1. Introduction

Breitsameter & Greller, inn2nation Games GbR („we,“ „us,“ or „our“) operates the mobile game Lairkeepers: Monster Merge TD (the „Game“), available on Android (Google Play) and iOS (Apple App Store). This Privacy Policy explains what personal data we collect, why we collect it, how it is processed, and what rights you have regarding your data.

By installing, accessing, or using the Game, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use the Game.

2. Data Controller

The entity responsible for the processing of your personal data is:

3. Information We Collect

3.1 Account and Authentication Data

When you sign in to the Game, we may process the following data depending on the method you choose:

• Google Sign-In: Your Google account identifier, display name, and profile picture URL as provided by Google.
• Apple Sign-In: Your Apple-provided user identifier and, if you choose to share it, your name. Apple may provide a private relay email address rather than your actual email.
• Guest Login: A randomly generated device-based identifier that allows you to use the Game without linking a third-party account.

3.2 Gameplay and Progress Data

We collect and store data related to your in-game activity, including your game progress, level completions, in-game currency balances, configurations, leaderboard scores, and achievement records. This data is synced to the cloud so you can resume your progress across devices.

3.3 Purchase Data

When you make in-app purchases, the transaction is processed entirely by the platform provider (Google Play or the Apple App Store). We receive a transaction confirmation and the purchased item details but do not have access to your payment method, credit card number, or billing address.

3.4 Device and Technical Data

We automatically collect certain technical information to ensure the Game runs correctly and to diagnose issues. This may include your device type and model, operating system and version, screen resolution, language and locale settings, a unique device or installation identifier, and your IP address.

3.5 Analytics Data

Through the Unity Game Services analytics tools, we collect aggregated usage data such as session length, frequency of play, in-game event interactions, feature usage, and performance metrics. This data helps us understand how the Game is played and where we can improve the experience.

3.6 Advertising Data

Our advertising partners may collect identifiers such as your Advertising ID (Google GAID or Apple IDFA), your IP address, device information, and interaction data related to advertisements shown within the Game. Where required, this data is only collected with your consent. See Section 6 for more details.

4. How We Use Your Information

We use the collected data for the following purposes:

• To provide, operate, and maintain the Game and its features, including cloud save, leaderboards, and achievements through Google Play Games Services.
• To process and fulfill in-app purchases.
• To authenticate your identity and enable you to sign in across devices.
• To display advertisements, including personalized advertisements where you have given consent.
• To analyze usage patterns and improve the Game’s performance, stability, and content.
• To detect and prevent fraud, cheating, or other misuse.
• To comply with legal obligations applicable to us.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR) when processing your personal data:

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing that is necessary to provide you with the Game and its core features, including account management, cloud save functionality, leaderboards, achievements, and the fulfillment of in-app purchases.
• Consent (Art. 6(1)(a) GDPR): Where we or our advertising partners collect data for personalized advertising, we do so only with your prior consent. You can withdraw your consent at any time (see Section 11).
• Legitimate Interests (Art. 6(1)(f) GDPR): We rely on our legitimate interest in improving the Game, ensuring its security, and displaying non-personalized contextual advertisements. In each case, we have balanced our interests against your rights and determined that the processing does not unduly override them.
• Legal Obligation (Art. 6(1)(c) GDPR): Where processing is required to comply with applicable laws, such as tax and accounting requirements related to in-app purchase records.

6. Advertising and Ad Partners

The Game displays advertisements served through Unity LevelPlay, a mediation platform that connects to multiple advertising networks. Depending on availability and auction outcomes, ads may be served by any of the partners listed below.

When you consent to personalized advertising, these partners may collect and use your Advertising ID and other data described in Section 3.6 to show you ads tailored to your interests. If you do not consent or withdraw your consent, you will only see non-personalized, contextual advertisements.

You can change your ad personalization preference at any time through your device settings by resetting or disabling your Advertising ID (on Android: Settings → Privacy → Ads; on iOS: Settings → Privacy & Security → Tracking).

Advertising Partners

Each advertising partner acts as an independent data controller for the data it collects. We encourage you to review their respective privacy policies.

7. Third-Party Services

In addition to advertising partners, the Game integrates the following third-party services, each of which may collect data as described below:

• Google Play Games Services: Provides leaderboards, achievements, and cloud save functionality. Google processes your data according to Google’s Privacy Policy.
• Apple Game Center: Provides leaderboards and achievements on iOS. Apple processes your data according to Apple’s Privacy Policy.
• Unity Game Services (Analytics): Collects gameplay analytics and performance data to help us improve the Game. Unity processes data according to Unity’s Privacy Policy.
• Unity LevelPlay (Ad Mediation): Manages the delivery of advertisements from the advertising partners listed in Section 6. Unity processes data according to Unity’s Privacy Policy.
• Google Play Billing / Apple In-App Purchases: All payment transactions are handled by the respective platform provider. We do not process or store your payment details.

8. Data Sharing and Disclosure

We do not sell your personal data. We may share your data in the following limited circumstances:

• Service Providers and Ad Partners: We share data with the third-party service providers and advertising partners described in Sections 6 and 7, solely for the purposes outlined in this Policy.
• Legal Requirements: We may disclose your data if required by law, regulation, legal process, or governmental request.
• Protection of Rights: We may share data when we believe it is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such change.

9. Data Retention

We retain your account and gameplay data for as long as your account remains active or as needed to provide you with the Game. If you delete your account and data using the in-app reset feature, we will remove your data from our active systems within a reasonable time frame, subject to any legal obligations that require us to retain certain records (such as purchase transaction logs for tax purposes).

Analytics data is retained in aggregated, non-identifiable form and may be kept indefinitely for statistical and improvement purposes.

Data collected by third-party advertising partners is retained according to their own policies (see the links in Section 6).

10. International Data Transfers

We are based in Germany, within the European Economic Area (EEA). However, some of our third-party service providers and advertising partners operate outside the EEA, including in the United States and other countries. When your data is transferred outside the EEA, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, an adequacy decision by the European Commission for the recipient country, or the recipient’s certification under a recognized data protection framework.

You can request more information about the specific safeguards applied to your data by contacting us at the address listed in Section 16.

11. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data, subject to any legal obligations requiring retention.
• Right to Restriction: You can ask us to restrict the processing of your data in certain circumstances.
• Right to Data Portability: You can request that we provide your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on our legitimate interests. We will cease processing unless we have compelling grounds to continue.
• Right to Withdraw Consent: Where processing is based on your consent (such as personalized advertising), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at support@inn2nation.com. We will respond to your request within 30 days, as required by applicable law.

If you are located in the EEA and believe that we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority. For users in Bavaria, Germany, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA. To exercise your rights, contact us at the email address above.

12. Children’s Privacy

The Game is not directed at children under the age of 13 (or under 16 in certain EEA jurisdictions). We do not knowingly collect personal data from children below these age thresholds. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@inn2nation.com. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete that data promptly.

13. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, and regular review of our data collection and storage practices. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Account and Data Deletion

You can delete your account and all associated game data at any time using the in-app account reset feature, which is accessible from the Game’s settings menu. This action will permanently erase your game progress, cloud save data, achievements, leaderboard entries, and any other data tied to your in-game profile.

Please note that this process removes your data from our systems. It does not delete your Google account, Apple ID, or any data held independently by Google, Apple, or other third-party services. To manage data held by these providers, please refer to their respective account settings and privacy policies.

Alternatively, you can request data deletion by contacting us at support@inn2nation.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Game, or applicable laws. When we make changes, we will update the „Effective Date“ at the top of this page. For material changes, we will provide a notice within the Game or through other appropriate means before the changes take effect. We encourage you to review this Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: