Privacy Policy

1. Overview

Welcome to Serra Games ("we," "our," or "us"). We develop and publish interactive games, mobile applications distributed through the Google Play Store, and related web services (collectively, the "Services").

This Privacy Policy explains how we collect, use, protect, disclose, and manage user data when you play our games, install our mobile applications, or interact with our website at https://serra.games. We are committed to protecting your privacy and complying with Google Play Developer Program Policies (including the User Data Policy and Families Policy), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA).

2. Information We Collect

Depending on how you use our Services, we may collect the following categories of information:

A. Information You Voluntarily Provide

• Account Credentials: When you register or join an online game session, you may provide a username, handle, or player identification name, along with authentication credentials or session tokens.
• In-Game Communications: Public or team chat messages, gameplay feedback, or bug reports submitted within the game interface.
• Customer Support Inquiries: Your email address and message contents when you contact our support or feedback channels.

B. Automatically Collected Technical & Device Information

• Device Information: Device model, hardware specifications, operating system version (e.g., Android OS version), screen resolution, preferred language, and system architecture.
• Graphics & Performance Telemetry: GPU renderer details, WebGPU/OpenGL compatibility metrics, framerate (FPS), frame render timings, and memory allocation statistics used strictly to diagnose rendering issues and optimize performance across devices.
• Network & Connection Data: Internet Protocol (IP) address, latency/ping times, packet synchronization stats (dead reckoning drift), and connection timestamps required to establish and maintain real-time multiplayer connections.
• Pseudonymous Identifiers: Internal game session IDs, randomized player identifiers, or Google Play app instance identifiers used to maintain gameplay state between reconnects.
• Advertising ID & Ad Data: In our ad-supported mobile games, the Google AdMob advertising SDK collects the Android advertising ID (a user-resettable device identifier), IP address (which may be used to estimate general location), device and app information, and ad interaction data such as which ads were shown and whether they were viewed or tapped. This data is collected by Google directly through its SDK. See Section 5.

C. Gameplay & Simulation Data

• In-game positions, movement vectors, block modifications, interactions, scores, inventory states, and world achievements necessary to simulate the game world accurately for all participants.

3. What We Do NOT Collect

• No Precise Geolocation: We do not access, track, or request your GPS or precise location data. Connection routing uses standard IP-level country/region determination only.
• No Biometric or Health Information: We do not collect fingerprint, facial recognition, or health data.
• No Financial Card Details: We never store credit card or bank account details. Any in-app purchases or billing transactions are processed directly by the Google Play Store billing platform.
• No Contact Lists or Personal Files: Our games do not read your address book, contacts, camera photos, or personal files.

4. How We Use Information

We process the information we collect for the following legitimate business and operational purposes:

5. Third-Party Services, Advertising & Google Play

Our Android mobile applications integrate third-party SDKs and services to provide core functionality, platform distribution, security, and advertising. These third-party services operate under their own respective privacy policies:

• Google Play Services: Used for platform authentication, app integrity verification, and distribution. Review Google's Privacy Policy at https://policies.google.com/privacy.
• Google Play In-App Billing: Used for processing digital content purchases on Android. All transaction processing is securely handled by Google LLC.
• Google AdMob (Advertising): Some of our mobile games display ads served by Google AdMob, an advertising service provided by Google LLC. The AdMob SDK is included in those apps and collects and shares data with Google as described below.

A. Advertising (Google AdMob)

In our ad-supported games, the Google AdMob SDK may collect and transmit to Google:

• The Android advertising ID, a unique, user-resettable identifier provided by Google Play Services for advertising.
• Your IP address, which may be used to estimate your general (non-precise) location.
• Device and app information, such as device model, operating system version, language, app version, and network type.
• Ad interaction and diagnostic data, such as which ads were displayed, viewed, or tapped, and ad performance and crash information.

Google and its advertising partners use this data to serve and measure ads, limit how often you see an ad, prevent ad fraud, and, depending on your choices and applicable law, show personalized ads based on your interests. Where you have declined or not consented to personalization, ads are non-personalized and based on contextual information only. To learn how Google uses data from apps that use its services, see https://policies.google.com/technologies/partner-sites and Google's Privacy Policy at https://policies.google.com/privacy.

B. Your Advertising Choices

• Reset or delete your advertising ID: On your Android device, open Settings > Privacy > Ads (or Settings > Google > Ads) and choose "Reset advertising ID" or "Delete advertising ID". Deleting the advertising ID stops it from being used for ad personalization.
• Manage Google ad personalization: Visit https://adssettings.google.com.
• Consent choices: Where required by law (for example, in the EEA, the United Kingdom, and Switzerland), you are asked for your consent before personalized ads are shown, and you can change or withdraw that choice at any time through the privacy options in the app.

We do not integrate data broker SDKs into our games, and we do not combine advertising data with your game account or use it to build our own profiles of you.

6. Data Sharing & Disclosure

We do not sell or rent your personal data for money, and we do not disclose it to third parties except in the following limited circumstances:

• Advertising Partners: In our ad-supported mobile games, the Google AdMob SDK collects the advertising ID, IP address, device information, and ad interaction data and shares it with Google and its advertising partners to serve and measure ads, as described in Section 5.
• Infrastructure & Hosting Providers: Trusted cloud infrastructure and dedicated server providers who host our game servers and databases, subject to strict confidentiality and security obligations.
• Safety, Integrity & Legal Compliance: When required by law, subpoena, or legal process, or to prevent imminent fraud, abuse, cyberattacks, or threats to physical safety.
• Business Transfers: In the event of a merger, acquisition, or asset reorganization, any transferred player data remains subject to the commitments in this Privacy Policy.

7. Data Retention

We retain user data only for as long as necessary to fulfill the purposes outlined in this policy:

• Player Accounts & Profiles: Maintained while your account remains active or until you request deletion.
• Gameplay & Transient Network Logs: Diagnostic connection logs and dead-reckoning synchronization buffers are routinely purged or rotated within 30 to 90 days.
• Aggregated Data: Fully anonymized telemetry without personal identifiers may be kept indefinitely for game balance analysis.
• Advertising Data: Data collected by the Google AdMob SDK is held by Google, not on our servers, and is retained according to Google's own retention policies. We only receive aggregated ad performance and revenue reports.

8. Account & Data Deletion Instructions

In compliance with Google Play's Account Deletion Policy, we provide all users with a straightforward, accessible method to permanently delete their account and associated data.

What Happens When You Request Deletion:

• Verification: We will verify your ownership of the account (via confirmation response or in-game verification).
• Scope of Deletion: Upon verification, we permanently delete your player record, authentication credentials, profile information, and associated direct identifiers from our active databases within thirty (30) days.
• Backup Cycles: Any residual copies stored in automated disaster recovery backups are securely overwritten according to standard retention schedules.

9. Children's Privacy (COPPA & Google Play Families Policy)

Protecting the privacy of young players is of paramount importance to Serra Games.

• Our general games and services are designed for general audiences and are not directed to children under 13 years of age (or under 16 where required by local law in the EEA).
• We do not knowingly solicit or collect personal information from children under 13 without verifiable parental consent.
• Our ad-supported games are likewise not directed to children, and we do not knowingly allow advertising identifiers or other personal data to be collected from children under 13 for personalized advertising.
• If we become aware that personal data of a child under 13 has been collected without verified parental consent, we will promptly take steps to permanently delete that information from our servers.

Parents or legal guardians who believe their child has provided us with personal information may contact us at contact@serra.games to inspect, modify, or demand the deletion of such data.

10. Your Rights (GDPR & CCPA/CPRA)

Depending on your geographic location, you may have specific statutory privacy rights:

A. European Economic Area (EEA) & United Kingdom (GDPR)

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request permanent deletion of your personal data.
• Right to Restriction & Objection: You may object to or restrict certain data processing activities.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on your consent, such as personalized advertising, you can withdraw it at any time using the choices described in Section 5.

B. California Residents (CCPA & CPRA)

• Right to Know: You have the right to request information about the categories and specific pieces of personal information collected over the past 12 months.
• Right to Delete: You have the right to request deletion of your personal information.
• Right to Correct: You have the right to correct inaccurate personal data.
• Non-Discrimination: We will never discriminate against you, deny services, or alter gameplay features for exercising your privacy rights.
• Sale or Sharing of Personal Information: We do not sell your personal information for money. However, in our ad-supported games, the collection of the advertising ID and related device data by Google AdMob for personalized ads may be considered "sharing" for cross-context behavioral advertising under the CPRA. You can opt out at any time by deleting your advertising ID or turning off ad personalization as described in Section 5, or by contacting us at contact@serra.games.

11. Data Security

We employ reasonable and industry-standard technical, administrative, and physical security measures to protect player data against unauthorized access, loss, alteration, or disclosure:

• Encryption: Data transmitted between game clients and our servers is encrypted using modern Transport Layer Security (TLS/HTTPS and WSS).
• Access Controls: Server administrative access is strictly restricted through strong authentication and least-privilege principles.
• System Hardening: Game servers undergo regular monitoring, security patching, and isolated container execution.

While we strive to maintain robust defenses, no Internet transmission or electronic storage method can be guaranteed 100% secure.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect new features, updated technologies, or evolving legal requirements. When changes are published:

• We will update the "Last Updated" date at the top of this policy.
• For material changes that impact how we handle personal data, we will provide conspicuous notice through our games, website, or update notes.

Continued use of our Services after changes become effective constitutes acknowledgment and acceptance of the revised policy.

13. Contact Information

If you have any questions, concerns, feedback, or requests regarding this Privacy Policy or our data practices, please contact us: