Privacy Policy

Last updated: 12 May 2026

This Privacy Policy explains how Andre Glegg (“we”, “us”, “our”), a sole developer based in Norway, collects, uses, and shares information when you use the mobile game Endless Descent (the “Game”) and the related website at endlessdescent.andreglegg.no (together, the “Services”).

We are the data controller for the personal data we process about you. If you have questions or want to exercise your rights, contact us at andreglegg@me.com.

1. Information we collect

We try to collect only what we need to run, improve, and monetize the Game. Where possible we use anonymous or pseudonymous identifiers rather than directly identifying you.

Information you provide

• Account information if you sign in with Apple Game Center, Google Play Games, or another sign-in we add later. This typically includes a player ID, a display name or alias, an avatar, and friends/leaderboard relationships handled by the platform.
• Support correspondence if you contact us — your email address and the contents of your message.

Information collected automatically

• Device and technical data: device model, operating system version, language, region, screen size, mobile carrier (where exposed by the OS), generic IP-derived country, and time zone.
• App identifiers: install ID, session ID, app version, and (where applicable and permitted) the advertising identifier (Apple IDFA / Google Advertising ID).
• Gameplay events: level progress, depth reached, runs completed, coins/gems collected, deaths, settings choices, and other in-game actions that help us tune difficulty and fix bugs.
• Crash and performance data: stack traces, error logs, frame-rate samples, memory usage, and device state at the time of a crash.
• Purchase records: a record that a specific transaction occurred, the product purchased, and the receipt token used to validate the purchase. We do not receive your full payment card details — payments are handled by Apple or Google.

Information from third parties

• From Apple and Google: validation responses for in-app purchases and subscription state.
• From Game Center / Play Games: the player ID, friend relationships, and aggregated achievement data you choose to share through those platforms.
• From our analytics and ad partners: aggregated reports on installs, engagement, and ad performance.

2. How we use information

• To provide, operate, and maintain the Game.
• To save your progress, settings, and unlocks across devices.
• To support multiplayer features, friends lists, and leaderboards.
• To process in-app purchases and prevent purchase fraud.
• To diagnose bugs, crashes, and performance issues.
• To measure how players use the Game so we can balance and improve it.
• To serve ads, including (where you consent on iOS) personalized ads.
• To detect cheating, abuse, and violations of our Terms.
• To respond to your questions and provide support.
• To comply with legal obligations and enforce our rights.

3. Legal bases (EEA / UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to deliver the Game, save your progress, and process purchases.
• Legitimate interests — to keep the Game working, improve it, prevent abuse and fraud, run aggregate analytics, and serve non-personalized advertising. We balance these against your rights.
• Consent — for personalized advertising on iOS (App Tracking Transparency prompt) and for any optional features that require it. You can withdraw consent at any time.
• Legal obligation — to comply with tax, consumer protection, and other laws.

4. How we share information

We do not sell your personal information. We share data only:

• With service providers who process data on our behalf (analytics, crash reporting, cloud hosting, ad serving, customer support). They are contractually limited to the purposes we specify.
• With Apple and Google to authenticate players, process payments, validate receipts, and surface achievements / leaderboards.
• With law enforcement or other authorities when we are required by law, or to protect the rights, property, or safety of users, us, or others.
• With a successor in the event of a merger, acquisition, or sale of assets. You will be notified before your data becomes subject to a different privacy policy.

5. Third-party services

We use third-party SDKs and services to operate the Game. The categories below describe what they do; the specific providers may change as the Game evolves, and the current list will always be reflected in the Apple App Store “App Privacy” section and the Google Play “Data Safety” section.

• Platform services: Apple Game Center, Apple In-App Purchase, Google Play Games Services, Google Play Billing.
• Analytics: aggregated gameplay and product analytics to understand how players progress and where they get stuck.
• Crash and performance reporting: stack traces and device state at the time of a crash, used only to fix bugs.
• Advertising: mobile ad networks such as Google AdMob, which may use the advertising identifier to deliver and measure ads. See “Advertising and tracking” below.
• Hosting: static website hosting for endlessdescent.andreglegg.no (GitHub Pages, served via Fastly) and DNS (Cloudflare).

Each of these providers has its own privacy practices, which we encourage you to review. We will keep this section up to date as we add or remove partners.

6. Advertising and tracking

The Game may show banner, interstitial, or rewarded ads provided by mobile ad networks. Ads may be either personalized (based on the advertising identifier and aggregated interest signals) or non-personalized (contextual only).

• iOS: we will only enable tracking-based personalized ads if you allow tracking when prompted by the App Tracking Transparency system. You can change this at any time in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in Settings → Google → Ads. We honor “Opt out of Ads Personalization.”
• We do not use cross-app advertising for users we know to be under 13.

7. In-app purchases

The Game may offer in-app purchases (for example, cosmetics, a no-ads option, or other optional content). Purchases are processed by Apple or Google through their respective in-app purchase systems. We receive a record that the purchase occurred, the product identifier, and a receipt token used to validate and restore your purchase — we do not receive your credit card or full billing details.

Refunds are handled by Apple or Google under their own refund policies.

8. Accounts and leaderboards

If you sign in with Apple Game Center or Google Play Games, your platform identifier and display name may be associated with your scores, achievements, and (if you choose) friends lists. Public leaderboard entries will display the alias provided by the platform alongside your score. You can control what is shared through your Game Center / Play Games settings.

9. Data retention

We keep personal data only as long as we need it for the purposes described above, or as required by law. Indicative retention periods:

• Account / save data: for as long as your account exists, plus a short grace period after deletion.
• Purchase records: retained for the period required by tax and consumer-protection law (typically several years in Norway and the EU).
• Crash and analytics data: retained in aggregated or pseudonymous form for a limited period, then aggregated or deleted.
• Support correspondence: as long as needed to resolve your request and for a reasonable follow-up period.

10. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (subject to legal retention requirements).
• Restrict or object to certain processing.
• Withdraw consent at any time, where processing relies on consent.
• Receive a copy of your data in a portable format.
• Lodge a complaint with a data protection authority — in Norway, this is Datatilsynet.

California residents: we do not “sell” or “share” personal information as those terms are defined by the California Consumer Privacy Act. You still have CCPA rights to know, delete, correct, and not be discriminated against for exercising your rights.

To exercise any of these rights, email andreglegg@me.com. We may need to verify your identity before acting on a request.

11. Account and data deletion

You can request deletion of your in-game data at any time:

1. Email andreglegg@me.com from the account you want deleted, with the subject line “Delete my Endless Descent data”.
2. Include your Game Center or Play Games player ID (or other identifier you used) so we can locate your records.
3. We will confirm receipt and, after any required identity check, delete or anonymize your data within 30 days, except for records we are legally required to retain (for example, purchase records for tax purposes).

Platform-managed data (such as your Game Center / Play Games account) must be deleted through Apple or Google directly.

12. Security

We use commercially reasonable technical and organizational measures to protect personal data against accidental or unlawful loss, alteration, or unauthorized access — including transport encryption (HTTPS), access controls on backend systems, and limiting collection in the first place. No system is perfectly secure; we cannot guarantee absolute security.

13. International transfers

We are based in Norway. Our service providers may process data in the European Economic Area, the United Kingdom, the United States, or other countries. Where we transfer personal data outside the EEA / UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.

14. Children

Endless Descent is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at andreglegg@me.com and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top, and where appropriate we will provide an in-game notice. Your continued use of the Services after changes take effect means you accept the updated policy.

16. Contact

Andre Glegg
Norway
Email: andreglegg@me.com