Privacy, plainly.

Play without a sign-in

We do not ask for a game password, email address or social login to play. On first launch, the game creates a random private installation credential and generated display name. A leaderboard profile is registered when a connection is available. A generated offline name is reserved only when registration succeeds.

What stays on your device

Campaign progress, coins, upgrades, cosmetics, settings, local records, ad-privacy choice, cached purchase ownership and pending score submissions are saved locally. There is no account-based cloud save. A lost or reset installation cannot automatically recover its old leaderboard identity.

What our game service stores

The service stores your display name, random profile ID, a hash of the private installation credential, verified scores and gameplay replay receipts. Receipts include the level, seed, capped upgrade ranks, timing, score and sparse paddle/action inputs needed to check a run. Public leaderboards show display names and scores; private credentials and replay inputs are not public.

Temporary rate-limit records use a hash of an IP address. Hosting and network systems process IP addresses and basic request information to deliver and protect the service. Application logs redact authorisation headers and do not intentionally record request-body contents. We use no website advertising, analytics cookies or third-party analytics SDK in the game.

Purchases and RevenueCat

Google Play or Apple processes payments. RevenueCat checks purchase history, restores purchases and maintains entitlement records using its store-linked customer identifier. Our server receives authenticated purchase-event IDs and current Remove Ads entitlement information, separated between test and production environments. We do not receive your full payment-card details. Store purchase restoration is independent of the leaderboard identity.

See RevenueCat’s privacy policy and your store’s privacy information. We do not send your leaderboard display name or a contact email to RevenueCat as customer attributes.

Unity Ads

Unity Technologies may process advertising identifiers such as AAID or IDFA where permitted, IP-based approximate location, device and app information, diagnostics, and ad views or interactions to deliver ads, measure performance and prevent fraud. Data may be shared with Unity and its advertising partners. Non-personalised advertising can still involve data collection.

We save your advertising personalisation choice and offer Ad Privacy in Settings → Support where supported. On iOS, the app requests tracking permission only after you choose personalised advertising. You can also manage advertising identifiers and tracking permissions in your device settings. Read Unity’s Game Player and App User Privacy Policy for its choices, US state privacy rights and deletion process.

Why we use data

We use installation and gameplay data to provide rankings, reserve names, prevent abuse and verify submitted scores; purchase data to provide and restore Remove Ads; and contact details you supply to respond to support or deletion requests. Where applicable, we rely on providing the requested service, our legitimate interests in operating and securing it, legal obligations, and consent for advertising personalisation or tracking when required.

Retention and deletion

Replay receipts and purchase-event inbox records expire after 90 days. Verified best scores remain until profile deletion. Deleting a leaderboard profile removes its public name, scores, receipts and Daily claims; the old hashed credential is retained as a deletion tombstone for up to 30 days to prevent reuse. Temporary rate-limit buckets expire after their short limiting window and cleanup period.

Deletion-request contact details and messages expire after 90 days. Purchase entitlement caches and provider/store records are separate from game profiles and may be retained to support ownership, refunds, fraud prevention and legal requirements; contact us to request removal where possible. Operational logs are subject to the hosting operator’s configured retention. No local deletion can erase data held independently by an app store or advertising provider.

Use the in-game profile deletion control or our data-deletion page. You may also request access, correction, deletion, restriction or other rights available where you live by emailing us. We may ask for enough information to verify ownership, and you may contact your local data-protection authority.

Support requests and this website

The deletion form stores your reply email, display name, message and request date for manual handling. It does not require a game login and does not automatically delete anyone based on a public name. The site uses locally hosted fonts and game images. Infrastructure providers may process connection information for hosting, security and delivery.

Children and international processing

Holebreaker is not directed at children under 13. Do not submit a child’s contact information through the website. Contact us if you believe we hold a child’s personal information. Service providers may process data in countries other than yours under their applicable privacy terms and safeguards.

Changes

We will update this page when our practices change and revise the date above. Check the policy before submitting personal information or enabling new online features.