Privacy Policy

1. Who we are

This Privacy Policy explains how EpicAds s. r. o. ("we", "us", or "our") processes personal data in connection with Orehelm: Mining Idle Game (the "Game") on Android.

The Game does not require an account or registration. The current release does not offer in-app purchases. Using the Game may still involve processing device identifiers and other personal data through the services described below.

2. Information processed

• Usage and analytics: app interactions, sessions, gameplay events, app version, device and operating-system information, language, and app-instance identifiers. Analytics may include approximate location derived from network information.
• Crash and diagnostic data: crash reports, stack traces, error information, device state, operating-system and app versions, and installation identifiers used to identify and resolve stability issues.
• Configuration data: Firebase installation identifiers and technical information used to deliver app configuration and feature settings.
• Advertising data: advertising identifiers (including Android advertising ID where available), app set or other SDK identifiers, IP address, approximate location, device information, ad views and clicks, app interactions, and related analytics and diagnostics. The exact processing depends on SDK configuration, region, device settings, and consent choices.
• Communications: if you contact us, we receive your email address, the content of your message, and any information you choose to send. Please do not send unnecessary sensitive information.

Information may be received directly from your device by the service providers listed below. An installation or advertising identifier can distinguish a device or app installation without a registered account.

3. Purposes and legal bases

Where the GDPR or UK GDPR applies, we rely on the following legal bases as appropriate to the processing:

• Providing the Game and requested support: performance of our contract with you, where processing is necessary to deliver those services.
• App reliability, technical configuration, security, and abuse prevention: our legitimate interests in operating a stable and secure Game, subject to your rights and interests. Where consent is legally required for device storage, access, or related processing, that requirement also applies.
• Optional analytics and advertising personalization: your consent where required by applicable law. We do not rely on legitimate interests to bypass a requirement for consent.
• Compliance: meeting legal obligations, and our legitimate interests in establishing, exercising, or defending legal claims.

Advertising helps fund the Game. Personalization may involve automated analysis of interests and interactions to select ads. It is not intended to make decisions producing legal or similarly significant effects about you.

4. Firebase and Google AdMob

We use the following Google services:

• Firebase Analytics (Google Analytics for Firebase) to understand Game usage and improve the player experience.
• Firebase Crashlytics to investigate crashes and other stability problems.
• Firebase Remote Config to deliver and adjust Game settings and features.
• Google AdMob to display and measure advertising and help prevent advertising fraud.

Google and the relevant service entities process data under their applicable service terms and privacy arrangements. Depending on the service and purpose, they may act as processors on our behalf or as independent controllers. Advertising technology providers involved in ad delivery may also receive relevant data; where a consent message applies, consult its provider list for the participating providers.

Further information: Firebase privacy and security, Google Privacy Policy, How Google uses information from apps that use its services, and Google Mobile Ads SDK data disclosures.

We may also share information with providers needed to handle your support request, or disclose information when legally required or necessary to protect rights, security, and the integrity of our services.

5. Advertising, consent, and your choices

Ads may be personalized or non-personalized depending on your region, consent, and settings. Non-personalized ads can still involve personal data and device storage for purposes such as ad delivery, frequency capping, reporting, and fraud prevention; they do not necessarily mean that no data is processed.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, consent is required before processing for which applicable law requires it, including certain device storage/access and advertising personalization. Your choices must be respected through the applicable in-game consent mechanism. This policy itself does not request or record consent.

You may refuse optional consent or withdraw it at any time, without affecting the lawfulness of earlier processing. Use the privacy or consent options presented in the Game to review your choices. If you cannot locate those options or need help with analytics or advertising preferences, contact support@epicads.net.

Android privacy settings may let you reset or delete your advertising ID and manage ad-related settings; availability and menu names vary by device and Android version. These controls do not necessarily stop all analytics, diagnostics, or advertising. Uninstalling the Game stops future collection by the installed Game, but does not automatically delete information already retained by providers.

6. Data retention

Personal data is retained only for as long as needed for the purposes described in this policy, taking account of operational needs, applicable service settings, legal requirements, and deletion requests.

• Analytics retention depends on the Google Analytics property settings and applicable Google retention rules; aggregated reports may have different retention periods.
• According to Firebase documentation, Crashlytics keeps crash data and associated identifiers for 90 days before beginning removal from live and backup systems.
• Firebase installation identifiers used by Remote Config are retained under Firebase's service rules, including until deletion through its supported mechanisms.
• Advertising data retention depends on the relevant provider's purposes and policies.
• Support correspondence is kept as needed to resolve your request and handle follow-up, legal obligations, or disputes.

You can contact us for information about applicable retention or to request deletion. Some records may need to be retained to comply with law or protect legal claims.

7. International transfers

Google and other service providers may process information outside your country, including in the United States, where privacy laws may differ. Where required, transfers of EEA or UK personal data must be covered by a valid transfer mechanism, such as an applicable adequacy decision or standard contractual clauses with relevant safeguards. The mechanism depends on the recipient and service. You may contact us for information about applicable safeguards. See also Google's data transfer frameworks.

8. Your privacy rights and deletion requests

Subject to applicable law and its conditions, you may request access to your personal data, correction, erasure, restriction of processing, or a portable copy. You may object to processing based on legitimate interests, and withdraw consent where processing relies on consent.

Send requests to support@epicads.net, mentioning "Orehelm privacy request" and describing your request. As the Game has no accounts, we may need proportionate information to locate the relevant installation data and verify the request. Do not send identity documents unless we explain why they are necessary. If we cannot identify data associated with you, we will explain the limitation. Requests concerning data controlled independently by Google may also need to be directed to Google.

We respond within the period required by applicable law, normally one month for GDPR requests, subject to permitted extensions. You may complain to your local supervisory authority, including Slovakia's Office for Personal Data Protection, or the UK Information Commissioner's Office where applicable.

9. Children

The Game is not specifically directed at children. We do not knowingly seek to collect personal data from children contrary to applicable law. If you believe a child has provided personal data through the Game inappropriately, please contact us so we can investigate and take appropriate action, including deletion where required.

10. Security

We use reasonable technical and organizational measures appropriate to the processing to protect personal data. No method of transmission or storage is completely secure.

11. Changes and contact

We may update this policy when the Game, its services, or legal requirements change. The effective date above identifies the current version. We will provide additional notice or request renewed consent where required.

For privacy questions, requests, or support, contact support@epicads.net or write to EpicAds s. r. o. at the address in section 1.