Privacy policy

Last updated: [DATE OF RELEASE]

This policy explains what information Wingshot uses, why, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

The short version

• Your progress is saved on your phone. Nothing about you goes to our server unless you choose to join the online leaderboards.
• Online, you get a made-up pilot name. We never ask for your name, email or phone number, there is no chat, and you can delete your online profile at any time.
• Ads are only shown when you choose to watch one. They come from Google AdMob, which collects some device data. We only ask for non-personalised ads, so your data isn't used to target ads at you.
• Purchases go through Google Play. We never see your card details.
• We don't sell your data.

Who we are

Wingshot is made by Gurpow Studio, the trading name of Gurpal Bagdi, a sole trader based in the UK. Business address: [BUSINESS ADDRESS]. "We" and "us" in this policy mean Gurpal trading as Gurpow Studio, who is the controller of the personal data described here. ICO registration number: [ICO REGISTRATION NUMBER].

Contact us about privacy at hello@gurpow.com.

Saved on your phone

The game saves your coins, best score, items, theme points, weapon levels, mastery, pilot rank, daily streak, missions, settings and a log of your last 50 runs in the app's own storage on your phone. This is not sent to us, and we can't see it.

You can delete it at any time with Settings > Reset all progress, by clearing the app's data in Android settings, or by uninstalling the game. We can't recover it for you afterwards.

Ads (Google AdMob)

Wingshot shows rewarded ads only when you tap a button to watch one, for example to revive or to get bonus coins. These ads are provided by Google AdMob. When an ad loads, Google collects information such as your device's advertising ID, IP address, device model and settings, app information, and how you interact with the ad. Google uses it to show the ad, limit how often you see the same ad, measure results and prevent fraud.

Because some players are under 18, Wingshot only requests non-personalised ads, for everyone. These are picked from things like the app you're using and your general location (from your IP address), not from a profile of your interests, and they are limited to ads suitable for teenagers. Google still uses limited data for frequency capping, measurement and fraud prevention.

In the UK, the EEA and Switzerland, the first time you open the game we ask, using Google's consent form, whether Google may store or read information on your device for these purposes. If you say no, Google may show more limited ads, or none; if no ad is available, you still get the reward.

We rely on your consent for storing or reading information on your device for ads (as the Privacy and Electronic Communications Regulations require), and on our legitimate interests for showing non-personalised ads, which pay for the free game. You can change your choice at any time in Settings > Ad choices (shown in the app where the consent form applies). You can also reset or delete your advertising ID in your phone's Google settings.

Google acts as an independent controller of this data. See how Google uses information from apps that use its services: policies.google.com/technologies/partner-sites.

Purchases (Google Play)

Coin packs and any other purchases are sold through Google Play Billing. Google handles the payment and your payment details under its own privacy policy. We receive only a confirmation of the purchase (the product, an order number and a purchase token) so we can deliver it and restore it where that is possible. We use this to perform our contract with you, and we keep purchase records for as long as UK tax law requires (normally six years).

Sharing your result

If you tap Share after a Daily Challenge, your phone's share sheet opens with your score, pilot rank and mastered guns. Nothing is sent unless you choose where to share it.

Things we don't do

We don't run our own analytics, crash reporting, location tracking or contact access, and we don't sell your personal data. If we add something like this, we'll update this policy first and ask for consent where the law requires it.

Online leaderboards and friends (only if you join)

The leaderboards are off until you tap Go online. If you do, the game makes you an online profile and sends it to our server, which runs on Cloudflare. It holds:

• a pilot name picked at random from a list of safe words with a four-digit number (you can't type one), and a friend code;
• how your bird looks (the item names), your pilot rank and how many guns you've mastered;
• for each run you play while online: the score, time, kills, bosses beaten, coins earned, gun, level, revives, the game version and when it was played; for the Daily Challenge also your taps, pauses and perk picks, so we can replay the run and check it was played fairly;
• your friends, friend requests and anyone you've blocked;
• when your profile was made and last used, and the type of phone system (Android).

Other players can see your pilot name, your bird, your rank and your scores and totals on the boards and on your pilot card. Only you see your friend requests. Nobody can find you by name: friends add each other by code, and either of you can remove or block the other.

To stop cheating, the app asks Google Play Integrity to confirm that each result came from the real Wingshot app from Google Play on a genuine phone; Google tells us yes or no, and we keep only that answer. Our server also checks each result is possible, and results that fail are kept off the boards. Cloudflare sees your IP address when the app talks to our server; we use a scrambled form of it for one day to limit how many profiles are made from one place, and we don't keep it.

We use this information to run the leaderboards and friends features you asked for (to perform our contract with you) and to keep them fair (our legitimate interests). It stays until you delete it. Delete it at any time in the game (Settings > Online profile > Delete my online profile), at wingshot.app/delete with your backup code, or by emailing us; everything goes at once, including your runs and friends. We delete runs older than two years, and profiles not used for two years.

Your backup code works like a password for your online profile. Keep it private: anyone with it can use or delete your profile.

Prizes (coming later)

Free-entry cash prize competitions are not live yet. When they arrive, for prize winners only we will need your name, email, date of birth, UK address and proof of age and identity, so we can check that you are 18 or over and live in the UK and pay you. We will update this policy and tell you in the game before any of this starts.

Children

Wingshot is meant for players aged 13 and over. We don't knowingly collect personal data from younger children. If you are under 13, ask a parent or guardian before playing.

Who we share data with

Google, as described above (AdMob for ads, Google Play for purchases and Play Integrity for checking results), and Cloudflare, which hosts our server and database for the online leaderboards and processes that data only on our instructions. We may also share information if the law requires it, or with a buyer if the business is ever sold, who would have to protect it in the same way.

Data outside the UK

Google and Cloudflare may process data outside the UK, including in the United States (our leaderboard database is kept in Western Europe). Where it does, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by approved contract terms such as the International Data Transfer Addendum.

Your rights

Under UK data protection law you can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time. Because we keep almost nothing about you, most of these are easiest to use on your phone (Reset all progress, Ad choices, Delete my online profile, your advertising ID) or with Google directly. For your online profile, tell us your pilot name and number, or your backup code, so we can find it. Email hello@gurpow.com and we'll reply within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113. We'd appreciate the chance to sort it out first.

Changes

If we change this policy, we'll update the date at the top, and for important changes we'll tell you in the game.