GUARD DOWN [>_<]

This Privacy Policy explains how the mobile game Guard Down ("the App", "the Game") collects, uses, stores, and shares information. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Google Play's User Data policies.

Summary. Guard Down has no user accounts and never asks for your name, email, phone number, or location. To run the game and show ads we process a random app-generated identifier, the messages you type to the in-game AI guards, and standard advertising data collected by Google AdMob. Some of this data is processed by service providers located outside the UK, including in the United States and China. We do not sell your personal data. Details and your legal rights are set out below.

// 1. WHO WE ARE (DATA CONTROLLER)

The App is published and operated by StaticPlay ("we", "us", "our"), based in the United Kingdom, which is the data controller for the limited personal data described in this policy.

For any privacy question or request, contact: chrishall@staticplay.co.uk.

// 2. WHAT WE COLLECT, WHY, AND OUR LEGAL BASIS

Data	Purpose	Legal basis (UK GDPR)	Retention
Random app ID — a random string (e.g. `dev-xxxxxxxx`) generated on first launch and stored on your device. Not your name/email and not your Android Advertising ID or any hardware ID.	Run the game; meter how many free turns remain per level; prevent abuse of the ad-reward system.	Legitimate interests (Art. 6(1)(f)) — operating and securing the game.	On your device until you clear data or uninstall; on our server, deleted after ~30 days of inactivity.
In-game messages — the text you send to the AI guards, plus a short rolling window of the current conversation. Linked only to the random app ID, never to your identity.	Send your message to our AI provider so the guard can generate a reply, and keep brief context within a level.	Legitimate interests (Art. 6(1)(f)) — providing the core gameplay you requested.	Temporary; conversation/turn data expires automatically after ~30 days of inactivity.
Advertising & device data — your Android Advertising ID and standard device/usage identifiers, collected by Google AdMob when ads are served.	Serve and measure rewarded video ads, and (where permitted) personalise them.	Consent (Art. 6(1)(a)) for personalised ads, gathered via Google's consent tools; otherwise legitimate interests for non-personalised ads and fraud prevention.	As set by Google; see Google's policies linked below.

We do not collect your name, email address, phone number, contacts, photos, precise location, or any financial or health data, and we do not create accounts or profiles about you.

// 3. SERVICE PROVIDERS & SHARING

We do not sell or rent your personal data. We share the limited data above only with the service providers that make the game work, each acting as our processor or as an independent controller for their own services:

Google AdMob (advertising) — serves ads and may collect advertising/device data as a controller under its own policy: policies.google.com/privacy and AdMob data disclosure.
DeepSeek (AI guard responses) — receives your in-game messages to generate the guards' replies.
Vercel (server hosting) and Upstash (temporary game-state storage) — host our proxy server and store turn/conversation data on our behalf.

// 4. INTERNATIONAL DATA TRANSFERS

Some of our service providers are located outside the United Kingdom, so your data may be transferred and processed in other countries:

Google (AdMob), Vercel and Upstash — primarily the United States and other countries.
DeepSeek — your in-game messages are processed by DeepSeek, whose operations are based in the People's Republic of China. This means message text you type to the guards is transferred outside the UK.

Where we transfer personal data internationally we rely on appropriate safeguards permitted by UK data protection law (such as the UK International Data Transfer Agreement / Addendum or an adequacy decision) where required. To minimise risk, please do not type personal, sensitive, or confidential information into the in-game chat.

// 5. SECURITY

All data sent between the App and our servers is encrypted in transit (HTTPS/TLS). We keep the data we hold to the minimum needed to run the game, tied only to a random identifier rather than your identity. No system is perfectly secure, but we take reasonable technical and organisational measures to protect the limited data we process.

// 6. CHILDREN

Guard Down is intended for a general audience aged 13 and over and is not directed at children under 13. The game contains advertising. We do not knowingly collect personal data from children under 13. If you believe a child has provided data to us, contact us and we will delete it.

// 7. YOUR RIGHTS

Under UK GDPR you have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent at any time (without affecting prior processing). Because data is tied only to a random app ID, please include the ID shown in the App when you contact us so we can locate it.

Ads: you can reset your Advertising ID or opt out of ad personalisation in your device settings (Settings → Google → Ads / Privacy).
Deletion: clearing the App's data or uninstalling removes the random ID from your device; the associated server data expires automatically, or email us to request deletion sooner.

To exercise any right, email chrishall@staticplay.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint if you are unhappy with how we handle your data.

// 8. CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

// 9. CONTACT

Questions, requests, or complaints: chrishall@staticplay.co.uk.