Privacy Policy

The short version

We don't ask for your name, and our apps don't need an account.
Our apps use Google Firebase to understand how they're used and to fix crashes, and Google AdMob to show ads.
Ads are only personalized when you agree to it, and you can change your mind at any time.
We don't sell your personal information for money.
Email contact@epiclab.co to see, correct or delete your data.

Who we are

This policy explains how EPICLAB Co., Ltd ("EPICLAB", "we", "us") handles information when you visit epiclab.co or use the games and apps we publish on the Apple App Store and Google Play (together, the "Services"). For the purposes of data protection law, EPICLAB is the controller of the personal data described here.

An app may show extra privacy information on its store listing or in its settings. If it does, that information applies together with this policy.

What we collect

Information you give us

When you contact us: your email address, your message, and anything you choose to attach, such as screenshots.

Information collected automatically in our apps

Device information: device model, operating system and version, language, time zone, screen size and app version.
Identifiers: the Firebase installation ID and app instance ID, which identify an installation of an app rather than you as a person. Where you allow it, we also collect the advertising identifier (IDFA on iOS, Advertising ID on Android).
Usage information: when you open the app, which screens you visit, levels and progress, the features you use, the ads you see and tap, and session length.
Crash and performance data: crash reports, error logs and the state of the device at the time of a crash, such as free memory and orientation.
Approximate location: your country or region, worked out from your IP address. We don't collect precise GPS location.
Purchases: records of in-app purchases, such as the item, price and date. Apple and Google handle payment, and we never see your card details.

We don't access your contacts, photos, microphone or camera unless an app needs it for a feature, asks for your permission first, and explains why.

Our website

epiclab.co doesn't use analytics or advertising cookies. The site is hosted on Cloudflare, which processes IP addresses and basic request data to deliver pages and protect the site from abuse. It may set cookies that are strictly necessary for that.

How we use it

To provide the Services, including delivering purchases and saving your progress. Legal basis: performance of our contract with you.
To understand and improve our apps, for example to find where players get stuck and which features they use. Legal basis: our legitimate interest in making better products.
To fix bugs and crashes and keep the Services stable. Legal basis: legitimate interest.
To show ads that keep our games free. Legal basis: legitimate interest for non-personalized ads, and your consent for personalized ads where the law requires it.
To prevent fraud and abuse, including invalid ad traffic and fake purchases. Legal basis: legitimate interest.
To reply to you when you contact us. Legal basis: legitimate interest, or our contract with you.
To comply with the law, such as tax and accounting rules. Legal basis: legal obligation.

Firebase, AdMob and other partners

We use these services to run our apps. Each one processes data under its own terms and privacy policy.

Google Analytics for Firebase collects usage and device information to tell us how our apps are used.
Firebase Crashlytics collects crash reports and diagnostic data so we can fix problems.
Other Firebase services may be used in some apps, such as Remote Config and A/B Testing, to change settings and test new features without an update, and Cloud Messaging to send notifications you've allowed. See Privacy and Security in Firebase.
Google AdMob shows ads in our apps. Google uses device identifiers, IP address and ad interaction data to serve, measure and personalize ads and to prevent fraud. Seehow Google uses information from sites or apps that use its servicesand the Google Privacy Policy.
Apple App Store and Google Play process payments and downloads under their own terms.
Cloudflare hosts and protects our website. See the Cloudflare Privacy Policy.

Ads and your choices

Most of our games are free and paid for by ads, which Google AdMob delivers. Ads can be personalized, which means chosen based on your interests and activity across apps and sites, or non-personalized, which means chosen based on context such as the app and your general location. Even non-personalized ads use some data, for example to limit how often you see the same ad, to report results and to fight fraud.

In the EEA, the UK and Switzerland, the app asks for your consent through Google's consent message before it uses your data for personalized ads. You can change your choice at any time from the privacy option in the app's settings.
On iOS, we only access your device's advertising identifier (IDFA) if you allow tracking when the app asks. You can change this in Settings → Privacy & Security → Tracking.
On Android, you can delete or reset your Advertising ID in Settings → Google → Ads, or in Settings → Security & privacy → Privacy → Ads, depending on your device.
In US states with privacy laws, such as California, sharing data with ad partners for personalized ads may count as "selling" or "sharing" personal information. You can opt out through the app's privacy settings where available, by turning off ad personalization on your device, or by emailing us.
You can also manage how Google personalizes ads at My Ad Center.

We share personal information only:

With the service providers and partners listed above, so they can provide their services to us.
With advertising partners, as described in Ads and your choices.
When the law requires it, or to protect the rights, safety and property of EPICLAB, our players or others.
With a buyer or successor if EPICLAB, or one of our apps, is sold or merged. This policy would continue to apply to your information.

We don't sell your personal information for money.

International transfers

EPICLAB is based in Vietnam, and our partners, including Google and Cloudflare, process data in the United States and other countries. When data from the EEA, the UK or Switzerland is transferred, it is protected by safeguards such as the European Commission's Standard Contractual Clauses, which our partners include in their data processing terms.

How long we keep it

Analytics data in Google Analytics for Firebase is kept for up to 14 months, and after that only aggregated reports remain.
Crash reports in Crashlytics are kept for 90 days.
Emails to us are kept for as long as we need them to help you, and no longer than two years after the conversation ends, unless the law requires us to keep them longer.
Purchase records are kept for as long as tax and accounting law requires.

Children

Our Services are intended for a general audience and aren't directed to children under 13, or under the age of digital consent in your country, such as 16 in some EU countries. We don't knowingly collect personal information from children.

If one of our apps is designed for children, its store listing will say so. In that app we turn off personalized ads, don't collect advertising identifiers, and mark ad requests as child-directed, in line with the US Children's Online Privacy Protection Act (COPPA) and the Google Play Families policy.

If you believe a child has given us personal information, contact us at contact@epiclab.co and we will delete it.

Your rights

Depending on where you live, you may have the right to:

Find out what personal information we hold about you and get a copy of it
Have inaccurate information corrected
Have your information deleted
Object to, or restrict, how we use it
Receive it in a portable format
Withdraw your consent at any time, without affecting what we did before you withdrew it
Opt out of the "sale" or "sharing" of personal information, and of targeted advertising
Not be treated differently for using these rights

These rights come from laws such as the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and similar US state laws, and Vietnam's personal data protection law.

To use any of these rights, email contact@epiclab.co. Our apps don't use accounts, so we may ask for the app name and the ID shown in the app's settings to find your data. We will reply within 30 days. You can also complain to your local data protection authority.

Security

We protect information with reasonable technical and organizational measures. These include encryption in transit, limits on who can access data, and the security of the platforms we use. No system is perfectly secure, so we can't guarantee absolute security.

Changes

We may update this policy as our Services change. The date at the top shows when it last changed. If a change is significant, we will give you notice in the app or on this site.

Contact

EPICLAB Co., Ltd
6th Floor, 01-03 Ho Quy Ly, Da Nang, Vietnam
contact@epiclab.co