Privacy policy

Who is responsible?

Orbit Rush is published by LUDIMIO, responsible for the processing described here. Contact us about privacy, support or your rights at ludimiogames@gmail.com.

Playing without an account

You can play without creating an account. Progress, equipment, settings and recovery copies are stored on your device. Local diagnostic counters cover up to 90 days of daily activity and progression milestones; they are not automatically sent to LUDIMIO. Exporting a save or diagnostics is your choice, using your device's sharing tools.

Optional accounts and cloud saves

Creating an account sends your email address and password to Google Firebase Authentication. This service manages sign-in credentials and authentication identifiers. The game server checks authentication tokens; it does not store your password. Google may also process IP addresses and technical connection information to operate and protect authentication.

When you choose to upload a save, the server stores your game progress, equipment, settings, game timestamps and save revision. It keeps the current cloud save and one previous version for recovery. The account also has a server-managed wallet for Prisms and premium entitlements. Signing out or uninstalling does not delete these online records.

Purchases, when enabled

Google Play processes payments. LUDIMIO does not receive your payment card details. To grant and restore purchases, our server processes purchase tokens, product identifiers, purchase or refund status and an identifier derived from your game account. These records help prevent duplicate credits and resolve payment issues.

Why we use this information

Account access, cloud saves and delivery of purchases are necessary to provide the services you request. Security, fraud prevention and support rely on our legitimate interest in operating a reliable game. Where applicable, transaction information may also be processed to meet legal obligations. We do not sell player data. Optional advertising and its data processing are described below. Local gameplay diagnostic counters are not automatically uploaded to LUDIMIO.

Optional rewarded ads and consent

Android versions with advertising enabled use Google AdMob (Google Mobile Ads SDK) and Google User Messaging Platform (UMP). Watching an ad is optional and can grant one energy, up to the reserve limit. Playing and natural energy recharge remain available without watching ads. The current test build uses demonstration ads; this does not mean the advertising services process no data.

When used, the advertising SDK collects and shares IP addresses (which can indicate approximate location), device and advertising identifiers when available, app/ad interactions and performance diagnostics for ad delivery, measurement and fraud prevention. See Google's SDK data disclosure. Orbit Rush does not send your game password or cloud-save contents as ad targeting data.

UMP contacts Google to determine and manage applicable consent choices, and stores those choices on the device. The game checks whether ads may be requested before initializing the ad SDK. Where consent is required, you can accept, refuse or manage the purposes shown in the consent form. Depending on your choices and Google's configuration, ads may be personalized, non-personalized, limited or unavailable. In ad-enabled versions, open Settings → Ad privacy to revisit choices where the provider makes this option available. Refusing does not block the game.

Google's advertising data retention and international processing follow its policies: How Google uses information from partner apps and Advertising and your controls. Android also provides advertising-ID controls. Deleting your Orbit Rush account does not automatically delete data independently retained by Google for its advertising services.

Providers, hosting and security

Google Firebase and Google Cloud provide authentication, database and server services. The game database and API are configured in Paris, France. Authentication and other Google operations may involve processing outside this region, including outside the European Economic Area, under Google's applicable data protection terms and transfer safeguards. See Firebase privacy information and Google's privacy policy.

Connections to our services use HTTPS. Application logs record the requested route, response status and duration, without deliberately recording passwords, authentication tokens or save contents. Google infrastructure may record IP addresses and request metadata for operations and security. Support messages are processed in the contact mailbox. Information may also be disclosed when required by law.

How long we keep data

Local files remain until you erase them; exported copies must be removed wherever you saved them. Account, wallet and cloud-save records remain while you keep your account, unless you request their deletion. A new cloud upload replaces the older recovery version. Technical records are subject to the hosting providers' retention settings and policies. Support correspondence is kept for handling your request and any related dispute, then deleted when no longer needed.

You can delete your account inside the game after confirming your password and the permanent consequences. The server deletes your current and previous cloud saves, wallet and Firebase sign-in account. If the connection fails, retry to finish the request. A technical account-closure fingerprint expires after 30 days to prevent concurrent requests from recreating data. Purchase-token fingerprints, without the original token or link to the account, expire after 365 days to prevent duplicate credits. These expiry dates trigger automatic database cleanup, which is asynchronous and may complete later. You can also request deletion by email; LUDIMIO verifies ownership and handles email requests manually. Google's own deletion and backup cycles may continue after removal from our active service; these are described in its provider documentation.

Your choices and rights

You can request access, correction, deletion or a portable copy of your personal data, and request restriction or object to certain uses where applicable. Write to ludimiogames@gmail.com. We may need to verify ownership of the account. Never send your password or payment card details. You may contact your local data protection authority, including the CNIL in France.

If you are a parent or guardian with a concern about a child's account, contact us at the same address. Material changes to these practices will be reflected here with a new update date and, where needed, communicated in the game.

Request account deletion