Privacy Policy
Nova Drop is a game, not a data business. This page says plainly what we store, why, where it lives, and how to make it go away.
The short version. The game runs entirely on your device. We keep an anonymous account so your progress survives a new phone, plus gameplay statistics so we can see which levels are too hard. There are no ads, no advertising identifiers and no third-party analytics. We never ask for your name, and we do not sell anything about you.
01Who we are
Nova Drop (“Nova Drop”, “we”, “us”) is the Nova Drop mobile game and this website, operated by Evgenii Isupov, an individual developer based in Portugal, who is the data controller for the data described here.
Contact: [email protected] — email is the fastest way to reach us and the right address for any privacy request. If you need a postal address for a formal notice, ask and we will provide one.
02What we collect
You never create a username and we never ask for your name, your email or your phone number. The account is anonymous by default: on first launch the app generates a random identifier for itself and registers it with our server.
| Data | Why we have it | Legal basis (GDPR) |
|---|---|---|
| Anonymous device account — a random identifier generated by the app, plus platform (iOS or Android) and app version | To give your save somewhere to live. It is not your advertising identifier, and not a hardware serial number. | Performance of a contract (Art. 6(1)(b)) |
| Your progress — levels cleared, stars, best scores, lives, the in-game crystal ledger, unlocked drones, cosmetics and achievements | To keep your game synchronised across devices and restore it after a reinstall. | Performance of a contract |
| Weekly score — your best score for the current week | To draw the weekly leaderboard. It is shown against an anonymous account, not a name. | Performance of a contract |
| Sign-in identity — only if you choose to link Google or Apple: the identifier that provider gives us, and the email address in the token | To recognise you on a new device so a reinstall does not lose your save. | Performance of a contract |
| Purchase records — which product was bought, when, and whether an entitlement is active | To deliver what you paid for and to honour Restore Purchases. We never see your card details. | Performance of a contract; legal obligation for tax records |
| Gameplay events — level started and finished, score, win or loss, shop and purchase screens opened, tutorial steps, and similar in-game actions, tied to the anonymous account | To balance difficulty and fix what is broken. This is our own first-party logging, not a marketing product. | Legitimate interests (Art. 6(1)(f)) — improving a game we operate |
| Technical logs — IP address, request time, error traces | Security, rate limiting and debugging. | Legitimate interests (Art. 6(1)(f)) |
WHAT WE DO NOT COLLECT
- No ads and no advertising identifiers. The game contains no ad network and no ad SDK, and we do not use the IDFA or the Android advertising ID.
- No third-party analytics or attribution SDKs. Gameplay events go to our own server and nowhere else.
- No location, no contacts, no calendar, no photos, no microphone, no camera.
- No behavioural profiling, no cross-app tracking, and no sale or sharing of personal data for advertising.
03Playing offline
The game itself never needs the network: levels, physics, progress and purchases you already own all work with the connection off. When you are online the app signs in as an anonymous device account in the background and synchronises your save. If you never connect, nothing described above leaves your phone, apart from the purchase records the app store holds.
04Who else touches the data
We use a small number of processors, each doing only what we instruct:
- Fly.io — application hosting for our servers (United States).
- Neon — the managed Postgres database that holds everything above (United States).
- RevenueCat — validates purchases with Apple and Google and tells our server what you own.
- Apple and Google — store distribution and payments. They are independent controllers for payment data; we never receive your card details.
- Apple / Google sign-in — only if you choose to link an account, to verify who you are.
- Cloudflare — DNS for this website.
Beyond those, we disclose data only when the law requires it, or to establish or defend legal claims. If Nova Drop is ever acquired, your data may transfer with the service; you will be told before that happens.
05Where the data lives
Our servers and database are in the United States. If you are in the European Economic Area or the United Kingdom, that is a transfer outside your region; it is covered by the European Commission's Standard Contractual Clauses with our processors.
06How long we keep it
- Save data (progress, currency ledger, unlocks) — kept while the account exists, so it is there when you come back.
- Gameplay events — 90 days, then deleted automatically.
- Technical logs — up to 30 days.
- Weekly leaderboard scores — kept for the season and pruned afterwards.
- Purchase, billing and tax records — as long as tax law requires (typically up to 7 years), regardless of deletion.
07Deleting your data
Inside the game, Settings → Reset progress wipes the save on your device. That is a local reset, not an account deletion — it does not remove the copy on our server.
To delete the server-side account, email [email protected]. You do not need to prove who you are with a document: send the request from the address you linked, or tell us the player identifier shown in Settings. We erase the account and everything attached to it within 30 days, keeping only the purchase records tax law requires us to hold. It cannot be undone — progress and unspent crystals are gone, and purchases already made remain restorable through the app store.
08Your rights
If you are in the EEA or the UK you have the right to access, correct, delete, export (portability), restrict, and object to our processing, and to withdraw consent at any time (withdrawal does not affect processing already carried out). If you are in California, you have the rights to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal data, so there is nothing to opt out of.
To exercise any of these, email [email protected]. We answer within 30 days and will not charge you or degrade the game for asking. You can also complain to your local data protection authority.
09Children
Nova Drop is not directed at children under 13 (or under 16 where local law sets that age), and we do not knowingly collect their data. There is no chat, no user-generated content and no way for players to contact each other. If you believe a child has given us data, write to us and we will delete it.
10Security
Data is encrypted in transit (TLS) and at rest. Sign-in tokens are short-lived, refresh tokens are stored only as a hash, and access to the database is limited to our own services. No system is perfect: if a breach ever affects your data, we will notify you and the relevant authority as the law requires.
11This website
This site sets no cookies and runs no analytics or tracking. It loads fonts from Google Fonts, which means your IP address reaches Google when the page opens. Our host may keep standard server logs for security.
12Changes
If we change this policy we will update the date above, and for material changes we will say so in the game before the change takes effect.
Questions? [email protected] — a person reads that inbox.