Privacy Policy

Effective date: March 17, 2026

Holdout ("the App") is a mobile game developed by an independent developer ("we", "us", "our"). This policy explains what data is collected when you use the App and how it is handled.

1. Data We Collect

The App stores game data (your best time, settings, purchases, and preferences) locally on your device.

If you sign in with Google, we store your username, email address, and a unique user identifier in Firebase Firestore to sync your profile across devices. This is the only personal data we store on our servers.

If you do not sign in, an anonymous identifier is created for analytics and crash reporting purposes. This identifier cannot be used to identify you personally.

2. Data Collected by Third Parties

The App uses third-party services that may collect data as described below:

• Google AdMob — serves advertisements within the App. AdMob may collect device identifiers, IP address, ad interaction data, and general location information to deliver personalized or non-personalized ads. See Google's Privacy Policy.
• RevenueCat — processes in-app purchases. RevenueCat receives an anonymous user identifier and transaction data necessary to validate purchases. No personal information is shared. See RevenueCat's Privacy Policy.
• Firebase Authentication — handles sign-in. If you sign in with Google, Firebase receives your Google account information (name, email). See Firebase's Privacy Policy.
• Firebase Analytics — collects anonymous usage data (session count, feature usage, app version) to help us improve the App. No personally identifiable information is collected.
• Firebase Crashlytics — collects crash reports and error logs to help us fix bugs. Reports include device model, OS version, and crash stack traces. No personally identifiable information is included.

3. Advertising & Ad Personalization

AdMob may use device information to serve personalized ads. You can opt out of personalized advertising through your device settings:

• Android: Settings > Google > Ads > Opt out of Ads Personalization
• iOS: Settings > Privacy & Security > Tracking

4. In-App Purchases

Purchases are processed through Google Play (Android) or the App Store (iOS). We do not receive or store your payment information. Purchase records are managed by RevenueCat to enable purchase restoration across devices.

5. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data through the App, please contact us so we can take appropriate action.

6. Your Rights

All Users: You can delete your account and all associated data using the "Delete Account" button in the App's Settings screen. This permanently removes your local data, your Firestore profile, and signs you out. You can also use the App without signing in — no personal data is collected in anonymous mode.

European Economic Area (GDPR): If you are located in the EEA, you have additional rights under the General Data Protection Regulation:

• Right of access — You can request a copy of the data we hold about you.
• Right to rectification — You can request correction of inaccurate data.
• Right to erasure — You can request deletion of your data. Use the "Delete Account" button in Settings, or contact us by email.
• Right to data portability — You can request your data in a machine-readable format.
• Right to object — You can object to processing of your data for analytics or advertising.

Our legal basis for processing your data is: (a) your consent when signing in with Google, (b) our legitimate interest in improving the App via analytics and crash reporting, and (c) contract performance for in-app purchases.

To exercise any of these rights, contact us at theholdoutgame@gmail.com. We will respond within 30 days.

California Residents (CCPA/CPRA): If you are a California resident, you have the right to:

• Know what personal information is collected about you
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information

We do not sell your personal information. AdMob's data collection for ad personalization may constitute "sharing" under CCPA. You can opt out via your device's ad personalization settings described above.

7. How to Delete Your Data

You can delete all your data at any time:

• In the App: Go to Settings > Delete Account. This deletes all local data, removes your profile from our servers (Firebase Firestore), and signs you out.
• By email: Contact theholdoutgame@gmail.com with your request. Include the email address you used to sign in (if applicable). We will delete your data within 30 days.
• By uninstalling: Uninstalling the App removes all locally stored data. If you signed in with Google, your Firestore profile will remain until you request deletion via the methods above.

8. Data Retention

Local game data persists until you uninstall the App, clear its data, or use the Delete Account feature. Server-side data (Firestore profile) is retained until you delete your account. Third-party data retention is governed by their respective privacy policies.

9. Google Play Data Safety

The App's data practices are also declared in the Google Play Data Safety section on our store listing, which provides a standardized summary of what data is collected, shared, and how it is secured.

10. Security

Local game data is stored using standard platform storage mechanisms. Server-side data (Firebase Firestore) is protected by Google's infrastructure security. Data transmitted between the App and Firebase is encrypted in transit using HTTPS/TLS. Third-party services use their own security measures.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance.

12. Contact

If you have questions about this privacy policy or wish to exercise your data rights, contact us at: theholdoutgame@gmail.com