Your privacy, explained.

1. Who processes your data

Controller

MiM - Mobilis in mobile

Project

Sparta GO!

Privacy contact

info@mobilisinmobile.it

Use this contact for privacy information, data requests and exercising your rights.

2. Data on your device

Progress, medals, heroes, relics, preferences, local records and your analytics choice are saved on your device. In versions with security protections, this data uses Keychain on iOS and encrypted storage using Android Keystore on Android. The protected archive is bound to your device and is not automatically transferred to another device through backups. We do not automatically upload your full progress to our server.

Technical credentials for leaderboards are kept in protected system storage: Keychain on iOS and encrypted storage using Android Keystore on Android. They maintain your online session and may have a different lifetime from ordinary game saves.

Security checks for online features

Updated versions use Firebase App Check with Apple App Attest or DeviceCheck and Google Play Integrity to verify app and device authenticity. These services process attestations and technical app and device information to help prevent abusive access. Security checks are separate from optional analytics and do not require you to enable them.

3. Leaderboards and online profile

Participation uses Apple Game Center or Google Play Games. Firebase Authentication verifies your native profile; Cloud Firestore stores a technical player identifier, provider, platform, nickname, best score and update time. A small thumbnail of your profile picture is synchronised when available.

Nickname, score, platform and thumbnail are public in the shared leaderboard, which can also be viewed without signing in. Native platform services also manage their own leaderboards under their settings. We do not receive your Apple or Google password or request your account email to play.

Viewing the shared leaderboard without an account does not create a new guest Firebase account. Guest identities from earlier versions may be used to migrate their owner's record to a verified native account. Apple and Google remain separate identities.

We process this data to provide the online features you request, based on performance of the service under Article 6(1)(b) GDPR. You can play without a native profile but cannot submit records to the shared leaderboard.

4. Optional analytics

With your consent, we use Google Analytics for Firebase to understand and improve the game. Events cover tutorial start and completion, run starts and results, mode and level, medals, active duration, steps, points, lives lost, relics, hero unlocks, virtual currency spending and categorised online service errors.

The SDK also records technical and usage information such as sessions, first launch, app version, device and operating system characteristics, language and approximate geographic area. It uses a pseudonymous installation identifier: this data is not completely anonymous. We do not request GPS location.

We do not add nicknames, pictures, emails, credentials or game account identifiers to analytics events. For Firebase Analytics, advertising identifiers and ad personalisation are disabled; these events are not used for personalised advertising. Any AdMob features described below are separate.

The legal basis is your consent under Article 6(1)(a) GDPR. No choice means collection is off. Accept, decline or withdraw in Settings → Privacy → Usage analytics. Declining does not restrict gameplay or leaderboards.

Withdrawal stops new collection and resets local Analytics data. It does not automatically erase data Google already received or affect the lawfulness of earlier processing. Runs before consent are not collected retrospectively. Contact us about data already sent.

Purchases in enabled versions

Purchases and advertising are being prepared; availability depends on the app version and store activation. Purchases are one-time payments: the full campaign with ads removed, or ad removal alone. Apple and Google process payments. We do not receive your full card details, and a leaderboard account is not required to purchase.

To verify and restore a purchase, the game sends the signed Apple proof or Google purchase token, product and platform over HTTPS to our Firebase service in Europe. The server uses App Check and queries the store; Firestore stores a cryptographic purchase reference, product, platform, status and verification time. Raw receipts and tokens are not retained or included in application logs. The device keeps the verified result in protected storage. Revocations update when the store and service are reachable; they are not applied in real time while you are offline.

Unity In-App Purchasing also processes technical installation/session identifiers, device and country information and transaction data. This service is separate from Firebase Analytics: the game's analytics consent does not control Unity IAP processing. We do not add email, nicknames or personal data to Unity's optional fields. Unity acts as a processor for some processing and as an independent controller for its own purposes, as described in its game player privacy policy.

Verification, restoration and purchase management provide the service you request; fraud checks protect service security. Technical verification records remain while needed to manage the purchased entitlement or until a verified deletion request, subject to legal obligations. Store and Unity data follow their respective retention rules. Deleting data does not automatically cancel or refund a payment.

Advertising in enabled versions

When enabled, Google AdMob ads appear during Endless Run breaks: result banners and, alternatively, time-limited interstitials. We do not show ads during a run, in the campaign or daily incursion. Purchases that remove ads exclude both formats.

Google Mobile Ads may process IP addresses and approximate location, device identifiers permitted by the platform, ad interactions and diagnostics. We do not request GPS access. Versions prepared for launch request non-personalised ads. This does not exclude the provider’s collection of identifiers and technical data for advertising, measurement and fraud prevention. Advertising processing follows choices collected through Google UMP and applicable rules; declining analytics is not an advertising choice. The game does not request ads before consent management and SDK availability.

Manage choices in Settings → Privacy → Advertising privacy when UMP makes the option available. Fraud controls and data already processed by the provider follow its rules. References: how Google uses information on partner services and Google privacy policy. The intended audience includes minors. Their privacy settings must be completed and verified in distributed versions; advertising remains disabled until that configuration is complete.

5. Technical data, security and support

When you contact us, we process your email address and information you send to respond and handle your request. Do not send passwords, tokens or unnecessary information.

Online service providers may process IP addresses, client information and technical logs for communications, security and abuse prevention. Firebase Hosting processes request information, including IP addresses, to deliver and protect this page. We do not install visit measurement tools here.

Legal bases are handling your requests and our legitimate interest in service security and abuse prevention under Article 6(1)(b) and (f) GDPR; legal obligations rely on Article 6(1)(c).

6. Providers and international transfers

We use Google for Firebase Authentication, Cloud Firestore, Firebase Hosting and, only with consent, Google Analytics for Firebase. Apple and Google also operate Game Center, Play Games and platform accounts under their own privacy policies.

Providers and subprocessors may process data outside the European Economic Area, including the United States. Where applicable, transfers rely on adequacy decisions and/or standard contractual clauses and other safeguards described in provider terms. Contact us for information about those safeguards.

References: Firebase privacy and security, Firebase data processing terms, Google privacy policy, Apple privacy policy. We do not sell player data.

7. Retention

• Local saves: while retained in app data or device-managed storage and backups.
• Online profile, record and thumbnail: while needed to maintain the profile and leaderboard, or until a verified deletion request, subject to legal obligations.
• Analytics: detailed event data follows the property retention setting, no longer than 14 months, with periodic deletion by Google. New activity may renew identifier retention according to service settings. Aggregate reports may remain longer. See Google Analytics retention rules.
• Provider logs: under provider terms; Firebase states a few weeks for Authentication IP logs and a few months for Hosting IP data. Removing authentication data from live and backup systems can take up to 180 days after deletion is initiated.
• Support and privacy requests: as long as needed to handle and document the request, meet legal obligations or defend legal rights.

8. Your rights and deletion

Where provided by law, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent. Email info@mobilisinmobile.it. We may request only the information needed to verify ownership of the data.

You can request removal of your Firebase profile, record and thumbnail from the shared leaderboard through our deletion instructions, including outside the app. This does not delete your Apple or Google account or automatically remove data in their native services. Uninstalling the app or resetting campaign progress does not delete online data.

You can complain to the Italian Data Protection Authority or the competent authority in your country. We do not make automated decisions producing legal or similarly significant effects on individuals.

9. Children and updates

Versions with an age-group choice ask only for a self-declared group, without a date of birth or documents. The choice stays in device preferences and is not added to Analytics events or sent to our server. You may choose not to answer and change it in Settings → Privacy → Usage analytics. Ads and optional Analytics stay off for groups under 18, an unset age or a choice not to answer. Declaring an age of at least 18 does not automatically enable Analytics or ads: the respective checks and consents still apply. Changing the group revokes the previous Analytics choice and invalidates loaded ads. This declaration is not identity verification.

Sparta GO! is designed for teens aged 13 and above and adults, and is not directed to children under 13. This describes the intended audience; it does not verify a player’s age or replace the content rating assigned by stores.

Online features and valid consent must meet your platform's age requirements and applicable law. Where parental or guardian authorisation is required, those features and analytics must be managed with their involvement. Parents or guardians can contact us about a child's data.

We may update this policy when the game or services change. The date and revision appear above. Changes requiring renewed consent will prompt a new choice in the game.