1. Who we are
This policy explains how OneManStudio (Maksim Nemna) handles information for Dropventure: Merge Worlds on iOS and Android and this support website. We are responsible for the game’s account and gameplay data. Contact: onemanstudio.co.il@gmail.com.
Apple, Google, and other providers may also process information under their own policies when you use their services.
2. Information we process
Game account, progress, and wallet
The game creates a pseudonymous Player ID and an installation-based authentication identity. Our self-hosted Nakama server processes account identifiers, game progression needed by server operations, coins, crystals, perk inventory, permanent upgrades, and transaction or reward-operation records. These records let us synchronize the wallet and prevent duplicate grants. The device also stores local progress, settings, lives, and account state.
If platform sign-in is available and you choose or enable it, the game may receive the platform player identifier and display name, such as from Apple Game Center. This does not currently provide cross-platform account linking or guaranteed recovery on another device.
Purchases
Apple or Google processes checkout. We process the product identifier, transaction or order identifiers, purchase token or signed transaction, purchase state, and verification results, associated with your Player ID. Our server verifies purchases with the relevant store and grants the purchased items. We do not receive your full payment-card details.
Advertising and consent
The game integrates Google AdMob and Google’s consent tools. Depending on the build, device, region, and your choices, Google’s advertising SDK can process IP addresses (including approximate location derived from IP), device or advertising identifiers, app interactions, ad impressions and interactions, diagnostics, and consent signals. Test builds may show test ads. Optional rewarded ads can grant in-game rewards. See Google’s Privacy Policy and Google’s SDK data disclosure.
Network and support information
Our server and website process the IP address and technical request information necessary to deliver and protect the service. The game also contacts Google and Cloudflare public endpoints to check network time for lives and time integrity; those providers receive your IP address and ordinary connection metadata.
If you contact support, we process your email address, message, Player ID and any other information you choose to send, such as device details, order references, or screenshots. Please avoid sending passwords, card details, or authentication secrets.
This website
This support website has no advertising, analytics scripts, tracking cookies, or third-party fonts. The account deletion form uses a temporary first-party security cookie to bind a request to your browser; it expires after 20 minutes. We process deletion requests, confirmation attempts and limited anti-abuse data to protect accounts. Codes are displayed only to the authenticated game and are not placed in URLs or analytics logs. Opening an external link or sending an email uses the destination provider’s service. The game’s advertising behavior is separate from this website.
3. Why we use information
- Provide the game, maintain your account and wallet, save the relevant game state, and deliver purchases and rewards.
- Verify purchases, prevent duplicate claims and abuse, and protect accounts and the service.
- Display and measure advertising, manage consent, and provide optional rewarded ads.
- Check time integrity, diagnose service problems, and answer support or privacy requests.
- Meet applicable legal obligations and resolve purchase disputes.
Where data-protection law requires a legal basis, we rely on performance of the service you request, our legitimate interests in operating and securing it (balanced against your rights), legal obligations, and consent where required for advertising or device access. You can withdraw consent through the available privacy controls without affecting processing already lawfully performed.
4. Sharing and service providers
We use the following services for these purposes:
- Contabo: hosts our server and database. Nakama is server software that we run ourselves; Heroic Labs does not host this game’s player database.
- Google: Google Play purchase verification, AdMob advertising and consent services, network-time checks, and email support through Gmail.
- Apple: App Store purchases and verification, and Game Center where used.
- Cloudflare: the public network-time endpoint contacted by the game.
We may also disclose necessary information to comply with law, handle a legitimate legal claim, or protect the service and its users. We do not sell your game account or support correspondence. Advertising providers’ processing is described separately above.
Providers can process information in countries other than yours. Applicable protections and legal transfer requirements depend on the service and relevant law. Their policies provide further details: Contabo, Google, Apple, and Cloudflare.
5. Your choices and rights
Where available, open Settings → Privacy choices to review advertising consent. You can also use your device’s advertising and tracking controls. The game does not need access to your contacts, microphone, camera, or precise GPS location for gameplay.
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of certain data, and withdraw consent. You may also complain to your local data-protection authority.
Send a request to onemanstudio.co.il@gmail.com and include your Player ID if it concerns a game account. We may verify account ownership before acting. The support page explains the current account deletion request route. Use the in-game deletion control in builds that include it, or the secure account deletion page. Older test builds may need an update; support remains available if you no longer have access to the game.
6. Retention and deletion
We keep account and game data while it is needed to provide the service, maintain your progress and purchases, and address legitimate security, dispute, or legal requirements. We retain support correspondence as needed to resolve and document the request. We do not promise a fixed automatic deletion period.
On a verified deletion request, we delete or anonymize the associated account and gameplay data, except limited records we need to retain for legal obligations, transaction disputes, fraud prevention, or security. We will explain any applicable exception when responding. Store purchase records held by Apple or Google remain subject to their own policies.
Restricted backups may contain data until those backups are replaced or deleted. We keep a restricted deletion journal outside database backups, with the deleted Player ID, request reference, and date, so deletion requests can be reapplied before a restored database returns to service. We also retain keyed hashes that block reuse of a deleted installation identity, receipt-hash markers that prevent duplicate purchase grants, and the server’s minimal deletion records. They do not contain the deleted progress, wallet balances, raw receipt, or display name. Completed web confirmation records are removed after 24 hours; short-lived request state is removed with the account. These limited records are kept for deletion enforcement and security, and reviewed when the corresponding backup or fraud-prevention need ends.
7. Security
We use HTTPS for communication with our game server and store-verification services, restrict database and administrative access, and protect local authentication material using platform security facilities. No system is completely secure. Contact us if you suspect unauthorized access.
8. General audience and children
Dropventure is intended for a general audience and is not specifically directed at young children. A content rating such as 3+ describes game content; it is not a statement that the service is designed for children or that a child can independently consent to data processing.
Where parental consent is legally required, a parent or guardian should supervise use and manage purchases and device privacy settings. If you believe we have processed a child’s personal information without a legally required authorization, contact us so we can investigate and delete or otherwise address the data as required. Do not send a child’s personal details beyond what is necessary to identify the issue.
9. Changes and contact
We may update this policy as the game or applicable requirements change. We will update the date above and provide additional notice where required for material changes.
For privacy questions or requests: onemanstudio.co.il@gmail.com
OneManStudio · Dropventure: Merge Worlds