Privacy Policy
Hello, and welcome to ViewPoint Studio's Privacy Policy.
We make small games with one idea pushed all the way, and we want them to be fun and safe to play. Our approach to data is simple: collect anonymous data wherever possible, use as little personal data as is necessary to run the games, keep it in one place, and never sell any of it. We do not run marketing lists, we do not profile you, and we do not want to know more about you than the game needs.
Please take a moment to read this policy. It explains what we process, why we are allowed to, who else touches it, and what you can do about it. The general rules are in sections I to VII; the details for each game are in section VIII. Where a game needs something specific (for example when advertising is added), that section changes and the "last update" date moves.
This policy is written to the standard of the EU General Data Protection Regulation ("GDPR") and the UK GDPR, because our servers are in the European Union and that is the highest common bar. If you live elsewhere, other laws may also apply; California residents will find their specific information in section X.
When we say "you", we mean the person whose data is processed (the "data subject"). When we say "the Services", we mean our games and this website together.
I. Who are we?
ViewPoint Studio is an independent game studio based in Israel. For the purposes of the GDPR we are the controller of the personal data described in this policy: we decide what is collected and why.
Contact for anything related to privacy: privacy@viewpoint-studio.com. We answer from the studio's own inbox; there is no outsourced support desk.
II. Which games and services this covers
This policy covers:
- DeathCube (Android; iOS planned) — details in section VIII.1.
- This website, viewpoint-studio.com — details in section VII.
- Email you send us at any address on our domain.
Future games will be added here with their own subsection before they are released. The stores you download our games from (Google Play, later the App Store) process your data under their own policies; we only receive what they choose to share with developers, which is aggregated and does not identify you.
III. Meaning of terms
- Personal data: any information that relates to an identified or identifiable person. A random account ID is personal data as long as it is linked to you; a total count of players is not.
- Processing: anything done with data, from collecting it to deleting it.
- Controller: the party that decides why and how data is processed (us).
- Processor: a party that processes data on our behalf and on our instructions (for example Google, which hosts our servers).
- Anonymous data: data that cannot be linked back to you by anyone, for example aggregate statistics. Anonymous data is not personal data and is not covered by data-protection law.
IV. Legal basis
As a controller we need a legal basis to be allowed to process your personal data. For our Services these are:
- Performance of a contract (Art. 6 para. 1 let. b GDPR): everything needed to give you the game you asked for — saving your progress, showing leaderboards, running the in-game economy, answering your support request.
- Legitimate interest (Art. 6 para. 1 let. f GDPR): keeping the game fair and stable — verifying scores, detecting cheating, fixing crashes, and understanding in aggregate how the game is played so we can improve it. We have weighed these interests against yours; none of them involves profiling you or selling anything.
- Consent (Art. 6 para. 1 let. a GDPR): optional things you switch on yourself, such as linking a Google account. Personalised ads in the EU/UK and in US states with an opt-out right rest on consent, asked for inside the game through Google's consent tool; you can withdraw or change it at any time from the game's settings ("Privacy options").
- Legal obligation (Art. 6 para. 1 let. c GDPR): answering lawful requests from authorities, or keeping records we are required to keep.
We do not process special categories of personal data (health, beliefs, biometrics and so on) and we never ask for them.
V. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectify data that is wrong (for example your player name — you can also change it in the game).
- Erase your data ("right to be forgotten"). See "Deleting your account" in section VIII.1.
- Restrict processing while a dispute is looked into.
- Portability: receive the data you gave us in a machine-readable form.
- Object to processing based on legitimate interest, and to any direct marketing (we do none).
- Withdraw consent at any time, without affecting what was done before.
- Complain to a supervisory authority, in your country of residence or ours (the Israeli Privacy Protection Authority).
To exercise any of these, email privacy@viewpoint-studio.com and include your player name and the user ID shown in the game's PROFILE screen so we can find the right account. We answer within 30 days. We never ask for a password, and we will not ask for more identification than we need to be sure the account is yours.
VI. Recipients — who else sees your data
We share personal data only with the parties below, and never sell it.
- Google (Firebase), as our processor: Authentication, Cloud Firestore, Cloud Functions, Analytics and Crashlytics. Our database and server code run in Google's europe-west1 region (Belgium). Google processes this data under the Firebase data-processing terms. Analytics and crash data are processed by Google under Google's own policy, and may leave the EU under the EU–US Data Privacy Framework and standard contractual clauses.
- Google Sign-In, if you choose to link a Google account: Google tells us your account ID and email address. We never see your Google password.
- Google AdMob, which serves the ads in DeathCube. For ad serving and measurement Google acts as an independent controller: it receives your advertising ID, your IP address (from which it infers an approximate location), device and app information and which ads you saw and tapped, under Google's description of how it uses data from apps. Where the law requires it, personalised ads are shown only with your consent. Players who buy Remove Ads never have the ad SDK started.
- Google Play Billing, for real-money purchases: Google handles the payment and tells our server the product bought and an order identifier so we can grant it once. We never receive card or bank details.
- Cloudflare, which hosts this website and forwards our email. Cloudflare sees the connection data described in section VII.
- Other players: leaderboards are public inside the game and show your player name, mode, score and rank. Nothing else about you is visible to anyone.
- Authorities, when the law requires it, or to establish or defend a legal claim.
- A successor, if the studio or a game is ever sold or merged: your data would pass with it, under this policy, and we would tell you before the change takes effect.
VII. This website and email
Website. viewpoint-studio.com is a static site. It sets no cookies and has no accounts. Cloudflare, which serves it, keeps standard connection logs (IP address, browser type, page requested, time) for security and to keep the site up; these are held briefly and used for nothing else. If we enable Cloudflare Web Analytics it measures page views without cookies and without identifying you.
Fonts. Pages load the Inter typeface from Google Fonts, so your browser contacts Google's font servers; Google's policy applies to that request.
Email. When you write to any address on our domain, we keep the message for as long as needed to answer you and to keep a record of the conversation. Mail is forwarded by Cloudflare into a Google Workspace / Gmail inbox.
VIII. Data processing in our games
VIII.1 DeathCube
What DeathCube is. A mobile runner inside a rotating tunnel, played offline or online, with cloud-saved progress and public leaderboards.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| A random account ID, created anonymously on first launch | Save and restore your progress; identify your account on the server | Contract |
| Google account ID and email, only if you link Google | Let you recover the same account on another device | Consent |
| Your chosen player name (3–12 characters) | Show you on leaderboards; moderate names | Contract |
| Runs: distance, time, mode, cause of death, the run's random seed, and the head-start used | Compute scores and coins on the server; verify that a run was possible; keep leaderboards fair | Contract, legitimate interest |
| Progress: coins, upgrades, shapes, skins, achievements, tutorial state, inbox messages | The game economy and your unlocks | Contract |
| Analytics events (run started/ended, menu actions, in-game purchases with coins) with a Firebase app-instance ID | Understand, in aggregate, how the game is played and where players stop | Legitimate interest |
| Crash reports: device model, OS version, game version, your account ID, the crash stack | Find and fix bugs | Legitimate interest |
| Moderation records: name changes, coin adjustments, reviews of flagged runs, and the reason | Accountability for actions taken on an account | Legitimate interest |
| Purchase records from Google Play: product, order identifier, purchase state (no payment details) | Grant what you bought, exactly once; refunds and support | Contract |
| Rewarded-ad receipts: which run a watched ad belongs to, confirmed by Google's signed callback to our server | Pay the ad's reward (revive, double coins) only for ads that were really watched | Contract, legitimate interest |
| Ad data handled by Google AdMob on the device: advertising ID, IP address, device and app information, ads shown and tapped, your consent choice | Show and measure ads; personalise them only with your consent where required | Consent (personalised), legitimate interest (non-personalised) |
What we do not collect: no precise location, contacts, photos, microphone, or payment details (Google Play handles the payment; we only learn what was bought). The advertising ID is used by Google AdMob on the device for ads, as described below; our own servers never store it. Playtest logs that record battery level and frame timing stay on your device unless you send them to us yourself.
How long we keep it
- Account and progress: as long as the account exists. An anonymous account that has never played a run and has not opened the game for 180 days is deleted automatically, sign-in identity included; accounts linked to Google, and any account with at least one run, are never expired this way.
- Run history: the most recent runs per account; older runs are trimmed automatically.
- Analytics: Google's default retention for Firebase event data (up to 14 months).
- Crash reports: 90 days.
- Moderation records: with the account; anonymised after deletion.
Deleting your account
You can delete your DeathCube account and everything linked to it — progress, runs, name, leaderboard entries, inbox, and the sign-in identity itself — at any time, from inside the game: PROFILE → SETTINGS → DELETE ACCOUNT, then type DELETE to confirm. The account is erased immediately, while you wait, and the game starts over as a new player. Step-by-step instructions, what is kept (anonymised moderation records only) and the e-mail route if you can no longer open the game are on the account deletion page. By e-mail (privacy@viewpoint-studio.com, with your player name and user ID) deletion is completed within 30 days and confirmed to you. Deletion is final: coins and unlocks cannot be restored afterwards.
Fair play and score verification
Every run is judged on the server: the distance, time and seed have to add up to a run that was physically possible. Runs that fail this check are flagged for a human look, and accounts that repeatedly submit impossible runs can have records removed or be blocked. This is the legitimate interest behind keeping run data, and it protects every other player's place on the board.
Advertising
DeathCube shows ads through Google AdMob: rewarded ads you choose to watch (to revive after a death or double a run's coins) and occasional interstitial ads between runs. For this, the AdMob SDK on your device uses your advertising ID, your IP address (from which Google infers an approximate location, never a precise one), device and app information, and which ads were shown and tapped. Google uses this data as an independent controller; see how Google uses information from apps that use its services.
Consent. In the EU, the UK, Switzerland and US states with an opt-out right, the game asks for your choice before any ad is requested, using Google's consent tool. If you decline, ads are shown without personalisation or not at all, and the game works the same. You can change your choice at any time in the game under PROFILE → SETTINGS → PRIVACY OPTIONS. You can also reset or delete your advertising ID in Android's settings (Settings → Privacy → Ads).
Rewards are verified. When you watch a rewarded ad, Google sends our server a signed confirmation naming the run it belongs to; the reward is paid only on that confirmation. The confirmation carries your account ID and the run identifier, nothing else.
Remove Ads. If you buy Remove Ads, the ad SDK is never started on your device again and no ad data is collected from then on.
Real-money purchases
Coin packs, the Starter Pack and Remove Ads are sold through Google Play Billing. Google processes the payment under its own terms; our server receives the product bought, an order identifier and the purchase state, verifies them with Google, and grants the purchase once. We never see your card, bank or billing address. Purchases are tied to your DeathCube account, not to your Google account, so deleting the account also removes the record of what it owned (see "Deleting your account").
IX. Children
Our games are not directed at children under 13, or under the age of digital consent where you live (up to 16 in parts of the EU). We do not knowingly collect personal data from children. Because accounts are anonymous by default, we cannot tell a child's account from an adult's; if you are a parent or guardian and believe your child has created an account, write to us and we will delete it. When a game is ever rated for a younger audience, this section will change first.
X. Privacy information for California residents
If you live in California, the CCPA/CPRA gives you the right to know what personal information we collect (sections VI–VIII), to delete it (section VIII.1), to correct it, and to opt out of its "sale" or "sharing". We do not sell personal information. Personalised ads served by Google AdMob can count as "sharing" for cross-context behavioural advertising under the CCPA; in California the game asks for your choice before any ad is requested, and you can opt out at any time under PROFILE → SETTINGS → PRIVACY OPTIONS, after which ads are non-personalised. We will not treat you differently for exercising your rights. Requests go to privacy@viewpoint-studio.com; an authorised agent may act for you with written permission.
XI. Security
Data travels encrypted (TLS) between the game and our servers. Progress and coins are written only by our server functions, never directly by the app, so nothing on a device can edit them. Access to player records is limited to the studio's own Google accounts protected by two-factor authentication, and every administrative action is logged with who did it and why. No system is perfectly secure; if we ever learn of a breach affecting you, we will tell you and the relevant authority as the law requires.
XII. Changes to this policy
We will post changes here and move the "last update" date. If a change is material — a new category of data, a new recipient, advertising — we will also announce it inside the affected game (DeathCube: the in-game inbox) before it takes effect.
XIII. Contact
ViewPoint Studio · Israel
privacy@viewpoint-studio.com for privacy matters
support@viewpoint-studio.com for everything else