Privacy Policy

1. Who is responsible for your data

Shadow Heist (the “Game”) is published by:

Publisher

Short & Petit

Contact

support@shortandpetit.com

For the purposes of the EU General Data Protection Regulation (GDPR), Short & Petit is the data controller for any personal data described in this policy. Given how little data the Game involves, we are not required to appoint a Data Protection Officer; write to us at the address above with any question about this policy.

2. Data stored on your device

The Game saves your progress locally, using the standard preference storage provided by your operating system. This includes:

• Campaign progress — which missions you have completed and unlocked
• Your in-game coin balance, tool charges, lives, and any active pass
• The collection of items you have found
• Your fastest completion time for each mission
• Your daily reward streak and the date of your last claim
• Settings such as language, audio volumes and graphics quality
• Identifiers of purchases already credited, so a purchase is not credited twice

This data never leaves your device. We have no server that receives it, no way to read it, and no copy of it. It is not personal data in our hands because it never reaches us.

You can erase all of it at any time: use Settings → Reset to factory defaults inside the Game, or simply uninstall the Game. Uninstalling removes this storage entirely. Note that this also permanently deletes your progress, and we cannot restore it.

3. Purchases

The Game offers optional purchases of in-game coins. These transactions are processed entirely by the App Store (Apple) or Google Play (Google), depending on where you obtained the Game.

We never see, receive or store your payment details. We do not receive your name, billing address, card number or any part of it. The Game receives only a confirmation from the platform that a given purchase completed, which it uses to credit your coins.

Your purchase is governed by the privacy policy of the platform you bought it from:

• Apple Privacy Policy
• Google Privacy Policy

4. Downloadable game content

To keep the initial download small, the Game's environment artwork is delivered by the platform after installation — through Apple's On-Demand Resources or Google Play Asset Delivery.

These downloads are served by Apple's and Google's own infrastructure. As with any download, the platform's servers necessarily see your device's IP address in order to send the files. We do not operate these servers, receive no information about these downloads, and cannot identify you from them.

5. Contacting support

If you tap Contact support in the Game's settings, the Game opens your own email application with a message pre-filled with technical information that helps us reproduce a problem:

Three things are worth being clear about here:

• The Game does not send this message. It hands it to your email application, where you can read, edit or delete any part of it before sending, or simply not send it at all.
• The device identifier is the one your operating system provides to applications. On iOS this is the “identifier for vendor”, which is specific to our apps on your device and is reset when you uninstall them. It is not your advertising identifier, and it cannot be used to identify you personally.
• If you do send the email, we receive it — including your email address and whatever you wrote — because that is how email works. We use it only to answer you.

Support emails are kept only as long as needed to resolve your request and to keep a record of it, and no longer than three years from our last exchange. The legal basis is our legitimate interest in providing support for the Game (GDPR Art. 6(1)(f)).

6. Game Center and Google Play Games

The Game contains support for Apple Game Center and Google Play Games Services for achievements and leaderboards. This feature is currently disabled and no data is exchanged with either service.

If we enable it in a future version, it will remain optional, it will be governed by Apple's or Google's own privacy policy linked in section 3, and we will update this policy before doing so.

7. What the Game does not do

For the avoidance of doubt, Shadow Heist contains:

• No user accounts, sign-up or login
• No analytics or telemetry of any kind
• No crash-reporting service
• No advertising, ad networks or advertising identifiers
• No social-media integrations or share trackers
• No location, contacts, camera, microphone or photo access
• No sale or sharing of personal information to anyone, for any purpose

The Game requests no runtime permissions. Network access is used only for the platform purchase flow and for downloading the game content described in section 4.

8. Children

Shadow Heist is a general-audience game. It is not directed at children under the age of 13 (or under 15 in France), and we do not knowingly collect personal data from children.

Because the Game collects no personal data from anyone, it collects none from children either. If you are a parent or guardian and believe a child has sent us personal data through the support email described in section 5, write to us and we will delete it.

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to its processing. You may exercise these rights at any time by writing to support@shortandpetit.com.

In practice, the only personal data we ever hold is a support email you chose to send us. Everything else stays on your device, where you already control it directly — the factory reset described in section 2 is the complete erasure of your Game data, and it does not require our involvement.

If you consider that your data protection rights have not been respected, you may lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr, or with the authority of your country of residence.

10. International transfers

We do not transfer personal data outside the European Union, because we do not collect any. Purchases and content downloads are handled by Apple and Google under their own policies and safeguards, which are linked in section 3.

11. This website

The page you are reading is hosted on GitHub Pages. It contains no cookies, no analytics, no embedded fonts and no third-party requests of any kind. As with any web server, GitHub's infrastructure processes your IP address in order to serve the page; see the GitHub Privacy Statement.

12. Changes to this policy

If we change how the Game handles data, we will update this page and the “last updated” date at the top. Where a change is significant — for example enabling the achievements feature in section 6 — we will make it visible in the Game itself rather than relying on you to re-read this page.

13. Contact

Questions about this policy, or about privacy in Shadow Heist generally: support@shortandpetit.com.