Privacy Policy

Tiny Bastion · Effective date: 12 November 2026

This Privacy Policy explains what information is processed when you play Tiny Bastion: Tower Defense on iPhone, iPad or Android (the “Game”) or visit mjabbari.com/tinybastion and its short links (the “Site”). In this policy, “we”, “us” and “the developer” mean the developer of Tiny Bastion, shown as the seller on the Game’s App Store and Google Play listings. To the maximum extent permitted by law, this policy is provided for information and does not create contractual rights beyond those that applicable law gives you.

The short version. You don’t create an account with us and we never ask for your name, email or phone number. The Game uses Google AdMob for ads, Apple and Google for purchases, and (from version 1.1) Firebase Analytics and Firebase Crashlytics to understand gameplay and fix crashes. On Android, and on iOS before version 1.2, its leaderboards can also use Unity Gaming Services anonymous sign-in. From version 1.2, on iPhone and iPad it uses Apple Game Center for leaderboards and trophies and can sync your save through your own iCloud account, and on Android it uses Google Play Games for optional sign-in, leaderboards, achievements and cloud save. We never receive your iCloud data or your Play Games saved games. Reminders are optional and stay on your device. Anonymous gameplay analytics and crash reports (linked only to random app and installation IDs, never to your name or contact details) are collected by default to run and improve the Game, and every player can switch analytics off in Settings > Analytics. We do not sell your personal information.

1. Information the Game processes

Device and app information: device model, operating system and version, language, app version, and approximate country derived from your IP address.
Identifiers: on Android, and on iOS before version 1.2, an anonymous Unity player ID and installation ID created by Unity Authentication, together with basic sign-in and session information (such as sign-in times) that Unity uses to keep you signed in and to provide the leaderboard; on Android from version 1.2, if you sign in to Google Play Games, your Play Games player ID (see section 6); from version 1.1, a Firebase app instance ID and Crashlytics installation ID; and, for advertising, the advertising identifier (IDFA on iOS only if you allow tracking, the Android advertising ID on Android) and the vendor identifier (IDFV).
Gameplay information: progress, stars, settings and in-game items, stored on your device (on Android, also in your device’s own Android backup if you have turned backup on; from version 1.2, also synced through your own iCloud account on iOS, see section 4, or saved to your own Google Play Games account on Android if you are signed in, see section 6); and the leaderboard name and score you submit to the global leaderboard (from version 1.2, your scores and trophy or achievement progress go instead to Apple Game Center on iOS, see section 5, and to Google Play Games on Android, see section 6).
Google Play Games information (Android, version 1.2 and later): if you sign in, the Play Games player ID and gamer identity (display name, also called gamer tag, and avatar) that Google shares with the Game, and the scores, achievements and saved game that the Game sends to Google Play Games (see section 6).
Advertising information: ad requests, impressions, clicks, rewarded-ad completion, and diagnostic and performance data collected by Google AdMob.
Purchase information: which product you bought, its price and currency, and the store’s transaction confirmation. Apple or Google processes your payment. We never receive your card number, billing address or store account password.
Analytics events (version 1.1 and later): gameplay and usage events (for example sessions, levels started and completed, features used), purchase and ad-revenue events, and the app instance ID, sent to Google Firebase Analytics.
Crash and diagnostics data (version 1.1 and later): crash reports, stack traces, device state at the time of the crash (such as free memory and orientation) and app performance data, sent to Google Firebase Crashlytics, and other technical diagnostics (such as SDK and network error information) collected by Firebase and Google AdMob.
Install source (Android, version 1.1 and later): the Google Play Install Referrer, collected through Firebase Analytics, which tells us which link or campaign led to your install.

We do not collect contact details, precise location, contacts, photos, health, financial account information or browsing history. The Game has no user accounts of its own and no chat.

2. Sharing a victory image

From version 1.1 the Game can create a victory image that you may share through your device’s system share sheet or save to Photos. The image goes only to the app or person you choose. We do not upload or receive it. Saving to Photos uses add-only access, and the Game never reads your photo library. The image contains game artwork and statistics, not personal information.

3. Reminders and rating prompts

From version 1.2 the Game can send optional reminders (for example when your daily chest is ready, your quest streak is about to end or a weekly challenge is waiting). They are opt-in: the Game first asks in its own screen, and only if you say yes does it show your device’s permission request (on Android 13 and later, the system “notifications” permission). Reminders are scheduled on your device as local notifications, and no push token, notification content or notification data is sent to us. If analytics is on (section 9), the Game records whether you allowed reminders, but not their content. You can turn reminders off at any time in your device’s notification settings.

After some wins, or when you tap Rate, the Game may ask the App Store or Google Play to show its standard rating card (on Android, through Google Play In-App Review). Apple or Google decides whether the card appears. Any rating or review you leave is sent to, stored and published by Apple or Google under their own terms, usually with the name on your store account, and we do not receive it through the Game. Public reviews can be read by anyone, and we may reply to them in the store. If analytics is on, the Game records that a rating card was requested, but not whether you rated or what you wrote.

4. iCloud save sync (iOS)

From version 1.2, on iPhone and iPad, the Game keeps a copy of your saved game in Apple iCloud key-value storage in your own iCloud account, so your progress can follow you to another device or a reinstall. The copy contains your game progress (such as islands, stars, gems, upgrades, heroes and in-game items), the time it was saved, the device type (iPhone or iPad) and a random code used to tell copies apart. It does not contain your name, email address or Apple Account details.

The copy travels only between your devices and Apple, and Apple stores it as part of your iCloud account under its own iCloud terms and the Apple Privacy Policy. We do not receive it, and we cannot see, change or delete it. If analytics is on (section 9), the Game may record that a save was loaded from iCloud, or which copy you kept when two devices disagreed, together with the island and star count. It never records the save itself.

To stop syncing, go to Settings > [your name] > iCloud and either turn iCloud off for Tiny Bastion in the list of apps that use iCloud, or sign out of iCloud. The exact menus can vary by iOS version. Your progress then stays only on that device, so deleting the Game or losing the device can lose it. To the maximum extent permitted by law, iCloud is a third-party service provided by Apple, and we are not responsible for its availability, its sync results or conflicts, or any data or progress lost through it.

5. Game Center (iOS)

From version 1.2, on iPhone and iPad, the Game uses Apple Game Center for its leaderboards and trophies (achievements). If you are signed in to Game Center, the Game sends your scores and trophy progress to Game Center. Game Center then shows your Game Center nickname (alias) with your scores and trophies to other players, under Apple’s rules and your Game Center settings. To draw the leaderboards in its own screens, the Game reads them from Game Center, including other players’ nicknames and scores. Game Center also gives the Game a player identifier, which the Game uses only to highlight your own row. Both of these happen on your device and nothing is sent to us.

Game Center is provided by Apple under its own terms and the Apple Privacy Policy. We do not receive your Apple Account details, and the only Game Center data we can see is the leaderboard entries that Game Center shows to any player. To stop using Game Center, go to Settings > Game Center and tap Sign Out. The exact menu can vary by iOS version. Once you have signed out, the Game shows only your own results on the device. To the maximum extent permitted by law, we are not responsible for Game Center’s availability, its content, other players’ nicknames, or Apple’s handling of your data.

6. Google Play Games (Android)

From version 1.2, on Android, the Game uses Google Play Games Services for optional sign-in, leaderboards, achievements and cloud save. If you have a Google Play Games profile, the Game may sign you in automatically when it starts, and Google may show a short sign-in message. Signing in is optional: you can play the whole Game without it.

What Google shares with the Game. When you are signed in, Google gives the Game your Play Games player ID and your gamer identity (your display name, also called gamer tag, and your avatar). The Game uses them on your device to show your name and to highlight your own row on the leaderboards. The Game does not receive your email address or your Google Account password, does not ask for your Play Games friends list, and does not use your Play Games information for advertising.

Leaderboards and achievements. The Game sends your scores and achievement progress to Google Play Games. Google may show your gamer tag, avatar, scores and achievements to other players, depending on your Play Games profile visibility (for example Everyone, Friends only or Only you). The Game may also read the leaderboards from Google Play Games, including other players’ gamer tags and scores, to show them in its own screens.

Cloud save (Saved Games). When you are signed in, the Game keeps a copy of your saved game in the Saved Games area of your own Google Play Games account, so your progress can follow you to another device or a reinstall. The copy contains your game progress (such as islands, stars, gems, upgrades, heroes and in-game items), the time it was saved and technical details used to tell copies apart. It does not contain your name, email address or Google Account details. Google stores it with your Play Games data, and other games cannot read it. We do not receive it, and we cannot see, change or delete it. If analytics is on (section 9), the Game may record that a save was loaded from the cloud, or which copy you kept when two devices disagreed, together with the island and star count. It never records the save itself.

Google also collects some information through the Play Games software itself, such as the gamer identity you give when you create or update your Play Games profile and diagnostics and usage data about that software. Google Play Games is provided by Google under its own terms and the Google Privacy Policy.

Your choices. You can play without signing in. In your Google Play Games settings or your Play Games profile you can change your profile visibility, manage automatic sign-in where Google offers it, and delete the Game’s Play Games data (scores, achievements and saved games) or your whole Play Games profile (see Google’s help page). The exact menus can vary by device and Play Games version. If you stay signed out or delete the Game’s Play Games data, your progress stays only on that device (and in your device’s own Android backup, if it is on), so deleting the Game or losing the device can lose it. To the maximum extent permitted by law, Google Play Games is a third-party service provided by Google, and we are not responsible for its availability, sign-in, leaderboards, achievements, gamer tags or other content, its sync results or conflicts, Google’s handling of your data, or any data or progress lost through it.

7. Why we use information

To run the Game, keep your progress (and let it sync through your iCloud account on iOS, or through your Google Play Games account on Android if you sign in), show leaderboards, trophies and achievements, send the reminders you ask for, and deliver purchases and rewards (performance of our agreement with you).
To show ads that fund the free Game, measure them, promote the Game and measure our own marketing campaigns, and prevent ad fraud (your consent where the law requires it, otherwise our legitimate interests).
To understand how the Game is played, find and fix crashes and other problems, balance levels and measure features, events and campaigns (our legitimate interests in running, securing and improving the Game; you can switch analytics off at any time in Settings > Analytics and object to crash reporting by email, see sections 9 and 14).
To answer support requests, prevent cheating and abuse, and comply with law and store rules (legal obligations and legitimate interests).

8. Advertising, consent and tracking

The Game uses Google AdMob, including Google’s User Messaging Platform (UMP). In the EEA, UK and Switzerland, the Game asks for your consent before personalised ads are shown, and you can change your choice from the Game’s Settings. On iOS, the Game asks for permission through Apple’s App Tracking Transparency prompt before AdMob may use the IDFA. If you decline, ads may still appear but are not based on tracking across other companies’ apps. On Android you can reset or delete your advertising ID in your device settings. These advertising choices control ads only: gameplay analytics and crash reports work separately, as described in section 9. Learn how Google uses information at policies.google.com/technologies/partner-sites.

9. Analytics, crash reports and your choices

From version 1.1, the Game uses Google Firebase Analytics for gameplay analytics and Firebase Crashlytics for crash reporting. From version 1.2, both are on by default from the first time you open the Game, in every country, to run the Game, keep it stable and improve it. This data is anonymous in the sense that it is linked only to random app instance and installation IDs, and never to your name, email address or other contact details. Firebase is set up so that it does not collect your advertising identifier (IDFA or Android advertising ID) and its advertising signals stay off, so this data is not used to personalise ads. To the maximum extent permitted by law, we process it on the basis of our legitimate interests in running, securing and improving the Game, which we have balanced against your interests and rights, and you can object as described below.

Switching analytics off. You can switch gameplay analytics off, and back on, at any time in the Game’s Settings > Analytics. While it is off, the Game sends no analytics events from that device. If you said no to the analytics question in an earlier version of the Game, your choice is kept and analytics stays off until you switch it on. Crash reports continue while analytics is off, because we need them to find and fix problems that stop the Game working. You can object to crash reporting, or ask us to delete the analytics and crash data linked to your installation, by email (see section 14). Deleting the Game stops all collection from that device. Learn how Google uses Firebase data at firebase.google.com/support/privacy.

10. Service providers and third parties

Google AdMob (advertising and ad measurement): Google Privacy Policy.
Google Firebase Analytics and Firebase Crashlytics (gameplay analytics, install source and crash reporting): Firebase privacy and security.
Unity Gaming Services (Authentication and Leaderboards, used for the leaderboards on Android, and on iOS before version 1.2) and Unity In-App Purchasing: Unity Privacy Policy.
Apple Game Center and Apple iCloud (iOS leaderboards, trophies and save sync from version 1.2; we do not receive this data): Apple Privacy Policy.
Google Play Games Services (Android sign-in, leaderboards, achievements and Saved Games from version 1.2; we do not receive your saved games): Google Privacy Policy and deleting your Play Games data.
Apple App Store and Google Play (downloads, payments, refunds, rating prompts including Google Play In-App Review, and the Play Install Referrer): Apple and Google.

These providers process information under their own terms and privacy policies, which we do not control. To the maximum extent permitted by law, we are not responsible for their practices, content or availability. We do not sell your personal information and we do not “share” it for cross-context behavioural advertising except through AdMob as described above and only with the consent or opt-out choices the law gives you. We may disclose information if the law requires it, to protect rights and safety, or as part of a sale or transfer of the Game, subject to this policy.

11. Children

Tiny Bastion is rated 9+ on the App Store and is intended for a general audience. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (or the higher age required in your country). If you believe a child has provided personal information, email us and we will delete it. Parents can limit ads, tracking, purchases, Game Center and Google Play Games with the parental controls on Apple and Android devices (such as Screen Time on iPhone and iPad, and Google Family Link on Android).

12. Retention

Progress and settings stay on your device until you delete the Game or its data. On iOS, the iCloud copy of your save stays in your iCloud account until a newer save replaces it or it is removed under Apple’s iCloud settings and policies. Apple keeps Game Center scores and trophies under its own policies. On Android, Google keeps your Play Games profile, scores, achievements and saved games under its own policies until a newer save replaces the saved game or you delete them in your Play Games settings. Unity leaderboard entries are kept while the leaderboard runs. Firebase Analytics data is kept for up to 14 months, Crashlytics crash reports for up to 90 days, and Unity’s standard retention applies to leaderboard and sign-in data it stores for us. Data you ask us to delete is deleted within a reasonable time, unless we must keep it to meet legal obligations, resolve disputes or prevent fraud.

13. International transfers

Our service providers may process information in the United States and other countries whose data-protection laws may differ from yours. Where the law requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms offered by those providers.

14. Your rights and deleting your data

Depending on where you live (for example under the GDPR, UK GDPR, or California CCPA/CPRA), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict processing (for gameplay analytics, the quickest way is Settings > Analytics), to withdraw consent at any time (without affecting earlier processing), and to opt out of the sale or sharing of personal information or of targeted advertising. To make a request, email apps.jabbari@gmail.com with the subject “Tiny Bastion privacy request”. Because the Game has no accounts of its own, we may ask for your leaderboard name and device type to help us find your data. We cannot access your iCloud copy, your Game Center data or your Google Play Games data (including your saved games), so please send requests about them to Apple or Google. We will not discriminate against you for exercising your rights. You can also complain to your local data-protection authority.

Deleting your data. Tiny Bastion has no account of its own to delete. To delete what is stored on your device, delete the Game or clear its data. To delete the Game’s Google Play Games data (scores, achievements and saved games) or your Play Games profile, use your Play Games profile settings (see Google’s help page). To delete data that Apple holds (your iCloud copy and Game Center data), use your Apple Account settings. To ask us to delete the analytics, crash and leaderboard data that our service providers hold for your installation, email apps.jabbari@gmail.com with the subject “Tiny Bastion delete my data” and, if you can, your leaderboard name and device type. We handle deletion requests within a reasonable time and within any period the law requires, except for data we must keep under section 12.

15. Security

Information is encrypted in transit between the Game and our service providers. No method of transmission or storage is completely secure, and to the maximum extent permitted by law we cannot guarantee absolute security.

16. This website and short links

The Site does not use cookies, analytics or advertising scripts. Fonts are loaded from Google Fonts, which receives standard connection information such as your IP address. Our hosting provider keeps standard access and security logs. Short links (getmjb.app and mjabbari.com/get) read your device type and an optional campaign tag only to send you to the right store. They set no cookies and keep no logs of their own beyond the host’s access logs. Emailing us shares your email address and message with us through your email provider.

17. Changes to this policy

We may update this policy when the Game, its services or the law change. The effective date above shows the latest version, and we will give notice of material changes where the law requires it.

18. Contact

For privacy questions or requests, email apps.jabbari@gmail.com.