Great Old Ones Survivors: Privacy Policy

Last updated: 30 October 2026 (policy version 2)

This policy covers the mobile game Great Old Ones Survivors for iOS and Android, and this website. The game has no accounts, no chat and no in-app purchases. Your saves stay on your device.

Who we are

The controller of your data is Crayen Piotr Siuszko, ul. Nastrojowa 9, 85-830 Bydgoszcz, Poland ("we").

Contact: contact@crayen.dev

Your choices in the game

The first time you play, the game shows a privacy panel. You can open it again any time from Options → Privacy. It asks about three things separately:

• Crash reports
• Gameplay statistics
• Game settings

Nothing is collected, sent or downloaded for any of them until you tap Allow. Closing the panel without choosing counts as no. The game is fully playable whatever you choose. If we change what a choice covers, the game asks you again.

Your choice is saved only on your device and is never sent to us.

Crash reports

When: only after you allow crash reports.

What is sent when the game crashes, hits an error or closes unexpectedly:

• the error message and where in the code it happened (stack trace);
• the game version and build;
• your device model and manufacturer, operating system version, total memory, graphics chip and renderer, and screen size;
• the last few steps before the error, such as which screen you were on and which hero you picked;
• if you allow game settings, which version of the settings the game was using;
• on Android, also the chip (SoC), the Android API level and the system's record of how the game closed.

Each report gets a random id. Reports carry no name, account, email address, advertising id or language setting. Text that looks like personal data (such as an email address or an IP address) is removed on your device and again on our server.

Why: to find and fix crashes and errors.

Legal basis: your consent (Art. 6(1)(a) GDPR).

How long: 90 days on our server, then deleted.

Gameplay statistics

When: only after you allow gameplay statistics.

What is sent:

• when the game opens (once per launch, and again when a new day starts): how many days since you first played (counted up to 60), whether this is your first start today or this week, and roughly how many days since you last played;
• when a run starts: the map;
• at the end of each run: the map, the hero, your progression tier, whether you won, lost or gave up, how long the run lasted (in 15-second steps), your level (at the end and at 2:30), what defeated you, how often a charging enemy hit you, whether you were revived, the skills you held, a rough count of how many runs you have played, the platform and the store channel;
• when you pick a skill on level-up: the skills offered, the one picked, your level and the map;
• when you unlock a map: the map and the rough run count;
• when you buy a hero or an upgrade with in-game currency: which one, and roughly what it cost (only which power-of-two range the price falls in), never the exact price;
• when the game offers the revive ad: that it was offered, and whether you watched it, declined it, the ad failed to load, or you got the reward;
• when a run starts with an ad: that it was offered, shown or failed to show.

The values are fixed game ids: no names and no free text. Events are linked to a random session id that exists only in memory and changes every 30 minutes; our server stores only a keyed hash of it. To work out the play-day values, your device keeps only the first and last day you played with statistics allowed, in an encrypted file. We look only at totals, and hide any group with fewer than 10 players or sessions.

We do not collect app exits, menu use, settings, errors, ad identifiers or which ad was shown.

Why: to balance the game, and to count how many people play each day and how many come back.

Legal basis: your consent (Art. 6(1)(a) GDPR and the national law implementing Art. 5(3) of the ePrivacy Directive).

How long: 180 days on our server, then deleted.

Game settings

When: only after you allow game settings.

What happens: the game downloads its current settings from our server when it starts and about once an hour while you play, and keeps the latest copy on your device. The settings decide, for example, when the revive ad is offered and how often an ad is shown when a run starts. They are the same for every player on the same system.

What is sent: the request names only your system (iOS or Android), the game's key and the version of the settings your device already has. It contains no other information about you or your device beyond what any internet connection reveals. Our server stores nothing about these requests and does not log your IP address.

The settings can only adjust the game, never add ads: if you don't allow game settings, the game uses its built-in settings, which are the same ones every player starts with.

Why: to adjust the game, such as the ads and the revive offer, without releasing a new version.

Legal basis: your consent (the national law implementing Art. 5(3) of the ePrivacy Directive).

How long: the copy on your device is kept until a newer one replaces it. Tapping Don't allow deletes it.

Where your data goes

Crash reports and statistics go over HTTPS to our own server, zbierak.mevlyshkin.com. We run it on a virtual server rented from BuyVM (Frantech Solutions) in Switzerland. The server does not read or store your IP address, and its proxy does not log it.

When a new kind of crash arrives, the server sends a short notice to our team's Discord channel: the crash title (its first 200 characters, after personal data is removed) and an internal issue number. Gameplay statistics are never sent to Discord. Discord is based in the United States.

We do not sell your data and do not use crash reports or statistics for advertising.

Ads

The game shows two kinds of ads, from Google AdMob, on iOS and Android:

• an optional rewarded ad that revives you, at most once per run;
• an ad when a run starts: none in your first 3 runs, then at most every third run, at least 3 minutes apart, and never right after you were revived. Game settings can make these ads rarer or switch them off.

Google's ad SDK starts only after you have answered or closed the game's privacy panel. Then:

1. Google's consent form (UMP) asks for your ad choices where the law requires it.
2. On iOS, the system asks whether the game may track you (App Tracking Transparency).

Google may collect your device's advertising identifier (if you allow tracking), advertising and interaction data, an approximate location derived from your IP address, and diagnostics. It uses them for advertising and analytics, and may use them to track you across apps. Google decides how this data is used; see Google's Privacy Policy and How Google uses information from apps that use its services.

To change your ad choices, tap Ad choices in the game's privacy panel (shown where Google's form requires it). On iOS you can also go to Settings → Privacy & Security → Tracking; on Android, to Settings → Privacy → Ads, where you can reset or delete the advertising ID.

What stays on your device

• Your saves and settings, including your privacy choices. They are never sent to us.
• Reports and statistics waiting to be sent while you are offline. Statistics wait at most 7 days.
• A list of the crash reports (90 days) and statistics sessions (180 days) your device has sent, so that "Delete my data" can find them.
• If you allow statistics: the first and last day you played, and nothing else. "Don't allow" and "Delete my data" delete it, and the game then treats your device as a new player.
• If you allow game settings: the latest settings, encrypted. "Don't allow" deletes them.

These files are created only after you allow the matching purpose. The statistics files, the settings and the lists are encrypted. Crash reports saved by older versions of the game, before this panel existed, are sent only if you allow crash reports and are deleted if you don't.

Tapping Don't allow deletes the matching files from your device straight away.

Your rights

• Withdraw consent at any time in Options → Privacy with one tap. This doesn't affect what was sent before.
• Delete your data: Options → Privacy → Delete my data deletes from our server every crash report and statistics session your device sent. If you are offline, the game remembers the request and sends it next time it can.
• Get a copy of your data: email us at contact@crayen.dev.
• You also have the rights to rectification, restriction and objection, and to data portability.

Because the game has no accounts, we can only find your data through the list kept on your device. If you reinstall the game or clear its data, that list is gone and we can no longer tell which data is yours (Art. 11(2) GDPR). You can still contact us with information that would let us identify it.

You can complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority in the country where you live.

Children

The game is rated 13+. It is not directed at children under 13.

This website

This website is hosted on GitHub Pages (GitHub, Inc., United States), which processes your IP address to deliver the pages. Everything on the pages, fonts included, is served from this website. The website has no cookies, analytics or trackers.

Changes

When this policy changes, we update the date above. If a change affects what one of the choices covers, the game asks you again about that choice only. Version 2 of this policy added game settings, so players who chose before are asked only about game settings.