Who is responsible for your data
The Stone Rod mobile game (“the game”) is developed and published by Szigeti Balázs, a sole proprietor registered in Hungary (address: 1118 Budapest, Csikihegyek utca 14). I am the controller of the personal data described here.
Contact: szigeti.developer@gmail.com
This policy covers the game on iOS and Android. The game can be played without an account: most data only exists if you switch a feature on yourself.
What data I process and why
Your progress on your phone
Your save, your settings and an anonymous identifier created at install time are stored on your phone. I cannot access them. Deleting the app deletes them too.
The game does not access your location, contacts, photos, camera or microphone.
Cloud save (optional)
If you sign in with a Google or Apple account, your progress is also stored on my server so you can continue on another phone.
- Data: your account identifier, the email address provided by the sign-in service, your game progress, the time of saving and the anonymous install identifier.
- Purpose: keeping your progress and moving it between devices.
- Legal basis: providing the service you request by signing in (Article 6(1)(b) GDPR).
- Retention: until your account is deleted.
You can delete your account yourself in the game’s settings. This also deletes your cloud save, your verified videos and the statistics linked to your account; your progress on the phone stays. Signing out does not delete the save stored on the server.
Anonymous usage statistics
To see where the game gets stuck and what works, the game sends anonymous events.
- Data: the name of the event (for example launch, finishing a race, a video offer being shown or watched), the game language, the app version, the platform, the time and the anonymous install identifier. If you are signed in, also your account identifier.
- Purpose: improving the game and balancing its difficulty.
- Legal basis: my legitimate interest (Article 6(1)(f) GDPR).
- Retention: 24 months.
These statistics contain no name, email address, location or advertising identifier. You can turn them off in the game’s settings at any time. If you also want your earlier events deleted, write to me and I will delete them.
Purchases
You can buy virtual items in the game. Payment is handled by Apple (App Store) or Google (Google Play) under their own terms. Your name, email address and payment details do not reach me.
Purchases are checked and recorded by RevenueCat (RevenueCat, Inc.) as a processor. It verifies the store’s confirmation, which lets the game restore what you bought before, for example after reinstalling. What you bought is also stored in your game progress.
- Data: an anonymous user identifier created by RevenueCat, the purchase ID, the product, its price and currency, the time and the store’s confirmation, as well as your phone’s operating system, the app version, your country and your IP address.
- Purpose: verifying, crediting and restoring your purchases.
- Legal basis: performance of a contract (Article 6(1)(b) GDPR).
- Retention: as long as needed to restore your purchases, or until you ask for deletion. On request I also have your data deleted at RevenueCat.
Reward videos
Ads only appear when you start a video yourself for a reward. There are no banners, pop-up ads or ads at launch, and the whole game can be played without watching any.
Ads are served by Google AdMob (Google Ireland Limited). The game asks for non-personalized ads, and on iOS it does not ask for permission to track your activity across other apps. To show an ad, limit how often you see it, measure it and prevent abuse, Google still uses device and app information, your IP address and, on Android, the advertising identifier, under its own rules.
- Consent: in the EEA and the UK, Google’s consent form appears before the first video. If you say no, you can still watch videos.
- Legal basis: your consent (Article 6(1)(a) GDPR). You can change or withdraw it at any time in the game’s settings, with the “Ad privacy” button.
Verifying watched videos
Some rewards are only given for a video that Google’s server confirms. This requires a signed-in account.
- Data: your account identifier, the video identifiers (Google’s transaction ID and the game’s own number), where in the game the reward was offered, the reward amount and the time.
- Purpose: granting the reward and preventing cheating.
- Legal basis: providing the service (Article 6(1)(b) GDPR).
- Retention: 24 months, or until your account is deleted.
When you contact me
If you email me, I receive your email address and the content of your message. I use them to answer you and solve the problem. The legal basis is my legitimate interest in providing support (Article 6(1)(f) GDPR), and for a question about a purchase, the performance of a contract (Article 6(1)(b) GDPR). I keep emails for at most one year after your request is closed.
Who receives data
| Recipient | What for |
|---|---|
| Apple, Google (app stores) | Download, payment, purchase records |
| RevenueCat (RevenueCat, Inc.) | Verifying, recording and restoring purchases, as a processor |
| Supabase (Supabase, Inc.) | The server for cloud save, statistics and video verification, as a processor, in a data centre in the European Union |
| Google (Google Ireland Limited) | Ads (AdMob) and Google sign-in |
| Apple (Apple Distribution International) | Apple sign-in |
| Google (Gmail) | Support emails |
I do not sell your data. I only disclose data to others if required by law or a binding order of an authority.
Where a partner also processes data outside the European Economic Area (RevenueCat operates in the United States, where Google’s and Supabase’s parent companies are too), this is based on the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses. The game communicates with the server and the partners over encrypted connections.
Your rights
Under the GDPR you can ask me for access to the data I hold about you, to correct or delete it (including your account and the save stored on the server), to restrict its processing, and to receive it in a portable format. You can object to processing based on my legitimate interest, and you can withdraw your consent at any time; this does not affect earlier processing.
Send your request to szigeti.developer@gmail.com; I answer within one month. For account-related requests, use the email address you signed in with. For data held by Apple or Google, you can also contact them directly.
You can lodge a complaint with a supervisory authority, in particular in the country where you live. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (naih.hu).
Children
Stone Rod is not directed at children, and I do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, write to me and I will delete it.
Changes to this policy
If I change how the game handles data, I will update this page and the date at the top before the change takes effect. I will also point out important changes in the game.