Privacy Policy

Last Updated: September 6, 2026

This Privacy Policy explains how Infiltrate: Shadow Heist ("the Game", "we", "our", or "us") handles information when you download and play the Game on Android or iOS. We built the Game to work without requiring an account, a login, or any personal profile — this policy is here so you know exactly what the small number of third-party services we do use collect, and what choices you have about it.

1. Information We Collect

Game data stored only on your device. Your progress, coin balance, unlocked levels, and settings (music/SFX volume, language, control layout) are saved locally using your operating system's standard app storage (NSUserDefaults on iOS, SharedPreferences on Android). We do not operate a server that receives, stores, or backs up this data — it never leaves your device unless you uninstall the app or clear its storage, at which point it is gone.

Advertising data, via Google AdMob. The Game shows optional advertisements — including a "watch an ad to continue" reward option — served by Google AdMob. To deliver, measure, and (where permitted) personalize ads, Google and its advertising partners may collect information such as: your device's advertising identifier (Google Advertising ID on Android, Apple's IDFA on iOS, subject to your device's permission settings), IP address and approximate location derived from it, general device information (model, OS version), and ad interaction data (impressions, clicks, completions). We also use Google's User Messaging Platform (UMP) to present a consent/ad-choices dialog where required by law (for example, in the EEA, UK, and Switzerland). We do not receive or store this data ourselves — it is collected and processed directly by Google under its own privacy policy (linked below).

Purchase data, via RevenueCat and the app stores. If you buy a coin pack or the premium bundle, the transaction itself is handled entirely by Apple's App Store or Google Play billing — we never see your payment card number or other financial account details. Purchase receipts and an anonymous purchaser identifier are then validated through RevenueCat, our subscription/purchase management provider, so the Game can unlock what you bought. RevenueCat acts as our data processor for this purpose and does not use purchase data for its own advertising.

Information you choose to give us. If you contact us through the Support page, we receive whatever you enter into that form — typically your name, email address, platform, and message — solely so we can read and reply to you.

We do not collect your precise (GPS) location, contacts, photos, microphone or camera data, and we do not require or support account creation or sign-in.

2. How We Use Information

We do not sell your personal information for money, and we do not use any of the above to build an advertising profile of you outside of the Google advertising services described above.

3. Third-Party Services

The Game embeds the following third-party SDKs. Each operates under its own privacy policy, which we encourage you to read:

We do not currently use any separate analytics, crash-reporting, or attribution SDK beyond what is listed above.

4. Your Privacy Choices

You can limit ad personalization and advertising-identifier use at the operating-system level at any time:

5. Children's Privacy

Infiltrate: Shadow Heist is a general-audience game and is not directed at children under 13 (or the equivalent minimum age in your region). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information (for example, through the Support form), please contact us using the details below so we can delete it.

6. Your Rights (EEA / UK / Switzerland and California)

If you are located in the European Economic Area, the UK, or Switzerland, you have rights under GDPR (or equivalent local law) to access, correct, delete, restrict, or port your personal information, and to object to or withdraw consent for its processing. If you are a California resident, you have similar rights under the CCPA/CPRA, including the right to know what personal information is collected and to opt out of its "sale" or "sharing" (which, under California law, can include ad personalization — see the opt-out options in Section 4). Because most of the data described in this policy is collected directly by Google or RevenueCat rather than by us, the fastest way to exercise a right over that data is often through their own privacy tools linked in Section 3; we're glad to help route any request sent to us as well.

7. Data Retention

Locally stored game data persists on your device until you uninstall the Game or clear its storage. We retain support communications only for as long as needed to resolve your inquiry. Google and RevenueCat retain the data they process according to their own retention policies, linked in Section 3.

8. International Data Transfers

Our third-party service providers (Google, RevenueCat, Apple) may process and store information on servers located outside your country of residence, including in the United States. Where required, they rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

9. Security

We rely on the security of your device's operating system for locally stored data, and on the security practices of Apple, Google, and RevenueCat for anything they process on our behalf. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

10. Changes to This Policy

We may update this policy as the Game changes — for example, if we add a new third-party service. We will update the "Last Updated" date above when we do, and material changes will be reflected here before they take effect.

11. Contact Us

Questions about this policy or your data can be sent to infiltrate@saysplit.app or through our Support Page.