Privacy Policy

Information Collection and Use

The Application does not ask you to type in your email address or any other contact details. The only sign-in is the optional sign-in for the online leaderboards, with your Google account or Google Play Games.

Information connected to the Application is handled in the following ways:

• Your progress, unlocks, and settings are stored only on your device. See "On Your Device" below.
• Google processes device and advertising information when ads are requested or shown. See "Advertising" below.
• If you allow it, anonymous gameplay statistics are sent to Google Analytics for Firebase. See "Gameplay Statistics" below.
• If you sign in to the online leaderboards, your nickname, your best scores and a player ID are stored with Google Firebase. See "Online Leaderboards" below.
• If you turn on the daily reminder, the reminder is scheduled on your device. If you share a run, the picture goes only to the app you pick. See "Daily Reminder and Sharing" below.
• If you email the Service Provider, your email address and the contents of your message are used to answer you.

The Application requests only these Android permissions:

• Internet and network state, so it can load ads, send statistics you allowed, and run the online leaderboards.
• Advertising ID, so Google's ads SDK can use your device's advertising ID where you allow it.
• Vibration, for optional haptic feedback, which you can turn off in Settings.
• Wake lock, so the screen stays on while you play.
• Notifications, only for the optional daily reminder. On Android 13 and later, Android asks you first, and nothing is shown unless you turn the reminder on.

The Application does not request access to your location, camera, microphone, contacts, photos, or files, and it shows no notifications unless you turn on the daily reminder. It has no in-app purchases.

Advertising

The Application is free to play and has no forced ads. It only shows rewarded videos through Google AdMob, and only when you choose to watch one: to revive after a defeat, to double the rewards of a run, or to reroll an upgrade choice.

When ads are requested or shown, the Google Mobile Ads SDK may collect and process information such as:

• Your device's advertising ID.
• Your IP address, which can indicate your approximate location.
• Device and operating system details, such as model, language, and screen size.
• Information about the Application and about how you interact with ads, such as views and taps.
• Diagnostic information, such as ad loading errors and performance data.

Google uses this information to deliver and measure ads, limit how often the same ad appears, and detect fraud and abuse. Where you allow it, Google also uses it to show personalised ads. Google acts under its own privacy policy, linked in "Third Party Access" below.

Your Ad Choices

Where the law requires it, for example in the European Economic Area, the United Kingdom, and Switzerland, the Application uses Google's User Messaging Platform to ask for your consent before ads are requested. When those privacy options apply to you, the "Privacy Choices" button under Ad Privacy in Settings > Music & Comfort lets you review or change your choice at any time. You can also clear the Application's data in your Android settings to see the consent form again.

You can also reset or delete your advertising ID, or opt out of personalised ads, in your Android device settings. You can manage how Google personalises ads in My Ad Center.

Gameplay Statistics

The first time you open the Application, it asks whether you want to share anonymous gameplay statistics. Nothing is sent until you answer, and nothing is sent if you choose "No thanks". You can change your answer at any time in Settings under Music & Comfort.

If you allow it, the Application sends events to Google Analytics for Firebase so the Service Provider can balance the game and fix performance problems. These events describe how the game is played, such as runs started and ended, how long a run lasted, upgrades picked, level-ups, chests opened, quests completed, rewarded ads offered and watched, the gun and difficulty level chosen, Codex discoveries, whether you turned the daily reminder on and whether you shared a run, and frame-time and battery measurements. Firebase links these events to a random app instance ID, not to your name, email address, or Google account, and the Application does not use them for advertising.

Online Leaderboards

The online leaderboards ("This week" and "All time" for Endless runs) are optional. To take part, you sign in on the Leaderboard screen with your Google account or with Google Play Games:

• With Google, Android's "Sign in with Google" gives the Application a sign-in token and your first name. The first name is only used to suggest a nickname.
• With Google Play Games, Play Games gives the Application a one-time sign-in code and your Play Games name, which is likewise only used to suggest a nickname.

Firebase Authentication checks the token or code and creates a player account for you with a random player ID. Firebase Authentication keeps the identity details of the account you signed in with (for Google, your email address and name; for Play Games, your Play Games player ID and name) so that you can sign in again. These are never shown on the leaderboards, and the Application never receives your password.

You then choose a nickname, which is what other players see. The following is stored in Cloud Firestore:

• Your nickname and player ID.
• Your best Endless score this week and of all time, with that run's length, kills, and bosses defeated.
• The time each entry was last updated.

Leaderboard entries are public: anyone using the Application can see your nickname and your scores. If you don't sign in, your scores stay on your device and nothing is posted. To run the leaderboards and prevent abuse, Firebase also processes your IP address and technical details about the Application when it signs in, sends scores, or loads a leaderboard. Connections are encrypted, and the security rules only let a player change their own entries.

You can change your nickname, sign out, or delete your leaderboard data at any time under Leaderboard > Account in the Application. "Delete my scores" removes your nickname, your leaderboard entries, and your player account from Firebase.

Versions before 0.1.2 used Google Play Games leaderboards instead: when you were signed in to Google Play Games, your score was stored by Google Play Games with your Play Games player ID and name. You can manage or delete that data in the Google Play Games app or your Google Account.

Daily Reminder and Sharing

After your first run, the Application asks once whether you want a daily reminder. It is off unless you say yes, and you can turn it off at any time in Settings under Music & Comfort. The reminder is a local notification: your device schedules it for the next evening each time you open the Application, so you get at most one a day and none on days you already played. No information is sent to the Service Provider or to any server for this.

The "Share run" button on the end-of-run screen makes a picture of that run (score, time, kills, level, gun and upgrade icons) and a short line of text with a link to the game. The picture is saved in the Application's private storage, and Android's share sheet sends it only to the app you pick. On a computer, the picture is saved and the text copied to your clipboard so you can paste it yourself. The Service Provider does not receive what you share. Whatever app you share to handles it under its own privacy policy.

Data On Your Device

The Application saves the following in its private storage on your device:

• Your Shards, Sanctum upgrades, unlocked weapons, and equipped weapon auras, dash trails, and titles.
• Your daily quests, login calendar, and Weekly Hunt history.
• Your personal bests and run records, your Codex discoveries, and the difficulty levels you unlocked.
• Your settings, such as volume, vibration, your statistics choice and your daily reminder choice.
• The picture of the last run you shared.
• Your leaderboard sign-in session, nickname, and scores waiting to be sent to the leaderboards, for example while you are offline.

This data is not sent to the Service Provider, and it is excluded from Android device backups. It is deleted when you clear the Application's data or uninstall it.

Legal Bases

Where the GDPR or UK GDPR applies, information is processed on these legal bases:

• Your consent, for personalised advertising, for storing or accessing information on your device for advertising where consent is required, and for gameplay statistics.
• Legitimate interests in keeping the Application free, measuring ads, and preventing fraud, for non-personalised advertising.
• Performance of a contract, for the online leaderboards you choose to join: your player account, nickname, and scores.
• Legitimate interests in helping you, for answering messages you send.

Your Rights and Data Deletion

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to how it is used.
• Receive a copy of your data.
• Withdraw consent at any time.
• Complain to your local data protection authority.

Apart from the optional leaderboard account, the Service Provider does not keep an account or a profile for you. To delete your data:

• Data on your device: clear the Application's data in your Android settings, or uninstall the Application.
• Gameplay statistics: turn statistics off in Settings to stop new events, and email contact@zipistudios.com with the subject "Delete my Shrinebound: Gunstorm data" to have events already sent deleted. Google Analytics keeps statistics events for at most 14 months.
• Leaderboard data: in the Application, open Leaderboard > Account > "Delete my scores". This deletes your nickname, your entries on every board, and your player account at once. You can also email contact@zipistudios.com with your nickname and the subject "Delete my Shrinebound: Gunstorm data". Scores posted by versions before 0.1.2 are managed in the Google Play Games app.
• Advertising data: reset or delete your advertising ID in your Android settings. Google keeps ad data under its own policies.

For anything else, including help with information Google processes, contact the Service Provider at contact@zipistudios.com.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have these rights:

• To know what personal information is collected.
• To delete or correct it.
• To opt out of the sale or sharing of personal information.
• Not to be discriminated against for using these rights.

The Service Provider does not sell personal information for money. Information collected by the ad SDK for personalised advertising may count as "sharing" under California law. You can opt out by turning off ad personalisation or deleting your advertising ID in your device settings, or by contacting contact@zipistudios.com.

Third Party Access

The Application relies on third-party services that handle data under their own privacy policies:

• Google Privacy Policy, which covers Google AdMob, Google's User Messaging Platform, and Google Play Games services.
• Firebase Privacy and Security, which covers Google Analytics for Firebase, used for the gameplay statistics you allow, and Firebase Authentication and Cloud Firestore, used for the online leaderboards.
• How Google uses information from sites or apps that use its services.
• Godot Engine, the engine the Application is built with. It does not send data on its own.

The Service Provider may disclose information it holds, such as support emails:

• As required by law, such as to comply with a subpoena, or similar legal process.
• When it believes in good faith that disclosure is necessary to protect its rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• With trusted service providers who work on its behalf, do not have an independent use of the information, and have agreed to follow this privacy policy.

International Data Transfers

Leaderboard entries are stored in Cloud Firestore in the European Union. Google, including Firebase Authentication and Google Play Games services, may process information in countries other than your own, including the United States. Where the law requires safeguards for these transfers, they rely on recognised mechanisms. These include adequacy decisions and Standard Contractual Clauses approved by the European Commission. Data protection laws in other countries may differ from those where you live.

Opt-Out Rights

You can stop gameplay statistics at any time in Settings, and you can stay signed out of the online leaderboards or sign out under Leaderboard > Account. You can stop the Application from processing information by uninstalling it. Uninstalling removes the data stored on your device, but it does not delete your leaderboard entries or information Google has already received for ads and statistics. See "Your Rights and Data Deletion" above for how to delete it.

Data Retention Policy

• Data on your device: kept until you clear the Application's data or uninstall it.
• Gameplay statistics: kept by Google Analytics for at most 14 months, then deleted automatically.
• Leaderboard account, nickname, and entries: kept until you delete them with "Delete my scores", or until the Service Provider removes old weekly boards or ends the leaderboards. Scores from versions before 0.1.2 are kept by Google Play Games until you delete your Play Games profile data.
• Support emails: kept for as long as needed to help you, and for no more than 24 months after the conversation ends, unless the law requires longer.
• Advertising information held by Google: kept according to Google's own retention policies.

Children

The Application is not directed at children under 13 and is not part of Google Play's Families program. The Service Provider does not knowingly collect personal information from children. If you are below the age at which you can consent to data processing in your country, please use the Application only with a parent or guardian's permission.

If you are a parent or guardian and believe your child has sent the Service Provider personal information, please contact contact@zipistudios.com. It will be deleted.

Security

Data saved by the Application stays in its private storage, which Android's app sandbox protects from other apps. Google's SDKs use encrypted connections to communicate with Google's services. No method of storage or transmission is completely secure, but the Service Provider keeps the information it handles to a minimum.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you as the law requires. Where required, that notice will explain what happened and what is being done about it.

Changes

This privacy policy may be updated from time to time, for example when the Application's features or services change. Updates are posted on this page with a new "Last updated" date. Where the law requires it, the Service Provider will ask for your consent to material changes before they take effect.

This privacy policy is effective as of 2026-10-17.

Your Consent

Where processing is based on consent, you give it through the ad consent form and the gameplay statistics question, and you can change either in Settings at any time. Withdrawing consent does not affect processing that happened before you withdrew it.

Contact Us

If you have any questions about privacy while using the Application, or about these practices, please contact ZiPiStudios at contact@zipistudios.com.