Privacy Policy

This policy explains what information we collect when you play our games, what we do with it, and what you can do about it. We have tried to keep it short and readable. Where something applies only to some of our games, or only in some countries, we say so.

1. About this policy

1.1 Who we are

We are Vistrex Limited, an international game development company dedicated to providing engaging and secure gaming experiences, registered in Cyprus under number HE 385253. In this policy we call ourselves “we”, “us” and “our”.

We are the controller of the personal information described here. That means we decide what is collected through our games and why.

You can reach our privacy team at support@dozsurvival.com.

1.2 What this policy covers

This policy covers every mobile game we publish, together with player support, in-game features and anything else we offer through them. We call all of this the “Services”. It applies to the games we publish today and to games we release in the future, unless a particular game tells you something different.

Our games are not all the same. So, this policy uses conditional wording — “if a game offers”, “depending on which of our Services you use” — and that wording is meant literally. If a feature does not exist in the game you play, the part of this policy does not apply to you.

This policy does not cover the app stores you download our games from. Apple and Google collect and use information under their own privacy policies, which we do not control.

1.3 The short version

• We collect what we need to run the game, keep it fair, fix what breaks, and show ads.
• Advertising is how our games stay free. Personalised ads happen only if you agree, and you can change your mind at any time in the game’s privacy settings.
• We do not ask for your name, your postal address or your phone number.
• You can delete your account and the information linked to it from inside the game.
• Our games are not made for children, and we do not knowingly collect information from them.
• Everything below is the detail. If something is unclear, write to us.

2. What information we collect

We have grouped this by where the information comes from: what you give us, what we collect automatically, and what we receive from other companies.

2.1 Information you give us

1. Account and sign-in. Most of our games can be played without an account. If you create one, we hold a username, a display name, an email address, an account identifier and the date you created it. We use this to save your progress, to let you play on more than one device, and to get you back into your account if you lose access to it.
2. Signing in through another service. Some games let you sign in with a Google or Facebook account instead. This is always optional. If you use it, we receive a user identifier from that service, and the profile information you allow it to share with us — typically your name, profile picture and email address, and on Facebook your friends list, which we use only to show you which of your friends play the same game. You can disconnect the link at any time in the game’s settings or from your account with that service.
3. Player support. If you contact us for help, we receive your message and whatever you choose to put in it, along with basic information about your device and your game account so that we can find the problem.
4. Purchases. If a game offers in-app purchases, the app store or payment provider handles the payment. We receive the amount, the currency, the date and time, the order identifier and any voucher code used. We never see your card number.
5. Things you write or upload. If a game offers chat, player names, teams or similar features, we receive what you put there. Please do not put personal details into it — other players can see it.
6. Surveys, contests and test versions. If you take part, we receive what you send us, which may include an email address so that we can reply or send a prize.

2.2 Information we collect automatically

1. Identifiers. Your device advertising identifier (the Apple IDFA or the Google Advertising ID), the Android ID where your device has one, and identifiers that we or our partners generate for your device or for your installation of a game.
2. Device and connection. Device model, operating system and version, language, country, screen and memory characteristics, network type, mobile operator and IP address.
3. How you play. Level and progress, in-game currency and items, sessions, the features you use, purchases made inside the game, and similar gameplay events.
4. Technical and diagnostic information. Crashes, errors, load times and performance data, so that we can find out what broke and fix it.
5. Advertising information. Which ads were shown to you, whether you interacted with them, and whether an ad led to an install.
6. Approximate location. We work out roughly where you are — country, and sometimes region or city — from your IP address. We do not need your precise location to run a game, and we do not use it ourselves.
7. Precise location and device recognition, only if you switch them on. Some of our advertising partners ask separately for permission to use your precise location, and to recognise your device from its technical characteristics. These two are listed on their own on the privacy screen, under “special features”. They are switched off unless you switch them on, and if you leave them off, neither we nor our partners use them.

2.3 Information we receive from others

1. App stores. Confirmation of purchases and refunds, and aggregated information about installs.
2. Advertising and measurement partners. Information about which advertising campaign brought you to a game, and information used to measure and to select advertising, in line with the choices you have made.
3. Sign-in providers. Where you sign in through another service, the information described in clause 2.1(a).
4. Fraud prevention providers. Signals suggesting that installs, clicks or purchases were faked.

3. Why we use your information

Under the GDPR and the UK GDPR we need a legal basis for every use of your information. We name it in each clause below, with the article it comes from, so that you can check it rather than take our word for it. If you are in the United States, read clause 3.10 as well.

3.1 To make our games work

Running the game, saving and syncing your progress, delivering what you bought, and letting you use social features where a game has them.

Legal basis: performance of the contract between you and us, which is our terms of service (Article 6(1)(b)).

3.2 To keep our games safe and fair

Detecting and stopping cheating, bots, fake purchases, payment fraud and abuse; moderating chat and player names in games that have them; keeping accounts secure.

Legal basis: our legitimate interest in protecting our games, our players and our business (Article 6(1)(f)); and, where a moderation duty is imposed on us by law, compliance with a legal obligation (Article 6(1)(c)).

3.3 To fix what breaks and improve the games

Diagnosing crashes and errors, measuring performance, understanding which features are used, testing changes and balancing gameplay.

Legal basis: our legitimate interest in maintaining and improving our games (Article 6(1)(f)); and, where the measurement stores or reads information on your device, your consent (Article 6(1)(a)), which you give and withdraw on the privacy screen described in clause 4.2.

3.4 To show you ads

Our games are free, and advertising is how we pay for them. Ads may be personalised — selected using information about your device and your activity, including activity in other apps — or non-personalised, selected using little more than the game you are playing.

Legal basis: your consent (Article 6(1)(a)). Personalised advertising, and the sharing of information with advertising partners for that purpose, happen only if you agree. Clause 4 explains how to give and withdraw that agreement. Use of your precise location, and recognition of your device from its technical characteristics, need their own separate consent and are listed separately on the privacy screen.

3.5 To measure our own marketing

Working out which of our advertisements led to installs, how our campaigns performed, and where we should spend.

Legal basis: your consent (Article 6(1)(a)), where this uses identifiers or information taken from your device that require it; otherwise our legitimate interest in knowing whether our marketing works (Article 6(1)(f)).

3.6 To communicate with you

Answering support requests, sending you service messages about a game, and — if you have allowed them — push notifications about events and offers.

Legal basis: performance of our contract with you for support and service messages (Article 6(1)(b)); your consent for push notifications and promotional messages (Article 6(1)(a)). You can switch push notifications off in your device settings at any time.

3.7 To meet legal obligations and defend ourselves

Keeping tax and accounting records, responding to lawful requests from public authorities, and establishing, exercising or defending legal claims.

Legal basis: compliance with a legal obligation (Article 6(1)(c)); and our legitimate interest in defending our rights (Article 6(1)(f)).

3.8 Where we rely on legitimate interests

Legitimate interests appear three times above: keeping our games safe and fair, keeping them working, and defending our rights. In each case we have weighed our interest against your rights and freedoms and concluded that the processing is proportionate and would not surprise you. We keep a written record of that assessment and will summarise it for you if you ask.

You can object to any of it at any time, on grounds relating to your particular situation (Article 21(1) GDPR). If you object, we stop, unless we can show compelling legitimate grounds that override your interests or we need the processing for legal claims. If we ever process your information for direct marketing on this basis, you can object at any time and we stop, with no exception and no balancing (Article 21(2)–(3) GDPR).

3.9 Profiling, and decisions made automatically

Your information is profiled for advertising: our partners build and use profiles to decide which ads to show you. That happens only if you agree on the privacy screen, and you can stop it at any time.

We do not make decisions about you by automated means alone that produce legal effects concerning you or that affect you in a similarly significant way, within the meaning of Article 22(1) GDPR. Our anti-cheat and anti-fraud systems are automated and can restrict or suspend an account. If that happens to you, you can ask us to look again, and a person will.

3.10 A note on legal bases in other countries

The bases named above come from the GDPR and the UK GDPR, which are the laws we are established under. Not every country uses the same set, and in some places one of these bases is unavailable or is not the right one. Where that happens, we rely on the appropriate basis under the law that applies to you — for example consent where consent is required, or the necessity of processing in order to provide a service you asked for. If you are in the United States, the U.S. Supplement explains how this works there, because the starting point is different.

4. Advertising and your choices

4.1 How advertising works in our games

We do not choose the ads ourselves. We work with advertising technology companies that decide in real time which ad to show you. To do that they may receive your device advertising identifier, technical information about your device, and information about the advertising slot. Some of them build profiles that are used to select ads across different apps and websites.

4.2 The privacy screen

The first time you open one of our games we show you a privacy screen, run by a consent management platform that follows the IAB Transparency and Consent Framework. You can accept everything there, or open the settings on that screen and refuse everything, or decide purpose by purpose and partner by partner. If you refuse, we and our partners do not use your information to personalise advertising.

You can open the same screen again at any time from the game’s settings and change what you agreed to. Withdrawing agreement must be as easy as giving it, and it takes effect from the moment you do it — it does not make what happened before unlawful (Article 7(3) GDPR). Refusing or withdrawing does not restrict your access to any game or any feature of it.

4.3 Where to find the current list of partners

The companies we work with change over time, so we do not list them in this document — a list printed here would be out of date within months. The privacy screen shows the current list, what each company wants to do with your information, how long it keeps it, and a link to its own privacy policy. That list is the authoritative one.

4.4 Controls on your device

Whatever you choose in our games, your device gives you further controls:

• on iOS: Settings → Privacy & Security → Tracking, where you can refuse tracking for one app or for all apps;
• on Android: Settings → Google → Ads, where you can reset your advertising identifier or delete it entirely.

4.5 If you say no

Refusing personalised advertising does not lock you out of anything. The game plays the same way and costs the same. You will still see ads, but they will be selected using little more than which game you are playing.

Legal basis for those ads: your consent (Article 6(1)(a)), to the extent showing them involves storing or reading anything on your device; otherwise our legitimate interest in funding a free game (Article 6(1)(f)).

5. Who we share information with

We do not sell your personal information for money. We do share it with the following kinds of companies, and only as far as each of them needs it:

1. Service providers who run parts of our games for us — hosting, databases, crash reporting, analytics, customer support tools and push notifications. They act on our instructions and may not use the information for their own purposes.
2. Advertising and measurement partners, as described in clause 4 and subject to the choices you make on the privacy screen. Some of these companies decide for themselves how they use what they receive; where that is so, their own privacy policies apply and the privacy screen links to them.
3. App stores and platform providers, for purchases, refunds, sign-in and store analytics.
4. Professional advisers — lawyers, auditors and accountants — where they need the information in order to advise us.
5. Public authorities, where we are legally required to disclose information, or where disclosure is necessary to protect someone’s rights or safety.
6. A buyer or investor, if our business or part of it is sold, merged or reorganised. We would tell you if this changed who is responsible for your information.

To see which specific companies are involved in advertising at any given moment, open the privacy screen inside the game (clause 4.3).

Sharing information with advertising partners so that they can select ads for you across different apps counts as a “sale” or a “share” under some United States privacy laws, even though no money changes hands. The U.S. Supplement explains what that means and how to opt out.

6. Where your information is processed

We are based in Cyprus, and our own systems are in the European Economic Area. The servers that run our games, hold your progress and store our support records are located there.

Some of the companies described in clause 5 are established outside the EEA — advertising, measurement and analytics partners in particular. Where information reaches them, or where we transfer it outside the EEA or the United Kingdom, we rely on an adequacy decision of the European Commission or of the UK government where one covers the recipient, and otherwise on standard contractual clauses or another safeguard permitted by Article 46 of the GDPR, together with further measures where they are needed.

Concretely, the safeguards we use are the standard contractual clauses adopted by the European Commission under Article 46(2)(c) GDPR, together with the UK International Data Transfer Addendum where UK law applies, and additional technical and contractual measures where a transfer risk assessment shows they are needed. You can ask us for a copy of the safeguards covering a particular transfer, and we will send it, with commercially confidential terms removed.

The privacy screen names every advertising partner and links to its own privacy policy, so you can see for yourself which companies are involved and where they are based. If you refuse advertising purposes there, most of these transfers do not happen at all.

7. How long we keep information

We keep information for as long as we have a reason to, and no longer. In practice:

1. Game accounts and progress — while your account is in use, and for a period afterwards so that you can come back and find your progress where you left it. Accounts that stay inactive are deleted or stripped of anything that identifies you.
2. Support conversations — while your issue is open, and for a period afterwards in case you come back about the same thing.
3. Purchase records — for as long as tax and accounting law requires, which is set by law and not by us.
4. Technical and crash data — for as long as it is useful for diagnosing the problem, which is usually short.
5. Anything relevant to a dispute, an investigation or a legal claim — until the matter is over and the time limit for bringing a claim has passed.
6. Information held by advertising and measurement partners — for the periods those companies publish, which the privacy screen shows for each of them.

When we no longer need information that identifies you, we delete it, or we strip out what identifies you and keep only aggregate statistics.

8. Your rights and choices

8.1 What you can ask us to do

Depending on where you live, you can ask us to:

1. Tell you what we hold — confirmation of whether we process your information, a copy of it, and the details listed in Article 15 GDPR.
2. Correct it — fix what is wrong and complete what is missing (Article 16).
3. Delete it — where one of the grounds in Article 17 applies. Deleting your account inside the game is the fastest route.
4. Restrict it — pause what we do with it, in the situations listed in Article 18.
5. Object to it — as described in clause 3.8 (Article 21).
6. Hand it over — the information you gave us, and information generated by your play where the processing rests on consent or on a contract, in a structured, commonly used, machine-readable format, and sent to another company where that is technically feasible (Article 20).
7. Withdraw your consent — at any time, as described in clause 4.2 (Article 7(3)).
8. Complain — to a data protection authority (Article 77). Clause 13 says which one.

8.2 The quickest way is inside the game

Most of what you might want to do is in the game itself, in the settings menu under Privacy:

• Delete account — removes your game account and the information linked to it, without your having to contact us.

The exact wording of the menu may differ a little between our games.

8.3 Writing to us instead

Write us via the in-game “Support” section or to support@dozsurvival.com. Tell us which game you play and, if you can, your player ID — you will find it in the game’s settings. We may have to ask you something that shows the request really comes from you; we ask for as little as we can.

We answer within one month. If a request is complicated, or if there are several of them, we can take up to two further months, and we will tell you within the first month if we need them (Article 12(3) GDPR). We do not charge for this, unless a request is manifestly unfounded or excessive, and we will not treat you worse for asking.

8.4 What deleting actually means

When you delete your account:

1. your progress, purchases and items are gone and cannot be restored, on any device;
2. we remove the information linked to your account from our systems, or strip out what identifies you, within 30 days;
3. backups are overwritten on their normal cycle rather than edited, so information can survive there for a short period, during which it is not used for anything;
4. we keep what the law requires us to keep — purchase records for tax purposes, for example — and what we need in order to defend a legal claim;
5. information already held by advertising partners is handled under their own processes; the privacy screen links to each of them.

9. Younger players

Our games are not directed at children and are not designed for them. We do not knowingly collect personal information from anyone under 16.

Under Article 8 GDPR a child can consent to services like ours from the age of 16, and individual countries may lower that to no less than 13, so the age varies across Europe. We apply 16 everywhere rather than following each national age down, so that the rule is the same wherever you are.

Each game also carries an age recommendation in the App Store and on Google Play. Those ratings are set by the stores and by ratings boards, and they describe the content of a game — what it looks like and what happens in it. They are a separate thing from the rule above, which is about who may give us information.

If you are a parent or guardian and you believe your child has been playing one of our games and has given us information, write to us at support@dozsurvival.com. Tell us the game and, if you can, the player ID. We will delete the account and the information linked to it, and we will stop using that device identifier for advertising.

Some of our games have leaderboards, teams or in-game chat. Where a game has chat, messages sent in it are not private: we monitor them, community rules apply, and we act on what we find. Nobody should put a real name, an address, a school, a phone number or a photograph into a game chat.

Our games are free, and buying anything is always optional. Payments are handled by the App Store, Google Play, or payment provider — we never see a card number, and we cannot reverse a purchase ourselves.

We encourage parents and guardians to familiarize themselves with online safety practices and monitor their children’s in-game activities. Please visit our Parental Guide for tips on protecting children’s privacy, managing in-app purchases, and setting controls to ensure a child-friendly experience.

10. Keeping information safe

We take reasonable technical and organisational measures to protect information against loss, misuse and unauthorised access, and we require the companies that work for us to do the same. We review those measures as our games change. No system is completely secure, and we cannot promise that ours will never fail.

11. Changes to this policy

We update this policy when our games change or when the law does. The date at the top tells you when we last changed it.

If a change matters to you, we will tell you before it takes effect — inside the game, or in another way we expect will reach you. Where a change means we need your agreement, we will ask for it separately. Carrying on playing is not by itself agreement to a change.

If you would like to see an earlier version of this policy, write to us and we will send it to you.

12. If you are in the United Kingdom, Switzerland or the United States

12.1 The United Kingdom

Since the United Kingdom left the European Union it has its own version of the same law, the UK GDPR, read together with the Data Protection Act 2018. Everything in this policy applies to you in the same way, and every article referred to above has an equivalent in the UK version. You can complain to the Information Commissioner’s Office at Wycliffe House.

12.2 Switzerland

Switzerland is not in the European Economic Area and applies its own Federal Act on Data Protection. Everything in this policy applies to you, and references to the GDPR should be read as references to the corresponding provisions of that Act. You can complain to the Federal Data Protection and Information Commissioner in Bern.

12.3 The United States

The United States starts from a different place: rather than asking you first, the law generally lets processing happen and gives you the right to stop it. Because that difference runs through everything, it is set out separately in the U.S. Privacy Supplement, which sits alongside this policy and forms part of it. Where the Supplement says something different from this policy, the Supplement applies to you.

13. How to contact us

Vistrex Limited, 19 Omonoia Avenue, Constantinides Building, Office 203, 2nd floor, Limassol 3052, Cyprus.

Privacy questions and requests, help with a game: the Support option inside the game, or support@dozsurvival.com.

If you are not satisfied with our answer, you can complain to a data protection authority — the one where you live, where you work, or where you think something went wrong. Our own supervisory authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. Clause 12 names the regulators for the United Kingdom and Switzerland.

We would rather hear from you first, and we will always try to sort a complaint out ourselves. Coming to us does not take away your right to go to a regulator.

Vistrex Limited