Effective 18 July 2026

Orbitoid Privacy Policy

This is the complete public policy. The complete Czech version follows the English version.

1. Controller and contact

The controller and operator of Orbitoid is Vítek Sasín, Czech business ID 24039446, registered office Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic. Privacy requests can be sent to vitek.sasin@gmail.com.

2. Local and offline data

Orbitoid can be played without a cloud account in practice mode. Settings, the selected age band, tutorial flags, notification schedules, a temporary progression cache, a randomly generated Orbitoid installation identifier and the unsynchronised offline journal are stored in protected app storage. The age band is used to configure age-appropriate advertising; Orbitoid does not ask for a birth date and does not send the selected band to the Orbitoid game server.

After a verified cloud sync, an account- and installation-bound permit can journal supported progress offline for up to 365 days. The installation identifier and queued actions are transmitted when a permit is issued or progress is synchronised so the server can prevent replay, duplicate rewards and cross-installation abuse. The operator cannot access information that remains only on the device.

3. Play Games, cloud profile, gameplay and purchases

When Play Games and online features are used, Orbitoid processes the Play Games player identifier and display name; an internal Firebase user identifier; progress, owned skins and worlds, Onyx, skills and quests; verified scores, selected world and skin, run duration, reached level, collected Sun Seeds and event statistics; the Orbitoid installation identifier; app and SDK versions; and App Check or Play Integrity attestations and tokens used for authentication, security and abuse prevention.

A Daily Run briefly transmits the timed lane-change sequence so the server can replay the shared course and calculate the reward. The server retains the cycle, attempt state, result digest, progress, reward and input count, but not the submitted lane-by-lane trace. Unsent results remain on the device until verification.

For Onyx purchases, Google Play purchase tokens, product and order references, delivery state, refunds or chargebacks and server wallet-ledger entries are processed to verify and deliver the purchase and prevent replay or fraud. Orbitoid never receives card or bank details and does not request the player's email address or additional Google profile OAuth scopes.

4. AdMob, advertising identifiers, IP-based location and diagnostics

Orbitoid uses the Google Mobile Ads SDK (AdMob) to display banner, interstitial and rewarded advertisements. When an ad is requested or shown, the SDK may automatically collect and share with Google and, where applicable, advertising technology providers involved in serving or measuring the ad:

• the device IP address, which may be used to estimate a country, city or other approximate location; Orbitoid does not request GPS or precise location;
• the resettable Android Advertising ID when available and permitted, App Set ID, a rotating advertising-SDK instance identifier and other applicable device or account identifiers;
• app and ad interactions, including app launches, ad requests, taps, impressions and video views;
• device, network, app and SDK information; and
• diagnostic and performance information, such as app or SDK launch time, loading failures, hang rate and energy usage.

These data are used for ad delivery, contextual or consented personalised advertising, frequency control, advertising and product measurement, analytics, fraud and invalid-traffic prevention, security and legal compliance. Even non-personalised or limited ads can use contextual information, an approximate location derived from the IP address and limited technical signals for delivery, measurement and fraud prevention.

Players aged 13–15 are configured for child treatment with G-rated ads. Players aged 16–17 are configured for teen treatment with PG-rated ads. Advertising personalisation is disabled for both groups. Eligible adults receive Google consent or privacy choices where required by their region. The Android Advertising ID can be reset or deleted in Android settings, and advertising choices can be reviewed from Orbitoid Settings whenever Google requires the privacy-options entry point.

Raw advertising IDs and raw ad-request IP addresses are processed by Google and relevant advertising providers and are not written to the Orbitoid player profile or Firestore wallet. The operator may receive aggregated AdMob reporting. More information is available in Google's Mobile Ads data disclosure and Google's explanation of data use on partner apps.

5. Firebase installation, authentication and infrastructure data

Firebase and Google Play services may process Firebase installation or app-instance identifiers, authentication and service IP addresses, user-agent and device information, App Check tokens and Play Integrity attestation material. These data support sign-in, callable functions, cloud synchronisation, request routing, rate limiting, service reliability, integrity checking, fraud prevention and security. Orbitoid does not include Firebase Analytics, Crashlytics or Firebase Performance Monitoring SDKs and does not send custom analytics or crash events to those products.

6. Purposes and legal bases

Cloud synchronisation, account management, purchases, Daily Run and leaderboards are processed to perform the requested service under Article 6(1)(b) GDPR. Security and integrity signals are processed for the legitimate interest in protecting players, purchases, the service and fair competition under Article 6(1)(f) GDPR. Advertising data is processed according to the user's choices and the legal basis applicable in the user's region; consent is requested where required. Data may also be processed to comply with law or establish, exercise or defend legal claims.

7. Recipients and international transfers

Recipients and service providers include Google group companies providing Google Mobile Ads, Google Play Games, Google Play Billing, Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, App Check and Play Integrity, plus advertising technology providers involved in an ad request where allowed by the user's choices and applicable law. Primary callable game resources are configured in the European europe-west1 region. Supporting services, advertising systems and backups may process data outside the EEA using applicable safeguards such as adequacy decisions or Standard Contractual Clauses. Personal data is not sold by the operator.

8. Public leaderboards and automated integrity checks

Only the Play Games display name, rank and best score in the selected category are public. Email addresses, internal identifiers, installation or advertising identifiers, purchase tokens and IP addresses are not displayed. Scores undergo automated plausibility and integrity checks. Suspicious entries may be excluded from leaderboards without legal or similarly significant effect, and a player may request review.

9. Security

Data is encrypted in transit using HTTPS/TLS. Cloud operations use authenticated requests, App Check or Play Integrity protection, server-side purchase verification, least-privilege security rules and validation intended to prevent forged scores, replayed purchases and unauthorised wallet changes. No system can be guaranteed absolutely secure; suspected incidents can be reported to the privacy contact.

10. Retention and deletion

Cloud progress, Daily Run receipts and leaderboard entries remain while the cloud profile exists. Online endless-run tickets expire within eight hours. An active Daily Run submission window expires within twenty minutes. Offline permits authorise new journaled runs for 365 days and retain a further 365-day upload-only grace period. Deleting the cloud profile removes the profile, Daily Run receipts, permits, progress, wallet ledger and leaderboard entries without undue delay.

A purchase-token hash may remain without the player identifier as an anti-replay record, and limited transaction or security records may be retained where required for accounting, fraud prevention or legal claims. Google and advertising providers retain advertising, identifier, diagnostic and infrastructure data according to their own product settings, legal obligations and retention policies. Deleting the Orbitoid cloud profile does not itself delete data held by Google independently for advertising or Play services; users can use Android/Google account controls and the advertising privacy options described above.

11. Rights and choices

Subject to applicable law, including the GDPR, users may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. The cloud profile can be disconnected or deleted in Orbitoid Settings or by following the public deletion instructions. Local data can be removed by clearing Orbitoid storage or uninstalling the app. Complaints may be lodged with the Czech Office for Personal Data Protection. Reasonable identity verification may be required for a request.

12. Children and changes

Orbitoid is intended for players aged 13 and older. A selection below 13 does not enter the game. A parent or guardian must authorise and supervise use where local law requires it. This policy may be updated when features, SDK behaviour or legal requirements change. Material changes will be announced in the app or public documentation and will show a new effective date.