Privacy Policy
In short. Garden Frontline keeps your game progress on our server, under a guest account or, if you choose, linked to your Google account, so it is protected and can be restored. We keep only what the game needs: a random installation ID, your game data and, with Google, the account identifier (not your name or email). We do not sell your information. The game has no ads and no purchases yet; those sections are marked Not active yet and explain in advance what will apply. Players under 13 play offline only.
1. Who we are
Garden Frontline (“we”, “us”) develops and operates the Garden Frontline game (the “Game”). We are responsible for the personal information described in this policy. Contact: [email protected].
2. Information stored on your device
The Game saves the following in your device’s local app storage. It is used only to run the Game and is not sent to us:
- Game progress: coins, gems, units, stages, missions and similar game data.
- Settings: sound, music, vibration, graphics quality and language.
- The age range you selected on first launch (for example “13–15”). We do not store your exact year of birth.
- A short internal log of game events (for example “supply collected”) that the Game uses for its own features. It stays on the device and is not transmitted.
You can delete all of this at any time with Settings → “Reset progress”, or by uninstalling the Game. If you use the backup code (Settings → Export), the code contains your game progress. It is shared only where you choose to paste or send it.
The Game needs the Android “Internet” permission only to run its built-in web engine. It does not request access to your contacts, location, camera, microphone, photos or files.
3. Online account and cloud save
When you continue as a guest or with Google, your progress is kept on our servers so it can be protected and restored. We process:
- Guest account: a random installation identifier created by the Game itself (not your phone’s hardware ID or advertising ID), a secret key that proves the installation, and your game data (progress, game currency balance, rewards and battle results).
- Optional Google sign-in: if you choose “Continue with Google” (or link Google later), Google gives the app a signed sign-in token that our server checks. The token also contains your name, email address and profile photo link, but our server keeps only Google’s account identifier for this app and does not store the rest.
- Technical data: your IP address and request details are used briefly to deliver the service, prevent abuse and keep it secure (for example rate limits). Our hosting provider keeps standard access logs for a limited time, normally up to 30 days.
- Language (Israel check): to decide whether to offer Hebrew, our server checks whether your IP address belongs to a range registered to Israel, using a public list of address ranges published by RIPE NCC that is kept on our own server. Your IP address is not sent to anyone for this check, and neither the address nor the result is stored on the server. Only whether Hebrew is available is saved on your device. The check is approximate (for example with a VPN) and decides only the language on offer.
Why: to provide the Game and your saved progress, to prevent cheating and abuse, and to keep the service secure. Where the GDPR applies, the legal bases are performance of our contract with you (the Terms of Use) and our legitimate interest in security.
Service providers: Render (server hosting, EU – Frankfurt) and Neon (database). They process data only on our behalf; Neon may store it in the European Union or the United States. Google provides the sign-in service if you use it.
4. Purchases Not active yet
If in-app purchases are offered, Google Play processes the payment. We never receive your card or bank details. We receive only what is needed to deliver and verify the item: a purchase token, the order number, the product and the purchase status. We keep these records as required by tax and consumer laws.
5. Advertising Not active yet
If the Game shows ads (for example optional “watch an ad for a reward” videos), they will be provided by Google AdMob. AdMob may collect your device’s advertising ID, IP address and device information to show and measure ads and to prevent ad fraud. Where the law requires it (for example in the EU, the UK and Switzerland), we will ask for your consent through Google’s consent form first. You can change your choice later in Settings. You can also reset or delete your advertising ID in your Android settings. Google’s use of this data is described at policies.google.com/technologies/partner-sites. We will not show personalised ads to anyone who indicated an age under 16.
6. Children
The Game is intended for players aged 13 and over. On first launch the Game asks for your year of birth, in a neutral way, and keeps only the age range. If you indicate that you are under 13, the Game still works fully offline, but all online features, purchases and ads stay switched off on that device. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has given us personal information, contact us and we will delete it.
7. Sharing
We do not sell your personal information. We do not share it for cross-context behavioural advertising, except through the ads described in section 5 once ads are active and only as described there. We share information only with the service providers listed above, if required by law, or to protect the safety and rights of our players and of us.
8. Retention and deletion
- Information on your device: kept until you reset your progress or uninstall the Game.
- Online account: kept while your account exists. You can delete your account in the Game (Settings → Delete account) or by emailing us. We then delete your account data, normally within 30 days, except records the law requires us to keep.
9. Security
We use encrypted connections (HTTPS). Sign-in keys are kept in the phone’s secure storage. Game rewards are calculated on our servers so they cannot be tampered with. Our code and its dependencies are scanned automatically for known vulnerabilities. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a security breach where the law requires.
10. Your rights
Depending on where you live, you may have the right to know what information we hold about you, to receive a copy, and to correct or delete it. You may also have the right to object to or restrict its use, to withdraw consent, and to complain to a data protection authority. These rights come from Israel’s Protection of Privacy Law, the EU/UK GDPR and U.S. state privacy laws such as the CCPA/CPRA. To use any of these rights, email [email protected]. We will reply within the period the law sets (usually 30 days) and will not discriminate against you for using your rights. In Israel you can also contact the Privacy Protection Authority. In the EU/UK you can contact your local data protection authority.
11. International transfers
We operate from Israel. When online features are active, data may be processed in the United States or the European Union by the providers listed above, under appropriate safeguards (such as standard contractual clauses).
12. Changes to this policy
We will update this policy before turning on any feature marked “Not active yet” and whenever our practices change. The effective date at the top shows the latest version. If a change is significant, we will tell you in the Game.
13. Contact
Garden Frontline · [email protected]