Universe Mining Tycoon
Privacy policy

01Controller and contact

Universe Mining Tycoon is developed by Haluk Alireisoğlu under RRAEICH STUDIOS, İstanbul, Türkiye. Privacy/support: contact@rraeichstudios.com. Website: https://rraeichstudios.com. This policy covers the Android/iOS game, not a separate website's hosting or cookies.

02Local play and age choice

No studio player account or central progress database is required. Progress, balances, company name/cosmetics, keys, achievements, Premium, boosts, language, backups and purchase-delivery summaries stay on the device and optionally in platform cloud saves. Do not enter personal information as your company name. OS backup settings may also apply.

Local play works offline. Without trusted time, the game continues from the saved logical instant and counts time spent in the session; an unknown offline gap is not fabricated from the phone's editable date. Store, cloud and ads require connectivity.

The intended audience includes children aged 7+, teens and adults; store ratings are determined separately. The first screen asks a birth year only to calculate an age band. The year/date is not retained or sent to a server; only the band and completed-choice state stay locally. Because the birthday is unknown, the younger age is used. You can play without providing a year.

For under-18 or unknown-age players, ad requests, explicit ad SDK initialization, game-account connections and TimeAPI.io/Google TrustedTime requests remain off. Local play is available. Purchases, restoration and external links require an adult gate; the store separately controls payment approval and parental settings. The gate is not identity verification or verifiable parental consent. Parents should use device/store purchase controls. Contact us if a child has shared unnecessary support information.

03Platform services and purchases

In adult mode, configured Google Play Games/Game Center services may check an existing connection. Sign-in is optional for local play. Player ID/display name, platform achievements and optional progress snapshots may be processed by Google/Apple. Cloud snapshots may include company name, balances, cosmetics, keys, achievements and purchase-delivery records. A save choice is required before an existing remote save is replaced. Google and Apple clouds do not automatically transfer between each other. The studio does not copy progress into its own player database. Provider policies: https://policies.google.com/privacy and https://www.apple.com/legal/privacy/.

Google Play/App Store handle payments. The studio does not receive card numbers, card security codes or bank details through the game. Product IDs, purchase evidence, transaction status and delivery summaries are processed to fulfil orders and avoid duplicate delivery.

When Android Premium verification is enabled, a purchase token, application ID and product ID are sent over HTTPS to a verification service which checks Google Play's actual entitlement/expiry. After the adult purchase gate, timed purchases may also request UTC from this service without sending a purchase token, on either platform including restricted mode, so paid benefits start correctly. It does not request a complete game save, company name, card information or advertising ID, operate a progress database, or deliberately log tokens in application code. Infrastructure providers may process IP/network/access records. Actual expiry is cached on the device; an outage does not invent extra subscription time. iOS uses StoreKit-verified entitlements.

Starter Pack is a one-time non-renewing store-account purchase. Weekly Premium is a separate auto-renewing subscription until cancelled. Deleting progress does not cancel a subscription; manage it through the store.

04Ads, consent and time connections

Adult-mode ads use Google Mobile Ads/AdMob with Google UMP where required. This preparation build uses Google's test IDs. Test ads can still send requests to Google. Requests are non-personalised and filtered for general-audience content. The app removes the Android advertising-ID permission and does not request iOS cross-app tracking permission. SDKs may still process IP, technical device/app, ad interaction and diagnostic information for delivery, security and troubleshooting. See https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

Ad eligibility follows UMP's current result. Use "Reklam gizlilik tercihleri" in Company/Premium to access supported privacy options. Rewarded ads are optional; only an earned-reward event grants the reward. Cancelled/unavailable ads do not consume daily quota. Premium disables interstitials, while voluntary rewarded ads remain separate. No ads load or show for under-18 or unknown-age players.

Adult-mode trusted time may use Google TrustedTime on Android; if unavailable, and on iOS, a fixed UTC request can go to TimeAPI.io over HTTPS. It sends no save or location, but the provider receives network/IP information. Local uptime/time anchors are not in cloud saves. See https://timeapi.io/. Provider logging is outside the studio's control.

There is no separate behavioural analytics or automatic studio crash-reporting service. The app does not request contacts, camera, microphone, photos or precise location. Opening an external provider/store/support site is subject to that provider's rules.

05Retention, deletion and support

Company → Delete account and progress clears device progress, local backup, age/language preference and time cache; a fresh save may be created afterwards. Purchase-delivery hashes and one-time product ownership, which contain no card details, remain locally to prevent repeated delivery. Uninstalling or clearing all app data through the OS may remove these local records; the store retains its own history.

Device deletion does not delete the Google/Apple account, cloud save or subscription. Automatic upload pauses until a new save choice. Provider account/cloud/privacy tools must be used separately; an older cloud save can be restored. Support messages and optional attachments are retained only as needed for the request, follow-up and applicable legal obligations, then deleted when no longer needed and no legal retention basis remains. Do not email passwords or unnecessary identity/payment information.

06Security, recipients and rights

Connections use HTTPS/platform verification; this is not a claim of separate local-save encryption. Depending on features, recipients include Google, Apple, time/verification/hosting and email providers, and authorities where required. Providers may use infrastructure outside Türkiye; applicable protection and international-transfer rules apply. The studio does not sell/rent personal data.

Support/rights requests are handled under applicable grounds such as performing a contract, legal obligations, protecting rights, or legitimate interests that do not override fundamental rights. Reading this policy does not provide consent for processing requiring separate consent. Applicable rights may include information/access, correction, deletion, recipient information, objection and other data-protection rights. Contact contact@rraeichstudios.com; proportionate verification may be requested and statutory response periods apply. Your right to contact the relevant data-protection authority is preserved. Use provider tools for their independent account processing. Material changes may require an updated policy, in-app notice and separate consent.