This policy explains what data the mobile game Knotted! ("the game") processes, why, and what choices you have. The game is published by KBH Services ("we", "us"). Contact: [email protected].
1. Data we process
- Account. When you sign in, Unity Authentication creates a player ID for you. You sign in with Google Play Games (Android), Sign in with Apple (iOS) or as a guest. We receive a sign-in token from Google or Apple, not your password, email address or real name.
- Player name and friends. The player name you choose is visible to other players and is reserved for your account on our server, so no one else can use it. Your friends list, friend requests and party invites are stored so you can invite friends. Your friends can see whether you are online, in the lobby or playing a level, and can join your party from there.
- Reports and blocks. If you report another player's name, we store the report (your player ID, their player ID, the name and the reason) so we can review it. The reported player is not told who reported them. Players you block are stored on your device for your account.
- Game data. Level progress, settings, your diamond balance, cosmetic items, how many rewarded ads you watched today, and transaction IDs of your purchases (so each purchase is credited once).
- Multiplayer. When you play with others, lobby data (player ID, player name, chosen level, ready state) and live gameplay data (such as your character's position) are exchanged through Epic Online Services. Online connections can reveal your IP address to Epic Online Services and to the other players' devices.
- Purchases. Diamond purchases are processed by Google Play or the Apple App Store. We receive a receipt and transaction ID. We never receive your payment details.
- Ads. Rewarded ads are optional and are served by Google AdMob. AdMob may collect your device's advertising ID, IP address, approximate location derived from it, device information and ad interactions to deliver and measure ads and, where you allow it, to personalize them. Where required (for example in the EEA and the UK), the game asks for your consent through Google's consent form; you can change it later in Settings > Account & Privacy > Ad privacy choices.
- Tracking on iOS. On iPhone and iPad the game asks for permission to track through Apple's App Tracking Transparency prompt. Only if you allow it, AdMob may use your device's advertising identifier (IDFA) to personalize ads and measure them across apps and websites of other companies. If you do not allow it, the IDFA is not used. You can change this at any time in iOS Settings > Privacy & Security > Tracking.
- Usage statistics. With Unity Analytics the game records play events, such as finishing onboarding, starting and finishing levels, falls and respawns, creating or joining a party, quick match results, purchases, rewarded ads and lost connections. They are linked to a random player ID, not to your name. In the EEA, the UK and similar regions nothing is collected until you switch Share usage data on in Settings; elsewhere it is on until you switch it off there.
- Crash reports. When the game crashes or hits an error, Unity Cloud Diagnostics receives a report with the error, the app version, the device model and the operating system version.
- Website and invitations. Our website runs on our own server through Cloudflare. Requests can include your IP address, browser information and a party code in an invite URL. The website uses no advertising cookies or website analytics. Our invitation service uses your Unity player ID, verified friendships and temporary online status to deliver party invites. If you enable phone notifications, a device notification token is associated with your account. Google Firebase Cloud Messaging delivers notifications on Android and iOS; iOS delivery also uses Apple Push Notification service. Notification tokens are used to deliver game notifications, not advertising.
- Technical data. The services below may log technical data such as IP address, device model, operating system version and app version when the game connects to them.
The game does not access your contacts, photos, microphone, camera or precise location, and it has no chat.
2. Why we use it
- To run the game: sign-in, saving progress, online co-op, friends and parties (performance of our agreement with you).
- To credit purchases and rewarded ads exactly once and to prevent abuse, including reviewing reported names (our legitimate interest in a fair game).
- To show optional rewarded ads, and personalized ads only with your consent and, on iOS, only if you allow tracking.
- To find and fix crashes (our legitimate interest in a working game) and, with the usage statistics setting, to understand how the game is played and improve it (your consent where it is required).
We do not sell your personal data.
3. Service providers
- Unity Technologies: Authentication, Cloud Save, Cloud Code, Friends, Analytics, Cloud Diagnostics and In-App Purchasing. Privacy policy
- Epic Games: Epic Online Services for lobbies and online connections. Privacy policy
- Google: Google Play Games Services, Google Play Billing, AdMob and Firebase Cloud Messaging. Privacy policy
- Apple: Sign in with Apple, the App Store and Apple Push Notification service. Privacy policy
- Cloudflare: DNS, encrypted website delivery and protection of our self-hosted website and invitation API. Privacy policy
These providers may process data outside your country under their own safeguards.
4. How long we keep it
We keep your account data until you delete your account. Name reports are kept until they have been reviewed and for at most 12 months. Purchase records held by Google or Apple follow their own retention rules. Our server keeps website access logs for up to 14 days, party invites for up to 10 minutes and online presence for up to 90 seconds after the last heartbeat. Notification tokens expire after 90 days without registration and are removed when you unregister the device or delete your account. Service providers keep technical logs, usage statistics and crash reports for the periods in their policies.
5. Deleting your account
In the game, open Settings > Account & Privacy, tap Delete account, type DELETE and confirm with Delete account. This also asks Unity to delete the usage statistics collected for your account. You can also request deletion without the game: see Delete your Knotted! account.
6. Your rights
You can ask us for access to, correction of, deletion of or a copy of your data, and you can object to processing. Email [email protected]. You may also complain to the data protection authority in your country. You can limit ad tracking at any time in your device settings: on iOS in Settings > Privacy & Security > Tracking, on Android by deleting or resetting your advertising ID. You can switch usage statistics off in the game's Settings.
7. Children
The game is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has given us data, contact us and we will delete it.
8. Security
Data is sent over encrypted connections and stored on our server or by the service providers above. No system is perfectly secure, but we limit the data we collect to what the game needs.
9. Changes
We will update this page when the game's data practices change and change the effective date above.