Privacy Policy

Tiny Bastion · Effective date: 22 October 2026

This Privacy Policy explains what information is processed when you play Tiny Bastion: Tower Defense on iPhone, iPad or Android (the “Game”) or visit mjabbari.com/tinybastion and its short links (the “Site”). In this policy, “we”, “us” and “the developer” mean the developer of Tiny Bastion, shown as the seller on the Game’s App Store and Google Play listings. To the maximum extent permitted by law, this policy is provided for information and does not create contractual rights beyond those that applicable law gives you.

The short version. You don’t create an account and we never ask for your name, email or phone number. The Game uses Google AdMob for ads, Apple and Google for purchases, Unity Gaming Services for anonymous sign-in and leaderboards, and (from version 1.1) Firebase Analytics and Firebase Crashlytics to understand gameplay and fix crashes. In the EEA, UK and Switzerland, analytics only starts after you agree, and every player can switch analytics off in Settings. We do not sell your personal information.

1. Information the Game processes

Device and app information: device model, operating system and version, language, app version, and approximate country derived from your IP address.
Identifiers: an anonymous Unity player ID and installation ID created by Unity Authentication, together with basic sign-in and session information (such as sign-in times) that Unity uses to keep you signed in and to provide the leaderboard; from version 1.1, a Firebase app instance ID and Crashlytics installation ID; and, for advertising, the advertising identifier (IDFA on iOS only if you allow tracking, the Android advertising ID on Android) and the vendor identifier (IDFV).
Gameplay information: progress, stars, settings and in-game items, stored on your device; and the leaderboard name and score you submit to the global leaderboard.
Advertising information: ad requests, impressions, clicks, rewarded-ad completion, and diagnostic and performance data collected by Google AdMob.
Purchase information: which product you bought, its price and currency, and the store’s transaction confirmation. Apple or Google processes your payment. We never receive your card number, billing address or store account password.
Analytics events (version 1.1 and later): gameplay and usage events (for example sessions, levels started and completed, features used), purchase and ad-revenue events, and the app instance ID, sent to Google Firebase Analytics.
Crash and diagnostics data (version 1.1 and later): crash reports, stack traces, device state at the time of the crash (such as free memory and orientation) and app performance data, sent to Google Firebase Crashlytics, and other technical diagnostics (such as SDK and network error information) collected by Firebase and Google AdMob.
Install source (Android, version 1.1 and later): the Google Play Install Referrer, collected through Firebase Analytics, which tells us which link or campaign led to your install.

We do not collect contact details, precise location, contacts, photos, health, financial account information or browsing history. The Game has no user accounts and no chat.

2. Sharing a victory image

From version 1.1 the Game can create a victory image that you may share through your device’s system share sheet or save to Photos. The image goes only to the app or person you choose. We do not upload or receive it. Saving to Photos uses add-only access, and the Game never reads your photo library. The image contains game artwork and statistics, not personal information.

3. Notifications

If the Game offers notifications, they are opt-in. You can turn them off at any time in the Game’s Settings or in your device settings.

4. Why we use information

To run the Game, keep your progress, show the leaderboard and deliver purchases and rewards (performance of our agreement with you).
To show ads that fund the free Game, measure them, promote the Game and measure our own marketing campaigns, and prevent ad fraud (your consent where the law requires it, otherwise our legitimate interests).
To understand how the Game is played, find and fix crashes and other problems, balance levels and measure features, events and campaigns (your consent in the EEA, UK and Switzerland; elsewhere our legitimate interests, which you can opt out of).
To answer support requests, prevent cheating and abuse, and comply with law and store rules (legal obligations and legitimate interests).

5. Advertising, consent and tracking

The Game uses Google AdMob, including Google’s User Messaging Platform (UMP). In the EEA, UK and Switzerland, the Game asks for your consent before personalised ads are shown, and you can change your choice from the Game’s Settings. On iOS, the Game asks for permission through Apple’s App Tracking Transparency prompt before AdMob may use the IDFA. If you decline, ads may still appear but are not based on tracking across other companies’ apps. On Android you can reset or delete your advertising ID in your device settings. Learn how Google uses information at policies.google.com/technologies/partner-sites.

6. Analytics consent and opt-out

From version 1.1, the Game uses Google Firebase Analytics for gameplay analytics and Firebase Crashlytics for crash reporting. In the EEA, UK and Switzerland, analytics collection starts only after you agree. Every player can switch analytics on or off at any time in the Game’s Settings. When you switch it off, the Game stops sending analytics events. You may also ask us to delete analytics data linked to your app instance (see section 11). Learn how Google uses Firebase data at firebase.google.com/support/privacy.

7. Service providers and third parties

Google AdMob (advertising and ad measurement): Google Privacy Policy.
Google Firebase Analytics and Firebase Crashlytics (gameplay analytics, install source and crash reporting): Firebase privacy and security.
Unity Gaming Services (Authentication and Leaderboards) and Unity In-App Purchasing: Unity Privacy Policy.
Apple App Store and Google Play (downloads, payments, refunds and the Play Install Referrer): Apple and Google.

These providers process information under their own terms and privacy policies, which we do not control. To the maximum extent permitted by law, we are not responsible for their practices, content or availability. We do not sell your personal information and we do not “share” it for cross-context behavioural advertising except through AdMob as described above and only with the consent or opt-out choices the law gives you. We may disclose information if the law requires it, to protect rights and safety, or as part of a sale or transfer of the Game, subject to this policy.

8. Children

Tiny Bastion is rated 9+ on the App Store and is intended for a general audience. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (or the higher age required in your country). If you believe a child has provided personal information, email us and we will delete it. Parents can limit ads, tracking and purchases with the parental controls on Apple and Android devices.

9. Retention

Progress and settings stay on your device until you delete the Game or its data. Leaderboard entries are kept while the leaderboard runs. Firebase Analytics data is kept for up to 14 months, Crashlytics crash reports for up to 90 days, and Unity’s standard retention applies to leaderboard and sign-in data it stores for us. Data you ask us to delete is deleted within a reasonable time, unless we must keep it to meet legal obligations, resolve disputes or prevent fraud.

10. International transfers

Our service providers may process information in the United States and other countries whose data-protection laws may differ from yours. Where the law requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms offered by those providers.

11. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, or California CCPA/CPRA), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict processing, to withdraw consent at any time (without affecting earlier processing), and to opt out of the sale or sharing of personal information or of targeted advertising. To make a request, email apps.jabbari@gmail.com with the subject “Tiny Bastion privacy request”. Because the Game has no accounts, we may ask for your leaderboard name and device type to help us find your data. We will not discriminate against you for exercising your rights. You can also complain to your local data-protection authority.

12. Security

Information is encrypted in transit between the Game and our service providers. No method of transmission or storage is completely secure, and to the maximum extent permitted by law we cannot guarantee absolute security.

13. This website and short links

The Site does not use cookies, analytics or advertising scripts. Fonts are loaded from Google Fonts, which receives standard connection information such as your IP address. Our hosting provider keeps standard access and security logs. Short links (getmjb.app and mjabbari.com/get) read your device type and an optional campaign tag only to send you to the right store. They set no cookies and keep no logs of their own beyond the host’s access logs. Emailing us shares your email address and message with us through your email provider.

14. Changes to this policy

We may update this policy when the Game, its services or the law change. The effective date above shows the latest version, and we will give notice of material changes where the law requires it.

15. Contact

For privacy questions or requests, email apps.jabbari@gmail.com.