This policy explains what information Leak: Tower Defense PVP ("the game") uses, why, and the choices you have. The game is made by Leak TD. Contact: support@leaktd.com.
What the game does not collect
The game does not ask for your real name, email address, phone number, contacts, photos, files, precise location or payment details. It shows no ads, uses no advertising ID, and sends nothing to analytics or crash-reporting companies. A practice round itself sends nothing, and with no connection the game sends nothing at all.
What the game uses when it connects
When the game opens with an internet connection, it signs in to our game server, making an anonymous account for you the first time. To do that it uses:
- A random install ID that the game makes on your phone the first time it connects. It is not your phone's hardware ID or advertising ID. It is kept on your phone and sent to our server to sign you in.
- An account ID that our server makes up for you. It is not linked to your real name or to any other account.
- A display name. You start with one our server makes up ("Keeper" and a number) and you can change it. Other players see it, with your level and the portrait and banner colour you pick, in game lobbies and matches, on the ladder and in friends lists, and can see whether you are online right now. Names are checked against a list of blocked words. Please don't use your real name.
- Your progress: your experience and level (earned only in online matches), how many games you have played and won and your last few results, your ladder place, the portrait and banner colour you pick, and the friends you add.
- Game records: the games you make or join (and a private game's code), which accounts played in each match, their seats, the version of the game each player joined with, and how the match ended. The moves made during a match pass through our server so that every player sees the same game.
- The game's version number, sent whenever the game asks for an online game, so our server can turn away a version too old to play online and tell you when an update is available.
- Taunts: during an online match you can send one of the game's pre-written lines, which the other players in that match see and hear. Our server passes on only which line you chose and keeps nothing. You cannot type your own messages, and you can mute any player.
- Invites: when you invite a friend to your private game, our server keeps the invite (the game's code and who sent it) so that your friend sees it on their home screen. An invite is removed once its game has started or ended (the next time your friend's game checks its invites), when you invite the same friend to the same game again, or when either of you deletes your account. If you share a game's code with your phone's Share button, it goes to the app you choose; the game itself sends it nowhere.
- Match statistics: for each online match, our server keeps a record of how it went - the moves made, how it ended, how long it lasted, which version of the game ran it, and how well each player's connection held up (for example how often a phone reconnected or fell out of step). In these statistics a player appears only as a scrambled code, never by account ID or name. We also record how busy our servers are (processor, memory, network), which holds no player information.
- Your internet (IP) address, which our servers see whenever your phone connects. We use it to send you match data and to limit how often one address can sign in or look up game codes, to keep the service working. We do not use it to work out where you are.
Why we use it
To run online games: signing you in, putting you in matches, keeping every player's game in step, recording results, showing your name and progress to other players, passing on taunts and invites, turning away versions of the game too old to play online, and protecting the service from abuse. We also use match statistics to find and fix connection and server problems, to keep the game balanced, and to build computer opponents from how matches are played. This analysis is done by us. We do not sell your information, share it with anyone for their own use, or use it for advertising.
Where it is kept
Our game servers run in a data centre in London, United Kingdom, rented from a cloud hosting company that stores and processes the information only on our behalf. Connections between the game and our servers are encrypted.
How long it is kept
Your account, its display name, your progress and its sign-in details are kept until you delete your account. To stop abuse, our server keeps small counters of how often an address or an account has signed in or used an online feature (such as making, joining or finding a game, changing a profile, or adding a friend); they hold the IP address or the account ID and are cleared after no more than 30 days. Server logs that can contain IP addresses, account IDs and the game's version are kept for no more than 14 days, and so are the copies we download to look for problems; the summaries we keep from them hold no IP address, account ID or name. Backups of the server are kept for no more than 30 days (if backups ever stop, the last seven are kept until they restart); a deleted account disappears from them when they are replaced. Match statistics are deleted 90 days after the match, except copies of the moves we keep for training computer opponents (no names or codes in them), which are deleted 2 years after the match. Totals that cannot identify anyone, such as how many matches were played on a day, are kept. The scrambled code in match statistics is not your account ID, but because our game server also holds the match results it came from, we could link it back to an account; nobody without access to our server can, and we do not use it to single anyone out.
Deleting your account
In the game: open Settings and choose Delete account. This deletes your account on our server, with your display name, your progress (experience, level and results), the portrait and banner colour you picked, your ladder place, your friends and the invites you sent or received, and makes your phone forget it; the next time the game connects, it starts you as a new player.
Without the game: email support@leaktd.com with the subject "Delete my account", your player ID and your deletion code, which Settings shows next to Delete account (press Show, then Copy). We delete the account within 30 days and reply to confirm. Accounts are not linked to an email or phone number, so we need the player ID to find yours and the deletion code to know the request comes from you: other players can see a player ID, and a display name is not enough either, because anyone can see it and it can change.
What is kept after deletion: records of past matches may still contain the deleted account's ID, so that other players' match history and results stay correct, and the abuse counters above keep it until they are cleared. That ID is no longer linked to any phone or person. Match statistics that include your scrambled code are not edited; they are deleted on their normal schedule (above). We keep a note of each deletion request we handle (the account ID, the date and what was done, never the email) for one year, to answer a repeat request.
Children
The game is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, contact us with its player ID and we will delete it, even without the deletion code.
Changes
If this policy changes, we will update it here and in the game, and change the date at the top.