Gravity Box privacy policy

Effective October 8, 2026

This policy explains what data the Android game Gravity Box (package ro.luca1152.gravitybox) collects, why, and the choices you have. Gravity Box is made by Tiny Details (“we”, “us”).

In short: you don’t create an account, and we never ask for your name, email, contacts, photos or precise location. The game shows ads and uses a few Google services that collect technical data about your device and how you play. That data is described below.

This policy covers Gravity Box 1.6 and later. Earlier versions are covered by the previous privacy policy.

Data that stays on your device

Your progress, settings, and whether you bought “remove ads” are saved only on your device. We don’t receive them. Android may include them in your device backup, which is handled by Google under your Google account.

Data collected by the services in the game

Ads: Google AdMob

Gravity Box shows ads through Google AdMob. Buying “remove ads” stops ads from showing, but the Google Mobile Ads SDK still starts with the game. It collects and shares with Google:

• your IP address, which can be used to estimate your approximate location;
• device identifiers, such as the Android advertising ID and app set ID;
• interactions with the game and ads, such as launches, taps and video views;
• diagnostic information, such as load times, hangs and energy use.

This data is used to show and measure ads, for analytics, and to prevent fraud. In the European Economic Area, the UK and Switzerland, the game asks for your consent when you first open it, using Google’s consent form. Your choice decides whether ads can be personalized and whether Google Analytics may use identifiers like the advertising ID. You can change it at any time from Privacy settings in the game’s menu. Learn more in how Google uses information from apps that use its services.

Analytics: Google Analytics for Firebase

We use Google Analytics for Firebase to understand how the game is played. It collects:

• which levels are started, finished and skipped, how long a level took and how many times you’ve finished it, and other app interactions such as sessions;
• in-app purchase events, such as which product was bought and its price;
• an app-instance ID and the Android advertising ID;
• approximate location, derived from a masked IP address.

Crash reports: Firebase Crashlytics

If the game crashes, Firebase Crashlytics sends us a crash report: what went wrong in the code, your device model and Android version, and a random installation ID. We use it only to find and fix bugs.

Online leaderboard: Firebase Authentication and Realtime Database

To keep the shot-count leaderboard working, the game signs in to Firebase anonymously. This creates a random user ID that isn’t linked to your name, email or Google account. Firebase also processes your IP address to prevent abuse. When you finish a level, its shot count is added to a shared total for that level. Scores are stored without any ID, so the leaderboard can’t be traced back to you.

Purchases: Google Play

“Remove ads” purchases are handled by Google Play. We never see your payment details. Google Play’s handling of your purchase is covered by Google’s Privacy Policy.

Why we process this data

• Personalized ads and analytics: your consent in the EEA, the UK and Switzerland. Elsewhere, our legitimate interest in keeping the game free and improving it.
• Non-personalized ads, crash reports, fraud prevention and the leaderboard: our legitimate interest in keeping the game free, working and secure.

How long data is kept

• Analytics: up to 14 months.
• Crash reports: 90 days.
• Ads data: Google keeps it as described in how Google retains data.
• The anonymous leaderboard account: until it’s deleted. It only holds the random ID and when it was last used.
• Leaderboard counts: as long as the leaderboard exists. They aren’t linked to anyone.

Who receives the data

The data above is sent to Google, which provides AdMob and Firebase. Through AdMob, ad data may be shared with Google’s advertising partners as described in Google’s policies. We don’t sell your data, and we don’t share it with anyone else. Google may process data outside your country, including in the United States, under safeguards such as the EU Standard Contractual Clauses. All data is encrypted in transit.

Your choices

• Ads: buy “remove ads” to stop ads. You can reset or delete your advertising ID in Android settings (Settings → Privacy → Ads, or Settings → Google → Ads).
• Consent: in the EEA, the UK and Switzerland, you can accept or refuse in the consent form, and change your choice at any time from Privacy settings in the game’s menu.
• Everything: uninstalling the game stops all collection and deletes the data saved on your device.

Your rights

Depending on where you live (for example under the GDPR or US state privacy laws), you may have the right to access, correct, delete or object to the processing of your data, to withdraw your consent at any time (from Privacy settings in the game), and to complain to your data protection authority. Because we only receive data linked to random IDs, we usually can’t tell which data is yours. Email us and we’ll help as far as we can.

Children

Gravity Box is not directed at children under 13. If you believe a child has given us personal data, contact us and we’ll delete it.

Changes

If we change this policy, we’ll update it here and change the date at the top. If the changes are significant, we’ll also mention them in the game’s release notes.

Contact

Tiny Details
[email protected]