00 / Summary
Loot stays on your device; name storage depends on account features.
01 / Scope
Who this policy covers
This policy applies to the iOS and Android versions of Bullet Parry Cowboy provided by gudocam and the privacy and deletion pages linked from the game. “Operator” means gudocam. Data described for an online feature is not transmitted in builds where that feature is disabled. Advertising and consent checks operate independently of account and usage-analytics features and may run without sign-in.
02 / Data
We process only what the selected feature needs.
| Context | Data | Collection |
|---|---|---|
| Core game | Player-chosen name, progress, coins, cartridge capacity, outfits, audio and language settings | Game saves are stored on the device. Stage progression and economy events are sent separately under Gameplay analytics below while analytics is on. Server name storage is limited to the account-name feature below |
| Online account | Random Firebase user identifier, anonymous-account status, optional Game Center player identifier and authentication proof, security Internet Protocol (IP) address and user agent | Processed when online account or purchase features are used |
| Account name profile | Player-chosen name linked to the Firebase user identifier, profile creation time, and name-change time | Encrypted upload of the device name to Firestore only when name storage is enabled and an account is already signed in |
| Ads Free purchase | Product, transaction, order and original-transaction IDs; store and test environment; purchase, acknowledgement, refund and revocation status and dates; Google Play purchase token; random purchase-account identifier; Firebase user link | Processed through Apple StoreKit and the App Store Server application programming interface (API) on iOS, or Unity In-App Purchasing (IAP), Google Play Billing, the Google Play Developer API and real-time developer notifications on Android |
| Gameplay analytics | App, operating system and device information; language; approximate country/region; stage identifier; random installation and attempt identifiers; attempt duration; outcome, revive, economy and purchase-flow events | Collected automatically or as app events by Firebase Analytics while gameplay analytics is on. From iOS 1.0.1 it is on by default without a separate prompt; a saved disabled or declined preference takes priority |
| App integrity | Attestation material, App Check token, IP address, request time and result | Processed when protected online features are called |
| Ad-enabled build | App, device, and operating-system information; IP address and approximate location derived from it; app- and device-related identifiers; ad requests, impressions, clicks, and other interactions; crash and performance data; and privacy choices. The Identifier for Advertisers (IDFA) is subject to operating-system permission and required consent | Unity LevelPlay, Unity Ads, ironSource Ads, and Google AdMob may process this data during ad initialization, requests (including preloading), and display |
| Advertising privacy choices | App and device information, IP address, stored consent or refusal choices, and consent status | Google's User Messaging Platform (UMP) checks whether a consent form is needed at app startup and records and applies privacy choices |
| Support | Name, reply email, message, and support history | Entered by the user through the gudocam.com contact form |
Analytics events do not include the player-chosen name, Game Center display name or raw identifier, authentication token, raw purchase receipt, precise location, or free-form text. We never receive Apple Account or Google Account passwords or payment-card details.
03 / Purpose and choice
Different purposes remain separate.
- Provide the gameSave and restore progress and settings on the device.
- Accounts and purchasesLink Game Center on iOS, verify and restore Ads Free from the App Store or Google Play, reflect refunds, and prevent abuse.
- Name display and supportUse the account name as a human-readable display and support aid. Duplicate names are allowed; names do not determine account ownership or purchase entitlements.
- Improve the serviceAnalyze game progression, difficulty, advertising, and purchase funnels while gameplay analytics is on.
- Provide adsFund free play with rewarded and interstitial ads and honor regional consent or opt-out choices.
- Support and complianceAnswer requests and address disputes, refunds, security incidents, and legal obligations.
From iOS 1.0.1, gameplay analytics is on by default when no preference is saved, without a separate analytics prompt on first launch. You can turn it off at any time in Settings → Privacy → Gameplay analytics and continue playing. If you declined analytics in an earlier version or turned it off in settings, that choice is preserved after updating. Earlier app versions that show a separate analytics consent prompt collect analytics only after you allow it.
The gameplay analytics setting does not grant or replace advertising consent or Apple's App Tracking Transparency (ATT) permission. On iOS, the app requests Apple's system alert when it becomes active on first launch if tracking permission has not yet been decided. Tracking across other companies' apps and websites requires permission through Apple's system prompt. You can decline and continue playing. The app keeps Firebase analytics consent for ad storage, ad user data, and ad personalization disabled.
Game Center linking is also optional. Purchase verification cannot work if its required processing is refused. Advertising consent is separate from the gameplay analytics setting. Google UMP shows a consent form when required for the region and existing choices. On iOS, the app waits until tracking permission status is resolved before requesting ads. On both platforms, UMP must indicate that ads can be requested. Declining personalized ads may still allow non-personalized or limited ads, depending on applicable choices, and processing needed for consent checks, ad delivery, and fraud prevention.
Ads Free skips stage-clear interstitials and lets players claim unlocked outfits without an ad. Optional rewarded ads, such as double coins or revives, remain available. Buying Ads Free therefore does not stop all advertising-related processing.
Entering a name does not create an online account or require Game Center. The name remains only on the device if name storage is disabled or no account is signed in. Upload failures do not block offline play. A name profile is not a cross-device progress backup.
04 / Providers and international transfers
Online features rely on these service providers.
| Provider and location | Service and data | Timing and retention |
|---|---|---|
|
Google LLC
Firebase Authentication: United States Other Firebase services: Seoul, South Korea and Google's global facilities |
Anonymous and Game Center authentication, Firestore name profiles and entitlements, Cloud Functions name storage and purchase verification, App Check, and gameplay analytics according to your setting. User IDs, player names and change times, authentication and security data, purchase entitlements, app, device, and event data | Encrypted transfer when the feature is used; retained as described below and in Google's terms |
|
Apple Inc. United States and Apple's global facilities |
Game Center authentication and in-app purchase, restore and refund status. Player identifier and proof; product, transaction, and status data | Encrypted transfer when the user connects or uses a purchase feature; Apple retains Apple Account and transaction data under its policy |
|
Google LLC — Google Play
United States and Google's global facilities |
Android in-app purchase, restoration, acknowledgement and refund verification. Product, order, purchase token, random purchase-account identifier and transaction status. App and device integrity checks through Play Integrity | Encrypted transfer for purchases, restoration, verification and purchase-status notifications; Google retains Google Account and payment records under its policy |
|
Unity Technologies and affiliates
United States and service operating countries |
Unity LevelPlay mediation and bidding; Unity Ads and ironSource Ads delivery, measurement, and fraud prevention. App, device, identifier, IP, interaction, diagnostic, and consent data listed under advertising above | Network transfer during ad initialization, requests, and display; subject to privacy choices and retention under Unity's policy |
|
Google LLC — AdMob and UMP
United States and Google's global facilities |
AdMob bidding, delivery, measurement, and fraud prevention; UMP consent management. Data listed under advertising and advertising privacy choices above | Network transfer for startup consent checks and ad initialization, requests, and display; subject to privacy choices and retention under Google's policy |
|
Fly.io, Inc. / Resend, Inc.
United States and service operating regions |
Hosting privacy and support pages and delivering support email. Access logs, name, reply email, and message | Encrypted transfer when visiting or submitting a request; security logs as needed and support records for three years |
Turning off gameplay analytics or not using Game Center and purchase features limits transfers for those features. Refusing personalized ads does not stop every international transfer. Depending on applicable choices, information needed for consent checks or non-personalized or limited ads may still be processed abroad. The policies below explain provider-specific privacy choices and rights requests.
05 / Retention
We delete or unlink data when it is no longer needed.
| Data | Retention |
|---|---|
| On-device game data | While app data remains; removed when the app or its local data is deleted |
| Firebase account, user document, and name profile | Deletion begins on account deletion; removal from Firebase backup systems may take up to 180 days |
| Purchase entitlement and ledger | While the entitlement remains active. Account deletion removes the Firebase user link; the transaction record, including its Google Play purchase token and random purchase-account identifier, is kept for five years after the latest status change for fraud, refund, and dispute handling, then deleted |
| Apple notification deduplication identifier | 30 days after processing |
| Gameplay analytics | Up to 14 months under Google Analytics user and event retention settings; non-identifying aggregate reports may remain longer |
| Advertising and consent data | Retained under Unity's and Google's policies for the relevant purpose, data type, and legal obligations. Game account deletion does not automatically remove all provider-held records; use the deletion and rights procedures in their policies |
| Support and rights-request records | Three years after completion, or longer where required by law |
Electronic records are securely deleted or unlinked from identifiers. Legally required records are isolated and not used for unrelated purposes.
A changed name replaces the previous name without a separate name-history record. Account deletion removes the server name profile; names are not copied to the five-year purchase ledger. The device copy of the name remains until local app data is removed.
06 / Your rights and deletion
You can change analytics and advertising choices or delete your account and data.
- Gameplay analyticsTurn it off in Settings → Privacy → Gameplay analytics to stop subsequent analytics collection and transmission. Your choice persists when you restart the app. Turning it back on collects new events from that point; gameplay events that occurred while it was off are not sent later. Use the contact page below for related questions.
- Advertising privacy choicesOpen Settings → Privacy → Ad privacy choices to revisit the consent form. This entry appears when Google UMP requires a privacy-options entry point. Manage iOS app-tracking permission in the device's Settings → Privacy & Security → Tracking.
- Game CenterChoose whether to connect or disconnect it. Disconnecting does not delete the Apple Game Center account.
- Delete accountOpen Settings → Privacy → Manage game account → Delete game account and complete recent authentication to remove the Firebase account and linked entitlement document.
- Access, correct, object, or restrictSubmit a request through the contact page. We will verify the requester and respond under applicable law.
Progress, coins, and settings are stored only on the device and may remain after online account deletion. Delete the app's local data to remove them. Deleting the game account does not delete your Apple Account or Google Account, or cancel or refund an App Store or Google Play purchase. Purchase records and refund requests follow the procedures of the store used for the purchase.
See the complete account and data deletion steps →Analytics already sent before you turn it off is not linked by the app to a Firebase account identifier, so isolating a particular person's prior events may not be possible. Those events are deleted or aggregated under the retention schedule above.
07 / Children
We do not knowingly collect children's personal data.
The game is not directed to children under 14. If we learn that a child under 14 was processed without required parental consent, we will promptly delete the related account and information. Advertising is not used for personalized advertising to users treated as children under applicable law.
08 / Security
The server—not the game client—verifies purchase rights.
Safeguards include encryption in transit, Firebase App Check, least-privilege database rules, server-side verification of Apple transaction signatures and Google Play purchase tokens, separate secret-key storage, request limits, and access controls. The game client cannot directly edit the purchase ledger.
09 / Contact and changes
Privacy requests are reviewed by the Operator.
For access, correction, deletion, restriction, privacy questions, or reports involving a child, use the contact page and write “Bullet Parry Cowboy privacy request.” Do not include a raw purchase receipt, Google Play purchase token, authentication token, or raw Game Center identifier in the first message. We will explain any necessary verification separately.
Material changes will be announced on this page and, when practical, in the game before they take effect. Editorial or contact-detail changes are reflected by updating this page's version and effective date.