Privacy Policy

Last updated: 11 November 2026

This Privacy Policy explains how personal data is handled in the mobile game Astral Wizards: Galaxy Survivors for Android and iOS (the "Game") and on the website astralwizards.com (the "Website"). We wrote it to be short and clear. If anything is unclear, write to us.

1. Who we are

The Game and the Website are published by Cloud Forest Infrastructure S.R.L., a company registered in Romania (Trade Register no. J10/768/2022, fiscal code 46309790, Buzău County), which acts as the data controller for the processing described here.

Contact for any privacy question or request: office@cloudforest.ro

2. The short version

• The Game has no accounts of its own. We do not ask for your name, email or any contact details. It offers one optional in-app purchase (the ARCHMAGE pack); the payment is handled entirely by Google Play on Android and by the Apple App Store on iOS, and we never see your payment details.
• On Android, achievements work through Google Play Games. If you use Play Games, Google handles your Play Games profile and achievements; we never see your email or Google account (section 3.4). On iOS, achievements and leaderboards work through Apple Game Center; Apple handles your Game Center profile and we never see your Apple Account (section 3.4).
• Your progress (gold, unlocks, settings, a run in progress) is saved on your device. If you use Google Play Games, a copy of your progress is also kept in your Play Games saved games, so you can continue on a new phone; Google stores it in your account and we cannot see it (section 3.4). On iOS, if iCloud is on, a copy of your progress is also kept in your iCloud account, so you can continue after reinstalling or on a new iPhone; Apple stores it in your account and we cannot see it (section 3.4). Your progress is never uploaded to us, unless you join the global ranks: then your game statistics are (section 3.8).
• Only if you say yes, the Game sends us anonymous gameplay statistics: what happens in each run (which map and hero, the build, how far you got) and how you use the Game (how long you play, the screens you visit and the buttons you tap), so we can balance and improve it. If you say no, nothing is sent. On iOS, the Game also includes Google Analytics for Firebase, only so that Google Ads can count the installs that come from our ads (section 3.7). There is no other analytics or tracking in the Game.
• Optional: the global ranks. Only if you join them in the Game, you choose a name and get a public profile on the Website with your game statistics, your places and your best runs. You can hide or delete it at any time in the Game (section 3.8).
• The Website counts visits with Umami, a privacy-friendly analytics tool that runs on our own server. It uses no cookies and does not store your IP address (section 4).
• The Game shows optional rewarded video ads through Google AdMob. Ads only appear when you choose to watch one. AdMob, provided by Google, processes some device data to serve and measure those ads, as described below.

3. Data processed in the Game

3.1 Game data stored on your device

The Game stores your save file and settings in the app's private storage on your device. This data is not accessible to us, is not included in Android cloud backups and is deleted from the device when you uninstall the Game or clear its data. On iOS it may be part of your device backup if you use iCloud Backup or back up your iPhone to a computer; those backups are handled by Apple or kept on your computer, and we cannot access them. If you are signed in to Google Play Games, the Game also keeps a copy of your progress in Play Games saved games (the cloud save, section 3.4). On iOS, if iCloud is on, it keeps a copy in iCloud (section 3.4).

3.2 Advertising (Google AdMob)

The Game uses Google AdMob to offer optional rewarded ads (for example, a daily gold gift, a revive, or doubling the gold earned in a run). To request, deliver, limit and measure ads and to prevent fraud, the Google Mobile Ads SDK integrated in the Game may collect and process:

• device identifiers, including the Android Advertising ID (or the app set ID) and, on iOS, the Identifier for Advertisers (IDFA, only if you allow tracking when iOS asks) or the identifier for vendors;
• your IP address, from which an approximate location (country or region) may be derived;
• device and app information (device model, operating system, language, app version);
• ad interaction data (for example, whether an ad was shown, watched to the end or tapped);
• diagnostic data (for example, crash and performance information of the ads SDK).

This data is processed by Google as described in How Google uses information from sites or apps that use its services and in the Google Privacy Policy. We do not receive your Advertising ID or IP address from Google; we only receive aggregated reports (such as the number of ads shown and the revenue earned).

3.3 Anonymous gameplay statistics (optional)

When you first open the Game, it asks whether you want to share anonymous gameplay statistics (earlier versions asked after the first run and only covered runs; if you said yes there, the Game asks again before sending anything about how you use it). Only if you answer yes, the Game sends short reports to our own server (api.astralwizards.com): one at the end of each run, and one for each play session, which is sent again with the latest numbers while you play. The reports contain:

• a random identifier created by the Game on your device when you agree (it is not your Advertising ID, device ID or any account, and we cannot link it to you);
• the game version, the platform (Android or iOS) and its version number, whether it is a test build, the Game's language, your device's language and region setting (for example "pt_BR"), the size of the game screen and the screen resolution, and your in-game settings (such as sound, music, vibration and the joystick);
• what happened in the run: the world, difficulty, hero, the weapons and upgrades you chose, how long the run lasted, kills, level reached, whether it was won, lost or quit and what ended it, damage taken and healed, a per-minute summary (level, health, kills, frame rate), how often and how long you paused, and how long you took to choose each level-up card;
• how you use the Game in each session: when it started and how long you played, the screens you visited in order and the time spent on each, the buttons you tapped and the menus you opened, where on menu screens you tapped without hitting a button (as a rough position on a grid), how many times you came back to the Game, whether optional rewarded ads were watched to the end, and the steps of an in-app purchase (started, completed, pending or cancelled; never any payment details);
• your overall progress in the Game (permanent upgrades, worlds cleared, number of runs, heroes, missions, cosmetics and gold) and the play time it took to first reach certain points (for example your first cleared world).

We do not collect your name, email, contacts, location, Advertising ID, device identifiers or device model. Like any web request, sending a report reveals your IP address to our server; it is not stored with the statistics and only appears in the short-lived server logs described in section 4. Reports played offline are kept on your device and sent later; they are sent over encrypted HTTPS.

We use the statistics only to balance difficulty, weapons and heroes, to improve the menus and how the Game guides new players, and to find bugs and performance problems. We keep them for up to 24 months, after which they are deleted or kept only as aggregated totals. You can stop sharing at any time in the pause menu (SETTINGS → SHARE STATS: OFF); this also deletes any reports not sent yet. Because the reports are not linked to you, we usually cannot tell which stored records are yours, but if you want us to delete data, write to us and we will help where possible.

3.4 Achievements, leaderboards and the cloud save (Google Play Games Services on Android, Apple Game Center and iCloud on iOS)

On Android:

The Game uses Google Play Games Services to show and unlock achievements. If you have a Play Games profile on your device, Google Play Games may sign you in automatically when the Game starts, or you can sign in from the Achievements screen. Using Play Games is optional: the Game works the same without it, you just do not earn achievements.

When you use Play Games, Google processes your Play Games profile (player ID, gamer name and avatar), your achievement progress and related device and usage information, as described in the Google Privacy Policy. When you sign in, Google asks you to allow the Game to access your Play Games activity and a private app data folder in your Google Drive that only this Game can use. The Game uses that folder only for its cloud save (Play Games saved games): one copy of your progress (gold, unlocks, upgrades, missions, cosmetics and game statistics; not your settings, language or a run in progress), which the Game reads when you sign in, so you can continue on another device or after reinstalling, and updates while you play. Google stores it in your account; we cannot access it. We do not receive your email address, your Google account details or your contacts. In Google Play Console we only see aggregated statistics, such as how many players unlocked an achievement.

You can manage or delete your Play Games profile and its data, including the Game's saved game, in the Google Play Games app or in your Google Account settings.

On iOS:

The Game uses Apple Game Center to show and unlock achievements and to post scores to its leaderboards (your survival time in ENDLESS and the gold you have earned). Using Game Center is optional: if you are signed in on your device it connects when the Game starts, and otherwise the Game offers Apple's sign-in when you open the achievements or a leaderboard. The Game works the same without it, you just do not earn achievements or appear on leaderboards.

When you use Game Center, Apple processes your Game Center profile (player ID and nickname), your achievements and your scores, as described in Apple's Privacy Policy. Other players can see your nickname and scores on the leaderboards. We do not receive your email address or your Apple Account details. In App Store Connect we can see the leaderboards and aggregated statistics.

The Game's cloud save on iOS uses iCloud: one copy of your progress (gold, unlocks, upgrades, missions, cosmetics and game statistics; not your settings, language or a run in progress) is kept in your iCloud account and updated while you play, so you can continue after reinstalling or on another device signed in to the same account. It needs no action from you and works without Game Center. If iCloud is off, your progress stays on your device. Apple stores it in your account; we cannot access it.

You can manage Game Center in your device's Settings (Settings → Game Center) and iCloud in Settings → your name → iCloud.

3.5 Your consent choices

If you are in the European Economic Area, the United Kingdom or Switzerland, the Game asks for your consent on first launch through Google's consent tool (Google User Messaging Platform, which implements the IAB Transparency & Consent Framework). You can accept, refuse, or choose per purpose. If you do not consent to personalised advertising, you may still see non-personalised or limited ads when you choose to watch one. On iOS, the Game also shows Apple's App Tracking Transparency prompt before ads are requested; if you do not allow tracking, the IDFA is not shared with the ads SDK.

You can change your choice at any time: open the pause menu during a run and tap AD PRIVACY. You can also reset or delete your Advertising ID, or opt out of ads personalisation, in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on your device). On iOS, you can change the tracking permission in Settings → Privacy & Security → Tracking. On iOS, the same choices also decide what Google Analytics for Firebase may store and use (section 3.7).

3.6 Legal bases

3.7 Install measurement for our ads on iOS (Google Analytics for Firebase)

We advertise the Game, for example on YouTube and in other apps, through Google Ads. On Android, Google Play tells Google Ads how many people installed the Game after one of our ads. The App Store does not, so the iOS version includes the Google Analytics for Firebase SDK, provided by Google. We use it for this one purpose: to let Google Ads count installs from our ads and show our ads to people who are likely to enjoy the Game. The Game sends no events of its own to Firebase and nothing about your runs.

The SDK starts only after Google's consent form (where it applies) and Apple's tracking prompt. It then records a few standard events on its own, such as the first time the Game is opened, app updates and sessions (start and engagement time), together with:

• an app instance ID created by the SDK for this installation, and the IDFA only if you allowed tracking when iOS asked;
• your IP address, which Google uses to derive an approximate location (country, region or city) and does not store;
• device and app information (device model, iOS version, language, app version);
• whether you came to the Game from one of our ads. Part of this matching can happen on your device (Google's on-device conversion measurement).

If you are in the European Economic Area, the United Kingdom or Switzerland, the SDK follows the choices you made in Google's consent form (section 3.5): if you do not agree to storing information on your device, or to the use of your data for ads, it does not store identifiers for that purpose and only sends limited data. We see only aggregated reports in Google Analytics and Google Ads (such as the number of installs from a campaign); we cannot identify you. Google Analytics keeps the event data for 2 months and the data tied to the app instance ID for up to 14 months. The data is processed by Google as described in How Google uses information from sites or apps that use its services and in the Google Privacy Policy. The Android version does not include this SDK.

3.8 Global ranks and public profile (optional)

The Game has global leaderboards and public player profiles on the Website (astralwizards.com/ranks). They are optional. Nothing described in this section happens unless you open STATS → PROFILE in the Game, and you only get a profile if you press JOIN there, after confirming that you are 18 or older and that you accept the rules in our Terms of Use.

Who you are. To know which profile is yours without making you create an account, the Game asks Google Play Games (on Android) or Apple Game Center (on iOS) to confirm your player identity to our server (api.astralwizards.com). On Android, our server exchanges a one-time code with Google for your Play Games player ID. On iOS, it checks a signature that Apple made for your Game Center player ID. We do not keep that ID: we keep only a one-way fingerprint of it, which cannot be turned back into the ID. We never receive your email address, your real name, your gamer name or your avatar. If you open the PROFILE screen but do not join, the fingerprint is deleted within 30 days.

What we store when you join:

• the name you choose, the wizard and look you pick as your avatar and, if you leave "country" on, the two-letter country code of your device's region setting (not your location);
• the social account names you choose to add (for example a YouTube or Twitch name);
• the game statistics of your save: runs, wins, time played, kills, damage, gold earned, the records of your best runs, how often you used each wizard, weapon and upgrade, what defeated you most often, the worlds you cleared, your missions, your ENDLESS records and your daily challenge results;
• for each ranked run (ENDLESS and the daily challenge): when it started and ended on our server's clock, its time, kills and level, whether it was won, the wizard and build, a per-minute summary used to check that the run is genuine, the platform and the game version;
• what is needed to run the service: the session that keeps the Game signed in to your profile, the date you joined and when you last played.

What is public. Your profile page and the leaderboards show your chosen name, avatar, country (if on), social account names, statistics, places and best runs with their builds to anyone who visits the Website. Social account names appear only after five finished runs. Profile pages ask search engines not to index them. The fingerprint, the session and the per-minute run summaries are never shown. You can hide your profile and your places at any time (PROFILE → PUBLIC: OFF), or hide only the country.

Reports. Visitors can report a name, a social account name or a run from a profile page. To count how many different people reported the same thing, we store each report with a one-way fingerprint of the reporter's IP address, for up to 90 days. When enough different people report the same thing, it is hidden automatically, as the Terms of Use describe.

How long, and deleting. We keep your profile until you delete it. PROFILE → DELETE PROFILE in the Game removes it from our server at once, with its statistics, runs and places. Only the bare name stays unavailable for 30 days, with no link to you, so that nobody can pose as you the next day. A profile that has not been used for 24 months is deleted in the same way. Weekly and daily results are removed after about two months; the top three of each week and day are kept in a hall of fame under the name used then, and lose that name when the profile is deleted. If you can no longer use the Game, write to us and we will delete the profile for you.

Where it is kept. On our own servers in Romania. Google takes part only in confirming your identity on Android, as described above. On iOS, Apple's signature is checked on our server without sending Apple anything about you.

4. Data processed on the Website

The Website does not use cookies, advertising or third-party fonts. Like any web server, our hosting keeps technical access logs (IP address, date and time, requested page, browser user agent and referrer) to deliver the pages, keep the service secure and investigate abuse. These logs are kept for a limited period (normally no longer than 30 days) and are not used to identify or profile visitors. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

To understand how the Website is used, we run Umami, an open-source analytics tool that we host ourselves (stats.cloudforest.ro, on our own servers in Romania); no third party receives this data. When you open a page, Umami records the page, the referring site, your browser, operating system, device type, screen size and language, and the country derived from your IP address. It also counts clicks on a few buttons and links, such as the Google Play and App Store buttons, the trailer, the press kit downloads and the email address. Umami does not use cookies and does not store anything on your device. It does not store your IP address: it only uses it, together with your browser details and a secret value that changes regularly, to compute a pseudonymous visit identifier that cannot be turned back into your IP address. We use these statistics only in aggregate, to see how many people visit and what they look at, and we keep them for up to 24 months. Legal basis: our legitimate interest in understanding and improving the Website (Art. 6(1)(f) GDPR); you can object at any time by writing to us, or block stats.cloudforest.ro with a content blocker.

The official trailer on the home page is shown as a still image. Only if you press play is the video loaded from YouTube in its privacy-enhanced mode (youtube-nocookie.com, operated by Google). From that moment Google receives your IP address and technical data about your browser and may store information on your device, as described in Google's Privacy Policy. Legal basis: your consent, given by pressing play (Art. 6(1)(a) GDPR). If you do not press play, nothing is sent to Google.

The free PC demo on the home page is shown as a preview that we host ourselves. Only if you click that preview is the official widget loaded from itch.io (operated by itch corp, United States). From that moment itch.io receives your IP address and technical data about your browser and sets a technical cookie (itchio_token) on your device, as described in itch.io's Privacy Policy. Legal basis: your consent, given by clicking the preview (Art. 6(1)(a) GDPR). If you do not click it, nothing is sent to itch.io. The plain links to our itch.io page are ordinary links: itch.io only receives data if you follow them.

5. When you contact us

If you email us, we use your email address and the content of your message only to reply and to handle your request, and we keep the correspondence for as long as needed for that purpose and for our legitimate record keeping.

6. Who receives data

• Google (Google Ireland Limited for users in the EEA/UK/Switzerland, and Google LLC), as the provider of AdMob, for the ad-related data described in section 3.2, as the provider of Google Analytics for Firebase and Google Ads, for the install measurement on iOS (section 3.7), as the provider of Google Play Games Services, for your Play Games profile and achievements (section 3.4) and for confirming your player identity if you use the global ranks (section 3.8), and as the provider of YouTube, if you choose to play the trailer on the Website (section 4).
• Apple (Apple Distribution International Ltd. for users in the EEA/UK/Switzerland, and Apple Inc.), as the provider of the App Store (including payment for the optional in-app purchase), iOS, Game Center and iCloud, under its own privacy policy, if you use the iOS version (section 3.4).
• itch corp (itch.io, United States), only if you choose to load the itch.io widget on the Website (section 4).
• Our hosting provider infrastructure, for the Website logs, the Website statistics (Umami) and for storing the optional gameplay statistics on our server.
• Anyone who visits the Website, for what your public profile and the leaderboards show, if you join the global ranks (section 3.8).
• Authorities, only where we are legally required to.

We do not sell personal data.

7. International transfers

Google may process data outside the EEA, including in the United States. Such transfers rely on the safeguards Google provides, such as the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses. If you choose to load the itch.io widget, your browser connects directly to itch.io, which processes that data in the United States under its own privacy policy.

8. Children

The Game is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data through the Game, contact us and we will help remove it. Joining the global ranks (section 3.8) also needs you to confirm that you are 18 or older.

9. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Apart from the optional anonymous statistics (section 3.3) and the optional global ranks (section 3.8), the Game does not send us data. You can see your global ranks profile on the Website and hide or delete it yourself in the Game at any time. Otherwise, ad-related, Firebase and Play Games data is held by Google, and Game Center and iCloud data is held by Apple; you can manage it through your Google Account, the Google Play Games app, your Apple Account and your Android or iOS settings, and we will help you with any request: write to office@cloudforest.ro.

You also have the right to lodge a complaint with a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

10. Security

The Website and our statistics and ranks servers are reached only over encrypted HTTPS connections. The Game keeps your save data in the app's private storage, which other apps cannot read.

11. Changes to this policy

We may update this Privacy Policy, for example when the Game changes. The date at the top shows the latest version; important changes will be announced on this page.