Privacy Policy

1. Who is responsible for your data

Shadow Heist (the “Game”) is published by:

Publisher

Short & Petit

Contact

support@shortandpetit.com

For the purposes of the EU General Data Protection Regulation (GDPR), Short & Petit is the data controller for any personal data described in this policy. Given how little data the Game involves, we are not required to appoint a Data Protection Officer; write to us at the address above with any question about this policy.

2. Data stored on your device

The Game saves your progress locally, using the standard preference storage provided by your operating system. This includes:

• Campaign progress — which missions you have completed and unlocked
• Your in-game coin balance, tool charges, lives, and any active pass
• The collection of items you have found
• Your fastest completion time for each mission
• Your daily reward streak and the date of your last claim
• Settings such as language, audio volumes and graphics quality
• Identifiers of purchases already credited, so a purchase is not credited twice

This data never leaves your device. We have no server that receives it, no way to read it, and no copy of it. It is not personal data in our hands because it never reaches us.

You can erase all of it at any time by uninstalling the Game, which removes this storage entirely. Note that this also permanently deletes your progress, and we cannot restore it.

3. Gameplay statistics and crash reports (only with your consent)

The first time you open the Game, it asks whether you agree to share anonymous gameplay statistics and crash reports. If you choose No thanks, nothing described in this section is ever sent. If you choose Accept, the Game sends us:

• Gameplay statistics (Google Firebase Analytics): which screens you visit; when a mission starts, is won, failed or abandoned, and how long it took; your progress through the tutorial; coins earned and spent inside the Game and what they were spent on; which items you look at in the shop and whether a purchase completed (the product and its price, never your payment details); and basic performance figures such as frame rate and loading times.
• Crash reports (Google Firebase Crashlytics): the technical state of the Game when it crashes or hits an error — where in the code it happened, the Game version, and the screen or mission you were on.

Both come with technical information about your device: its model, operating system and version, language, the Game version, and an approximate country that Google derives from the connection (we do not receive your IP address or anything more precise). This is linked to a random identifier created when the Game is installed. That identifier is not your advertising identifier, is not linked to your name, email or any account, and is deleted when you uninstall the Game or use Settings → Privacy → Delete my analytics data.

We do not collect your name, email address, phone number, contacts, precise location, advertising identifier, or anything you type.

This data is used only by us, only to improve the Game. It is never sold, never used for advertising, and never combined with data from other sources.

4. Purchases

The Game offers optional purchases of in-game coins. These transactions are processed entirely by the App Store (Apple) or Google Play (Google), depending on where you obtained the Game.

We never see, receive or store your payment details. We do not receive your name, billing address, card number or any part of it. The Game receives only a confirmation from the platform that a given purchase completed, which it uses to credit your coins.

Your purchase is governed by the privacy policy of the platform you bought it from:

• Apple Privacy Policy
• Google Privacy Policy

5. Downloadable game content

To keep the initial download small, the Game's environment artwork is delivered by the platform after installation — through Apple's On-Demand Resources or Google Play Asset Delivery.

These downloads are served by Apple's and Google's own infrastructure. As with any download, the platform's servers necessarily see your device's IP address in order to send the files. We do not operate these servers, receive no information about these downloads, and cannot identify you from them.

6. Contacting support

If you tap Contact support in the Game's settings, the Game opens your own email application with a message pre-filled with technical information that helps us reproduce a problem:

Three things are worth being clear about here:

• The Game does not send this message. It hands it to your email application, where you can read, edit or delete any part of it before sending, or simply not send it at all.
• The device identifier is the one your operating system provides to applications. On iOS this is the “identifier for vendor”, which is specific to our apps on your device and is reset when you uninstall them. It is not your advertising identifier, and it cannot be used to identify you personally.
• If you do send the email, we receive it — including your email address and whatever you wrote — because that is how email works. We use it only to answer you.

Support emails are kept only as long as needed to resolve your request and to keep a record of it, and no longer than three years from our last exchange. The legal basis is our legitimate interest in providing support for the Game (GDPR Art. 6(1)(f)).

7. Game Center and Google Play Games

The Game contains support for Apple Game Center and Google Play Games Services for achievements and leaderboards. This feature is currently disabled and no data is exchanged with either service.

If we enable it in a future version, it will remain optional, it will be governed by Apple's or Google's own privacy policy linked in section 4, and we will update this policy before doing so.

8. What the Game does not do

For the avoidance of doubt, Shadow Heist contains:

• No user accounts, sign-up or login
• No analytics or crash reporting without your consent (section 3)
• No advertising, ad networks or advertising identifiers
• No social-media integrations or share trackers
• No location, contacts, camera, microphone or photo access
• No sale or sharing of personal information to anyone, for any purpose

The Game does not ask for permission to track you (App Tracking Transparency on iOS), because it does not track you across other companies' apps or websites.

The Game requests no runtime permissions. Network access is used only for the platform purchase flow, for downloading the game content described in section 5 and, if you agreed to it, for the statistics and crash reports described in section 3.

9. Children

Shadow Heist is a general-audience game. It is not directed at children under the age of 13 (or under 15 in France), and we do not knowingly collect personal data from children.

Gameplay statistics and crash reports are sent only with consent and contain nothing that identifies the player. If you are a parent or guardian and want them deleted for a child's device, use Settings → Privacy → Delete my analytics data on that device, or write to us. Likewise, if you believe a child has sent us personal data through the support email described in section 6, write to us and we will delete it.

10. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to its processing. You may exercise these rights at any time by writing to support@shortandpetit.com.

In practice, the personal data we may hold is limited to a support email you chose to send us and, if you agreed to it, the anonymous statistics and crash reports described in section 3. Your progress stays on your device, where you already control it directly — uninstalling the Game, as described in section 2, is the complete erasure of your Game data, and it does not require our involvement.

For the statistics and crash reports, you can at any time:

• Withdraw your consent in Settings → Privacy: nothing more is sent from that moment.
• Delete the link to your device with Settings → Privacy → Delete my analytics data: the random identifier is replaced, so data already sent can no longer be connected to your device.
• Ask us to delete data already sent: email us the Analytics ID shown in Settings → Privacy and we will ask Google to delete everything linked to it. Without that ID we have no way to find your data, because we hold nothing else that could point to you.

If you consider that your data protection rights have not been respected, you may lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr, or with the authority of your country of residence.

11. International transfers

If you agreed to share gameplay statistics and crash reports, they are processed by Google and may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and these transfers are also covered by the European Commission's Standard Contractual Clauses.

Purchases and content downloads are handled by Apple and Google under their own policies and safeguards, which are linked in section 4.

12. This website

The page you are reading is hosted on GitHub Pages. It contains no cookies, no analytics, no embedded fonts and no third-party requests of any kind. As with any web server, GitHub's infrastructure processes your IP address in order to serve the page; see the GitHub Privacy Statement.

13. Changes to this policy

If we change how the Game handles data, we will update this page and the “last updated” date at the top. Where a change is significant — for example enabling the achievements feature in section 7 — we will make it visible in the Game itself rather than relying on you to re-read this page. If we ever add a new kind of data collection, the Game will ask for your consent again before it starts.

14. Contact

Questions about this policy, or about privacy in Shadow Heist generally: support@shortandpetit.com.