Privacy Policy for Lootbeard

Last updated: 14 November 2026

This policy explains what data the mobile game Lootbeard (Android, later iOS) processes, why, and what your rights are. In short: we run no servers of our own. Your progress is stored on your device and, if you like, in your Google (later Apple) account. Data only goes to the providers named below: for reward videos that you start yourself, for purchases, for the cloud save and, only if you switch them on, for play statistics.

1. Who is responsible

Paul Bühler (Plunder Games)
Theodor-Veiel-Str. 66, 70374 Stuttgart, Germany
Email: hello@plundergames.de

We are not required to appoint a data protection officer. For any privacy question, just write to hello@plundergames.de.

2. Game progress and settings on your device

What: game progress, a purchase log (transaction numbers, so no purchase gets lost), settings (language, sound, reminders) and your privacy choices.
Where: only on your device. We have no access to it.
Purpose and legal basis: to make the game work (Art. 6(1)(b) GDPR; storing on the device under § 25(2) no. 2 of the German TDDDG, as it is strictly necessary for the game you asked for).
How long: until you uninstall the app, clear its data, or choose Settings → "Delete all my data".

3. Reward videos (optional, only when you tap)

Lootbeard only shows reward videos that you start yourself. There are no banners and no ads that open on their own. We use Unity LevelPlay with the ad networks ironSource Ads and Unity Ads. All three belong to Unity Technologies (ironSource is a Unity company).

What is processed: your device's advertising ID (Android advertising ID, later the IDFA, only with permission), app set ID, IP address and the approximate location derived from it (country/region), device and system details (model, operating system, language), interactions with the ad (viewed, closed, clicked) and technical diagnostics.

Your choice: before the first video we ask you once ("Your privacy choices"):

• "Allow personalized ads": the networks may tailor ads to your interests. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
• "No thanks": you still get videos, but not personalized ones. The networks then only process the data needed to deliver the video, for billing, frequency capping and fraud prevention. Unity states that it relies on legitimate interest for this (Art. 6(1)(f) GDPR); our legitimate interest is offering the game for free and giving you the reward you asked for.

You can change or withdraw your choice at any time under Settings → Privacy options; it applies from the next ad request. Withdrawal does not affect processing that happened before. You can also reset or delete your advertising ID in your Android settings.

Who is responsible: Unity Technologies processes this data as an independent controller under its Game Player and App User Privacy Policy. Contact: DPO@unity3d.com; EU address: Unity Technologies ApS, Niels Hemmingsens Gade 24, 1153 Copenhagen, Denmark.

With "No ads": if you bought "No ads", the ad SDK is never started, and no data goes to the ad networks.

4. In-game purchases

Purchases go through Google Play (later Apple's App Store). We never see or store payment details such as card or account numbers; the store handles them as an independent controller (Google Privacy Policy, Apple Privacy Policy).

In the game we use Unity In-App Purchasing to handle purchases. When you buy something, Unity receives purchase data (product, price, transaction), device and installation identifiers, device and system details and the country derived from your IP address. Unity acts as our processor (Art. 28 GDPR); according to Unity, it also uses billing data as an independent controller for accounting, security and fraud prevention.

We keep the transaction numbers in your save (device and, if active, cloud) so purchased content is never lost or granted twice.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing fraud (point (f)).

5. Cloud save

Android: if you are signed in to Google Play Games, we also store your progress in your Play Games account ("Saved Games"). Google processes your Play Games player ID, your player profile (name, avatar) and the save file (a small file with your progress and purchase log). Google is an independent controller for the Play Games account (Google Privacy Policy); in the EEA this is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

iOS (once available): your progress is stored in the iCloud key-value store of your Apple ID. Apple is responsible (in the EEA, Apple Distribution International Limited, Ireland).

Legal basis: performance of the contract (Art. 6(1)(b) GDPR): it lets you get your progress back on a new device.
Delete: Settings → "Delete cloud save" (your progress stays on the device). You can delete your whole Play Games profile in your Play Games profile or at myaccount.google.com.

6. Play statistics (optional, off by default)

If you switch on "Play statistics" in the privacy window, we send play statistics to Unity via Unity Analytics: session start and length, game events (e.g. tutorial step done, island cleared, shop opened, purchase completed with product ID, reward video watched), a random installation ID, your IP address (for the approximate country) and device and system details. We only use this to see where the game is too hard or unclear. Without your consent, Unity Analytics is not even started.

• Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
• Recipient: Unity Technologies as our processor.
• Retention: 13 months by default at Unity.
• Withdraw: Settings → Privacy options → switch off.
• Delete: Settings → "Delete my analytics data" (this also switches statistics off).

7. Reminders

If you allow it, the game schedules local notifications on your device (e.g. "Your loot bag is full!"). There is no push server; no data is sent to us or anyone else. Turn them off under Settings → Reminders or in your device's system settings.

8. Error log and "Report a problem"

The game keeps a small error log on your device (time, game version, the last error messages; at most 50 entries). It stays on the device. Only if you tap Settings → "Report a problem" does your email app open with a draft to us that contains the last errors plus your device model, operating system, game language and game progress (stage). You see its content and decide yourself whether to send it.

If you send it (or write to us otherwise), we process your email address, your message and the log to answer you and fix the problem (Art. 6(1)(b) or (f) GDPR). We delete the message once your request is resolved, unless legal retention duties require otherwise. We use an email provider as our processor to send and receive email.

9. Downloading from the store

When you download Lootbeard from Google Play (or later the App Store), the store operator processes data under its own responsibility, for example your account and device data. We have no influence on that.

10. Transfers outside the EU

• Unity Technologies (incl. ironSource) processes data in the US and Israel, among other places. Unity states that it relies on European Commission adequacy decisions (e.g. for Israel) and the Commission's Standard Contractual Clauses. Unity's privacy policy does not mention a certification under the EU-US Data Privacy Framework.
• Google LLC is certified under the EU-US Data Privacy Framework and also uses Standard Contractual Clauses where needed (Google's statement).
• Apple (later, iOS) states that it bases transfers from the EEA on Standard Contractual Clauses.

11. Your choices in the game at a glance

"Delete all my data" does not reset your phone's notification permission or your advertising ID (both are phone settings), nor the installation ID that Unity's services keep on the device; uninstalling the app removes the latter. We cannot delete data that Unity collected as an independent controller during reward videos. Please contact Unity directly for that (DPO@unity3d.com or unity.com/legal), and reset your advertising ID.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)), most easily in Privacy options.

As we have no servers, we usually hold no data about you except emails you send us. Still, feel free to write to hello@plundergames.de; we will also help you with requests to Unity or Google.

You also have the right to lodge a complaint with a data protection supervisory authority, for example in the EU country where you live, or with the authority of the German state where we are based.

13. Notice for users in the United States

When you choose "No thanks" to personalized ads, we also send the networks an opt-out of the "sale" or "sharing" of your personal information under US state privacy laws (e.g. CCPA/CPRA). More from Unity: Do Not Sell or Share.

14. Children

Lootbeard is meant for players aged 13 and over and is not directed at children. We tell the ad networks that the app is not child-directed. We do not knowingly collect data from children under 13. If you believe a child has given us data, write to us and we will delete it.

15. Security

All transfers to the providers named above are encrypted (HTTPS). We do not store player data on servers of our own.

16. Changes

When the game or the law changes, we update this policy. The current version is always at https://plundergames.de/lootbeard/privacy and in the game under Settings → Privacy. If a material change needs new consent, we will ask you again in the game.