Privacy Policy
Hello, and welcome to ViewPoint Studio's Privacy Policy.
We make small games with one idea pushed all the way, and we want them to be fun and safe to play. Our approach to data is simple: collect anonymous data wherever possible, use as little personal data as is necessary to run the games, keep it in one place, and never sell any of it. We do not run marketing lists, we do not profile you, and we do not want to know more about you than the game needs.
Please take a moment to read this policy. It explains what we process, why we are allowed to, who else touches it, and what you can do about it. The general rules are in sections I to VII; the details for each game are in section VIII. Where a game needs something specific (for example when advertising is added), that section changes and the "last update" date moves.
This policy is written to the standard of the EU General Data Protection Regulation ("GDPR") and the UK GDPR, because our servers are in the European Union and that is the highest common bar. If you live elsewhere, other laws may also apply; California residents will find their specific information in section X.
When we say "you", we mean the person whose data is processed (the "data subject"). When we say "the Services", we mean our games and this website together.
I. Who are we?
ViewPoint Studio is an independent game studio based in Israel. For the purposes of the GDPR we are the controller of the personal data described in this policy: we decide what is collected and why.
Contact for anything related to privacy: privacy@viewpoint-studio.com. We answer from the studio's own inbox; there is no outsourced support desk.
II. Which games and services this covers
This policy covers:
- DeathCube (Android; iOS planned) — details in section VIII.1.
- This website, viewpoint-studio.com — details in section VII.
- Email you send us at any address on our domain.
Future games will be added here with their own subsection before they are released. The stores you download our games from (Google Play, later the App Store) process your data under their own policies; we only receive what they choose to share with developers, which is aggregated and does not identify you.
III. Meaning of terms
- Personal data: any information that relates to an identified or identifiable person. A random account ID is personal data as long as it is linked to you; a total count of players is not.
- Processing: anything done with data, from collecting it to deleting it.
- Controller: the party that decides why and how data is processed (us).
- Processor: a party that processes data on our behalf and on our instructions (for example Google, which hosts our servers).
- Anonymous data: data that cannot be linked back to you by anyone, for example aggregate statistics. Anonymous data is not personal data and is not covered by data-protection law.
IV. Legal basis
As a controller we need a legal basis to be allowed to process your personal data. For our Services these are:
- Performance of a contract (Art. 6 para. 1 let. b GDPR): everything needed to give you the game you asked for — saving your progress, showing leaderboards, running the in-game economy, answering your support request.
- Legitimate interest (Art. 6 para. 1 let. f GDPR): keeping the game fair and stable — verifying scores, detecting cheating, fixing crashes, and understanding in aggregate how the game is played so we can improve it. We have weighed these interests against yours; none of them involves profiling you or selling anything.
- Consent (Art. 6 para. 1 let. a GDPR): optional things you switch on yourself, such as linking a Google account. When advertising is added to a game, personalised ads in the EU/UK will also rest on consent, asked for inside the game; you can withdraw it at any time.
- Legal obligation (Art. 6 para. 1 let. c GDPR): answering lawful requests from authorities, or keeping records we are required to keep.
We do not process special categories of personal data (health, beliefs, biometrics and so on) and we never ask for them.
V. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectify data that is wrong (for example your player name — you can also change it in the game).
- Erase your data ("right to be forgotten"). See "Deleting your account" in section VIII.1.
- Restrict processing while a dispute is looked into.
- Portability: receive the data you gave us in a machine-readable form.
- Object to processing based on legitimate interest, and to any direct marketing (we do none).
- Withdraw consent at any time, without affecting what was done before.
- Complain to a supervisory authority, in your country of residence or ours (the Israeli Privacy Protection Authority).
To exercise any of these, email privacy@viewpoint-studio.com and include your player name and the user ID shown in the game's PROFILE screen so we can find the right account. We answer within 30 days. We never ask for a password, and we will not ask for more identification than we need to be sure the account is yours.
VI. Recipients — who else sees your data
We share personal data only with the parties below, and never sell it.
- Google (Firebase), as our processor: Authentication, Cloud Firestore, Cloud Functions, Analytics and Crashlytics. Our database and server code run in Google's europe-west1 region (Belgium). Google processes this data under the Firebase data-processing terms. Analytics and crash data are processed by Google under Google's own policy, and may leave the EU under the EU–US Data Privacy Framework and standard contractual clauses.
- Google Sign-In, if you choose to link a Google account: Google tells us your account ID and email address. We never see your Google password.
- Cloudflare, which hosts this website and forwards our email. Cloudflare sees the connection data described in section VII.
- Other players: leaderboards are public inside the game and show your player name, mode, score and rank. Nothing else about you is visible to anyone.
- Authorities, when the law requires it, or to establish or defend a legal claim.
- A successor, if the studio or a game is ever sold or merged: your data would pass with it, under this policy, and we would tell you before the change takes effect.
VII. This website and email
Website. viewpoint-studio.com is a static site. It sets no cookies and has no accounts. Cloudflare, which serves it, keeps standard connection logs (IP address, browser type, page requested, time) for security and to keep the site up; these are held briefly and used for nothing else. If we enable Cloudflare Web Analytics it measures page views without cookies and without identifying you.
Fonts. Pages load the Inter typeface from Google Fonts, so your browser contacts Google's font servers; Google's policy applies to that request.
Email. When you write to any address on our domain, we keep the message for as long as needed to answer you and to keep a record of the conversation. Mail is forwarded by Cloudflare into a Google Workspace / Gmail inbox.
VIII. Data processing in our games
VIII.1 DeathCube
What DeathCube is. A mobile runner inside a rotating tunnel, played offline or online, with cloud-saved progress and public leaderboards.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| A random account ID, created anonymously on first launch | Save and restore your progress; identify your account on the server | Contract |
| Google account ID and email, only if you link Google | Let you recover the same account on another device | Consent |
| Your chosen player name (3–12 characters) | Show you on leaderboards; moderate names | Contract |
| Runs: distance, time, mode, cause of death, the run's random seed, and the head-start used | Compute scores and coins on the server; verify that a run was possible; keep leaderboards fair | Contract, legitimate interest |
| Progress: coins, upgrades, shapes, skins, achievements, tutorial state, inbox messages | The game economy and your unlocks | Contract |
| Analytics events (run started/ended, menu actions, in-game purchases with coins) with a Firebase app-instance ID | Understand, in aggregate, how the game is played and where players stop | Legitimate interest |
| Crash reports: device model, OS version, game version, your account ID, the crash stack | Find and fix bugs | Legitimate interest |
| Moderation records: name changes, coin adjustments, reviews of flagged runs, and the reason | Accountability for actions taken on an account | Legitimate interest |
What we do not collect: no precise location, contacts, photos, microphone, or payment details (there are no real-money purchases in DeathCube today). We do not use the advertising ID today. Playtest logs that record battery level and frame timing stay on your device unless you send them to us yourself.
How long we keep it
- Account and progress: as long as the account exists.
- Run history: the most recent runs per account; older runs are trimmed automatically.
- Analytics: Google's default retention for Firebase event data (up to 14 months).
- Crash reports: 90 days.
- Moderation records: with the account; anonymised after deletion.
Deleting your account
You can delete your DeathCube account and everything linked to it — progress, runs, name, leaderboard entries, inbox — at any time. Email privacy@viewpoint-studio.com with your player name and user ID (both on the PROFILE screen); deletion is completed within 30 days and confirmed to you. A "Delete account" button inside the game, doing the same thing immediately, is on its way and this page will say so when it ships. Deletion is final: coins and unlocks cannot be restored afterwards.
Fair play and score verification
Every run is judged on the server: the distance, time and seed have to add up to a run that was physically possible. Runs that fail this check are flagged for a human look, and accounts that repeatedly submit impossible runs can have records removed or be blocked. This is the legitimate interest behind keeping run data, and it protects every other player's place on the board.
Advertising and purchases — not yet
DeathCube shows no ads and sells nothing for real money today. Before either is added, this section will be updated to name the ad network (planned: Google AdMob), the data it uses (advertising ID, approximate location inferred from your IP address, ad interaction events), the consent you will be asked for in the EU/UK, and how to limit it (Android: Settings → Privacy → Ads; iOS: the App Tracking Transparency prompt). Players who buy the remove-ads option will not have the ad SDK started at all.
IX. Children
Our games are not directed at children under 13, or under the age of digital consent where you live (up to 16 in parts of the EU). We do not knowingly collect personal data from children. Because accounts are anonymous by default, we cannot tell a child's account from an adult's; if you are a parent or guardian and believe your child has created an account, write to us and we will delete it. When a game is ever rated for a younger audience, this section will change first.
X. Privacy information for California residents
If you live in California, the CCPA/CPRA gives you the right to know what personal information we collect (sections VI–VIII), to delete it (section VIII.1), to correct it, and to opt out of its "sale" or "sharing". We do not sell or share personal information in the CCPA sense, and we do not use it for cross-context behavioural advertising. We will not treat you differently for exercising your rights. Requests go to privacy@viewpoint-studio.com; an authorised agent may act for you with written permission.
XI. Security
Data travels encrypted (TLS) between the game and our servers. Progress and coins are written only by our server functions, never directly by the app, so nothing on a device can edit them. Access to player records is limited to the studio's own Google accounts protected by two-factor authentication, and every administrative action is logged with who did it and why. No system is perfectly secure; if we ever learn of a breach affecting you, we will tell you and the relevant authority as the law requires.
XII. Changes to this policy
We will post changes here and move the "last update" date. If a change is material — a new category of data, a new recipient, advertising — we will also announce it inside the affected game (DeathCube: the in-game inbox) before it takes effect.
XIII. Contact
ViewPoint Studio · Israel
privacy@viewpoint-studio.com for privacy matters
support@viewpoint-studio.com for everything else