Privacy Policy for MovingCastle
Last Updated: July 15, 2026
This Privacy Policy explains how MovingCastle Game Works ("Company," "we," "us," or "our"), the developer, publisher, and/or operator of MovingCastle, collects, uses, discloses, stores, and protects information when you install, access, or use the game and its related official websites, customer-support channels, community features, and online services that link to this Privacy Policy (collectively, the "Game").
This Privacy Policy applies specifically to MovingCastle. A different product may have its own privacy notice. Where applicable law requires consent for a particular activity, we will request it through an appropriate consent interface. If you do not agree with this Privacy Policy, please do not use the Game.
1. Information We Process
The information processed depends on the features you use, your device and platform settings, your region, and the configuration of the Game and its SDKs.
| Information category | Examples | Collection method | Main purposes |
|---|---|---|---|
| Account and profile information, if an account feature is offered | Player ID, nickname, avatar, linked platform identifier, age or age range, country or language selection | Provided by you, generated by the Game, or received from a login platform with your authorization | Create and maintain the account, synchronize progress, provide social features, and protect account security |
| Device and application information | Device manufacturer and model, operating-system version, app version, screen settings, language, time zone, country setting, network type | Collected automatically by the Game or an integrated SDK | Compatibility, operation, analytics, attribution, security, and troubleshooting |
| Online and installation identifiers | IP address, app instance or installation ID, Firebase installation ID, session ID, advertising identifier where available and permitted | Generated or collected automatically when the Game or an SDK connects to online services | Distinguish installations, deliver services, measure campaigns, prevent fraud, and maintain security |
| Gameplay and app activity | App launch, session duration, level progress, scores, achievements, settings, button interactions, tutorial completion, virtual-item activity, and configured game events | Generated when you interact with the Game and recorded locally or through enabled analytics services | Operate and improve gameplay, balance levels, understand feature use, and measure performance |
| Diagnostics and performance | Crash traces, error logs, loading time, memory use, network performance, device state at the time of an error | Collected automatically through enabled Firebase or technical diagnostic functions | Identify crashes, investigate errors, improve stability, and support users |
| Attribution and campaign information | Installation source, campaign and referral parameters, ad interaction, attribution result, and fraud or integrity signals | Collected automatically through Facebook or Adjust SDK functions, referral links, or platform information | Measure marketing campaigns, attribute installations and events, and prevent advertising fraud |
| Transaction metadata, if purchases are offered | Product identifier, purchase status, price category, country, time, order or receipt identifier | Received from the app store or payment platform; full card or bank credentials are not provided to us | Verify purchases, deliver content, process support or refund inquiries, and maintain required records |
| Support and voluntary submissions | Email address, support message, survey answer, feedback, screenshots, diagnostic files, and other attachments | Provided directly by you | Respond to requests, investigate reports, improve the Game, and keep a record of the resolution |
Please do not send sensitive information that is unnecessary for your support request. We do not intentionally request government identification numbers, financial-account credentials, health information, contact lists, SMS or call history, or precise GPS location unless a clearly disclosed feature genuinely requires such information and any required permission has been obtained.
2. Permissions and Device Access
The following table describes privacy-relevant access commonly required by the current SDK configuration. The final permissions included in the published build are determined by the Game's merged application manifest and enabled features.
| Permission or access category | Typical Android declaration or mechanism | Reason for use | User control |
|---|---|---|---|
| Internet access | android.permission.INTERNET | Connect the Game to Firebase, Facebook, Adjust, customer support, cloud features, and other online services | Normal Android permission; no separate runtime prompt |
| Network status | android.permission.ACCESS_NETWORK_STATE | Determine connection availability and diagnose failed requests | Normal Android permission; no separate runtime prompt |
| Advertising identifier, if used | com.google.android.gms.permission.AD_ID, where applicable | Attribution, campaign measurement, frequency control, analytics, and fraud prevention, subject to consent and device settings | Reset, delete, or limit the advertising identifier through device settings where supported |
| App-specific local storage | Application sandbox and local preferences | Save progress, configuration, consent choices, cached resources, and SDK state | Removed or reset through operating-system app controls; does not provide general access to personal media files |
| Notifications, if offered | Platform notification permission on versions that require it | Deliver requested game reminders, event notices, security messages, or service updates | Can be declined or disabled in device settings |
The Game is not intended to access contacts, precise location, camera, microphone, SMS, call logs, health data, or broad photo and media libraries unless the relevant feature is clearly disclosed before access and the required permission is requested.
3. Third-Party SDKs
The current version of the Game integrates the following SDKs. SDK providers may receive information directly from code operating within the Game. Depending on the service, region, and legal context, a provider may act as our processor or service provider, or process certain information as an independent controller under its own privacy terms.
| SDK / provider | Information that may be processed | Collection method | Use in the Game | Provider privacy information |
|---|---|---|---|---|
| Facebook SDK / Meta | Device and app information, IP address, advertising identifier where permitted, app launch, configured game events, campaign and attribution information | Collected automatically when the Facebook SDK initializes or a configured event occurs | App-event measurement, login or social functions if enabled, campaign attribution, analytics, and campaign optimization | Meta Privacy Policy |
| Adjust SDK | Device, installation, and advertising identifiers; IP address; device and app details; installation source or referrer; session and configured event data; fraud signals | Collected automatically on installation, app launch, referral processing, and configured measurement events | Mobile attribution, campaign measurement, deep linking where enabled, analytics, and fraud prevention | Adjust Privacy Policy |
| Firebase SDK / Google | Firebase installation ID, app and device information, configured analytics events, crash reports, error details, performance information, and service tokens depending on enabled modules | Collected automatically when an enabled Firebase module initializes, records an event, or detects a crash or performance condition | Analytics, crash diagnosis, performance monitoring, cloud configuration, security, and other Firebase functions enabled for the Game | Privacy and Security in Firebase and Google Privacy Policy |
The exact data collected by an SDK depends on which modules are enabled, which events we configure, the user's consent selection, device settings, and the provider's technical operation. We periodically review our SDK configuration and will update this Privacy Policy when a material change affects the Game's data practices.
4. How We Use Information
We may use information to:
- Install, operate, maintain, and deliver the Game and requested features;
- Create and secure player identifiers or accounts where available;
- Save or synchronize gameplay progress and preferences;
- Provide levels, achievements, social functions, virtual content, and other gameplay features;
- Diagnose crashes, errors, network problems, and compatibility issues;
- Analyze aggregate gameplay patterns and improve performance, controls, difficulty, and user experience;
- Attribute installations and measure the effectiveness of marketing campaigns;
- Detect fraudulent attribution, manipulation, abuse, unauthorized access, cheating, and other harmful activity;
- Verify transactions and deliver purchased content where purchases are offered;
- Respond to support requests, feedback, complaints, and privacy requests;
- Send service, security, or legal notices and optional communications where permitted;
- Enforce our agreements and protect users, the Company, and third parties; and
- Comply with laws, court orders, valid governmental requests, and platform requirements.
We may combine information from different Game functions or authorized service providers where reasonably necessary for the purposes described above.
5. Legal Bases
Where applicable law requires a legal basis, we rely on:
- Contractual necessity, where processing is required to provide the Game or a feature you request;
- Legitimate interests, including operating and improving the Game, measuring performance, supporting users, maintaining security, preventing fraud, and understanding our business, provided those interests are not overridden by your rights;
- Consent, where you agree to a particular activity, such as access to an advertising identifier, optional analytics, or personalized advertising where applicable. Consent may be withdrawn through an available consent interface, device setting, or by contacting us;
- Legal obligation, where processing is needed to comply with applicable law or a binding request; and
- Other lawful grounds, including protection of a person's vital interests where applicable.
6. Advertising, Analytics, and Attribution
Facebook, Adjust, and Firebase may be used to understand installations, app events, technical performance, and marketing effectiveness. If the Game displays advertising through a platform or advertising provider, additional provider-specific disclosures may be presented in the Game or added to this Privacy Policy.
Some privacy laws define certain transfers for cross-context behavioral or personalized advertising as a "sale," "sharing," or use for "targeted advertising," even where no money is paid for the information. We do not sell personal information for money. Where applicable, you may use an in-Game consent or privacy interface, device advertising settings, or the contact method below to exercise an opt-out right.
You may continue to receive contextual or non-personalized advertising after opting out of personalized advertising. A choice may apply only to the relevant device, installation, or SDK and may need to be made again after resetting identifiers, clearing app data, reinstalling the Game, or changing devices.
7. How We Disclose Information
We may disclose information:
- To Facebook/Meta, Adjust, and Firebase/Google as described in Section 3;
- To hosting, customer-support, security, communications, content-delivery, or technical vendors that help operate the Game;
- To an app store, console, login, or distribution platform where necessary for requested features, transaction verification, compliance, or support;
- Within our corporate group where affiliated entities support development, hosting, security, or administration;
- In response to law, legal process, court order, or a valid request from a competent authority;
- Where reasonably necessary to investigate fraud, security incidents, unlawful conduct, or threats to rights and safety;
- In connection with a merger, acquisition, financing, reorganization, asset transfer, or similar business transaction, subject to applicable law; or
- At your direction or with your consent.
We may use and disclose aggregated or de-identified information that cannot reasonably identify you. We will not attempt to re-identify de-identified information except where permitted by law, including to test the effectiveness of de-identification measures.
8. Data Retention
We retain information only for as long as reasonably necessary to provide the Game, fulfill the purposes described in this Privacy Policy, maintain security, prevent fraud, answer support requests, comply with legal and accounting requirements, resolve disputes, and enforce agreements.
Retention periods vary by information type and service configuration. Account or gameplay information may be retained while the relevant account or service remains active. Support records may be kept while the issue remains relevant. Transaction, fraud-prevention, or legal records may be kept longer where required or permitted by law. SDK providers apply their own retention schedules as described in their privacy materials and service settings.
After the applicable retention period ends, we will erase or anonymize the information, or place it beyond further use, except during reasonable backup cycles or where preservation is legally required.
9. International Data Processing
The Game may be available internationally. Information may be processed in countries other than your country of residence, including locations where the Company, its affiliates, Facebook/Meta, Adjust, Firebase/Google, or their service providers operate. Privacy laws in those locations may differ from local law.
Where required, international transfers are supported by recognized mechanisms such as adequacy decisions, approved contractual clauses, certifications, data-processing terms, or other lawful safeguards.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. Measures may include access controls, encrypted transmission where appropriate, monitoring, vendor controls, dependency maintenance, and incident-response procedures.
No application, network, or storage system is completely secure. You are responsible for protecting your device, platform account, and login credentials and for notifying us if you suspect unauthorized activity.
11. Children's Privacy
The Game is intended for a general audience and is not directed to children under 13 or below the minimum age required by the law of their country or region (the "Minimum Age"). Children below the Minimum Age should not use the Game or submit personal information without legally valid parental or guardian authorization.
We do not knowingly collect personal information from children below the Minimum Age in a manner prohibited by law or knowingly use such information for personalized advertising where prohibited. If we learn that information was collected without required authorization, we will take reasonable steps to delete it or otherwise address the situation.
A parent or guardian who believes that a child has provided personal information may contact movingcastle2626@gmail.com and identify MovingCastle in the request.
12. Your Rights and Choices
Depending on your location, you may have rights to:
- Know whether and how personal information is processed;
- Access or obtain a copy of certain information;
- Correct inaccurate or incomplete information;
- Request deletion;
- Restrict or object to processing;
- Withdraw consent;
- Receive certain information in a portable format;
- Opt out of targeted advertising or disclosures defined as a sale or sharing;
- Appeal a privacy-request decision; and
- Complain to a competent privacy or data-protection authority.
To submit a request, email movingcastle2626@gmail.com with the subject "MovingCastle Privacy Request." Describe the request and provide information reasonably necessary to locate the relevant records, such as your player or installation identifier, platform, device type, and approximate dates of use. Do not send passwords, full payment-card details, or unrelated sensitive documents.
We may take reasonable steps to verify your identity or authority. Some rights are subject to legal exceptions, including where information is needed for security, fraud prevention, transactions, legal compliance, or legal claims. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.
Deleting the Game from a device stops future collection from that installation but does not necessarily delete information already transmitted to us or an SDK provider. Where account deletion is available, you may use the in-Game function or contact us. A provider may require a separate request for information it controls independently.
13. Third-Party Services and Links
The Game may link to an app store, social platform, website, advertisement, or other third-party service. Independent third parties operate under their own terms and privacy policies. We do not control and are not responsible for their content, security, permissions, or data practices merely because the Game provides a link or integration.
14. Changes to This Privacy Policy
We may update this Privacy Policy when the Game's features, permissions, SDKs, business practices, or legal obligations change. We will revise the "Last Updated" date when a new version is posted.
If a change materially affects how information is processed, we may provide additional notice through the Game, an official website, an app-store listing, or an appropriate consent interface. We will request consent before new processing where required by law.
15. Contact Us
To ask a question, submit a complaint or privacy request, or raise a concern about this Policy or information handled through MovingCastle, contact us at: movingcastle2626@gmail.com