Lootava is a game where you build an underground shelter and fight Core Duels against other players and bots. This policy explains what information the game collects, why, who processes it for us, and how you can delete it.
Short version: we collect what the game needs to run (a player ID, your player name and your saved progress). Gameplay statistics are shared only if you agree. The game shows optional rewarded video ads, and our ad provider uses your device's advertising ID to show and measure them. We do not sell your personal information for money.
Information we collect
| Information | What it is | Why we use it |
|---|---|---|
| Player ID | A random account ID created when you first open the game (a guest account). It is not your name or phone number. | To recognise your account and keep your progress. |
| Player name | The name you choose, shown as Name#1234. | Shown to other players in online matches, on your profile and on the world leaderboard. |
| Leaderboard score | Your trophy count, together with your player name. | To show the public world leaderboard in the game. |
| Game progress | Your shelter, survivors, resources, trophies, items and settings. Stored on your device and backed up to the cloud. | To save your game and restore it on a new device. |
| Linked account | Only if you choose LINK ACCOUNT: an identifier from Unity Player Accounts (sign-in with Google, Apple or email). We never see your password. | To recover your progress if you change phones. |
| Connection data | Your IP address and network data while you play online. | To connect you to an opponent and run the match. |
| Crash and error reports | When the game crashes or hits an error: the technical error message, app version, device model and operating system. No player name. | To find and fix bugs. |
| Feedback emails | Only if you tap FEEDBACK: the email opens in your own mail app with your player name, app version, device model, operating system and recent error messages filled in. You can read or edit it before sending. | To answer you and fix the problem you report. |
| Vault raids | When you save your vault defense: your trap layout, vault level, player name and the Scrap in your shelter. When someone raids you (or you raid someone): who raided whom, when, the result and the Scrap won or lost. | Other players who search for a vault can see your player name, vault level, Scrap and defense, and can raid it. Results are sent to the defending player (“While you were away”, INTRUDERS, revenge). |
| Purchases | Only if you buy Cores: which pack you bought, the order number and the time. Payment is handled by Google Play; we never see your card or bank details. | To give you the Cores you paid for, never twice, and to answer support requests about a purchase. |
| Advertising data | When the game starts and when you watch a rewarded video: your device's advertising ID, IP address and approximate location, device model and operating system, and how you interact with ads (shown, completed, clicked). | To show the rewarded video you asked for, give the reward, measure ads and prevent ad fraud. Used by our ad provider (see below). |
| Beta sign-up (website) | Only if you sign up at lootava.com/beta: your email address, phone type (Android / iPhone), and optionally your phone model, how often you play, whether you want launch news, and which link you came from. | To invite you to the test (we add your email to the Google Play or Apple TestFlight tester list) and send testing instructions. Launch news only if you ticked that box. Stored in a private Google Sheet; deleted on request or when the beta ends. |
| Gameplay statistics | Only if you tap YES, SHARE: matches played and results, play time, tutorial progress, shop visits, items unlocked, ads watched, daily gifts claimed, recent game errors, app version, device model, operating system and approximate country (worked out from your IP address). | To find bugs, balance the game and see which features players use. |
We do not collect your precise location, contacts, photos or microphone. We do not ask for your real name; your player name is whatever you choose.
Your choice about gameplay statistics
After you choose your name, the game asks whether you want to share anonymous gameplay data. If you tap NO THANKS, no gameplay statistics are sent. You can change this at any time in the game settings under DATA SHARING.
Services that process data for us
Lootava uses these providers to run the game. They process data on our behalf under their own privacy policies.
- Unity Technologies (Unity Gaming Services): accounts and player names, cloud saves, the leaderboard, crash reports, Unity Player Accounts sign-in, and gameplay statistics when you agree. Unity privacy policy
- Unity Technologies – Unity LevelPlay (ad mediation, including ironSource Ads and Unity Ads): shows the optional rewarded videos. These ad services act as independent companies for the ads they serve and may use your advertising ID to show personalised ads, measure them and prevent fraud. Unity privacy policy
- Google Play: payments for Cores packs (Google Play Billing). Google privacy policy
- Exit Games (Photon): online multiplayer connections. Photon privacy policy
- Google and Cloudflare: when the game starts it asks one of their public web servers for the current time (so the daily gift cannot be claimed twice by changing the phone clock). Only a standard web request is sent, which includes your IP address; no game data.
- Google or Apple: only if you sign in with them through LINK ACCOUNT, under their own policies.
- Google (Google Sheets, Google Play testing) and Apple (TestFlight): beta sign-up emails and tester invitations.
- Cloudflare Web Analytics (website only, not the game): counts visits to lootava.com, such as which pages are viewed, the referring site, browser and approximate country. It uses no cookies and does not identify you or track you across other sites. Cloudflare privacy policy
These providers may store data on servers outside your country, including in the United States and the European Union.
Purchases and ads
Lootava has an in-game premium currency called Cores, used for cosmetic items, the Season Pass, time skips and extra raid attempts (searches and lockpicks). It never buys an advantage in duels. Payments are handled by the app store (Google Play; the App Store when the iPhone version is released). We never receive your card details; we receive only a confirmation of what was bought and its order number.
The game offers optional rewarded videos: you choose to watch one for a small reward, such as a lockpick or Scrap (up to 5 a day). Ads never play on their own and never interrupt a match. The videos are provided through Unity LevelPlay (ironSource Ads and Unity Ads).
Your choices about ads
- If you tap NO THANKS under DATA SHARING, the game tells the ad provider that you have not given consent for personalised ads where the law requires consent (for example in the European Union and the United Kingdom). You may still see ads that are not personalised.
- On Android you can reset or delete your advertising ID at any time in your phone's settings (usually Settings › Privacy › Ads or Settings › Google › Ads). With the ID deleted, ads cannot be personalised with it.
- You can simply never tap WATCH AD. Nothing in the game requires watching ads.
How long we keep data
We keep your account, player name, saved progress, vault and raid history until you delete your account. Gameplay statistics are kept by Unity under its retention rules and are not linked to your player name in our reports.
Delete your account and data
In the game
- Open your shelter and tap your profile badge in the top-right corner.
- Tap DELETE ACCOUNT.
- Type DELETE and tap DELETE FOREVER. You need an internet connection.
This immediately deletes your account, player name, cloud save and the progress stored on your phone. Your vault and raid records are removed from our raid server within 30 days. It cannot be undone.
Without the game
If you no longer have the game installed, email support@lootava.com with the subject “Delete my Lootava account” and your full player name (for example Rex#4821). We will delete the account and its data within 30 days and reply to confirm.
Gameplay statistics already sent cannot be linked back to you after your account is deleted; Unity removes them according to its own rules. Advertising data is held by the ad provider under its own retention rules and is tied to your advertising ID, not to your player name; you can reset that ID in your phone settings. Records of purchases are also kept by Google Play under its rules.
Children
Lootava is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.
Your rights
Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to how it is used, and to opt out of the use of your information for personalised (targeted) advertising. To use these rights, email support@lootava.com. You can also complain to your local data protection authority.
Security
Data sent between the game and our providers is encrypted in transit. No system is perfectly secure, but we use well-known providers and collect only what the game needs.
Changes to this policy
If we change this policy, we will update the effective date above, and for important changes we will tell you in the game.
Contact
BDATLAS LLC · support@lootava.com