Privacy Policy for Emberpaw (Android)
Effective Date: October 2, 2026 · Last Updated: October 2, 2026
1. Who we are
Emberpaw (the “Game”) is developed by VibeDeV and published by VIBECORE DIGITAL, Surrey, British Columbia, Canada (“we”, “us”, “our”). VIBECORE DIGITAL is responsible for (the “controller” of) the personal information described here. This policy covers the Android version of Emberpaw from Google Play. The same game is published on the App Store and has its own policy.
Contact for every privacy question or request: support@vibecoredigital.com.
2. The short version
- You do not need to give us your name, email address or phone number to play. The Game creates an account for you with a random player ID.
- We keep your village on our servers (through Unity Gaming Services) so it is safe and works across devices, and so colonies, chat, friends and leaderboards can work.
- Before anything optional starts, the Game asks for your year of birth. Players under 13 get a protected mode with no chat and no personalised ads. Nobody under 18 sees personalised ads.
- Ads are optional reward videos from Google AdMob. Adults see personalised ads only if they agree.
- We do not sell your personal information for money.
- You can ask us for a copy of your data, or to delete it, at any time. Uninstalling the Game does not delete the data on our servers: see section 11.
3. Information we collect
3.1 Your account and game data
- Player ID: a random identifier created by Unity Gaming Services Authentication the first time you play (shown in the Game under Settings → Account). A short friend code is derived from it so friends can add you.
- Your save: your village, heroes, items, currencies, progress and settings, stored on your device and copied to our cloud save.
- Server-side game records: your purchase ledger and entitlements, Lantern pull counters, in-game mail, Friendly Challenge defence layout and results, event and leaderboard scores, and anti-cheat checks on your progress.
3.2 Information you share with other players
- Player name, colony name and colony description (free text only for players 13 and older; younger players get a generated name).
- Colony chat messages (players 13 and older; younger players can only send preset emotes).
- Friends, friend requests and blocks, and reports you file about other players.
- Public game details other players can see on your player card and in rankings: player name, Hearth level, profile frame and title, colony, badges, leaderboard and league scores, your Friendly Challenge defence layout, and village snapshots you enter in Showcase contests.
3.3 Age information
The Game asks for your year of birth once (and the month only when it matters), before any optional processing starts. We store the year and the resulting age group on your device and on your account, together with your country. We never store your full date of birth.
3.4 Purchases
Purchases are processed by Google Play Billing. We receive the product, the date, the price and currency, and a transaction reference, which our server checks with Google before delivering the item. Each purchase is tied to your account with a one-way hashed version of your player ID. We use this to deliver what you bought, restore it, handle refunds, apply spending limits for younger players and keep accounting records. We never receive your card or bank details.
3.5 Gameplay statistics and diagnostics
Through Unity Gaming Services Analytics we collect game events (for example tutorial steps, battles, items earned and spent, screens opened, purchases completed), app version, device model and type, operating system, language, performance data (frame rate, load times) and error reports. Your country or region is derived from your IP address at a coarse level. Events never contain chat text or other free text. You can turn off optional statistics in Settings → Privacy → Share gameplay stats; events needed to run the Game, process purchases and prevent fraud continue.
3.6 Advertising
When you choose to watch an optional reward video, Google AdMob collects your advertising ID and app set ID, your approximate location derived from your IP address, ad interactions and device diagnostics, in order to serve and measure the ad and prevent ad fraud. See section 6 for how this changes with age and consent.
3.7 Messages to support
If you email us, we receive your email address and whatever you write, and use them to answer you.
3.8 What we do not collect
- Your real name, postal address or phone number (unless you put them in an email to us)
- Precise (GPS) location. The Game does not ask for location permission
- Contacts, photos, files, camera or microphone
- Payment card or bank details
The Game does not send push notifications at present.
3.9 How this maps to Google Play’s Data safety categories
| Data safety category | Collected | Shared | Why |
|---|---|---|---|
| Device or other IDs | Yes | Yes (Google) | Advertising, analytics, fraud prevention, account |
| Location: approximate | Yes (IP-derived) | Yes (Google) | Advertising, analytics, local rules and prices |
| App activity: app interactions, in-app messages (chat), other user-generated content (names) | Yes | Interactions: yes (Google, for ads) | App functionality, analytics, advertising, safety |
| App info and performance: diagnostics, crash logs | Yes | Diagnostics: yes (Google, for ads) | Analytics, app functionality |
| Financial info: purchase history | Yes | No | App functionality, accounting |
| Personal info: other info (year of birth, age group) | Yes | No | App functionality, legal compliance |
4. How we use information, and our legal bases
Where the EU or UK GDPR applies, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Run the Game: your account, cloud save, purchases, colonies, chat, friends, events and leaderboards | Performance of our contract with you (the Terms of Service) |
| Security, fraud and cheat prevention, enforcing our rules, moderating chat and names | Legitimate interests (a safe and fair game); legal obligations |
| Gameplay statistics to fix problems and improve the Game | Legitimate interests; you can switch optional statistics off in Settings |
| Non-personalised reward videos | Legitimate interests (funding a free game); consent where the law requires it for ad storage on your device |
| Personalised ads (adults only) | Your consent, which you can withdraw at any time |
| Age assurance, protections for younger players, spending limits, tax and accounting records, answering lawful requests | Legal obligations |
We do not use your age, spending, losses or time of day to target offers, and the same product costs the same for everyone in the same store and country.
5. Younger players
Emberpaw is a general-audience game made for teens and adults and is not directed to children. Because younger players may still find it, every new player answers a neutral year-of-birth question before any optional processing starts. The answer cannot be retried, and it only becomes less strict as time passes.
| Under 13 | 13 to 17 | 18 and over | |
|---|---|---|---|
| Chat and free-text names | Off (preset emotes and generated names only) | On, filtered (strict filter for 13 to 15) | On, filtered |
| Ads | Optional reward videos, child-directed and non-personalised | Optional reward videos, non-personalised | Personalised only with consent |
| Gameplay statistics | Only what is needed to run the Game | Core statistics | Core statistics |
| Monthly spending limit (enforced on our server) | US$30, at most US$9.99 per purchase | US$50 (13 to 15) or US$100 (16 to 17) | None |
For players under 13 we collect only what is needed to run and secure the Game (the player ID, the save, purchase records and technical data), which US law (COPPA) calls “support for internal operations”. We do not build a profile of a child, show them behavioural advertising or contact them. A parent or guardian can ask us to review or delete a child’s data by emailing support@vibecoredigital.com with the child’s Player ID.
6. Advertising and your consent choices
- Emberpaw only shows optional reward videos. There are no banner or forced full-screen ads.
- In the EEA, the UK and Switzerland, Google’s consent form (Google User Messaging Platform, IAB TCF v2.2) appears on first launch for adult players. US players can see a US state privacy message. You can change your choice at any time in Settings → Privacy → Privacy choices (shown where the form applies).
- If you decline, or if you are under 18, ads are non-personalised. Players under 13 receive child-directed ad requests with a family-friendly content rating.
- You can also reset or delete your advertising ID in Android Settings → Privacy → Ads.
7. Who we share information with
- Unity Technologies (Unity Gaming Services), which runs our accounts, cloud save, server logic, remote settings, leaderboards and analytics on our behalf as a service provider.
- Google: Google AdMob and the User Messaging Platform for ads and consent, and Google Play for purchases and refunds. Google uses ad data as described in its own policies (How Google uses information from sites or apps that use its services).
- Other players see what section 3.2 lists.
- Authorities, when the law requires it or to protect someone’s safety (for example a report about a child in danger).
- A successor, if VIBECORE DIGITAL is involved in a merger, acquisition or sale; this policy keeps applying to your information.
We do not sell personal information for money. For adults who allow personalised ads, letting Google use the advertising ID may count as “selling” or “sharing” for targeted advertising under some US state laws; you can opt out at any time as described in section 6. We do not sell or share the personal information of anyone under 18 for targeted advertising.
8. International transfers
We are based in Canada, and our service providers may process information in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses or the UK International Data Transfer Addendum.
9. How long we keep information
| Information | Kept for |
|---|---|
| Account, save, profile, friends, colony membership | While your account exists; deleted within 30 days of a verified deletion request |
| Chat messages | Target: 30 days (reported messages up to 180 days for moderation) |
| Detailed gameplay events | Target: 13 months, then only statistics with no player ID |
| Moderation decisions about an account | Up to 2 years |
| Purchase records (minimal fields, hashed references) | 7 years, for tax and accounting law |
| Support emails | Up to 2 years after the conversation ends |
10. Your rights
Depending on where you live, you may have the right to:
- know what information we hold about you and get a copy (access and portability);
- correct it, delete it, or restrict or object to how we use it;
- withdraw consent at any time (this does not affect processing that already happened);
- opt out of the “sale” or “sharing” of personal information and of targeted advertising (US states such as California, Virginia, Colorado, Connecticut, Utah, Texas and Oregon);
- not be treated differently for using these rights;
- appeal our answer, and complain to your data protection authority (for example your EU/UK supervisory authority, Brazil’s ANPD under the LGPD, or the Office of the Privacy Commissioner of Canada / of British Columbia).
To use any right, email support@vibecoredigital.com and include your Player ID (Settings → Account). Because we do not know your name or email address, we may ask you to complete a small step inside the Game to prove the account is yours. We answer within 30 days (45 days where US state law allows, and we tell you if we need longer). If we refuse a request, you can appeal by replying to our answer; we respond to appeals within the time the law sets.
11. Deleting your account and data
Uninstalling Emberpaw removes the Game from your device but does not delete your account or the data on our servers. To delete them, use Settings → Account → Delete account in the Game or email us. The full steps, what is deleted and what we must keep, are on our account deletion page.
12. Security
Information is encrypted in transit. Purchases and everything involving other players are checked on our server, your age answer is kept in encrypted storage on your device (Android Keystore), and we use random IDs instead of names. No system is perfectly secure; if a breach affects you, we will tell you and the authorities where the law requires it.
13. Changes to this policy
We may update this policy. We will change the “Last Updated” date above and, for important changes, tell you in the Game before they take effect.
Contact Us
Email: support@vibecoredigital.com
Developer: VibeDeV · Publisher: VIBECORE DIGITAL, Surrey, British Columbia, Canada