Бургер
Reprobates Privacy Policy
Publication and effective date: October 29, 2026
1 Who is responsible for processing1.1. This Policy describes the processing of personal data in connection with the mobile game Reprobates by Limited Liability Partnership “272 STUDIO (272 STUDIO)” (the “Company”, “we”, “us” or “our”).
Privacy contact: info@two7two.com.
1.2. The Company determines the purposes and means of processing within its activities and performs the duties imposed on it under applicable data protection law, including those of a data controller where the GDPR applies.
1.3. This Policy applies only to Android versions of Reprobates with package identifier com.TwoSevenTwoStudio.Reprobates distributed by the Company through Google Play. Processing depends on the installed version and features actually integrated.
1.4. Personal data means information relating to an identified or identifiable person. A technical identifier, IP address or gameplay events may also be personal data even if we do not know your name.
1.5. This Policy explains data processing. It does not by itself replace consent, device permissions or another necessary legal basis.
2 Data that may be processed 2.1. Support requestsIf you contact us, we receive your email address, any name and contact details you provide, the content of your request, attachments and technical information needed to resolve the issue.
Please do not send passwords, full payment card details, payment verification codes or documents that are unnecessary for handling your request.
2.2. Game progress and cloud savesCloud saving may involve processing:
(a) a technical player identifier that associates a save with the relevant user;
(b) progress, achievements, the state of in-game objects and other parameters included in the save by the Game;
(c) the save’s update time and technical information needed to write and retrieve it.
The new Android version uses Unity Cloud Save to store progress. Cloud saves are read when the Game starts and uploaded when you issue the relevant command through the settings.
Firebase Authentication, Firestore and Firebase Storage are not used for this progress-saving mechanism.
The absence of a separate registration form does not mean that there is no technical player profile or identifier.
2.3. Usage analyticsGoogle Analytics for Firebase is used for statistics.
Depending on the settings and SDK version, processing may include:
(a) an app instance identifier and other technical identifiers;
(b) device model, operating system, language, Game version and technical parameters;
(c) information about launches, session duration and interaction with the Game;
(d) gameplay events and feature usage;
(e) purchase information where the corresponding events are sent to the analytics service;
(f) an IP address and the approximate region inferred from it;
(g) the available Android advertising identifier, where its collection has not been disabled and is permitted by applicable requirements and consent settings.
The exact events depend on the active integration. We do not treat this information as anonymous merely because it does not include a name or is available to us in statistical reports.
2.4. PurchasesPurchases are processed through Google Play. The Game does not ask you to enter a payment card number, expiry date or security code directly.
To provide purchases, verify payment, restore access, handle refunds and prevent fraud, processing may include:
(a) a product identifier;
(b) the amount and currency;
(c) the transaction date, status and outcome;
(d) an order identifier, purchase token, receipt information and other technical transaction data;
(e) subscription information and acquired access rights.
Google Play and the integrated Unity IAP components participate in purchase processing. Transmission of additional purchase analytics events depends on package versions, active integrations and consent settings.
Payment method details are processed by the payment provider under its terms.
2.5. AdvertisingWe use Google AdMob and Liftoff Monetize (Vungle) to serve and measure in-game advertisements, manage advertising and prevent advertising fraud. These services may be integrated directly or through mediation. Their availability depends on the installed version, region and applicable privacy settings.
When these advertising services are used, processing may include:
(a) advertising and other permitted identifiers;
(b) an IP address, approximate location and technical device parameters;
(c) information about ad requests, impressions, views and clicks;
(d) events relating to rewards for viewing advertisements;
(e) diagnostic data and information used to detect invalid traffic;
(f) signals concerning age, consent and selected processing restrictions.
The specific categories depend on the SDK, region, permissions and configuration. A service does not receive data through the Game from a version in which that service is not integrated.
Personalized advertising may involve automated assessment of interests. Where required, this processing takes place after the necessary consent has been obtained.
2.6. Local and push notificationsThe Game may send local notifications and, in versions where remote delivery is integrated, push notifications about gameplay, in-game events, updates, service matters and offers. Notification delivery is subject to device permissions, your preferences and any separate consent required by law for promotional messages.
You can disable notifications in Android settings and, where available, manage notification preferences in the Game. Accepting this Policy does not replace required permission or consent.
Local notifications are generated on the device. The currently described local notification feature does not use Firebase Cloud Messaging; this does not prevent remote push delivery from being added in a later version.
If remote push notifications are enabled in a version, processing may include a device or app-instance identifier, a push delivery token, notification preferences and technical delivery or interaction events. These data are used to deliver and manage notifications. Before activating a remote notification provider, we will disclose the provider and any additional processing and obtain any required consent or permission.
2.7. Information you are not required to enterIn the implementation prepared for the new Android version, ordinary gameplay does not require you to directly provide your name, email address, address book or photographs.
This does not apply to information you voluntarily send to support and does not exclude processing of technical identifiers and the data described above.
2.8. Google Play Games Services sign-inCompatible Android versions may offer Google Play Games Services sign-in. Depending on the version and permissions granted, processing may include the player identifier, player name and technical authentication information, including codes or tokens needed to verify sign-in and link the game profile. Email or other additional profile data is received only where supported by the actual integration and permissions; receiving it is not assumed merely because sign-in is available.
These data are used for sign-in, player identification and linked features or cloud saves where that connection is implemented. The Company does not receive your Google account password. The Company does not use authentication data for advertising or profiling. Google Play Games does not by itself mean that Firebase Authentication is used: they are separate components, and their use depends on the version.
3 Sources of data3.1. We receive data:
(a) directly from you when you contact us or use features;
(b) automatically from the Game, your device and SDKs actually integrated into the Game;
(c) from Google Play and Unity services as necessary for purchases, cloud features and other active functionality;
(d) from advertising and analytics partners in connection with active integrations.
3.2. We do not ask for passwords to your Google or other third-party accounts.
4 Purposes of processingWe process data for the following purposes:
4.1. Providing and maintaining the Game’s features.
4.2. Writing and retrieving cloud progress.
4.3. Providing purchases, verifying transactions, servicing subscriptions and handling refunds.
4.4. Analyzing usage, identifying technical issues and improving the Game.
4.5. Serving and measuring advertisements, providing advertising rewards and preventing advertising fraud, for versions with the relevant integration.
4.6. Responding to support inquiries and fulfilling user requests.
4.7. Maintaining security, preventing misuse, complying with the law and protecting rights.
4.8. Delivering and managing local and push notifications in versions supporting them, including service information, game events, updates and offers, subject to applicable permissions, consent requirements and your preferences.
Data must not be used for a new, incompatible purpose without the necessary legal basis and advance information where required.
5 Legal bases and consent5.1. Collection and processing take place on the basis of your consent or that of your legal representative where required, or in other circumstances expressly permitted by applicable law.
5.2. In jurisdictions recognizing these grounds, processing may be necessary to perform a contract, comply with a legal obligation or pursue a legitimate interest while respecting your rights.
5.3. Relying on performance of a contract does not mean that all analytics or personalized advertising are necessary to play the Game. Optional processing requires its own legal basis.
5.4. Where consent is required for advertising or analytics technologies, it is requested before the relevant processing. We respect refusal and withdrawal of consent.
5.5. You can manage your preferences through the privacy interface available in the relevant version or by sending a request to info@two7two.com.
5.6. Refusing optional advertising personalization should not automatically disable all core features. However, an individual feature’s availability depends on the data objectively necessary to provide it.
6 Recipients of data 6.1. Active services in the new Android versionGoogle
Google Analytics for Firebase is used for analytics; Google Play is used for payments and purchase support.
Google Privacy Policy:
https://policies.google.com/privacy
How Google uses information from partner applications:
https://policies.google.com/technologies/partner-sites
Unity
Unity Cloud Save stores progress. Unity IAP components participate in purchases.
Processing of purchase events and other data depends on the services actually active and package versions. A developer’s use of Unity Hub or Unity Dashboard does not by itself mean that every Unity service is integrated into the Game.
Unity Game Player and App User Privacy Policy:
https://unity.com/legal/game-player-and-app-user-privacy-policy
6.2. Advertising services we useGoogle AdMob
Google AdMob serves, measures and manages advertisements and processes the advertising data described in Section 2.5.
Google information about advertising technologies:
https://policies.google.com/technologies/ads
Liftoff Monetize (Vungle)
Liftoff Monetize (Vungle) serves and measures advertisements and helps prevent advertising fraud, directly or through mediation. It processes the advertising data described in Section 2.5.
Privacy Policy:
https://www.liftoff.ai/privacy-policy/
Processing depends on the active integration and applicable settings. Required consent is obtained before processing; accepting the User Agreement or this Policy is not consent to personalized advertising.
6.3. Providers’ rolesDepending on the service and agreement, a provider may process data on the Company’s behalf or independently determine certain processing purposes. Its role is determined by the relevant terms and actual processing.
Independent providers are responsible for processing whose purposes and means they determine. To the extent permitted by law, the Company is not liable for their independent acts beyond its reasonable control and does not guarantee uninterrupted availability of third-party services. The Company remains responsible for its own processing and duties concerning processors it engages and integrated SDKs that cannot lawfully be excluded.
6.4. Other recipientsWhere there is a legal basis, data may be disclosed to:
(a) contractors providing support, security and infrastructure services;
(b) advisers who need access to address a particular matter;
(c) public authorities, courts and other authorized persons in circumstances provided by law;
(d) a new operator in connection with a reorganization or transfer of the Game, subject to requirements concerning notice, data protection and necessary consents.
Access is limited to what is necessary for the relevant purpose.
7 Advertising preferences7.1. Depending on the settings, advertisements may be personalized, non-personalized or limited.
7.2. Non-personalized advertising does not necessarily mean that no data is processed. Technical information may be needed for delivery, frequency capping, security and measurement.
7.3. You can manage the advertising identifier through Android settings. Section names depend on the device and operating system version.
7.4. Changing the advertising identifier does not necessarily delete previously transmitted information or stop processing of other identifiers. You may send a deletion request to the Company and the relevant independent controller.
7.5. If your region requires a separate opt-out from the sale of data, sharing for cross-context behavioral advertising or other targeted advertising, you will be provided with the choices required by law.
8 International processing and storage8.1. The Company uses international technology services. The Company and providers may process data in different countries.
8.2. Server and recipient locations depend on the particular service, project settings and provider terms. Data may be processed outside your country of residence.
8.3. International transfers take place subject to the grounds and safeguards required by applicable law. These may include contractual safeguards provided by law, a recognized adequate level of protection or separate consent where that mechanism is permissible for the particular transfer.
8.4. Using the Game does not by itself constitute unconditional consent to transfer any data to any country.
8.5. Local data storage requirements and cross-border transfer requirements apply independently. Consent to a transfer does not override mandatory storage requirements.
8.6. You may request information about relevant recipients, processing countries and safeguards at info@two7two.com within the scope of your statutory rights.
9 Retention9.1. Data is retained no longer than necessary for the disclosed purposes unless a longer period is required by law or justified by a lawful basis.
9.2. Retention periods are determined by considering:
(a) the duration of the relevant feature or service;
(b) the need to preserve progress at the player’s request;
(c) periods for handling requests and resolving disputes;
(d) mandatory retention periods for transaction records;
(e) the need to prevent fraud and maintain security;
(f) retention settings in the services actually used.
9.3. Cloud saves are retained to provide progress restoration until that purpose ends or the data is deleted following a valid request, unless there is a lawful basis for further retention.
9.4. Analytics information is retained according to the selected service settings and the time necessary for statistical purposes. The specific current periods and criteria used to determine them are available on request.
9.5. Data that must be retained by law or for a particular dispute may not be deleted immediately. Access and further use are limited to the relevant legal basis.
9.6. Uninstalling the Game does not automatically delete cloud progress, purchase data or previously transmitted information.
9.7. Deleting or resetting progress through a game control affects only the save data covered by that control. It does not by itself constitute a request to delete the game profile and all associated personal data. To make that broader request, follow Section 11.
10 Data security10.1. The Company applies organizational and technical security measures proportionate to the risks, restricts access and takes account of the security requirements of the services used.
10.2. No method of transmission or storage is absolutely secure. We do not promise that no incident will ever occur and do not disclaim our statutory duties to prevent and handle incidents.
10.3. In the event of an incident, applicable requirements concerning impact assessment, remediation and notification of users and authorities will be followed.
11 Your rights11.1. Depending on applicable law, you may have the right to:
(a) learn what data about you is processed, for what purposes and to whom it is disclosed;
(b) access your data and obtain a copy;
(c) request correction of inaccurate information;
(d) withdraw consent;
(e) request restriction, blocking or deletion of data;
(f) object to certain processing;
(g) receive data for portability where provided by law;
(h) opt out of certain advertising or data disclosures;
(i) contact a competent authority or court.
11.2. To make a request, email info@two7two.com. Specify the right you wish to exercise and information allowing us to locate the relevant data, such as a player or application identifier if available to you.
11.3. We may request proportionate verification of identity or authority where needed to protect data. Do not send a passport or other documents before receiving a justified request.
11.4. We respond within the applicable statutory period. If we cannot fulfill a request completely, we explain the grounds for the limitation and available appeal options where required.
11.5. Requests may concern data held by processors we engage. We do not limit our responsibilities to information physically located on our own servers.
11.6. If a provider is independently responsible for particular processing, you may also contact it using the details in its privacy policy.
11.7. Deleting saves and deleting your profile are separate actions. If you only want to reset progress, state this expressly. To request deletion of your game profile and associated personal data, email info@two7two.com with the subject “Reprobates — profile and data deletion”. Include your player identifier, if available, and information reasonably needed to locate the profile. You do not need to provide a reason. Do not send your Google password or full payment card details.
11.8. Following any proportionate identity verification, we assess the request across the services actually used for your profile. This includes the game profile in Unity Authentication, associated Unity Cloud Save data and other identifiable game data for which we are responsible, including analytics, diagnostic and advertising data to the extent it can be linked to you and is subject to deletion. We delete relevant data within our control and instruct or request processors we engage to delete associated data as applicable. Deleting a save alone, or deleting the authentication profile alone, does not establish completion of this process.
11.9. We explain any data retained under Section 9.5, the reason for retention and the applicable period or criteria. Retained data is restricted to the permitted purpose. We inform you of the outcome and any material limits to the deletion completed. Information that has been irreversibly anonymized so that it no longer identifies you is not personal data.
11.10. A request to delete your game profile does not delete your Google account or automatically erase records held by Google Play or another provider acting independently under its own legal obligations. Where a separate request to an independent provider is needed, we explain the relevant route without limiting our own duties. Deleting a profile or save does not automatically cancel an active Google Play subscription; manage cancellation through Google Play.
11.11. Deleting the profile and its associated saves can prevent restoration of progress and access to features dependent on that profile. These consequences do not remove statutory purchase or refund rights. If you subsequently use the Game, the Game may create a new profile and process new data in accordance with this Policy and the applicable settings and legal bases.
12 Additional regional information 12.1. European Economic Area and United KingdomWhere the GDPR or UK GDPR applies, you have the rights provided by those laws, including access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
The Company does not treat silence, inactivity or merely reading this Policy as consent where freely given, specific consent expressed through affirmative action is required.
You may contact a competent data protection authority.
The former publisher Freeplay’s representatives are not representatives of the Company, and their contact details are not the Company’s representative contact details.
12.2. California and other United States statesIf state privacy legislation applies to the relevant processing, you may have rights to information, access, correction, deletion, portability and opting out of certain disclosures or uses.
Disclosure for cross-context behavioral advertising may be regulated as “sharing” even when data is not sold for money. The absence of a monetary sale does not by itself mean that there is no right to opt out.
Valid requests are handled without unlawful discrimination. An authorized agent may act within verified authority.
13 Minors13.1. The Game is intended for users aged 16 or older, subject to stricter regional restrictions.
13.2. For users below the age at which they may independently consent to a particular type of processing, any necessary consent must be given by their legal representative.
13.3. The age for independently consenting to data processing may differ from the Game’s age rating and the age of majority.
13.4. Applicable restrictions on advertising personalization and SDK use are taken into account for minors. Acceptance of the Terms of Use does not replace any required consent from a legal representative.
13.5. If you believe that data has been obtained from a user below the permitted age or without necessary consent, contact info@two7two.com so that we can investigate and take measures required by law.
14 Differences between Game versions14.1. The new Android build described in this Policy has disabled the previous MAX, Facebook, AppMetrica, AppsFlyer, Amplitude, GameAnalytics and FlyAnalytics integrations and previous server integrations.
14.2. Disabling them in the new build does not mean that they are absent from older installed versions, have stopped retaining previously received information or have automatically deleted it.
14.3. When using an older version, its actual components and previously provided notices must be taken into account. You may request information about processing for which the Company is responsible regardless of the version you use.
14.4. Adding recipients, expanding data categories or changing purposes is accompanied by the necessary updates to notices, settings and consents before the relevant processing begins.
15 Reference links to other servicesThe directory below is retained for information about services used by the former publisher or that may be considered for future integrations.
A link does not mean that the service is integrated into the new version, receives your data or is authorized to start processing it. Actual recipients are determined by active integrations and notices for the relevant version.
AB180 / Airflux: https://ab180.notion.site/airflux-privacy-en
AdInMo: https://www.adinmo.com/privacy-policy/
Adverty: https://adverty.com/privacy-policy-2021
Anzu: https://www.anzu.io/privacy-policy
AppLovin: https://www.applovin.com/privacy/
AppsFlyer: https://www.appsflyer.com/privacy-policy/
Audiomob: https://audiomob.com/privacy-policy
Bigo: https://www.bigossp.com/agreement/privacyPolicy
Pangle: https://www.pangleglobal.com/privacy
Chartboost: https://docs.chartboost.com/en/legal/privacy-policy/
Digital Turbine: https://www.digitalturbine.com/privacy-policy/
Meta: https://www.facebook.com/privacy/explanation
Gadsme: https://www.gadsme.com/privacy-policy
GameAnalytics: https://gameanalytics.com/privacy/
Google: https://policies.google.com/privacy
InMobi: https://www.inmobi.com/privacy-policy/
Unity, including information about relevant ironSource products: https://unity.com/legal/game-player-and-app-user-privacy-policy
Liftoff: https://www.liftoff.ai/privacy-policy/
Mintegral: https://www.mintegral.com/en/privacy
MobileFuse: https://mobilefuse.com/privacy-policy
Ogury: https://ogury.com/ogury-advertising-privacy-policy/
PubMatic: https://pubmatic.com/legal/privacy-policy/
Rollbar: https://docs.rollbar.com/docs/privacy-policy
Smaato: https://www.smaato.com/privacy/
Odeeo: https://odeeo.io/privacy-policy
Tapjoy: https://www.tapjoy.com/legal/general/privacy-policy/
Unity: https://unity3d.com/legal/privacy-policy
Vungle, whose services are represented in Liftoff products: https://vungle.com/privacy/
External resource content and addresses are determined by the respective providers. These links do not replace disclosure of specific purposes and data categories when a service is actually integrated.
16 Changes to this Policy16.1. The Company updates this Policy when data processing, services or applicable requirements change.
16.2. A revised version is published with its effective date. Material changes are communicated through the Game or another suitable channel where required.
16.3. If a change requires new consent, that consent is requested before the relevant processing begins. A revised Policy does not make previous processing lawful where the necessary legal basis was absent.
17 Contact detailsQuestions about data, correction and deletion requests, consent withdrawals and privacy inquiries should be sent to:
Limited Liability Partnership “272 STUDIO (272 STUDIO)”
Email: info@two7two.com.
1 Who is responsible for processing1.1. This Policy describes the processing of personal data in connection with the mobile game Reprobates by Limited Liability Partnership “272 STUDIO (272 STUDIO)” (the “Company”, “we”, “us” or “our”).
Privacy contact: info@two7two.com.
1.2. The Company determines the purposes and means of processing within its activities and performs the duties imposed on it under applicable data protection law, including those of a data controller where the GDPR applies.
1.3. This Policy applies only to Android versions of Reprobates with package identifier com.TwoSevenTwoStudio.Reprobates distributed by the Company through Google Play. Processing depends on the installed version and features actually integrated.
1.4. Personal data means information relating to an identified or identifiable person. A technical identifier, IP address or gameplay events may also be personal data even if we do not know your name.
1.5. This Policy explains data processing. It does not by itself replace consent, device permissions or another necessary legal basis.
2 Data that may be processed 2.1. Support requestsIf you contact us, we receive your email address, any name and contact details you provide, the content of your request, attachments and technical information needed to resolve the issue.
Please do not send passwords, full payment card details, payment verification codes or documents that are unnecessary for handling your request.
2.2. Game progress and cloud savesCloud saving may involve processing:
(a) a technical player identifier that associates a save with the relevant user;
(b) progress, achievements, the state of in-game objects and other parameters included in the save by the Game;
(c) the save’s update time and technical information needed to write and retrieve it.
The new Android version uses Unity Cloud Save to store progress. Cloud saves are read when the Game starts and uploaded when you issue the relevant command through the settings.
Firebase Authentication, Firestore and Firebase Storage are not used for this progress-saving mechanism.
The absence of a separate registration form does not mean that there is no technical player profile or identifier.
2.3. Usage analyticsGoogle Analytics for Firebase is used for statistics.
Depending on the settings and SDK version, processing may include:
(a) an app instance identifier and other technical identifiers;
(b) device model, operating system, language, Game version and technical parameters;
(c) information about launches, session duration and interaction with the Game;
(d) gameplay events and feature usage;
(e) purchase information where the corresponding events are sent to the analytics service;
(f) an IP address and the approximate region inferred from it;
(g) the available Android advertising identifier, where its collection has not been disabled and is permitted by applicable requirements and consent settings.
The exact events depend on the active integration. We do not treat this information as anonymous merely because it does not include a name or is available to us in statistical reports.
2.4. PurchasesPurchases are processed through Google Play. The Game does not ask you to enter a payment card number, expiry date or security code directly.
To provide purchases, verify payment, restore access, handle refunds and prevent fraud, processing may include:
(a) a product identifier;
(b) the amount and currency;
(c) the transaction date, status and outcome;
(d) an order identifier, purchase token, receipt information and other technical transaction data;
(e) subscription information and acquired access rights.
Google Play and the integrated Unity IAP components participate in purchase processing. Transmission of additional purchase analytics events depends on package versions, active integrations and consent settings.
Payment method details are processed by the payment provider under its terms.
2.5. AdvertisingWe use Google AdMob and Liftoff Monetize (Vungle) to serve and measure in-game advertisements, manage advertising and prevent advertising fraud. These services may be integrated directly or through mediation. Their availability depends on the installed version, region and applicable privacy settings.
When these advertising services are used, processing may include:
(a) advertising and other permitted identifiers;
(b) an IP address, approximate location and technical device parameters;
(c) information about ad requests, impressions, views and clicks;
(d) events relating to rewards for viewing advertisements;
(e) diagnostic data and information used to detect invalid traffic;
(f) signals concerning age, consent and selected processing restrictions.
The specific categories depend on the SDK, region, permissions and configuration. A service does not receive data through the Game from a version in which that service is not integrated.
Personalized advertising may involve automated assessment of interests. Where required, this processing takes place after the necessary consent has been obtained.
2.6. Local and push notificationsThe Game may send local notifications and, in versions where remote delivery is integrated, push notifications about gameplay, in-game events, updates, service matters and offers. Notification delivery is subject to device permissions, your preferences and any separate consent required by law for promotional messages.
You can disable notifications in Android settings and, where available, manage notification preferences in the Game. Accepting this Policy does not replace required permission or consent.
Local notifications are generated on the device. The currently described local notification feature does not use Firebase Cloud Messaging; this does not prevent remote push delivery from being added in a later version.
If remote push notifications are enabled in a version, processing may include a device or app-instance identifier, a push delivery token, notification preferences and technical delivery or interaction events. These data are used to deliver and manage notifications. Before activating a remote notification provider, we will disclose the provider and any additional processing and obtain any required consent or permission.
2.7. Information you are not required to enterIn the implementation prepared for the new Android version, ordinary gameplay does not require you to directly provide your name, email address, address book or photographs.
This does not apply to information you voluntarily send to support and does not exclude processing of technical identifiers and the data described above.
2.8. Google Play Games Services sign-inCompatible Android versions may offer Google Play Games Services sign-in. Depending on the version and permissions granted, processing may include the player identifier, player name and technical authentication information, including codes or tokens needed to verify sign-in and link the game profile. Email or other additional profile data is received only where supported by the actual integration and permissions; receiving it is not assumed merely because sign-in is available.
These data are used for sign-in, player identification and linked features or cloud saves where that connection is implemented. The Company does not receive your Google account password. The Company does not use authentication data for advertising or profiling. Google Play Games does not by itself mean that Firebase Authentication is used: they are separate components, and their use depends on the version.
3 Sources of data3.1. We receive data:
(a) directly from you when you contact us or use features;
(b) automatically from the Game, your device and SDKs actually integrated into the Game;
(c) from Google Play and Unity services as necessary for purchases, cloud features and other active functionality;
(d) from advertising and analytics partners in connection with active integrations.
3.2. We do not ask for passwords to your Google or other third-party accounts.
4 Purposes of processingWe process data for the following purposes:
4.1. Providing and maintaining the Game’s features.
4.2. Writing and retrieving cloud progress.
4.3. Providing purchases, verifying transactions, servicing subscriptions and handling refunds.
4.4. Analyzing usage, identifying technical issues and improving the Game.
4.5. Serving and measuring advertisements, providing advertising rewards and preventing advertising fraud, for versions with the relevant integration.
4.6. Responding to support inquiries and fulfilling user requests.
4.7. Maintaining security, preventing misuse, complying with the law and protecting rights.
4.8. Delivering and managing local and push notifications in versions supporting them, including service information, game events, updates and offers, subject to applicable permissions, consent requirements and your preferences.
Data must not be used for a new, incompatible purpose without the necessary legal basis and advance information where required.
5 Legal bases and consent5.1. Collection and processing take place on the basis of your consent or that of your legal representative where required, or in other circumstances expressly permitted by applicable law.
5.2. In jurisdictions recognizing these grounds, processing may be necessary to perform a contract, comply with a legal obligation or pursue a legitimate interest while respecting your rights.
5.3. Relying on performance of a contract does not mean that all analytics or personalized advertising are necessary to play the Game. Optional processing requires its own legal basis.
5.4. Where consent is required for advertising or analytics technologies, it is requested before the relevant processing. We respect refusal and withdrawal of consent.
5.5. You can manage your preferences through the privacy interface available in the relevant version or by sending a request to info@two7two.com.
5.6. Refusing optional advertising personalization should not automatically disable all core features. However, an individual feature’s availability depends on the data objectively necessary to provide it.
6 Recipients of data 6.1. Active services in the new Android versionGoogle
Google Analytics for Firebase is used for analytics; Google Play is used for payments and purchase support.
Google Privacy Policy:
https://policies.google.com/privacy
How Google uses information from partner applications:
https://policies.google.com/technologies/partner-sites
Unity
Unity Cloud Save stores progress. Unity IAP components participate in purchases.
Processing of purchase events and other data depends on the services actually active and package versions. A developer’s use of Unity Hub or Unity Dashboard does not by itself mean that every Unity service is integrated into the Game.
Unity Game Player and App User Privacy Policy:
https://unity.com/legal/game-player-and-app-user-privacy-policy
6.2. Advertising services we useGoogle AdMob
Google AdMob serves, measures and manages advertisements and processes the advertising data described in Section 2.5.
Google information about advertising technologies:
https://policies.google.com/technologies/ads
Liftoff Monetize (Vungle)
Liftoff Monetize (Vungle) serves and measures advertisements and helps prevent advertising fraud, directly or through mediation. It processes the advertising data described in Section 2.5.
Privacy Policy:
https://www.liftoff.ai/privacy-policy/
Processing depends on the active integration and applicable settings. Required consent is obtained before processing; accepting the User Agreement or this Policy is not consent to personalized advertising.
6.3. Providers’ rolesDepending on the service and agreement, a provider may process data on the Company’s behalf or independently determine certain processing purposes. Its role is determined by the relevant terms and actual processing.
Independent providers are responsible for processing whose purposes and means they determine. To the extent permitted by law, the Company is not liable for their independent acts beyond its reasonable control and does not guarantee uninterrupted availability of third-party services. The Company remains responsible for its own processing and duties concerning processors it engages and integrated SDKs that cannot lawfully be excluded.
6.4. Other recipientsWhere there is a legal basis, data may be disclosed to:
(a) contractors providing support, security and infrastructure services;
(b) advisers who need access to address a particular matter;
(c) public authorities, courts and other authorized persons in circumstances provided by law;
(d) a new operator in connection with a reorganization or transfer of the Game, subject to requirements concerning notice, data protection and necessary consents.
Access is limited to what is necessary for the relevant purpose.
7 Advertising preferences7.1. Depending on the settings, advertisements may be personalized, non-personalized or limited.
7.2. Non-personalized advertising does not necessarily mean that no data is processed. Technical information may be needed for delivery, frequency capping, security and measurement.
7.3. You can manage the advertising identifier through Android settings. Section names depend on the device and operating system version.
7.4. Changing the advertising identifier does not necessarily delete previously transmitted information or stop processing of other identifiers. You may send a deletion request to the Company and the relevant independent controller.
7.5. If your region requires a separate opt-out from the sale of data, sharing for cross-context behavioral advertising or other targeted advertising, you will be provided with the choices required by law.
8 International processing and storage8.1. The Company uses international technology services. The Company and providers may process data in different countries.
8.2. Server and recipient locations depend on the particular service, project settings and provider terms. Data may be processed outside your country of residence.
8.3. International transfers take place subject to the grounds and safeguards required by applicable law. These may include contractual safeguards provided by law, a recognized adequate level of protection or separate consent where that mechanism is permissible for the particular transfer.
8.4. Using the Game does not by itself constitute unconditional consent to transfer any data to any country.
8.5. Local data storage requirements and cross-border transfer requirements apply independently. Consent to a transfer does not override mandatory storage requirements.
8.6. You may request information about relevant recipients, processing countries and safeguards at info@two7two.com within the scope of your statutory rights.
9 Retention9.1. Data is retained no longer than necessary for the disclosed purposes unless a longer period is required by law or justified by a lawful basis.
9.2. Retention periods are determined by considering:
(a) the duration of the relevant feature or service;
(b) the need to preserve progress at the player’s request;
(c) periods for handling requests and resolving disputes;
(d) mandatory retention periods for transaction records;
(e) the need to prevent fraud and maintain security;
(f) retention settings in the services actually used.
9.3. Cloud saves are retained to provide progress restoration until that purpose ends or the data is deleted following a valid request, unless there is a lawful basis for further retention.
9.4. Analytics information is retained according to the selected service settings and the time necessary for statistical purposes. The specific current periods and criteria used to determine them are available on request.
9.5. Data that must be retained by law or for a particular dispute may not be deleted immediately. Access and further use are limited to the relevant legal basis.
9.6. Uninstalling the Game does not automatically delete cloud progress, purchase data or previously transmitted information.
9.7. Deleting or resetting progress through a game control affects only the save data covered by that control. It does not by itself constitute a request to delete the game profile and all associated personal data. To make that broader request, follow Section 11.
10 Data security10.1. The Company applies organizational and technical security measures proportionate to the risks, restricts access and takes account of the security requirements of the services used.
10.2. No method of transmission or storage is absolutely secure. We do not promise that no incident will ever occur and do not disclaim our statutory duties to prevent and handle incidents.
10.3. In the event of an incident, applicable requirements concerning impact assessment, remediation and notification of users and authorities will be followed.
11 Your rights11.1. Depending on applicable law, you may have the right to:
(a) learn what data about you is processed, for what purposes and to whom it is disclosed;
(b) access your data and obtain a copy;
(c) request correction of inaccurate information;
(d) withdraw consent;
(e) request restriction, blocking or deletion of data;
(f) object to certain processing;
(g) receive data for portability where provided by law;
(h) opt out of certain advertising or data disclosures;
(i) contact a competent authority or court.
11.2. To make a request, email info@two7two.com. Specify the right you wish to exercise and information allowing us to locate the relevant data, such as a player or application identifier if available to you.
11.3. We may request proportionate verification of identity or authority where needed to protect data. Do not send a passport or other documents before receiving a justified request.
11.4. We respond within the applicable statutory period. If we cannot fulfill a request completely, we explain the grounds for the limitation and available appeal options where required.
11.5. Requests may concern data held by processors we engage. We do not limit our responsibilities to information physically located on our own servers.
11.6. If a provider is independently responsible for particular processing, you may also contact it using the details in its privacy policy.
11.7. Deleting saves and deleting your profile are separate actions. If you only want to reset progress, state this expressly. To request deletion of your game profile and associated personal data, email info@two7two.com with the subject “Reprobates — profile and data deletion”. Include your player identifier, if available, and information reasonably needed to locate the profile. You do not need to provide a reason. Do not send your Google password or full payment card details.
11.8. Following any proportionate identity verification, we assess the request across the services actually used for your profile. This includes the game profile in Unity Authentication, associated Unity Cloud Save data and other identifiable game data for which we are responsible, including analytics, diagnostic and advertising data to the extent it can be linked to you and is subject to deletion. We delete relevant data within our control and instruct or request processors we engage to delete associated data as applicable. Deleting a save alone, or deleting the authentication profile alone, does not establish completion of this process.
11.9. We explain any data retained under Section 9.5, the reason for retention and the applicable period or criteria. Retained data is restricted to the permitted purpose. We inform you of the outcome and any material limits to the deletion completed. Information that has been irreversibly anonymized so that it no longer identifies you is not personal data.
11.10. A request to delete your game profile does not delete your Google account or automatically erase records held by Google Play or another provider acting independently under its own legal obligations. Where a separate request to an independent provider is needed, we explain the relevant route without limiting our own duties. Deleting a profile or save does not automatically cancel an active Google Play subscription; manage cancellation through Google Play.
11.11. Deleting the profile and its associated saves can prevent restoration of progress and access to features dependent on that profile. These consequences do not remove statutory purchase or refund rights. If you subsequently use the Game, the Game may create a new profile and process new data in accordance with this Policy and the applicable settings and legal bases.
12 Additional regional information 12.1. European Economic Area and United KingdomWhere the GDPR or UK GDPR applies, you have the rights provided by those laws, including access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
The Company does not treat silence, inactivity or merely reading this Policy as consent where freely given, specific consent expressed through affirmative action is required.
You may contact a competent data protection authority.
The former publisher Freeplay’s representatives are not representatives of the Company, and their contact details are not the Company’s representative contact details.
12.2. California and other United States statesIf state privacy legislation applies to the relevant processing, you may have rights to information, access, correction, deletion, portability and opting out of certain disclosures or uses.
Disclosure for cross-context behavioral advertising may be regulated as “sharing” even when data is not sold for money. The absence of a monetary sale does not by itself mean that there is no right to opt out.
Valid requests are handled without unlawful discrimination. An authorized agent may act within verified authority.
13 Minors13.1. The Game is intended for users aged 16 or older, subject to stricter regional restrictions.
13.2. For users below the age at which they may independently consent to a particular type of processing, any necessary consent must be given by their legal representative.
13.3. The age for independently consenting to data processing may differ from the Game’s age rating and the age of majority.
13.4. Applicable restrictions on advertising personalization and SDK use are taken into account for minors. Acceptance of the Terms of Use does not replace any required consent from a legal representative.
13.5. If you believe that data has been obtained from a user below the permitted age or without necessary consent, contact info@two7two.com so that we can investigate and take measures required by law.
14 Differences between Game versions14.1. The new Android build described in this Policy has disabled the previous MAX, Facebook, AppMetrica, AppsFlyer, Amplitude, GameAnalytics and FlyAnalytics integrations and previous server integrations.
14.2. Disabling them in the new build does not mean that they are absent from older installed versions, have stopped retaining previously received information or have automatically deleted it.
14.3. When using an older version, its actual components and previously provided notices must be taken into account. You may request information about processing for which the Company is responsible regardless of the version you use.
14.4. Adding recipients, expanding data categories or changing purposes is accompanied by the necessary updates to notices, settings and consents before the relevant processing begins.
15 Reference links to other servicesThe directory below is retained for information about services used by the former publisher or that may be considered for future integrations.
A link does not mean that the service is integrated into the new version, receives your data or is authorized to start processing it. Actual recipients are determined by active integrations and notices for the relevant version.
AB180 / Airflux: https://ab180.notion.site/airflux-privacy-en
AdInMo: https://www.adinmo.com/privacy-policy/
Adverty: https://adverty.com/privacy-policy-2021
Anzu: https://www.anzu.io/privacy-policy
AppLovin: https://www.applovin.com/privacy/
AppsFlyer: https://www.appsflyer.com/privacy-policy/
Audiomob: https://audiomob.com/privacy-policy
Bigo: https://www.bigossp.com/agreement/privacyPolicy
Pangle: https://www.pangleglobal.com/privacy
Chartboost: https://docs.chartboost.com/en/legal/privacy-policy/
Digital Turbine: https://www.digitalturbine.com/privacy-policy/
Meta: https://www.facebook.com/privacy/explanation
Gadsme: https://www.gadsme.com/privacy-policy
GameAnalytics: https://gameanalytics.com/privacy/
Google: https://policies.google.com/privacy
InMobi: https://www.inmobi.com/privacy-policy/
Unity, including information about relevant ironSource products: https://unity.com/legal/game-player-and-app-user-privacy-policy
Liftoff: https://www.liftoff.ai/privacy-policy/
Mintegral: https://www.mintegral.com/en/privacy
MobileFuse: https://mobilefuse.com/privacy-policy
Ogury: https://ogury.com/ogury-advertising-privacy-policy/
PubMatic: https://pubmatic.com/legal/privacy-policy/
Rollbar: https://docs.rollbar.com/docs/privacy-policy
Smaato: https://www.smaato.com/privacy/
Odeeo: https://odeeo.io/privacy-policy
Tapjoy: https://www.tapjoy.com/legal/general/privacy-policy/
Unity: https://unity3d.com/legal/privacy-policy
Vungle, whose services are represented in Liftoff products: https://vungle.com/privacy/
External resource content and addresses are determined by the respective providers. These links do not replace disclosure of specific purposes and data categories when a service is actually integrated.
16 Changes to this Policy16.1. The Company updates this Policy when data processing, services or applicable requirements change.
16.2. A revised version is published with its effective date. Material changes are communicated through the Game or another suitable channel where required.
16.3. If a change requires new consent, that consent is requested before the relevant processing begins. A revised Policy does not make previous processing lawful where the necessary legal basis was absent.
17 Contact detailsQuestions about data, correction and deletion requests, consent withdrawals and privacy inquiries should be sent to:
Limited Liability Partnership “272 STUDIO (272 STUDIO)”
Email: info@two7two.com.