Privacy Policy
Pyxis · Effective
This policy explains what information the game “Pyxis” (the “Game”) collects, why, how long it is kept, and how it is deleted.
The data controller for the Game is Eastrock Games (an individual developer). Contact: support@east.rocks
1. Information We Collect
| Item | When | Purpose |
|---|---|---|
| Email address | When you link an email (optional) | Sending login codes (OTP), account recovery |
| Game data (characters, currency, progress) | During play | Providing the game service |
| IP address | On server requests | Abuse prevention (rate limiting). Not stored separately |
| Advertising-related data (advertising identifier, IP address, ad interactions such as views and taps, and ad SDK diagnostics) | While the app is running (when the ad SDK is active) | Serving Google AdMob ads, verifying ad views, and preventing fraud. Collected directly by Google’s ad SDK |
| Error diagnostics (the error and where it occurred, device model, operating system, graphics device, app version, a random per-install identifier, your game account identifier if you are signed in, and an IP address with its last part removed) | When the app hits an error or closes unexpectedly | Fixing bugs and improving stability |
If you start as a guest, an anonymous account is created without an email. We do not collect real names, phone numbers, contacts, or precise (GPS) location. Google’s ad SDK may, however, estimate your general region from your IP address.
Errors that happen while you are signed in include your game account identifier (a random internal ID our server creates for each account), so we can find and fix the errors on an account you contact us about. Your email address is not sent. The per-install identifier is a random value generated by the app, used only to group errors from the same device, and it is gone when you uninstall the app. We do not send screenshots, log files, or anything you type in the Game.
In regions where consent is required (such as the European Economic Area and the United Kingdom), an ad consent screen is shown when you first open the app, and the ad SDK does not run until you have made your choice.
2. Third Parties
| Processor | Purpose | Notes |
|---|---|---|
| Google AdMob | Rewarded advertising | Your Ad ID, IP address, ad interactions, and ad SDK diagnostics are shared with Google. All ads are opt-in — there are no forced ads. Google Privacy Policy |
| Google (Gmail) | Sending login emails | If you link an email, login code emails are sent through Google’s mail servers |
| Oracle Cloud | Server hosting | The game server and database run in Oracle Cloud’s South Korea (Chuncheon) region |
| Cloudflare | Network security and delivery, backup storage | Server traffic passes through Cloudflare, and encrypted server backups are stored in Cloudflare storage |
Other than the cases in the table above, we do not provide personal information to third parties, and we do not sell it for money. Sharing information with Google for personalized advertising may, however, count as a “sale” or “sharing” under the laws of some U.S. states. If you are in such a region, you can opt out on the choice screen shown in the app, or under Settings → Change ad consent.
Error diagnostics are stored on a server we operate ourselves and are not sent to an outside analytics provider.
3. Legal Bases for Processing (EEA and UK users)
| Processing | Basis |
|---|---|
| Account and game data, email (if linked) | Performance of a contract — needed to provide the game service |
| IP address processing for abuse prevention | Legitimate interests — protecting the service from abuse |
| Error diagnostics | Legitimate interests — fixing bugs and keeping the app stable. No email is sent, and the data is deleted after 90 days |
| Advertising-related data for personalized ads | Consent — chosen on the in-app consent screen, and withdrawable at any time under Settings → Change ad consent |
4. Your Rights
You may request access, rectification, erasure, restriction of processing, data portability, and object to processing of your personal information, and you may withdraw consent at any time where processing is based on consent.
- Erasure: you can do this yourself as described in “7. Account Deletion” below.
- Withdrawing ad consent: in the Game, Settings → Change ad consent
- Other requests: email support@east.rocks and we will respond within one month. To verify your identity, please write from the email address linked to your account.
If you are unhappy with how we handle your information, you have the right to lodge a complaint with the data protection authority in your country of residence. (Republic of Korea: Personal Information Protection Commission / privacy.kisa.or.kr)
5. International Transfers
The game server and database are located in the Republic of Korea (Oracle Cloud, Chuncheon region). If you use the Game from outside Korea, your information is transferred to and stored in Korea. The Republic of Korea is covered by an adequacy decision of the European Commission (December 2021) and by the United Kingdom’s adequacy regulations.
Google and Cloudflare process information on their own worldwide infrastructure, under their own international transfer safeguards (such as standard contractual clauses).
6. Retention
- Game data: deleted immediately when you delete your account.
- Backups: server backups kept for disaster recovery are automatically deleted after at most 90 days.
- Error diagnostics: automatically deleted 90 days after collection.
- Deletion records: when an account is deleted, we keep only an internal identifier and the deletion timestamp, with no expiry. This exists to keep your deletion effective — if deleted data reappears (for example, after restoring a backup), we use this record to delete it again. The record contains no personally identifying information such as an email address.
7. Account Deletion
In the app: you can delete your account at any time in Settings → Delete Account. All data — characters, currency, progress — is removed immediately and irreversibly, with no extra steps or waiting period.
Without the app: if you have already uninstalled the app, email support@east.rocks from the email address linked to your account to request deletion, and we will delete it within 30 days. Details: Account deletion
Guest accounts with no linked email can only be deleted inside the app, because we have no way to verify who is asking.
Deleting your account does not remove error diagnostics; they are deleted automatically after the retention period above (90 days). Once your account is deleted, the account identifier in any remaining records no longer points to any account.
8. Children’s Privacy
The Game is not directed at children under 16, and we do not knowingly collect personal information from children. If we learn that information from a child under 16 has been collected, we will delete it without delay.
9. Contact
Privacy inquiries: support@east.rocks
10. Changes
If this policy changes, we will update this page and revise the effective date.