Prism Shift Privacy Policy

PULB GROUP is the controller of the personal data processed through Prism Shift. You can reach us at pulbgroup@gmail.com for every question and request in this policy.

A. Your game account. When you first use an online feature, the game creates an anonymous account on our servers:

• a random player ID and a random secret that only your device knows (we store a one-way hash of the secret);
• your platform (iOS or Android) and the game version;
• when the account was created and last used.

We do not ask for, and do not store, your name, email address, phone number or any sign-in from Apple, Google or another service.

B. Online play. To run the online features we store what you do in them:

• your in-game name (two words drawn from a fixed list, such as "Sunny Kite") and the avatar you picked from a fixed set;
• league scores and the moves of league and fortress runs (so results can be checked and replays shown);
• the gate you build for your fortress, attacks on it and your attacks on others;
• duels with friends, which you start by sharing a short code;
• your team, the preset messages and stickers you post there, and lives you ask for or give;
• pass points and claimed rewards, campaign wins you report (the level and the time), rewards we send you, and what your Prism Bank holds.

C. Purchases. When you buy something, we receive from Apple or Google and store:

• the product, the store transaction ID, the purchase time and the store environment;
• whether the purchase was refunded;
• a record of what the purchase added to your account.

Your player ID is attached to the purchase in the store (as the App Store "app account token" or the Google Play "obfuscated account ID"), so the purchase reaches the right account. We never receive your name, card number or billing address.

D. Gameplay statistics, only with your permission. The game asks once whether you want to share anonymous statistics. Nothing is recorded or sent unless you say yes, and you can switch it off in Settings at any time (statistics not yet sent are then deleted). With your permission we receive:

• when a session starts, and when a level is started, won, lost or restarted, with the level, the number of moves, the time taken and why a level was lost;
• the platform and game version;
• a random installation ID and session ID. These are not linked to your game account, your name or your advertising ID.

E. Advertising. The game shows ads (for example a video you choose to watch for a reward) through Google AdMob. AdMob may collect your device's advertising identifier, IP address, approximate location derived from it, device and app information and how you interact with ads. In the European Economic Area, the United Kingdom and Switzerland you are asked for consent through Google's consent message before personalised ads are shown; in US states with privacy laws you can opt out of personalised ads. On iOS, the advertising identifier is used only if you allow tracking when iOS asks. Google's use of this data is described at https://policies.google.com/technologies/partner-sites.

F. Technical data. Our servers see your IP address when the game connects. We use it only for a short time in memory to limit abuse (for example too many requests) and do not store it. Our server logs record your player ID, but not your IP address, when something fails or for security events.

What Prism Shift does not collect: your precise location, contacts, photos, camera or microphone, health data, or anything you write. The game has no free-text chat.

Your level progress, coins and boosters, lives, settings, chosen language and looks are saved on your device. The secret of your game account is also kept there; it is included in your device backup. If you delete the game without a backup, the account cannot be recovered on a new device.

• To run the game and its online features you choose to use (performance of our agreement with you).
• To deliver purchases, handle refunds and keep the records the law requires (agreement and legal obligation).
• To keep the game fair and secure: check scores, stop cheating and abuse (our legitimate interest).
• To improve levels and fix problems with statistics (your consent).
• To show ads that keep the game free (your consent where required, otherwise our legitimate interest).

We do not use your data for decisions that have legal or similarly significant effects on you.

• Apple and Google: to process and verify purchases and refunds (their own privacy policies apply to your store account).
• Google AdMob: for advertising, as described in section 2.E.
• Our hosting provider: it runs our servers and database for us and may only process data on our instructions.
• Unity Technologies: Prism Shift is built with the Unity engine and Unity's in-app purchasing library, which may process technical device data to work.
• Authorities: only when the law requires it.

We do not sell your personal data. Personalised advertising through AdMob may count as "sharing" under some US state laws; you can opt out as described in section 2.E.

In online features other players can see your in-game name and avatar, your league rank and score, your fortress gate, your trophies and replays of attacks, your duels with them, and your team activity (preset messages, stickers, asks and gifts). They never see your player ID, your purchases or your device.

• Your game account and everything linked to it: until you delete the account or we close the game.
• Gameplay statistics: 180 days, then deleted automatically.
• Server logs: for a limited time for security and troubleshooting.
• Purchase records: deleted with your account. Apple and Google keep their own records of your purchases.

• Statistics: switch "Share stats" off in Settings at any time.
• Ads: change your ad consent in the game where it is offered, limit ad tracking in your device settings, or on iOS deny tracking.
• Name: draw a new in-game name at any time.
• Deletion: ask us at pulbgroup@gmail.com, or use "Delete account" in the game's settings once it appears in your version. Deleting the account deletes your profile, scores, team membership, gates, duels, pass progress and purchase records stored with the account. Posts in a team feed stay without your name.

Depending on where you live (for example under the GDPR, the UK GDPR, Türkiye's KVKK or US state laws) you may also have the right to access, correct, delete or receive a copy of your data, to object to or restrict its use, and to withdraw consent. Write to pulbgroup@gmail.com; we answer within 30 days. Because the account is anonymous, we may ask you to prove it is yours, for example with a purchase receipt. You can also complain to your data protection authority.

Prism Shift is a general-audience game and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal data from them. If you believe a child has used the online features, write to us and we will delete the account.

Our servers and service providers may be located outside your country. Where data leaves the EEA, the UK or Türkiye, we rely on the safeguards the law provides, such as standard contractual clauses. Data is sent over encrypted connections, account secrets are stored only as hashes, and access to our systems is limited to the people who run the game.

We update this policy when the game changes. The date at the top shows the latest version. If a change matters to how your data is used, we tell you in the game.

PULB GROUP · pulbgroup@gmail.com