Grimshroud Privacy Policy

Information we process

Grimshroud stores gameplay progress and settings locally. Our backend service providers process an account identifier, entitlement and purchase-verification records, subscription state, feature-rollout assignment, feedback, account-deletion requests, and minimal first-party closed-test telemetry. Telemetry is limited to a fixed list of gameplay events (session start and end, an unclean previous session, prologue and starter-weapon steps, expedition starts and outcomes, revives, keep-reward claims, chest openings, summons, and use of the feedback form), the event time, a random id created each time the game starts, the existing pseudonymous account id, the build and whether it is a debug or release build, platform, device model, OS version, the current game screen, and a few game values such as expedition, hero and item ids, rarity, chamber, counts, durations, and outcome categories. It excludes feedback text, email, names, authentication tokens, advertising and device identifiers, arbitrary logs, and stack traces. An optional identity provider processes identity and email only when you link an account. Google Play processes payment details; Grimshroud does not receive full payment-card information.

Advertising

The Android app shows rewarded and interstitial advertising through Google. Google's advertising services may automatically collect and share IP address (which may be used to estimate general location), advertising and app-set identifiers, other applicable device or account identifiers, interactions with ads and the app, and diagnostic or performance information for advertising, measurement, analytics, and fraud prevention. The app does not request Android precise or approximate location permission. It does not integrate a separate third-party gameplay-analytics service; its minimal first-party closed-test telemetry is not used for advertising or cross-app tracking.

Your advertising choices

Before the app initializes advertising services or requests any ad, it refreshes your privacy and consent state and shows any required privacy message. If the consent system does not permit ad requests, ads stay unavailable and gameplay is not blocked. If you decline consent to personalized advertising, Google may still show non-personalized or limited ads, which are not personalized based on your activity. Your consent choice never blocks gameplay and never changes the rewards available to you.

When a privacy-options entry point is required, Settings then Account shows AD PRIVACY CHOICES. That form identifies Google and other participating advertising parties and explains their data use. Android and your Google account also provide system-level controls for advertising identifiers and ad personalization.

You can also buy the optional Ad-Free Pass. Once the purchase is recorded on your device, the app shows no ads and stops requesting them. The app still refreshes your consent state at launch, so AD PRIVACY CHOICES stays available when it is required. Buying the pass is never required to play.

How information is used

We use this information to operate the game, verify purchases, restore paid access, prevent duplicate or fraudulent grants, identify closed-test onboarding breaks, expedition outcomes, unclean sessions and important operation failures, serve and measure advertising subject to the choices above, diagnose crashes and performance problems, provide support, comply with legal obligations, and improve reliability.

Sharing

Information is disclosed only as needed to app-distribution and payment processors, optional identity providers, backend hosting and account-management providers, advertising and measurement providers, consent-management providers, and support or security providers. These providers include Google where it supplies distribution, payment, optional sign-in, advertising, or consent services. They process information under their own terms and privacy policies. We do not sell personal information.

Retention and deletion

You can request deletion in the app or at the public account-deletion page. Gameplay balances and entitlements associated with the account are deleted or revoked. Pseudonymized purchase, fraud-prevention, tax, and accounting records may be retained only as required for legitimate legal and security purposes.

Deletion covers the Grimshroud account data described here. It does not delete information held independently by Google or other platform and advertising providers, which apply their own retention policies and user controls.

Closed-test telemetry is deleted automatically after 90 days, and at once when you delete your account.

Children and security

The game is not directed to children. We use reasonable technical and organizational safeguards, but no system is completely secure.