Privacy Policy

1. Who we are and what this policy covers

Tomodachi Games, based in Mexico, is responsible for the personal data it processes in connection with Doodle Duels and this game website. Contact us at [email protected] for privacy questions or requests. This policy explains the game’s local multiplayer features, advertising services, support communications and website. Advertising providers also process data under their own policies, linked below.

2. Information processed

• Game data: a nickname, preferences and game session information. Local multiplayer exchanges the information needed to play, including nicknames, drawings and scores, with other devices in the session. Avoid including personal or sensitive information in nicknames or drawings.
• Advertising and technical data: Google Mobile Ads (AdMob) and Unity Ads may process the advertising identifier (Android advertising ID or Apple IDFA, where available and permitted), IP address, approximate location inferred from IP, device model, operating system, language, app/SDK version, identifiers used by their services, diagnostics, ad requests, impressions, clicks and reward interactions. Collection depends on platform, provider, settings and applicable consent.
• Support: when you email us, we receive your email address, message and any information or attachments you choose to send. Do not send passwords or unnecessary sensitive information.
• Website: the hosting provider and external asset providers receive request information such as IP address, browser details and requested resource. This site loads styles, fonts and scripts from jsDelivr and Google Fonts. The language preference is stored locally in your browser; it is not an advertising-consent choice.

3. Device permissions

The camera is used only to scan a QR code to join a local game. Camera access is controlled by the operating system. Local network access allows players’ devices to connect. You can revoke permissions in device settings, although related features may stop working. Advertising identifiers are subject to platform controls; where Apple requires tracking permission, that permission is separate from regional advertising consent.

4. Why data is used and legal grounds

Game and connection information is used to provide the multiplayer service you request. Support messages are used to respond to you. Advertising data is used to deliver ads and rewards, measure ad performance, limit repeated ads, diagnose failures and detect fraud; with the required consent, it can also be used to personalize ads and build advertising profiles. This does not mean every provider collects every category in every session.

Where GDPR or UK GDPR applies, the relevant grounds are performance of the requested service, legitimate interests in security and responding to support (subject to your rights), compliance with legal obligations, and consent for processing that requires it. Legitimate interests do not replace consent where consent is legally required. Providers explain their own purposes and legal grounds in their notices.

5. Advertising providers and disclosure

Doodle Duels integrates Google AdMob / Google Mobile Ads and the Unity Ads adapter for AdMob mediation. Unity Ads can supply ads through this mediation setup. Unity LevelPlay is a separate mediation product and is not identified as an active integration in the version reviewed for this policy.

These providers and their advertising partners may receive data directly from the app. They may act as independent controllers for their own advertising, measurement and security purposes, rather than solely as our processors. Data may also be handled by hosting and email providers when you use this website or contact us, and disclosed where required by law or necessary to protect legal rights. The applicable advertising consent notice should identify the partners and purposes available for your region.

6. EEA, United Kingdom and Switzerland

Doodle Duels uses Google’s User Messaging Platform (UMP) to present the in-app consent message for users in the European Economic Area (EEA), United Kingdom and Switzerland when required.

In-app consent: the consent flow and privacy options are enabled in the game. The app requests consent when required before advertising processing that depends on it. You can review the purposes and providers, accept or decline optional purposes, and revisit your choices through the in-game privacy options. This website does not collect or record advertising consent for the installed game. Reading this policy, continuing to use the website or contacting support does not constitute consent.

In the consent message, you can accept or decline the optional purposes and manage the choices offered. Declining personalization does not necessarily remove all ads or data processing: non-personalized or limited ads can still involve technical data, and any consent they require must also be respected.

7. Privacy Options — manage or withdraw consent

1. In the game: open the privacy options in Doodle Duels to review purposes and providers, change choices or withdraw consent. The app provides access to these options when required for your region. If you cannot find or open them, contact [email protected] with your app version and platform; this web page cannot change the app’s saved consent.
2. On your device:
   • Android: use the advertising privacy controls in your device settings. Their names and location may vary by Android version and manufacturer.
   • iPhone or iPad: open Settings → Privacy & Security → Tracking to manage app tracking permissions.

   These controls complement the game’s consent choices, but do not replace them.

3. With a provider: use the Google and Unity privacy controls linked below for data they control.

Withdrawal applies to future processing based on consent and does not affect the lawfulness of earlier processing. Withdrawing consent, resetting an advertising ID or uninstalling the game does not automatically delete data already retained by an advertising provider. For deletion, follow the next section.

8. Retention and deletion

Local preferences remain on your device until changed or removed. You can clear the app’s local data or uninstall it using the operating system; device or cloud backups may keep a copy under their own settings. Removing local data can reset progress and preferences.

Support correspondence is kept for as long as needed to resolve your request and handle follow-up, legal obligations or disputes, then deleted or anonymized when no longer needed. Retention depends on the nature of the request and applicable obligations; we do not promise a single fixed period for every record.

Google and Unity set retention periods for data they control according to purpose, service configuration and legal requirements. See their policies and deletion controls below. To request deletion of information we hold, email [email protected]. Explain the request and include only the information needed to locate it. We may need proportionate verification; some records may be retained where law permits or requires. We cannot directly erase records controlled independently by another provider, but can help identify the correct channel.

9. Your privacy rights

Where applicable, GDPR and UK GDPR give you rights of access, correction, erasure, restriction, portability of eligible data, objection to processing based on legitimate interests and withdrawal of consent. You may object to direct marketing, including related profiling. These rights have legal conditions and exceptions.

Send requests to [email protected]. For GDPR requests, we normally respond within one month; where a permitted extension is necessary, we will explain it within that initial period. You can complain to a competent data-protection authority, including in the EEA country where you live or work, the UK Information Commissioner’s Office, or the Swiss Federal Data Protection and Information Commissioner, as applicable.

Other jurisdictions may provide additional rights. In Mexico, these include access, rectification, cancellation and opposition (ARCO), subject to applicable law. If your local law provides rights to opt out of sale, sharing or targeted advertising, contact us and use the available provider and consent controls. Advertising disclosures can fall within those legal definitions even without a monetary sale.

10. International transfers and security

Tomodachi Games operates in Mexico. Service providers may process information in the United States and other countries whose laws differ from yours. Where GDPR, UK GDPR or Swiss law applies to a restricted transfer, an appropriate legal transfer mechanism is required, such as an applicable adequacy decision or standard contractual clauses with any required supplementary safeguards. Provider notices explain the mechanisms used for their transfers; contact us for information about transfers for which we are responsible.

We use reasonable safeguards appropriate to the data and service. No network or storage system is completely secure. During local multiplayer sessions, only game data, such as nicknames, drawings and scores, is transferred; personal information from the device is never transmitted. This game data is visible to participating players, so join sessions only with people you trust.

11. Children and age requirements

Follow the game’s age rating and eligibility rules in your store and country. This policy does not promise a child-specific advertising mode or parental-consent system. If you are a parent or guardian and believe a child has provided personal data inappropriately, contact [email protected] so we can review the issue and address information within our control; provider-held information may require a request to that provider.

12. Third-party policies and controls

In-game advertising

• Google Privacy Policy and how Google uses information from partner apps.
• Google ad preferences and Google data retention.
• Unity Game Player and App User Privacy Policy, including rights, retention and privacy-request channels.
• Unity privacy information and contacts.

Services used by this website

These services are used when you visit this website: GitLab hosts the site, jsDelivr provides Bootstrap files and Google Fonts serves the fonts.

• GitLab hosting privacy, jsDelivr privacy and Google Fonts privacy.

Data-protection authorities

• EEA data-protection authorities, UK ICO complaints and Swiss FDPIC.

13. Updates and contact

We will update this page when the service or relevant practices change and show the updated date. Material changes will be communicated as required; new consent will be requested where necessary. Privacy and deletion requests: [email protected].