Void Defenders has no accounts, no sign-up, and no ads you did not ask for. We never ask for your name, email address, phone number or location. The only device permission the app ever asks for is notifications, and only if you turn on daily reminders yourself — declining costs you nothing.
Almost everything the game knows about you — your coins, your unlocks, your season progress, your best score — lives on your device, and is backed up so that a lost or replaced phone does not take your purchases with it.
Five things leave your device:
That's the whole of it. The detail is below.
The following is saved locally on your iPhone or iPad. It is also backed up to our servers — see section 2.6, which explains why and what you can do about it:
If you delete the app, the copy on your device goes with it. The backup is what lets a reinstall restore your Gems and your progress; to have that deleted too, see section 6.
The global leaderboard is optional. It is only populated if you enter a callsign. If you do, we store and publicly display:
Please treat your callsign as public. It is visible to every other player in the game. Do not use your real name, your email address, or anything else you would not want shown publicly. You can change it at any time in the Leaderboard screen.
To keep entries apart, we also store an anonymous identifier generated by Firebase Authentication. It is a random string. It is not linked to your Apple ID, your email, your device's advertising identifier, or anything that identifies you personally, and it is not shared with anyone.
Legal basis (UK/EU): consent — you provide it by choosing to enter a callsign, and you can withdraw it by asking us to remove your entry (see section 6).
We use Google Firebase Analytics to understand how the game is actually played — which wave players tend to stop on, which upgrades get chosen, and whether a purchase completed. Without it we are guessing at what to fix.
What is recorded:
What is not recorded: your callsign, your name, your email address, your location beyond country, or your device's advertising identifier. The events we send contain counts and outcomes, nothing that identifies you.
Firebase assigns a resettable app-instance identifier so repeat sessions from one install can be counted as one player. You can reset it by deleting and reinstalling the app.
The same events are also sent to our own server, at premiumexecutivepuzzles.com/voiddefenders/api/, where they are stored as counts and read as totals. This is a second copy of the list above, not extra collection: the same events, the same app-instance identifier Firebase already assigns, and no field that is not in that list — the server rejects anything else outright rather than storing it.
It exists because the questions we need answered — which wave is too hard, which stretch is boring, which achievement nobody can get — are specific to this game and are not practical to read out of Google’s analytics console. Nothing is shared with anyone: the data sits on the same hosting this site runs on and only we can read it. Only a calendar date is kept, never a time of day.
Legal basis (UK/EU): legitimate interest in understanding and improving the game.
On launch the app requests a small configuration file from our own website, so we can adjust things like prices and drop rates without shipping an update. The request sends nothing about you; like any web request, our host sees the connecting IP address, which we do not store or analyse.
We use Sentry to find out when the game crashes or misbehaves. A report may include:
These reports are not configured to attach personal information. We use them only to diagnose and fix faults.
Legal basis (UK/EU): legitimate interest in keeping the app working.
In-app purchases (Gem packs and the Battle Pass) are processed entirely by Apple through the App Store. We never see, receive or store your payment card details, billing address, or Apple ID. We are told only that a purchase completed, so the app can grant what you bought.
Your profile — coins, Gems, items owned, Battle Pass tier, upgrade levels, records and settings — is copied to our servers and kept against the anonymous identifier described in 2.1.
This exists for one reason. Gem packs are consumables, and Apple cannot restore a consumable: that is defined behaviour, not an oversight. Without an off-device copy, reinstalling the app would destroy everything you had paid for and nothing could give it back.
It contains no name, email address or contact detail of any kind, because the app never collects one. It is not used for analytics, advertising or profiling, and it is not shared with anyone.
Legal basis (UK/EU): legitimate interest in not destroying purchases you have made, and performance of our contract with you in respect of those purchases.
When the game contacts the leaderboard it attaches a token from Apple's App Attest service, which tells our server the request came from a real, unmodified copy of Void Defenders rather than from a script. It identifies the app, not you, and carries nothing about your device that we can read or store.
Legal basis (UK/EU): legitimate interest in keeping a public leaderboard honest.
Choosing a callsign stores that name against your anonymous identifier, so two players cannot hold the same one. Changing or releasing your callsign frees it for someone else.
Void Defenders shows one kind of advertisement: a rewarded video you choose to watch. It appears only on the game-over card, only once the continues a run starts with are spent, and only alongside the option of spending Gems on the same thing. Nothing plays during a run, between waves, or at launch, and declining costs you nothing but the continue.
Ads are served by Google AdMob. When you are offered one, Google receives your device's IP address, country-level location, the fact that the app requesting it is Void Defenders, and technical details of the device — its model, operating system version and language. We request non-personalised ads only: what you are shown is chosen by context, not by a profile of you.
We do not send Google your callsign, your anonymous player identifier, your scores, or anything else from your save.
The advertising identifier. On iOS an app can read the advertising identifier (IDFA) only after asking permission through Apple's tracking prompt. Void Defenders never shows that prompt and never asks, so Google cannot read it — iOS hands back a zeroed value instead. That is why the app's privacy manifest declares no tracking, and why nothing here follows you into another app or website.
In the EEA, the UK and Switzerland you are asked for consent before any ad is requested. You can refuse. Refusing means no ad is requested at all: the video option does not appear, and nothing else in the game changes. You can change your answer at any time from Privacy in the app's sound and privacy settings.
In California and other US states with comparable laws the same screen offers you the equivalent opt-out.
Google's account of what it collects for AdMob is at <https://support.google.com/admob/answer/6128543>, and its privacy policy at <https://policies.google.com/privacy>.
| Service | Operated by | What it handles |
|---|---|---|
| Firebase Authentication | Issues the anonymous identifier | |
| Cloud Firestore | Stores public leaderboard entries | |
| Firebase Analytics | Anonymous gameplay statistics | |
| Sentry | Functional Software, Inc. | Crash and error reports |
| App Store / StoreKit | Apple | All purchases and payment data |
|---|
These providers may process data outside your country, including in the United States. Where that happens, transfers rely on the providers' standard contractual clauses and equivalent safeguards.
If you allow notifications, the app can remind you once a day that a new objective is available. These are scheduled on your device, from information already on your device. No notification service is involved, we are not told whether you received or opened one, and turning them off in iOS Settings stops them completely.
Void Defenders is not directed at children under 13, and we do not knowingly collect personal information from them.
There is one thing worth a parent's attention: the callsign is free text and is shown publicly. A child could type their real name into it. If you are a parent or guardian and believe a child has published identifying information this way, contact us at info@demdiotech.com and we will remove the entry.
Local data. Delete the app. Everything on your device goes with it.
Your leaderboard entry. You can change your callsign at any time from the Leaderboard screen, which updates it everywhere immediately.
Entries cannot currently be deleted from inside the app — this is deliberate, so that nobody can remove a rival's score. To have your leaderboard entry erased, email info@demdiotech.com. Tell us the callsign, and we will remove it within 30 days.
Your progress backup. Email info@demdiotech.com and we will delete it within 30 days. Be aware that deleting it also gives up any Gems you have bought and not spent, because once the app is gone from your device the backup is the only record of them. We will say so and wait for your confirmation before acting.
Crash reports are retained by Sentry for up to 90 days and then deleted automatically.
Gameplay statistics are retained by Firebase for up to 14 months. They are aggregated and cannot be traced back to an individual.
Leaderboard entries are kept while the game is operated, because the board is all-time and scores are not reset.
Depending on where you live — including under the UK GDPR, the EU GDPR, and the California Consumer Privacy Act — you may have the right to:
We do not sell personal information, and we do not "share" it as the CCPA defines that term.
To exercise any of these, email info@demdiotech.com. We will respond within 30 days. Because the app has no accounts, the most we can usually identify is a leaderboard entry by its callsign.
Leaderboard writes are authenticated and validated server-side: a player can only write to their own entry, and a score can never be lowered. All traffic between the app and our providers uses encrypted HTTPS connections.
No system is perfectly secure, but the app holds very little worth taking — no names, no email addresses, no payment details.
If we change this policy we will update the date at the top. Material changes will be announced in the app's release notes. Continuing to play after a change means you accept the updated policy.
Demdio Technologies Inc. info@demdiotech.com