Privacy Policy for Emberpaw (iOS)
Effective Date: October 2, 2026 · Last Updated: October 2, 2026
1. Who we are
Emberpaw (the “Game”) is developed by VibeDeV and published by VIBECORE DIGITAL, Surrey, British Columbia, Canada (“we”, “us”, “our”). VIBECORE DIGITAL is responsible for (the “controller” of) the personal information described here. This policy covers the iPhone version of Emberpaw from the App Store. The same game is published on Google Play and has its own policy.
Contact for every privacy question or request: support@vibecoredigital.com.
2. The short version
- You do not need to give us your name, email address or phone number to play. The Game creates an account for you with a random player ID.
- We keep your village on our servers (through Unity Gaming Services) so it is safe and works across devices, and so colonies, chat, friends and leaderboards can work.
- Before anything optional starts, the Game asks for your year of birth. Players under 13 get a protected mode with no chat and no personalised ads. Nobody under 18 sees personalised ads or the tracking prompt.
- Ads are optional reward videos from Google AdMob. Adults see personalised ads only if they agree, and the Game only asks Apple’s permission to track adults.
- We do not sell your personal information for money.
- You can ask us for a copy of your data, or to delete it, at any time. Deleting the app does not delete the data on our servers: see section 11.
3. Information we collect
3.1 Your account and game data
- Player ID: a random identifier created by Unity Gaming Services Authentication the first time you play (shown in the Game under Settings → Account). A short friend code is derived from it so friends can add you.
- Your save: your village, heroes, items, currencies, progress and settings, stored on your device and copied to our cloud save.
- Server-side game records: your purchase ledger and entitlements, Lantern pull counters, in-game mail, Friendly Challenge defence layout and results, event and leaderboard scores, and anti-cheat checks on your progress.
3.2 Information you share with other players
- Player name, colony name and colony description (free text only for players 13 and older; younger players get a generated name).
- Colony chat messages (players 13 and older; younger players can only send preset emotes).
- Friends, friend requests and blocks, and reports you file about other players.
- Public game details other players can see on your player card and in rankings: player name, Hearth level, profile frame and title, colony, badges, leaderboard and league scores, your Friendly Challenge defence layout, and village snapshots you enter in Showcase contests.
3.3 Age information
The Game asks for your year of birth once (and the month only when it matters), before any optional processing starts. We store the year and the resulting age group on your device (in the iOS keychain) and on your account, together with your country. We never store your full date of birth.
3.4 Purchases
Purchases are processed by Apple through the App Store. We receive the product, the date, the price and currency, and a transaction reference, which our server checks with Apple before delivering the item. Each purchase is tied to your account with a one-way hashed version of your player ID. We use this to deliver what you bought, restore it, handle refunds, apply spending limits for younger players and keep accounting records. We never receive your card or bank details.
3.5 Gameplay statistics and diagnostics
Through Unity Gaming Services Analytics we collect game events (for example tutorial steps, battles, items earned and spent, screens opened, purchases completed), app version, device model and type, operating system, language, performance data (frame rate, load times) and error reports. Your country or region is derived from your IP address at a coarse level. Events never contain chat text or other free text. You can turn off optional statistics in Settings → Privacy → Share gameplay stats; events needed to run the Game, process purchases and prevent fraud continue.
3.6 Advertising and tracking
When you choose to watch an optional reward video, Google AdMob collects device information, ad interactions and your approximate location derived from your IP address, in order to serve and measure the ad and prevent ad fraud. AdMob receives your advertising identifier (IDFA) only if you are an adult and allow tracking in Apple’s App Tracking Transparency prompt (see section 6). Otherwise the IDFA is not available to the Game or to AdMob.
3.7 Messages to support
If you email us, we receive your email address and whatever you write, and use them to answer you.
3.8 What we do not collect
- Your real name, postal address or phone number (unless you put them in an email to us)
- Precise (GPS) location. The Game does not ask for location permission
- Contacts, photos, files, camera or microphone
- Payment card or bank details
The Game does not send push notifications at present.
3.9 How this maps to Apple’s App Privacy labels
| App Privacy data type | Linked to you | Used to track you | Purposes |
|---|---|---|---|
| Identifiers: user ID (player ID) | Yes | No | App functionality, analytics |
| Identifiers: device ID (IDFA) | Yes | Yes, adults who allow tracking only | Third-party advertising |
| Purchases: purchase history | Yes | No | App functionality |
| Location: coarse location | Yes | Adults who allow tracking only | Third-party advertising, analytics |
| User content: other user content (chat, names) | Yes | No | App functionality |
| Usage data: product interaction, advertising data | Yes | Advertising data: adults who allow tracking only | Analytics, third-party advertising, app functionality |
| Diagnostics: performance and other diagnostic data | Yes | No | Analytics, app functionality |
| Other data: year of birth / age group | Yes | No | App functionality |
4. How we use information, and our legal bases
Where the EU or UK GDPR applies, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Run the Game: your account, cloud save, purchases, colonies, chat, friends, events and leaderboards | Performance of our contract with you (the Terms of Service) |
| Security, fraud and cheat prevention, enforcing our rules, moderating chat and names | Legitimate interests (a safe and fair game); legal obligations |
| Gameplay statistics to fix problems and improve the Game | Legitimate interests; you can switch optional statistics off in Settings |
| Non-personalised reward videos | Legitimate interests (funding a free game); consent where the law requires it for ad storage on your device |
| Personalised ads and tracking (adults only) | Your consent (the in-game consent form and Apple’s tracking prompt), which you can withdraw at any time |
| Age assurance, protections for younger players, spending limits, tax and accounting records, answering lawful requests | Legal obligations |
We do not use your age, spending, losses or time of day to target offers, and the same product costs the same for everyone in the same store and country.
5. Younger players
Emberpaw is a general-audience game made for teens and adults and is not directed to children. Because younger players may still find it, every new player answers a neutral year-of-birth question before any optional processing starts. The answer cannot be retried, and it only becomes less strict as time passes.
| Under 13 | 13 to 17 | 18 and over | |
|---|---|---|---|
| Chat and free-text names | Off (preset emotes and generated names only) | On, filtered (strict filter for 13 to 15) | On, filtered |
| Ads | Optional reward videos, child-directed and non-personalised | Optional reward videos, non-personalised | Personalised only with consent |
| Apple tracking prompt | Never | Never | From the third session, after our explanation |
| Gameplay statistics | Only what is needed to run the Game | Core statistics | Core statistics |
| Monthly spending limit (enforced on our server, on top of Ask to Buy) | US$30, at most US$9.99 per purchase | US$50 (13 to 15) or US$100 (16 to 17) | None |
For players under 13 we collect only what is needed to run and secure the Game (the player ID, the save, purchase records and technical data), which US law (COPPA) calls “support for internal operations”. We do not build a profile of a child, show them behavioural advertising or contact them. A parent or guardian can ask us to review or delete a child’s data by emailing support@vibecoredigital.com with the child’s Player ID.
6. Advertising, tracking and your consent choices
- Emberpaw only shows optional reward videos. There are no banner or forced full-screen ads.
- In the EEA, the UK and Switzerland, Google’s consent form (Google User Messaging Platform, IAB TCF v2.2) appears on first launch for adult players. US players can see a US state privacy message. You can change your choice at any time in Settings → Privacy → Privacy choices (shown where the form applies).
- App Tracking Transparency: only adult players are asked, and not before their third session, after a short explanation from us. If you choose “Ask App Not to Track”, the IDFA is never read. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
- If you decline, or if you are under 18, ads are non-personalised. Players under 13 receive child-directed ad requests with a family-friendly content rating.
7. Who we share information with
- Unity Technologies (Unity Gaming Services), which runs our accounts, cloud save, server logic, remote settings, leaderboards and analytics on our behalf as a service provider.
- Google: Google AdMob and the User Messaging Platform for ads and consent. Google uses ad data as described in its own policies (How Google uses information from sites or apps that use its services).
- Apple, which processes App Store purchases and refunds.
- Other players see what section 3.2 lists.
- Authorities, when the law requires it or to protect someone’s safety (for example a report about a child in danger).
- A successor, if VIBECORE DIGITAL is involved in a merger, acquisition or sale; this policy keeps applying to your information.
We do not sell personal information for money. For adults who allow personalised ads and tracking, letting Google use the IDFA may count as “selling” or “sharing” for targeted advertising under some US state laws; you can opt out at any time as described in section 6. We do not sell or share the personal information of anyone under 18 for targeted advertising.
8. International transfers
We are based in Canada, and our service providers may process information in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses or the UK International Data Transfer Addendum.
9. How long we keep information
| Information | Kept for |
|---|---|
| Account, save, profile, friends, colony membership | While your account exists; deleted within 30 days of a verified deletion request |
| Chat messages | Target: 30 days (reported messages up to 180 days for moderation) |
| Detailed gameplay events | Target: 13 months, then only statistics with no player ID |
| Moderation decisions about an account | Up to 2 years |
| Purchase records (minimal fields, hashed references) | 7 years, for tax and accounting law |
| Support emails | Up to 2 years after the conversation ends |
10. Your rights
Depending on where you live, you may have the right to:
- know what information we hold about you and get a copy (access and portability);
- correct it, delete it, or restrict or object to how we use it;
- withdraw consent at any time (this does not affect processing that already happened);
- opt out of the “sale” or “sharing” of personal information and of targeted advertising (US states such as California, Virginia, Colorado, Connecticut, Utah, Texas and Oregon);
- not be treated differently for using these rights;
- appeal our answer, and complain to your data protection authority (for example your EU/UK supervisory authority, Brazil’s ANPD under the LGPD, or the Office of the Privacy Commissioner of Canada / of British Columbia).
To use any right, email support@vibecoredigital.com and include your Player ID (Settings → Account). Because we do not know your name or email address, we may ask you to complete a small step inside the Game to prove the account is yours. We answer within 30 days (45 days where US state law allows, and we tell you if we need longer). If we refuse a request, you can appeal by replying to our answer; we respond to appeals within the time the law sets.
11. Deleting your account and data
Deleting the Emberpaw app removes it from your iPhone but does not delete your account or the data on our servers. To delete them, use Settings → Account → Delete account in the Game or email us. The full steps, what is deleted and what we must keep, are on our account deletion page.
12. Security
Information is encrypted in transit. Purchases and everything involving other players are checked on our server, your age answer is kept in the iOS keychain, and we use random IDs instead of names. No system is perfectly secure; if a breach affects you, we will tell you and the authorities where the law requires it.
13. Changes to this policy
We may update this policy. We will change the “Last Updated” date above and, for important changes, tell you in the Game before they take effect.
Contact Us
Email: support@vibecoredigital.com
Developer: VibeDeV · Publisher: VIBECORE DIGITAL, Surrey, British Columbia, Canada