Privacy Policy.

Who we are

Toxic Chain Studios is an independent game studio founded by Armin Yousefinaserkhani. We are responsible for the information described in this policy. You can reach us at press@toxicchainstudios.com.

What we collect in Toxic Pyramids

Game account

• A random device code and player ID. When you first open the game, it creates a random secret code on your device and our server creates a player ID for it. Our server stores only a scrambled (hashed) version of the secret code.
• Your in-game profile: the two-word player name the game gives you or that you choose from our list (for example "Golden Falcon"), and the avatar you pick.

Game progress and economy

• Levels completed, coins, gems, items, upgrades, timers, daily rewards and settings.
• Endless Mode results: your scores, monthly ranking, and the timing of each run (when each point was scored). We use the timing to detect cheating.
• Records of rewards you received for watching ads, and records of in-app purchases (product and the store's purchase receipt) when purchases are available.

Technical information

• Your IP address, the game version, and the time of each request to our server. We use these to keep the service working, to limit abuse (for example mass creation of fake accounts) and to investigate errors. Server logs are kept only for a short time.

Optional: your Instagram username

• Only if you add it yourself and tick the box agreeing that it may be shown publicly. It is used for the Hall of Fame (see below). You can remove it at any time in the game.

Collected by our advertising partner

• Toxic Pyramids shows ads through Unity LevelPlay / Unity Ads. Unity may collect device information such as your device's advertising ID, device model, operating system, approximate location from your IP address, and how you interact with ads, in order to show and measure ads. When you watch a rewarded ad, Unity confirms it to our server using your player ID.
• You can reset your advertising ID or opt out of personalized ads in your device settings (on Android: Settings → Google → Ads, or Settings → Privacy → Ads, depending on the device).

On this website

• If you use the contact form, we receive the name, email address and message you enter. The form is processed by our hosting provider, Netlify.

How we use it

• To run the game: save your progress on our server, apply rewards and purchases, and run timers and the monthly competition.
• To keep it fair and secure: detect cheating, fake ad rewards, fake purchases and automated play, and ban accounts that cheat.
• To show ads, including rewarded ads you choose to watch, which keep the game free.
• To answer messages you send us, and to improve the game using overall usage numbers.

Where the GDPR or similar laws apply, we rely on: performing our agreement with you (providing the game), our legitimate interests (security, anti-cheat, improving the game), and your consent where it is required (the public Instagram username and, where applicable, personalized advertising).

What other players can see

• Your player name, avatar, monthly score, best Endless run and rank appear in the leaderboards and on your player card.
• If you finish in the monthly top 3, your player name and score are shown permanently in the Hall of Fame. If you added your Instagram username and agreed to show it, other players can see it and open your Instagram profile.
• Players can report a Hall of Fame entry. We may remove links that are offensive or inappropriate.

Who we share it with

• Unity Technologies (LevelPlay / Unity Ads): advertising, as described above. See the Unity privacy policy.
• Google: the game is distributed through Google Play, and purchases are processed and verified by Google Play. See the Google privacy policy.
• DigitalOcean: our game server and its database run on DigitalOcean servers located in Frankfurt, Germany.
• Netlify: hosts this website and its contact form.
• Authorities, if we are legally required to.

We do not sell your personal information, and we do not share it for other companies' own marketing beyond the advertising described above.

How long we keep it

• Your game account and progress: as long as you play, and until you ask us to delete it. Accounts inactive for a long period may be deleted.
• Monthly leaderboards and Hall of Fame entries are kept as a permanent record of the competition, unless you ask us to remove your details.
• Server logs: a short time, normally a few weeks. Backups of the database are kept for up to 14 days.
• Contact form messages: as long as needed to handle your request.

Delete your data or ask what we have

You can ask us to delete your Toxic Pyramids account and its data, to send you a copy of it, or to correct it. To do this:

• Email press@toxicchainstudios.com with the subject "Toxic Pyramids data request", or use the contact form.
• Include your exact player name as shown in the game's profile, so we can find your account.
• We will reply within 30 days. When an account is deleted, its progress, coins, gems and purchases cannot be restored. Records we must keep by law (for example of purchases) may be kept for the required time.

To remove only your Instagram username, you can do it yourself in the game at any time.

If you are in the EU, the UK or another region with data protection laws, you also have the right to object to some uses of your data, and to complain to your local data protection authority.

Children

Toxic Pyramids is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Security

Connections between the game and our server are encrypted (HTTPS). Access to the server is restricted, and the device code is stored only in scrambled form. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy, we will update it on this page and change the date at the top. Important changes may also be announced in the game.

Contact

Questions about privacy: press@toxicchainstudios.com, or the contact form.