Privacy policy
AURA BANDITS does not ask for your name, email or a password to play. We keep what is needed for the game to work, to keep it fair and to fund it with ads.
Who is responsible
Angel M., an individual based in Spain, publishing under the trade name NAMAJI GAMES. Contact for any privacy matter: namajigames@gmail.com.
What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| An anonymous player ID created when you open the game. If you sign in with Apple, your Apple ID identifier and, if you share it, your email (or Apple's private relay email). | Keeping your account and progress. | Contract (Art. 6(1)(b) GDPR) |
| Your public alias and, if you choose them, your country and region. | Leaderboards and battles: other players see your alias, your scores and the flight of your runs (the battle "ghost"). | Contract |
| If you use Bands: your player ID, the bands you belong to (and the name of the ones you create), the invitations you send or receive and your challenges (with the flight of your attempts). | Bands: competing only with people you invite or who invite you. Only the members of your band see it (and, for an invitation, whoever receives it). | Contract |
| Your runs (score, towers and the taps of each run), battles, records, packs, Bandits, aura dust and upgrades. | Saving your progress, the leaderboards, and checking every run is genuine (the server replays it). | Contract and legitimate interest in fair play (Art. 6(1)(f)) |
| Reports you make or receive (of aliases and band names), blocks and alias history. | Moderating offensive aliases and names and protecting players. | Legitimate interest and App Store rules |
| Your purchases (product and transaction ID). We never see your payment details. | Giving you what you buy and restoring it. | Contract |
| In-game usage events (for example "run finished" or "pack opened"). | Understanding what works and improving the game. | Legitimate interest (you can object by emailing us) |
| Messages you send to support. | Replying to you. | Consent and legitimate interest |
Ads
The game is free and funded by Google AdMob ads. Before the first ad (when you finish your tenth game, or earlier if you ask for a rewarded one) we show you Google's consent message and then Apple's tracking permission; your first games have no ads or permission prompts. Only if you agree can ads be personalised using your iPhone's advertising identifier. If you do not agree, Google shows non-personalised or limited ads. In any case Google processes technical data such as your IP address (for an approximate location), device type and ad interactions, as explained in its partner policy.
You can change your choice at any time in the in-game Shop (Privacidad de anuncios button) and in iPhone Settings → Privacy & Security → Tracking. Buying "Remove ads" removes the ads between runs.
Who we share data with
- Supabase (game database and server): data is stored in the European Union (Ireland).
- Apple: App Store, purchases, Game Center and Sign in with Apple.
- RevenueCat: manages the status of your purchases.
- Google (AdMob): ads, as explained above.
- Cloudflare: hosts this website. This website uses no cookies and no analytics.
Some of these providers are based in the United States. Those transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell your data.
How long we keep it
For as long as you keep your account. If you delete it in the game (Ajustes → Borrar cuenta), your profile, runs, Bandits, battles, reports and blocks are deleted from our server right away. Usage events are left with no link to you. Backups, if any, roll over on their normal cycle.
Your rights
You can ask for access, rectification, erasure, objection, restriction or portability by emailing namajigames@gmail.com (include your alias). You can also complain to the Spanish data protection authority, the AEPD, or to your local authority.
Children
The game does not ask for your age. If you are under 14, you need permission from a parent or guardian to play and to accept personalised ads.
Security
Connections are encrypted (HTTPS) and only the game server can write to the database. Each player can only read their own data; of other players, only what is public in leaderboards and battles is visible.
Changes
If we change this policy, we will update the date above and, for important changes, let you know in the game.