and Google AdMob; sells optional items through Apple In-App Purchase or Google Play Billing; and, if you are signed in, posts your leaderboard scores and achievements to Apple Game Center (iPhone) or Google Play Games (Android). It uses Google Analytics for Firebase and Firebase Crashlytics to understand how the Game is played and to fix crashes, and on Android the Meta SDK to count installs that come from our ads. The weekly guardian, the Ancient Dragon, uses an anonymous Firebase sign-in so that every player's damage counts toward one shared health bar. MirandLuna Studio does not receive your name, contact details, advertising data or payment details from the Game.

2 Information stored on your device

The Game stores level and checkpoint progress, unlocked heroes, equipment, achievements, coins, souls, experience, upgrades, scores, gameplay statistics, control, audio and accessibility settings, story choices and daily-challenge state on your device to save and resume your adventure. It also stores the age range you select before ads are shown, the version of the Terms you accepted, the identifiers of purchases already delivered so that a purchase is never delivered twice, a one-way fingerprint of each promo code you redeem so that it is not redeemed twice, how many ads of each kind were shown today (for the daily limits), whether you have rated the Game (so that you are not asked again), your share of the weekly guardian's damage and whether its reward has been claimed, and the anonymous sign-in token for the weekly guardian. Promo codes are checked on your device; the code you type is not sent anywhere. Except as described in Sections 7A to 7C, none of this is sent to the Publisher.

The Game does not request access to your camera, microphone, photos, contacts or precise location. On Android it uses the internet and network-state permissions (for ads, purchases and the consent message), the vibration permission for haptic feedback, the billing permission for purchases and, through the Google Mobile Ads software, the advertising-ID permission. Haptic feedback does not collect information.

If you allow notifications, the Game schedules reminders on your device, for example that a daily gift is waiting. They are created on your device, and no information is sent to show them. You can turn them off in your device's notification settings.

3 Advertising: what Google AdMob and Unity Ads collect

Ads are served by Google AdMob (provided by Google LLC and, for users in the European Economic Area, the UK and Switzerland, by Google Ireland Limited): banners on some full-screen menus such as the shop, optional rewarded ads you may choose to watch for an in-game reward such as a revive, and full-screen ads between some levels, each with a daily limit.

When ads are requested or shown, Google AdMob and Google's User Messaging Platform (the consent message) may collect:

• Advertising identifiers: the Apple Identifier for Advertisers (only if you allow tracking) or the Google Advertising ID, and an app-specific identifier.
• IP address, and an approximate location derived from it.
• Device information: model, operating system and version, language, screen size, network type and app version.
• Ad interactions: ads requested and shown, impressions, clicks, viewing time and whether a rewarded ad was completed.
• Diagnostics: crash, performance and error information from the ad software, and fraud-prevention signals.
• Your consent choices.

Google uses this information to deliver, limit, measure and secure ads, to prevent fraud and, only where you consent or where the law allows, to personalize ads. Google's privacy policy: https://policies.google.com/privacy. How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites.

The rewarded and full-screen ads come first from Unity Ads (Unity Technologies ApS and its affiliates), and from AdMob when Unity has none. Unity Ads starts only after the age and consent steps described in Section 4 and collects similar information: advertising identifiers (the Google Advertising ID or, only if you allow tracking, Apple's IDFA), IP address and approximate location derived from it, device and app details, and ad interactions, to deliver, measure and secure ads and to prevent fraud. Its ads are personalized only for players aged 16 or older outside the regions where a consent message applies; otherwise they are requested as non-personalized. Unity's privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy.

4 Your advertising choices

If you are in the European Economic Area, the UK or Switzerland (or another region where the law requires it), the Game shows Google's consent message, provided through a Google-certified consent-management platform, before any ad is requested. You can accept, reject, or choose individual purposes and ad partners. Even non-personalized ads may need to store or read information on your device, so the Game asks before doing so. If no choice has been made, no ads are requested.

You can change or withdraw your consent at any time in Settings, Legal and Store Information, Privacy Choices. Withdrawing consent does not affect processing that took place before the withdrawal.

Before any ad, the Game asks your age range on a neutral screen. If you are under 16, ads are requested as for a user under the age of digital consent: no personalized advertising, and a restricted ad-content rating. If you are under 13, ads are also requested as child-directed. You can also limit ad tracking on your device: on iPhone, in Settings, Privacy and Security, Tracking; on Android, in Settings, Privacy (or Google), Ads, where you can delete your advertising ID. Buying No Ads stops ads in the Game.

5 Purchases

Payments are processed by Apple (App Store) or Google (Google Play) under their own privacy policies. To deliver, restore or reverse a purchase, the Game receives from the store the product identifier, a transaction identifier or purchase token, the purchase status, and notice of any refund or revocation. The Publisher does not receive your name, payment-card or bank details; it receives sales and tax reports from the stores.

6 Game Center and Google Play Games

On iPhone, if you are signed in to Game Center, the Game sends your leaderboard scores (fastest clear, highest level, best score and enemies defeated) and the achievements you earn to Apple, where they appear with your Game Center name. This is processed by Apple under Apple's privacy policy: https://www.apple.com/legal/privacy/.

On Android, if you are signed in to Google Play Games, the Game sends the same leaderboard scores and achievements to Google, where they appear with your Play Games profile, along with gameplay events (such as levels cleared, bosses defeated, heroes recruited, ultimates used and endings reached) that Google uses to provide Play Games statistics to the Publisher. This is processed by Google under Google's privacy policy: https://policies.google.com/privacy.

Without Game Center or Google Play Games, your scores and achievements stay on your device.

7 Testing, support and feedback

If you are invited to test the Game, the Publisher holds the email address used for your invitation in Google Play Console or App Store Connect to manage the test, and receives the feedback, screenshots and device details you choose to send through the store's testing tools. If you email the Publisher, your email address, the content of your message and any attachments are used to answer you. If you use Report a Bug in the Game's Settings on Android, the description you write is sent to Firebase Crashlytics as described in Section 7A, or you can choose to email it instead; on iPhone, and when you choose email, the email it prepares also contains your device model, operating-system version, the game version, your current level and hero, and the last lines of the Game's log (a record kept on your device of what the Game was doing, including any errors). You can read and edit the email before sending it, and nothing is sent unless you send it.

7A Play statistics and crash reports

The Game uses Google Analytics for Firebase and Firebase Crashlytics (provided by Google) on iPhone and Android. Analytics receives events about how the Game is played, such as levels started, cleared or left, guardians defeated, heroes chosen, daily gifts and reminders, a new player's first steps, purchases, your device's graphics chip and when the Game is closed, together with information Firebase collects automatically: an app-instance identifier, device model, operating-system version, app version, country and language derived from the device and IP address, session times and, on Android, how the Game was installed (the Google Play install referrer, for example which ad or link led to the install) and the Google Advertising ID, which Google uses to count installs that come from our Google ads.

Crashlytics receives crash and error reports: what went wrong, the device model, operating-system version, app version, memory and storage state, your current level and hero, and the last in-game events before the error. Statistics start switched off and are switched on only if you are 13 or older and only where Google's consent message is not shown, so never in the European Economic Area, the United Kingdom or Switzerland; crash reports are sent for all players, because they are needed to fix the Game and carry no advertising identifier. No name, email address or other contact information is sent with statistics or reports, and they are not used to show you ads. Google keeps Analytics event data for 2 months and user-level data for up to 14 months, and Crashlytics reports for 90 days. Google's privacy policy: https://policies.google.com/privacy; how Firebase handles data: https://firebase.google.com/support/privacy.

7B Install measurement on Android

On Android, the Game includes the Meta SDK (provided by Meta Platforms, Inc. and, in the European Economic Area, the UK and Switzerland, Meta Platforms Ireland Limited). It records that the Game was installed and opened, with the Google Advertising ID, device and app information and IP address, so that Meta can count and improve the installs that come from our ads on Facebook and Instagram. Like play statistics, it starts switched off and is switched on only if you are 13 or older and only where Google's consent message is not shown. Meta's privacy policy: https://www.facebook.com/privacy/policy. You can limit this by deleting your advertising ID as described in Section 4.

7C The weekly guardian

The Ancient Dragon, the weekly guardian down the market's south road, is fought by every player at once. When you visit it or finish a fight, the Game signs in to Firebase Authentication (provided by Google) with an anonymous account: no name, email address, phone number or Google account is used, and Firebase gives the Game a random user identifier. The Game then sends the Publisher's Firebase Realtime Database (provided by Google, with data stored in the United States) that identifier, the damage you dealt and the time it was sent, and reads back the week's total damage and the guardian's settings.

Other players see only the total damage dealt by everyone; your own share is visible only to you. This information is used to run the shared guardian and give its rewards at your request (performance of a contract, Article 6(1)(b)) and to reject impossible damage so that it stays fair (our legitimate interest, Article 6(1)(f)). Google also processes your IP address and device information to provide Firebase. The records are kept for as long as the Game offers the weekly guardian. Uninstalling the Game removes the sign-in token from your device but not the records, which contain nothing that identifies you; questions about them can be sent to admin@mirandstudios.com with the subject Privacy Request.

7D Sponsored guests, links and ratings

The Game may include guests who appear as part of a paid partnership, such as content creators or professionals; their in-game cards are labelled "In partnership with". If you tap a link such as Learn more, it opens the partner's website or profile in your browser or another app, where the partner's own terms and privacy policy apply. The Game does not share your information with partners. Nothing a guest says in the Game is professional advice, including medical advice.

From time to time the Game may ask whether you would like to rate it. The request is shown by Apple or Google; any rating or review you give is handled by them under their policies and, if published, is public. The Game only stores on your device whether you have rated it.

8 Purposes and legal bases

Where the GDPR applies, each kind of processing relies on these legal bases:

• Saving progress and settings on your device: necessary to provide the Game you asked for (performance of a contract, Article 6(1)(b)).
• Personalized advertising, and storing or reading information on your device for ads: your consent (Article 6(1)(a), and the ePrivacy rules on device storage).
• Non-personalized ads, ad measurement, ad security and fraud prevention, where consent is not required: the legitimate interest in funding a free game and keeping ads safe (Article 6(1)(f)).
• Delivering, restoring and reversing purchases: performance of a contract (Article 6(1)(b)).
• Keeping purchase and financial records: legal obligations (Article 6(1)(c)).
• Game Center and Google Play Games leaderboards and achievements: performance of a contract with you, at your request (Article 6(1)(b)).
• Play statistics and crash reports (Section 7A): our legitimate interest in understanding how the Game is played, improving it and fixing problems (Article 6(1)(f)).
• Install measurement by the Meta SDK (Section 7B): our legitimate interest in measuring our advertising (Article 6(1)(f)).
• The weekly guardian (Section 7C): performance of a contract at your request, and our legitimate interest in keeping it fair (Article 6(1)(b) and (f)).
• Google Play Games gameplay statistics: our legitimate interest in understanding how the Game is played so we can improve it (Article 6(1)(f)).
• Managing tests and answering support and privacy requests: performance of a contract and the legitimate interest in supporting players and improving the Game (Article 6(1)(b) and (f)), and legal obligations for rights requests (Article 6(1)(c)).

Where processing relies on legitimate interests, you may object to it.

9 Who receives information

The Publisher does not sell personal information for money. Information is received by:

• Google (Google LLC and Google Ireland Limited): advertising, the consent message, Google Play distribution, testing and payments, Google Play Games, and Firebase (play statistics, crash reports and the weekly guardian).
• Unity Technologies (Unity Software Inc. and its affiliates): rewarded and full-screen advertising, as described in Section 3.
• Meta (Meta Platforms, Inc. and Meta Platforms Ireland Limited): install measurement on Android, as described in Section 7B.
• Sponsored partners receive no information from the Game.
• Apple (Apple Inc. and Apple Distribution International Ltd.): App Store distribution, TestFlight testing, payments, and Game Center.
• Payment providers: Apple and Google act as the merchant and payment processor for in-app purchases; no other payment provider is used.
• Professional advisers, authorities when legally required, or a successor in a merger or sale, subject to equivalent protection.

10 How long information is kept

• Information on your device: until you use Full Reset, clear the Game's storage or uninstall it. A device backup may keep a separate copy under your Apple or Google settings.
• Advertising data: kept by Google under its retention policy (https://policies.google.com/technologies/retention).
• Purchase records: kept by Apple and Google under their policies; the Publisher keeps sales reports for as long as tax and accounting law requires (generally up to 7 years).
• Tester invitations and feedback: until the test ends, or earlier if you ask to leave it.
• Support emails: up to 2 years after the request is resolved, unless longer is needed for a legal claim.
• Game Center scores and achievements: kept by Apple until you remove them or your Game Center account.
• Google Play Games scores, achievements and statistics: kept by Google under its own retention policies, or until you delete your Play Games profile.
• Play statistics and crash reports: kept by Google for up to 14 months (Analytics) and 90 days (Crashlytics), as described in Section 7A.
• Install measurement: kept by Meta under its own policies.
• Weekly guardian records: for as long as the Game offers the weekly guardian.

11 International transfers

The Publisher is located in the United States, and Google and Apple process information in the United States and other countries. Transfers of personal data from the European Economic Area, the UK or Switzerland to the United States rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), in which Google LLC, Apple Inc. and Meta Platforms, Inc. participate, and on the European Commission's Standard Contractual Clauses. Information you send the Publisher directly, such as an email, is processed in the United States. You can ask for more information about these safeguards at admin@mirandstudios.com.

12 Your rights in Europe and the UK

If the GDPR or UK GDPR applies to you, you have the right to:

• Access the personal data held about you and receive a copy.
• Correct inaccurate data.
• Delete your data.
• Receive your data in a portable format (portability).
• Object to processing based on legitimate interests, including profiling.
• Restrict processing.
• Withdraw consent at any time, in Settings, Legal and Store Information, Privacy Choices, without affecting earlier lawful processing.

Because your progress is stored only on your device, you can access or delete it yourself (Full Reset, clearing the Game's storage or uninstalling it). Advertising data is held by Google; you can exercise your rights with Google at https://myaccount.google.com and https://support.google.com/policies. Purchase data is held by Apple or Google.

You also have the right to lodge a complaint with the data-protection authority where you live, work or think a breach occurred. A list of EU authorities: https://edpb.europa.eu/about-edpb/about-edpb/members_en. In the UK: the Information Commissioner's Office, https://ico.org.uk.

13 Your rights in the United States

Residents of California and of other states with consumer privacy laws may have the right to know what personal information is collected and how it is used and disclosed, to access, correct and delete it, to opt out of its sale, of sharing for cross-context behavioral advertising and of targeted advertising, and not to be discriminated against for using these rights.

In the last 12 months, the categories of personal information handled through the Game were: identifiers (advertising identifiers and IP address, collected by Google AdMob, Unity Ads and, on Android, the Meta SDK; the app-instance identifier used by Firebase; the anonymous identifier used by the weekly guardian; email address if you contact the Publisher or are invited to a test); internet or network activity (ad interactions, gameplay events, crash reports and diagnostics); approximate geolocation derived from IP address; and commercial information (purchase records held by Apple and Google). They are used for the purposes in Sections 3 to 8 and disclosed to the recipients in Section 9. The Game does not collect sensitive personal information.

The Publisher does not sell personal information for money. Allowing Google or Unity to show personalized ads, and the Meta SDK's install measurement, may be considered sharing for cross-context behavioral advertising, or targeted advertising, under some state laws. To opt out, choose your age range accurately, limit ad tracking or delete your advertising ID as described in Section 4, or email admin@mirandstudios.com with the subject Do Not Sell or Share. The Publisher does not knowingly sell or share the personal information of consumers under 16. The Game does not respond differently to browser Do Not Track signals, because it is not a website.

You may make a request yourself or through an authorized agent, by email as described in Section 14. The Publisher will confirm your request and respond within 45 days (extendable once by 45 days, with notice). If a request is refused, you may appeal by replying to the decision with the subject Appeal; if the appeal is denied, you may contact your state attorney general. California residents may also ask, once a year, for information about disclosures of personal information to third parties for their own direct marketing; the Publisher makes no such disclosures.

14 How to make a privacy request

Email admin@mirandstudios.com with the subject Privacy Request, saying which right you want to use and where you live. Because the Publisher does not hold accounts, it may ask for information needed to find and confirm the data concerned, such as the email address you used to contact it. It will respond within one month for requests under the GDPR (extendable by two months for complex requests, with notice), or within the period set by your state's law. Requests are free unless they are clearly unfounded or excessive.

15 Children

The Game is not directed to children under 13. Before any ad, the Game asks the player's age range, and for players under 16 restricts advertising as described in Section 4; for players under 13, ad requests are marked as child-directed so that Google treats them under the Children's Online Privacy Protection Act (COPPA), and play statistics and install measurement are never switched on. The Publisher does not knowingly collect personal information from children under 13. If you believe a child has sent the Publisher personal information, contact admin@mirandstudios.com and it will be deleted.

16 Security

Reasonable administrative, technical and organizational safeguards are used for information under the Publisher's control. No method is completely secure.

17 Changes to This Privacy Policy

We reserve the right, at our sole discretion, to modify, amend, update, or replace this Privacy Policy from time to time, for example when the Game, its providers or legal requirements change. If we make material changes, we may provide notice through the Game, the store listing, by email, or by other reasonable means. Unless otherwise required by applicable law, changes will become effective on the date specified in the updated Privacy Policy. Your continued access to or use of the Game after the effective date of the revised Privacy Policy constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, you must discontinue use of the Game. Where the law requires your consent to a change (for example, to new uses of your personal data), we will ask for it.

18 Contact

MirandLuna Studio, 304 Lansdale Ave, Millbrae, California, United States

Phone: +1 (650) 608-5052

Email: admin@mirandstudios.com

Website: https://mirandstudios.com