Privacy Policy

1. Overview

Welcome to Serra Games ("we," "our," or "us"). We develop and publish interactive games, mobile applications distributed through the Google Play Store, and related web services (collectively, the "Services").

This Privacy Policy explains how we collect, use, protect, disclose, and manage user data when you play our games, install our mobile applications, or interact with our website at https://serra.games. We are committed to protecting your privacy and complying with Google Play Developer Program Policies (including the User Data Policy and Families Policy), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA).

2. Information We Collect

Depending on how you use our Services, we may collect the following categories of information:

A. Information You Voluntarily Provide

• Account Credentials: When you register or join an online game session, you may provide a username, handle, or player identification name, along with authentication credentials or session tokens.
• In-Game Communications: Public or team chat messages, gameplay feedback, or bug reports submitted within the game interface.
• Customer Support Inquiries: Your email address and message contents when you contact our support or feedback channels.

B. Automatically Collected Technical & Device Information

• Device Information: Device model, hardware specifications, operating system version (e.g., Android OS version), screen resolution, preferred language, and system architecture.
• Graphics & Performance Telemetry: GPU renderer details, WebGPU/OpenGL compatibility metrics, framerate (FPS), frame render timings, and memory allocation statistics used strictly to diagnose rendering issues and optimize performance across devices.
• Network & Connection Data: Internet Protocol (IP) address, latency/ping times, packet synchronization stats (dead reckoning drift), and connection timestamps required to establish and maintain real-time multiplayer connections.
• Pseudonymous Identifiers: Internal game session IDs, randomized player identifiers, or Google Play app instance identifiers used to maintain gameplay state between reconnects.

C. Gameplay & Simulation Data

• In-game positions, movement vectors, block modifications, interactions, scores, inventory states, and world achievements necessary to simulate the game world accurately for all participants.

3. What We Do NOT Collect

• No Precise Geolocation: We do not access, track, or request your GPS or precise location data. Connection routing uses standard IP-level country/region determination only.
• No Biometric or Health Information: We do not collect fingerprint, facial recognition, or health data.
• No Financial Card Details: We never store credit card or bank account details. Any in-app purchases or billing transactions are processed directly by the Google Play Store billing platform.
• No Contact Lists or Personal Files: Our games do not read your address book, contacts, camera photos, or personal files.

4. How We Use Information

We process the information we collect for the following legitimate business and operational purposes:

5. Third-Party Services & Google Play

Our Android mobile applications may integrate or interface with Google Play Services to provide core functionality, platform distribution, and security. These third-party services operate under their own respective privacy policies:

• Google Play Services: Used for platform authentication, app integrity verification, and distribution. Review Google's Privacy Policy at https://policies.google.com/privacy.
• Google Play In-App Billing: Used for processing digital content purchases on Android. All transaction processing is securely handled by Google LLC.

We do not integrate third-party targeted advertising networks or data broker trackers into our games.

6. Data Sharing & Disclosure

We do not sell, rent, monetize, or disclose your personal data to third parties, except in the following limited circumstances:

• Infrastructure & Hosting Providers: Trusted cloud infrastructure and dedicated server providers who host our game servers and databases, subject to strict confidentiality and security obligations.
• Safety, Integrity & Legal Compliance: When required by law, subpoena, or legal process, or to prevent imminent fraud, abuse, cyberattacks, or threats to physical safety.
• Business Transfers: In the event of a merger, acquisition, or asset reorganization, any transferred player data remains subject to the commitments in this Privacy Policy.

7. Data Retention

We retain user data only for as long as necessary to fulfill the purposes outlined in this policy:

• Player Accounts & Profiles: Maintained while your account remains active or until you request deletion.
• Gameplay & Transient Network Logs: Diagnostic connection logs and dead-reckoning synchronization buffers are routinely purged or rotated within 30 to 90 days.
• Aggregated Data: Fully anonymized telemetry without personal identifiers may be kept indefinitely for game balance analysis.

8. Account & Data Deletion Instructions

In compliance with Google Play's Account Deletion Policy, we provide all users with a straightforward, accessible method to permanently delete their account and associated data.

What Happens When You Request Deletion:

• Verification: We will verify your ownership of the account (via confirmation response or in-game verification).
• Scope of Deletion: Upon verification, we permanently delete your player record, authentication credentials, profile information, and associated direct identifiers from our active databases within thirty (30) days.
• Backup Cycles: Any residual copies stored in automated disaster recovery backups are securely overwritten according to standard retention schedules.

9. Children's Privacy (COPPA & Google Play Families Policy)

Protecting the privacy of young players is of paramount importance to Serra Games.

• Our general games and services are designed for general audiences and are not directed to children under 13 years of age (or under 16 where required by local law in the EEA).
• We do not knowingly solicit or collect personal information from children under 13 without verifiable parental consent.
• If we become aware that personal data of a child under 13 has been collected without verified parental consent, we will promptly take steps to permanently delete that information from our servers.

Parents or legal guardians who believe their child has provided us with personal information may contact us at contact@serra.games to inspect, modify, or demand the deletion of such data.

10. Your Rights (GDPR & CCPA/CPRA)

Depending on your geographic location, you may have specific statutory privacy rights:

A. European Economic Area (EEA) & United Kingdom (GDPR)

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request permanent deletion of your personal data.
• Right to Restriction & Objection: You may object to or restrict certain data processing activities.
• Right to Data Portability: You can request your data in a structured, commonly used format.

B. California Residents (CCPA & CPRA)

• Right to Know: You have the right to request information about the categories and specific pieces of personal information collected over the past 12 months.
• Right to Delete: You have the right to request deletion of your personal information.
• Right to Correct: You have the right to correct inaccurate personal data.
• Non-Discrimination: We will never discriminate against you, deny services, or alter gameplay features for exercising your privacy rights.
• Sale of Personal Information: We do not sell your personal information, nor do we share it for cross-context behavioral advertising.

11. Data Security

We employ reasonable and industry-standard technical, administrative, and physical security measures to protect player data against unauthorized access, loss, alteration, or disclosure:

• Encryption: Data transmitted between game clients and our servers is encrypted using modern Transport Layer Security (TLS/HTTPS and WSS).
• Access Controls: Server administrative access is strictly restricted through strong authentication and least-privilege principles.
• System Hardening: Game servers undergo regular monitoring, security patching, and isolated container execution.

While we strive to maintain robust defenses, no Internet transmission or electronic storage method can be guaranteed 100% secure.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect new features, updated technologies, or evolving legal requirements. When changes are published:

• We will update the "Last Updated" date at the top of this policy.
• For material changes that impact how we handle personal data, we will provide conspicuous notice through our games, website, or update notes.

Continued use of our Services after changes become effective constitutes acknowledgment and acceptance of the revised policy.

13. Contact Information

If you have any questions, concerns, feedback, or requests regarding this Privacy Policy or our data practices, please contact us: