Privacy Policy

1. Operator and scope

Arasaco (DoveCli) provides the Android game Random Race Defense (package com.arasaco.random_race_defense). This policy covers the game and the purchase-verification service it uses.

Send privacy questions to hardy@dovecli.com. What is actually processed depends on the installed build and your advertising consent choices.

2. Information stored on your device

Game progress, settings, battle records and the entitlement cache are stored on your device. There is no separate sign-up, game account or cloud save.

Uninstalling the app or changing devices may erase local progress. Permanent Premium is restored through the same Google Play account, but game progress is not.

3. Online rankings (Google Play Games)

Endless-mode online rankings are provided through Google Play Games Services. When you are signed in to Play Games, your best round per difficulty is posted to Google leaderboards with your Play Games player ID and display name, and other users can see your display name and score there.

The operator does not store this information on its own servers. Leaderboard visibility and profile settings are managed in Play Games.

4. Crash reports and usage statistics

To improve stability, release builds send crash reports to Google Firebase Crashlytics, containing:

• the stack trace at the time of the crash
• device model, operating system and app version
• memory and storage state
• a Crashlytics installation identifier

Crash reports are used only to fix errors, never for advertising or identifying you, and are retained for 90 days under Firebase policy.

For usage statistics (number of users, visit frequency, screen and feature usage, and ad revenue measurement), release builds send app interaction events, a Firebase app instance identifier, device model, operating system and app version, and an approximate location inferred from the IP address to Google Analytics for Firebase. The advertising ID is not collected and no ad personalization signals are sent; Google processes this data as a service provider. Usage statistics are retained according to the Google Analytics retention setting (two months by default).

5. Advertising and Google AdMob

In builds with advertising enabled, Google AdMob and its consent SDK may process the following for ad delivery and measurement, fraud prevention and consent compliance:

• IP address and device identifiers including the advertising ID
• device and app information and diagnostics
• ad impressions, clicks and other interactions
• your consent choices

An approximate location may be inferred from the IP address, but the game never requests GPS access. When the SDK indicates that necessary consent is unavailable, the app does not request ads.

Through Google’s consent management platform, users in the EEA, the UK and Switzerland see an ad privacy consent dialog, and users in US states with applicable privacy laws, such as California, see a choice to opt out of the sale or sharing of personal information for targeted advertising. If you opt out, ad requests tell Google to restrict that processing. Development builds use Google test ads only.

6. Google Play purchases and server verification

Google Play processes payments; the operator never receives card numbers or payment passwords. Purchase tokens, product IDs, purchase and acknowledgement status and verification results may be processed to confirm and restore Permanent Premium.

The verification server runs on Cloudflare Workers and queries the Google Play Developer API. Raw purchase tokens are used only while a request is processed; server records keep a token hash and verification status instead. When Google Play reports a refund or cancellation, the same kind of hash and status is recorded to revoke the entitlement.

When an access code issued for Google Play app review is entered, the server checks the code’s signature and expiry. Regular players do not use this feature. Cloudflare and Google may process IP addresses and technical request information during verification.

7. Purposes, legal bases and retention

Providing the game and verifying purchases are based on performing the service contract. Security and fraud prevention rely on legitimate interests or applicable law, and processing that requires consent, such as personalized advertising, relies on that consent.

Purchase-verification hashes and status are kept as long as needed to support restoration. Deletion requests are assessed against legal retention duties and the effect on restoration. Google controls the retention of advertising data. Support correspondence is normally deleted within one year after resolution unless the law requires longer retention.

8. Service providers and international processing

Google (AdMob, consent management, Google Play, Play Games Services, Firebase Crashlytics and Google Analytics for Firebase) may process advertising and purchase information, online rankings, crash reports and usage statistics. Cloudflare may process verification requests and server records.

Depending on each provider’s infrastructure, processing may take place outside your country. See Google’s privacy policy (https://policies.google.com/privacy) and Cloudflare’s privacy policy (https://www.cloudflare.com/privacypolicy/). Information is shared only as needed for these services, and the operator never sells personal information.

9. Your choices and rights

Where ad consent or an opt-out of the sale or sharing of personal information is offered, you can change your choice at any time under “Ad Privacy Choices” in the game settings. The advertising ID can be reset or deleted in Android settings.

Depending on applicable law, you may request access, correction, deletion, restriction, consent withdrawal or portability by contacting hardy@dovecli.com. Minimal purchase-identifying information, never payment credentials, may be requested to confirm ownership. You also have the right to complain to a supervisory authority.

10. How to delete your data

How to delete data depends on where it is stored:

• Game progress and settings: deleted immediately when you uninstall the app or clear its data in Android settings.
• Online rankings: manage or delete your game activity and profile in the Google Play Games settings.
• Purchase-verification records (hash and status): email hardy@dovecli.com. After deletion, the server may need to verify your purchase again to restore it.
• Advertising, statistics and crash data: deleted after the retention periods set by Google; the advertising ID can be deleted in Android settings.

11. Audience and security

The game is intended for users aged 13 and older and is not directed at children under 13. Consent ages vary by country, so being 13 or older does not by itself make a user an adult or above the local age of consent. Country- and state-specific consent requirements are applied through Google’s consent management platform.

Transfers use HTTPS, and server secret keys are never included in the app.

12. Changes to this policy

Before adding new SDKs or ranking or cloud features, this policy and the Google Play data safety disclosure are updated first. Material changes are posted on this page first and, where needed, also announced in the game.