Privacy Policy

KoenigCraft is a mobile games project operated by an individual based in the United Arab Emirates ("KoenigCraft", "we", "us", or "our"). This Privacy Policy explains why and how we process your personal data when you install or use our mobile games (the "Games").

For any question regarding your privacy or to exercise a right described below, you can contact us by email at [email protected]. To help us route your request, please include the word "Privacy" in the subject line.

1. How we process your data in our Games

When you install and use our Games, we and our service providers collect and process information to ensure the performance of our Games, validate purchases, deliver and measure advertising, understand how players use our Games, and detect and fix technical issues.

1.1. What information we collect about you

We do not collect data that directly identifies you, such as your full name, physical address, or phone number. We do not ask you to create an account in our Games and we do not offer sign-in with Apple or Google. Game progress is stored locally on your device and is not synchronised to our servers.

The categories of personal data we and our partners process are:

• Technical identifiers, such as your device's advertising identifier (IDFA on iOS, GAID on Android) where you have given the required consent, and app-instance identifiers.
• IP address, processed by our advertising, attribution and analytics partners (typically used only transiently to derive country-level location and to detect fraud).
• Device and technical data, such as device model, operating system and version, language, screen size, app version, and performance metrics.
• Gameplay and engagement data, such as in-game events, session length, level progression, and other gameplay metrics.
• In-app purchase data, such as transaction identifiers, validation receipts, and product details.
• Advertising and campaign data, such as ad interactions, attribution data, and your consent preferences.
• Diagnostic data, such as crash reports, stack traces, and device state at the time of a crash.

1.2. Why and on what legal bases we process your data

The following table explains why we process this data and the legal bases for doing so under the GDPR and similar laws.

1.3. Who we share your data with

To operate, improve and monetise our Games, we work with the following categories of recipients. Where required, we apply contractual, technical and organisational safeguards to protect your personal data.

• App stores (Apple, Google) — independent controllers. When you make an in-app purchase, Apple and Google act as independent controllers for the parts of the transaction they operate (payment processing, fraud prevention, and their own legal obligations). We only receive the minimum data necessary to validate the transaction and deliver the purchased content (such as transaction identifiers and receipts).
• Advertising and mediation partners. We integrate the following third-party advertising and mediation SDKs to display advertisements and monetise our Games: Google AdMob, AppLovin MAX, and Unity Ads. These partners are responsible, as independent data controllers, for the subsequent processing they carry out for their own purposes (including audience building and cross-app advertising), as described in their own privacy policies.
• Mobile measurement partner. We use AppsFlyer to measure the effectiveness of our advertising campaigns on third-party platforms, attribute installs and in-app events to campaigns, and detect advertising fraud. AppsFlyer acts as our service provider for these purposes.
• Analytics providers. We use Firebase Analytics (provided by Google) and GameAnalytics to understand player behaviour and improve our Games. These providers act as our service providers for these purposes.
• Crash reporting provider. We use Firebase Crashlytics (provided by Google) to detect, diagnose, and fix crashes and technical issues. This provider acts as our service provider for this purpose.
• Legal and regulatory authorities. We may share data with legal or regulatory authorities where required to comply with our legal obligations or to establish, exercise, or defend legal claims.

1.4. How long we keep your data

We retain personal data only for as long as strictly necessary to fulfil the purposes described in this policy, and then delete or anonymise it.

2. Children's privacy

Our Games are not designed for, directed at, or intended for children under the age of 13. If you are under 13, do not use our Games. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13 without verified parental consent, we will delete that data as soon as reasonably possible.

Some of our Games may carry a content rating from app stores or rating bodies (such as PEGI 3, ESRB Everyone, or IARC 3+) that makes them technically accessible to younger players. A content rating reflects only the absence of objectionable content (such as violence, strong language, or adult themes) and does not change the fact that our Games are not directed at, designed for, or intended for children under 13.

In some countries in the European Economic Area, the digital age of consent under the GDPR is higher than 13 — up to 16, depending on the member state. In those countries, users below the local digital age of consent who would otherwise consent to the processing of their personal data for personalised advertising or similar purposes require the consent of a parent or legal guardian. Where required by applicable law, we may ask you to confirm that you are above the relevant age before allowing you to provide such consent.

Parents and guardians: if you believe that your child under 13 has provided us with personal data, please contact us at [email protected] with the words "Child data" in the subject line. We will verify your request and delete the relevant data within 30 days of verification.

3. International data transfers

KoenigCraft is operated from the United Arab Emirates. Our partners and service providers listed above are located in various countries, including outside the United Arab Emirates, the European Economic Area, the United Kingdom, and Switzerland.

Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to a country that does not offer an essentially equivalent level of protection, we rely on appropriate safeguards put in place by our partners and service providers, such as:

• an adequacy decision adopted by the European Commission, the United Kingdom, or Switzerland, where applicable;
• standard contractual clauses approved under applicable data protection laws, including the European Commission Standard Contractual Clauses and, where applicable, the UK International Data Transfer Agreement or UK Addendum, and Swiss-recognised transfer safeguards;
• certification under the EU–U.S. Data Privacy Framework and any applicable UK or Swiss extension, where the recipient organisation is duly certified;
• other appropriate safeguards or, where strictly necessary, specific derogations provided under applicable data protection laws.

4. Your rights and how to exercise them

For clarity, we describe below the rights that apply depending on your place of residence. Regardless of your location, we are committed to handling your requests with care.

To exercise any of these rights, contact us at [email protected] with the word "Privacy" in the subject line. We may need to ask you for additional information to verify your request.

4.1. If you are in the United Arab Emirates

Under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"), where applicable, you have the rights to be informed, to access your personal data, to request correction or erasure, to restrict or object to processing, to data portability, and to withdraw your consent at any time where processing is based on consent.

4.2. If you are in the EEA, the UK, or Switzerland

Under the GDPR, UK GDPR, Swiss data protection law, or other applicable local law, you have the following rights:

• Right of access and data portability: you can request a copy of your personal data. Where required and technically feasible, we will provide it in a structured, commonly used, and machine-readable format.
• Right to rectification: you have the right to request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): you can request the deletion of your data, unless its retention is required by law or necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: you can request the limitation of the processing of your personal data under specific circumstances provided by law.
• Right to object: you can object to the processing of your personal data based on legitimate interests at any time, on grounds relating to your particular situation.
• Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time through the in-app consent settings (where available), through your device's advertising settings, or by contacting us.
• Rights related to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. KoenigCraft does not carry out any such automated decision-making in its Games.
• Right to lodge a complaint: you have the right to lodge a complaint with the data protection supervisory authority of your country of residence.

4.3. If you are in the United States

This section applies to residents of U.S. states whose privacy laws grant consumer privacy rights. Depending on your state of residence, you may have some or all of the rights described below. We also apply this section to other U.S. states when similar privacy laws become applicable.

• Right to know, access, and portability: you may request confirmation that we process your personal data, access to that data, and information about how we use, disclose, sell, or share it. Where required, you may also request a copy of your personal data in a portable and readily usable format.
• Right to information about third parties: you may request information about the categories of third parties with whom we share personal data.
• Right to delete: you may request deletion of personal data we have collected about you, subject to legal exceptions.
• Right to correct: you may request correction of inaccurate personal data.
• Right to opt out of sale or sharing / targeted advertising: we do not sell your personal data in exchange for money. However, disclosing identifiers and device information to advertising partners to provide personalised advertising may be considered a "sale", "sharing", or "targeted advertising" under certain U.S. state privacy laws. You can opt out through the in-app consent settings (where available) and through your iOS or Android device advertising settings.
• Opt-out preference signals: because our Games are native mobile applications, in-app advertising preferences are primarily managed through the in-app consent settings (where available) and through your iOS or Android device advertising settings.
• Right to limit the use of sensitive personal information (California): we do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit under California law.
• Right to withdraw consent: where we rely on your consent, you may withdraw it at any time through the in-app consent settings (where available) or, where applicable, your device settings.
• Right to non-discrimination: we will not discriminate or retaliate against you for exercising your privacy rights.
• Authorised agent: in certain states, you may designate an authorised agent to submit requests on your behalf. We may need to verify the agent's identity and authority, and we may also ask you to confirm the request directly where permitted by law.
• Right to appeal: if we deny your request, you may appeal our decision by replying to our response, or by contacting us at [email protected] with "Privacy Appeal" in the subject line.
• "Shine the Light" (California Civil Code § 1798.83): KoenigCraft does not share personal information with third parties for those third parties' separate direct marketing purposes by phone, email, or postal mail.

4.4. How to manage your preferences

You can exercise many privacy choices directly through:

• In-app consent settings: where a consent management interface is available in a Game, open it to manage your consent for personalised advertising and analytics.
• Your iOS settings: manage advertising-related choices through App Tracking Transparency (Settings → Privacy & Security → Tracking) and Apple advertising settings. You may also reset your advertising identifier.
• Your Android settings: manage advertising-related choices through your ads settings (Settings → Google → Ads). You may also reset or delete your advertising identifier.

You can also contact us at [email protected] for any request that cannot be completed directly from the Game or device settings.

5. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our partners, or applicable laws. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.