1. Who we are
This policy explains how OneManStudio (Maksim Nemna) handles information for Dropventure: Merge Worlds on iOS and Android and this support website. We are responsible for the game’s account and gameplay data. Contact: support@dropventure.onemanstudio.dev.
Apple, Google, and other providers may also process information under their own policies when you use their services.
2. Information we process
Game account, progress, and wallet
The game creates a pseudonymous Player ID and an installation-based authentication identity. Our self-hosted Nakama server processes account identifiers, game progression needed by server operations, coins, crystals, perk inventory, permanent upgrades, and transaction or reward-operation records. These records let us synchronize the wallet and prevent duplicate grants. The device also stores local progress, settings, lives, and account state.
Supported game versions also send completed-attempt outcomes (win or loss), game mode, location, level and difficulty to our own game server. We record applied perk uses, their inventory or payment source, in-game currency rewards and spending, life-pack exchanges, ruby-to-coin exchanges, and dated reports of the life balance stored on the device. We use these Player-ID-linked records in our private administration tools and aggregate reports to understand level difficulty and balance the game economy. Canceled or refunded perk actions are not counted as uses. Closing the game or leaving a level is not recorded as a loss. Account deletion removes the account-linked gameplay records.
Supported Android builds attempt automatic sign-in through your Google Play Games profile. We process the game-profile identifier, display name and a short-lived authorization code to verify the profile on our Nakama server and link it to your Player ID. A new installation can recover an already linked Google player and its server-managed wallet and progression. You can continue as a guest if sign-in is unavailable or declined. The Play Games SDK also processes usage analytics and technical diagnostics for service stability and improvement. We do not request your Google Account password, email, contacts or ordinary Google Drive documents. On Apple devices, Game Center can provide the platform player identifier and display name; Game Center alone does not restore the Nakama account. Cross-platform account merging is not available.
Purchases
Apple or Google processes checkout. We process the product identifier, transaction or order identifiers, purchase token or signed transaction, purchase state, charged amount, currency, refunds, and verification results, associated with your Player ID. Our server verifies purchases with the relevant store and grants the purchased items. We do not receive your full payment-card details.
Advertising and consent
The game integrates Google AdMob and Google’s consent tools. Depending on the build, device, region, and your choices, Google’s advertising SDK can process IP addresses (including approximate location derived from IP), device or advertising identifiers, app interactions, ad impressions and interactions, diagnostics, and consent signals. Test builds may show test ads. Optional rewarded ads can grant in-game rewards. See Google’s Privacy Policy and Google’s SDK data disclosure.
Network and support information
Our server and website process the IP address and technical request information necessary to deliver and protect the service. The game also contacts Google and Cloudflare public endpoints to check network time for lives and time integrity; those providers receive your IP address and ordinary connection metadata.
If you contact support, we process your email address, message, Player ID and any other information you choose to send, such as device details, order references, or screenshots. Please avoid sending passwords, card details, or authentication secrets.
This website
The website uses your browser language by default, or English if that language is unavailable or unsupported. If you choose another language, we save that preference in your browser’s local storage for future visits.
This support website has no advertising, analytics scripts, tracking cookies, or third-party fonts. The account deletion form uses a temporary first-party security cookie to bind a request to your browser; it expires after 20 minutes. We process deletion requests, confirmation attempts and limited anti-abuse data to protect accounts. Codes are displayed only to the authenticated game and are not placed in URLs or analytics logs. The support form sets a first-party security cookie for up to 30 days. We use keyed hashes of its random browser ID, IP address, reply email and message content to limit abuse and detect duplicates for up to 24 hours; the browser ID is not a device fingerprint. The form stores your message and reply email in our private support inbox. You can also email our support address directly to create a conversation. Support messages are received and stored on our own server; Gmail is not used to forward or manage them. Replies from our support team are emailed to the address you provide; your email replies are added to the same conversation. Email subjects and message text are imported; HTML email is converted to text. Attachments are not imported. We suppress duplicate email messages for 24 hours and limit new requests and replies to reduce spam. Messages awaiting delivery can remain in the outgoing mail queue for up to 24 hours; support correspondence remains in the support mailbox as described below. Anti-abuse records contain keyed hashes; correspondence is stored in the private support inbox. Message bodies are not written to application logs. Opening an external link or sending an email uses the destination provider’s service. The game’s advertising behavior is separate from this website.
3. Why we use information
- Provide the game, maintain your account and wallet, save the relevant game state, and deliver purchases and rewards.
- Verify purchases, prevent duplicate claims and abuse, and protect accounts and the service.
- Understand level outcomes and perk usage, evaluate game difficulty, and balance in-game rewards and prices.
- Display and measure advertising, manage consent, and provide optional rewarded ads.
- Check time integrity, diagnose service problems, and answer support or privacy requests.
- Meet applicable legal obligations and resolve purchase disputes.
Where data-protection law requires a legal basis, we rely on performance of the service you request, our legitimate interests in operating and securing it (balanced against your rights), legal obligations, and consent where required for advertising or device access. You can withdraw consent through the available privacy controls without affecting processing already lawfully performed.
4. Sharing and service providers
We use the following services for these purposes:
- Contabo: hosts our server and database. Nakama is server software that we run ourselves; Heroic Labs does not host this game’s player database.
- Google: Google Play Games profile authentication, Google Play purchase verification, AdMob advertising and consent services, and network-time checks.
- Apple: App Store purchases and verification, and Game Center where used.
- Cloudflare: the public network-time endpoint contacted by the game.
We may also disclose necessary information to comply with law, handle a legitimate legal claim, or protect the service and its users. We do not sell your game account or support correspondence. Advertising providers’ processing is described separately above.
Providers can process information in countries other than yours. Applicable protections and legal transfer requirements depend on the service and relevant law. Their policies provide further details: Contabo, Google, Apple, and Cloudflare.
5. Your choices and rights
Where available, open Settings → Privacy choices to review advertising consent. You can also use your device’s advertising and tracking controls. The game does not need access to your contacts, microphone, camera, or precise GPS location for gameplay.
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of certain data, and withdraw consent. You may also complain to your local data-protection authority.
Send a request to support@dropventure.onemanstudio.dev and include your Player ID if it concerns a game account. We may verify account ownership before acting. The support page explains the current account deletion request route. Use the in-game deletion control in builds that include it, or the secure account deletion page. Older test builds may need an update; support remains available if you no longer have access to the game.
6. Retention and deletion
We keep account and game data while it is needed to provide the service, maintain your progress and purchases, and address legitimate security, dispute, or legal requirements. We retain support correspondence as needed to resolve and document the request. We do not promise a fixed automatic deletion period.
On a verified deletion request, we delete or anonymize the associated account and gameplay data, except limited records we need to retain for legal obligations, transaction disputes, fraud prevention, or security. We will explain any applicable exception when responding. For purchase accounting and store reconciliation, restricted transaction records may retain the product, store, amount, currency, refund status and order reference after the game-account link is removed. Store purchase records held by Apple or Google remain subject to their own policies.
Restricted backups may contain data until those backups are replaced or deleted. We keep a restricted deletion journal outside database backups, with the deleted Player ID, request reference, and date, so deletion requests can be reapplied before a restored database returns to service. We also retain keyed hashes that block reuse of a deleted installation identity, receipt-hash markers that prevent duplicate purchase grants, and the server’s minimal deletion records. They do not contain the deleted progress, wallet balances, raw receipt, or display name. Completed web confirmation records are removed after 24 hours; short-lived request state is removed with the account. These limited records are kept for deletion enforcement and security, and reviewed when the corresponding backup or fraud-prevention need ends.
7. Security
We use HTTPS for communication with our game server and store-verification services, restrict database and administrative access, and protect local authentication material using platform security facilities. No system is completely secure. Contact us if you suspect unauthorized access.
8. General audience and children
Dropventure is intended for a general audience and is not specifically directed at young children. A content rating such as 3+ describes game content; it is not a statement that the service is designed for children or that a child can independently consent to data processing.
Where parental consent is legally required, a parent or guardian should supervise use and manage purchases and device privacy settings. If you believe we have processed a child’s personal information without a legally required authorization, contact us so we can investigate and delete or otherwise address the data as required. Do not send a child’s personal details beyond what is necessary to identify the issue.
9. Changes and contact
We may update this policy as the game or applicable requirements change. We will update the date above and provide additional notice where required for material changes.
For privacy questions or requests: support@dropventure.onemanstudio.dev
OneManStudio · Dropventure: Merge Worlds