Privacy Policy for Dino Isle: Dinosaur Online

# Privacy Policy for Dino Isle: Dinosaur Online Effective date: August 14, 2026 Last updated: August 14, 2026 > BEFORE PUBLISHING: Replace every bracketed placeholder with the developer’s legal name, privacy email address, postal address, public Privacy Policy URL, and account-deletion URL. Remove this notice from the published version. ## 1. Data controller and scope This Privacy Policy applies to **Dino Isle: Dinosaur Onlinem** (the “Game”), provided by Redour, and to its Android package `com.redour.dinoisleonline`. This Policy explains what information is processed when you use the Game, why it is processed, with whom it is shared, and the choices available to you. ## 2. Information we process ### 2.1 Account and authentication information The Game may create an anonymous player account through Firebase Authentication so that your progress can be protected. You may also choose to link your account to Google Play Games or sign in with Google Play Games. The following information may be processed: - your Firebase User ID (UID), account type, and session information; - authentication provider information and security tokens; - your Google Play Games player/account identifier and basic profile information made available with your permission; - IP address, user-agent information, and technical signals used to prevent abuse. Redour does not receive or store your Google Account password. ### 2.2 Profile and publicly visible player information The player nickname you choose, which must be between 2 and 16 characters, is stored on our servers. When you join online gameplay, your nickname may be visible to other players in the same session. Do not include your real name, email address, telephone number, or other sensitive information in your nickname. ### 2.3 Game progress and economy information The following information may be processed to provide cloud saves and manage the in-game economy: - gold coins, Dino Tokens, experience points, and premium status; - unlocked or owned dinosaurs and other permanent entitlements; - daily reward progress, mission or reward timestamps, rewarded-ad counters, and transaction request IDs; - account creation and update timestamps; - the total in-game content granted through purchases. Your selected dinosaur, eye/skin/age appearance, control and graphics preferences, and some last-known interface values may be stored locally on your device. Local data may be deleted when you clear the Game’s app data or uninstall the Game. ### 2.4 Online multiplayer information When you use multiplayer features, your nickname, session/room information, selected dinosaur, and real-time gameplay state are transmitted through Photon Fusion. Gameplay state may include position, rotation, movement, animation, health, attacks, damage, and respawn events. Photon may also process technical information such as your IP address, user/session identifier, and connection logs to provide online connectivity, maintain security, and prevent abuse. Redour does not intentionally create permanent video or audio recordings of normal multiplayer sessions. The Game currently does not include voice chat or text chat. ### 2.5 In-app purchase information Payments are processed by Google when you make a purchase through Google Play. Redour does not receive or store your credit card or bank account details. The following information may be processed to verify purchases, prevent fraud, and grant content to your account: - product ID, purchase token, and order ID; - purchase status, verification time, and processing timestamps; - an obfuscated account identifier created from a one-way hash of your Firebase UID; - the gold, tokens, or premium entitlement granted by the purchase; - audit records needed to handle refunds, account deletion, entitlement recovery, and duplicate-purchase prevention. ### 2.6 Advertising information The Game may show interstitial and rewarded advertisements through Google Mobile Ads (AdMob). Google User Messaging Platform (UMP) is used to collect and manage privacy choices where required. Google and advertising technology providers may automatically collect or share the following information when serving and measuring ads or preventing fraud: - IP address and approximate location derived from it; - Android Advertising ID, App Set ID, and other device or account identifiers; - interactions such as app launches, taps, ad impressions, and video views; - device model, operating system, app version, language, and network information; - app and advertising SDK performance, launch time, hangs, and diagnostic information; - ad-request, impression, click, conversion, and fraud-prevention signals. Personalized advertising is used only when permitted by applicable law and your privacy choices. If consent is not provided, or if a user is not eligible for personalized advertising, the Game may show non-personalized or limited ads. Those ads may still use limited technical information for delivery, measurement, security, and fraud prevention. ### 2.7 Analytics, diagnostics, and integrity information Firebase Analytics may automatically process a unique app-instance identifier, sessions, approximate region, device and operating-system information, app interactions, and purchase events. We use this information to understand the player experience, identify technical or performance problems, improve features, and measure store or campaign performance. Firebase App Check and Google Play Integrity may process app and device integrity signals and verification tokens to confirm that requests come from a genuine, unmodified instance of the Game and to reduce bots, modified clients, cheating, and economy abuse. The Unity engine and any enabled Unity diagnostic features may process an app-installation identifier, device hardware, operating system, IP address, app version, graphics and CPU information, session events, and crash or performance data to help maintain stability and diagnose technical problems. ## 3. How we use information We process information to: - create accounts and provide authentication and cloud saves; - provide real-time online multiplayer gameplay; - manage game progress, economy transactions, rewards, and purchased entitlements; - verify purchases and support refunds or entitlement restoration; - serve rewarded and other advertisements, measure them, and manage their frequency; - analyze and improve the Game’s use, stability, and performance; - maintain security and prevent fraud, bots, cheating, and other abuse; - respond to user requests and comply with legal obligations. Where applicable, our legal bases include performance of a contract to provide the Game, our legitimate interests in security and service improvement, compliance with legal obligations, and your consent—particularly for personalized advertising and the use of certain identifiers. You may withdraw consent with future effect. ## 4. Parties with whom information is shared We do not sell personal information for monetary consideration. We may disclose information to the following service providers as necessary to operate the Game: - **Google LLC and its affiliates:** Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Analytics, Firebase App Check, Google Play Integrity, Google Play Games, Google Play Billing, Google Mobile Ads, and UMP. See the [Google Privacy Policy](https://policies.google.com/privacy) and [Firebase Privacy and Security information](https://firebase.google.com/support/privacy/). - **Exit Games/Photon:** Real-time multiplayer connectivity through Photon Fusion. See the [Photon Privacy Policy](https://www.photonengine.com/terms/privacyandcookiepolicy) and [Photon data-protection information](https://www.photonengine.com/terms/gdpr). - **Unity Technologies:** The Unity engine, Unity IAP, and enabled diagnostic services. See the [Unity Game Player and App User Privacy Policy](https://unity.com/legal/game-player-and-app-user-privacy-policy). - Infrastructure, security, customer-support, legal, and audit providers, only to the extent necessary to provide their services. - Government authorities or other parties when disclosure is legally required or reasonably necessary to protect our rights, users, or the Game. Under some privacy laws, disclosure to advertising partners for personalized or targeted advertising may be considered a “sale,” “sharing,” or targeted-advertising processing even when no money is exchanged. Where those laws apply, you may exercise the opt-out choices described below. If additional advertising networks are later added through AdMob mediation, this Policy, the provider list in the consent interface, and the relevant app-store disclosures will be updated before those networks are used. ## 5. Advertising and analytics choices Depending on your location, the Game may display a UMP privacy message when it starts. Where available, you may change your choices or withdraw consent through **Settings > Privacy Options** in the Game. You may also reset or delete your Advertising ID and manage personalized advertising choices through Android settings. Withdrawing consent does not affect processing that was lawful before withdrawal. Some account, security, purchase, and multiplayer information is necessary to provide core online features. Declining personalized advertising will not prevent access to the Game’s core gameplay outside optional paid content. ## 6. Data retention - Player account and progress information is retained while the account remains active and for as long as needed to provide the Game. When account deletion is completed, the Firebase Authentication account and active player profile are deleted. - Local preferences may remain on your device until you clear app data or uninstall the Game. - Analytics, advertising, security, and technical logs are retained for limited periods according to service configuration, legal requirements, and the relevant provider’s retention rules. - Purchase audit records may be retained after account deletion for as long as reasonably necessary to prevent fraud, prevent a purchase from being granted to multiple accounts, restore premium entitlements, investigate refunds, and meet financial or legal obligations. These records may contain product/order information and previous or current Firebase user identifiers, but are not used as an active player profile. - Relevant records may be kept for an additional period when required for a legal dispute, security incident, or lawful authority request. When information is no longer required, it is deleted, anonymized, or retained with restricted access solely for legally required purposes. ## 7. Account and data deletion You may delete your account through **Settings > Delete Account** in the Game. If you cannot access the Game, submit a request through **[account-deletion URL]** or contact **[privacy@yourdomain.com]** with enough information for us to identify the relevant player account. Account deletion removes your Firebase Authentication account and active player profile. Purchase audit records required for fraud prevention, entitlement restoration, and legal obligations may be retained as described in Section 6. Deleting your Game account does not delete your Google Account, Google Play Games profile, or Google Play purchase history; those must be managed separately through your Google Account and Google Play settings. We may take reasonable verification steps before completing a deletion request to prevent one person from deleting another person’s account. ## 8. Security We use reasonable technical and organizational safeguards, including encryption in transit, Firebase security rules, server-authoritative economy transactions, purchase verification, App Check/Play Integrity, access restrictions, and transaction logs. However, no internet transmission or storage system can be guaranteed to be completely secure. ## 9. International data transfers Cloud Firestore and Cloud Functions game data is configured to use the `europe-west1` region. Firebase Authentication is processed in the United States. Google, Photon, Unity, and their providers may also process information on servers located in Türkiye, the European Economic Area, the United States, and other countries whose data-protection laws may differ from those in your country. Where required, international transfers are protected through adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms. ## 10. Children’s privacy The Game is not specifically directed to children under 13. If you are below the age at which you may consent to digital services in your country, you should use the Game only with permission from a parent or legal guardian. If we learn that personal information was collected from a child under 13 without valid authorization, we will take reasonable steps to delete it. Google sign-in is optional, and the Game can be accessed through the guest option. If the Game is published for an audience that includes children, appropriate age screening, non-personalized advertising, eligible advertising SDK versions, and parental-consent measures will be implemented as required by applicable children’s privacy laws and Google Play Families policies. ## 11. Your rights Depending on your location, you may have the right to access, correct, delete, or obtain a copy of your information; restrict or object to certain processing; withdraw consent; opt out of targeted advertising or qualifying sale/sharing; and lodge a complaint with a competent data-protection authority. Users in Türkiye may exercise their rights under Article 11 of Law No. 6698 on the Protection of Personal Data (KVKK). Users in the European Economic Area and the United Kingdom may exercise rights under the GDPR or UK GDPR. Submit requests to **[privacy@yourdomain.com]**. We may need to verify your identity and the relevant account before fulfilling a request. ## 12. Changes to this Policy We may update this Policy when new services, advertising networks, analytics tools, or social features are added. Material changes will be communicated in the Game, on the store listing, or on the page where this Policy is published, and the “Last updated” date above will be revised. Where required, we will request new consent before using information for a new or materially different purpose. ## 13. Contact us For questions about this Policy or your personal information, contact: **Redour** Email: vegafcdgames@outlook.com