Effective date: September 7, 2026
Last updated: September 7, 2026
Controller: Charlie Software Development Center (“Charlie,” “we,” “us,” or “our”).
Contact: support@charliesdc.com
1. Data we collect and process
- Player name: the display name chosen for the game and, when ranking is enabled, shown publicly on the leaderboard.
- Internal Player ID: a randomly generated identifier used to distinguish the profile, connect results, answer support requests, and process deletion.
- Progress and ranking: scores, player level, character and stage unlocks, eligible ranking position, and ranking period.
- In-game tool activity: tools obtained or used, purchases made with gameplay points, and the resulting point balance. These points are not real money.
- Gameplay activity: stage, selected character, round outcome, duration, score changes, checkpoints, rescue use, timestamps, app version, and signals needed to validate a result.
- Server and security data: IP address, request time, device or app signals, integrity or attestation result, rate-limit events, suspected replay attempts, and security logs when online services are used.
- Advertising data: Google AdMob may receive the app name, IP address, general location derived from IP, device and operating-system information, ad interactions, consent status, and an advertising identifier when the platform permits it and the required permission or consent has been obtained.
- Diagnostics: crash reports, performance information, app version, device model, operating-system version, error state, and technical logs.
- Support data: email address and any information, screenshots, or recordings voluntarily included in a support request.
2. Why we use the data
We use this information to save progression, operate rankings, grant legitimate unlocks and tools, validate scores, prevent cheating and replay abuse, limit harmful traffic, serve and measure advertisements, honor consent choices, diagnose crashes, answer support requests, enforce our rules, and comply with legal or store obligations.
3. Public ranking information
If the online ranking is enabled, the chosen player name, verified score, ranking position, and applicable stage or period may be visible to other players. Do not use a real full name, email address, phone number, or other contact information as a player name. Internal Player IDs, IP addresses, integrity results, and security logs are not intended to be public.
4. Service providers and disclosures
Limited data may be processed by Cloudflare for hosting, database, network delivery, and security; by Google AdMob for advertising; by Google Play services on Android; by Apple platform services on iOS; and by crash or diagnostic services included in the final release. We may also disclose data when legally required or reasonably necessary to protect players and the service.
Read How Google uses information from apps that use its services and the Google Privacy Policy.
5. Advertising choices
Advertising identifiers are used only when allowed by the device, platform rules, and the player's consent choice. If personalized ads are not permitted, ads may still be shown contextually or in a restricted form and data may still be used for delivery, measurement, security, and fraud prevention. iOS tracking permission will be requested where legally and technically required. Child-appropriate treatment and non-personalized or restricted ads will be used where applicable.
6. Age recommendation and minors
WINDVEX is recommended for ages 13+. Players under 13 are not part of the intended audience, and online ranking participation is disabled for anyone identified as under 13. The game does not provide public chat, precise-location sharing, user photographs, or profile biographies. A parent or guardian may request review or deletion of a minor's information.
7. Retention periods
- Active profile and progression: retained while the online profile remains active.
- Weekly ranking: displayed for the active ranking period; validated results may be retained for up to 90 days for fraud review and disputes, then deleted or de-identified where feasible.
- IP and security logs: normally retained for up to 90 days, or longer only when necessary to investigate abuse, protect the service, resolve a dispute, or meet a legal duty.
- Crash and diagnostic records: normally retained for up to 12 months.
- Support correspondence: normally retained for up to 24 months after resolution.
- Deleted profile data: active records are scheduled for deletion within 30 days after verification; residual backup copies may remain for up to 30 additional days.
- AdMob data: retained by Google under Google's own policies and controls.
8. Security
Online requests are designed to use HTTPS, short-lived session tokens, replay protection, rate limits, input validation, server-side score checks, Google Play Integrity on supported Android builds, and Apple App Attest on supported Apple builds. Security controls reduce risk but cannot guarantee absolute security.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a copy of personal data. You may change advertising choices through the game's consent controls or device settings where available. We may ask for the Player ID and limited verification information so we act on the correct profile.
10. Changes and contact
We will revise this policy when a material data practice, provider, account feature, or online service changes. The updated date will appear above. Questions may be sent to support@charliesdc.com.