Paper Siege
Privacy policy
Paper Siege is a mobile game made by Timo Brun, trading as Umberarc, Norway (“we”, “us”). We are the data controller for the game. This policy explains what the game keeps, what leaves your device and when, and how to change your mind. It covers the iPhone game (App Store) and the Android game (Google Play) — one game, one policy.
Contact for anything about privacy: privacy@umberarc.com.
What stays on your device
- Your save — waves, guns, Ink, the items you own, your settings and your privacy choice.
- A local event log of what you did in the game (waves, buys, merges, ads watched, purchases). It is a plain file inside the app’s own folder and never leaves your device on its own.
- Reminders, if you turn them on: a few notifications while the game is closed (the chest is ready, your streak is about to break, new missions, the scrap pile is full, a paper fold is waiting). They are scheduled by the app on the phone itself — no server, no push token, nothing sent anywhere. The phone asks you once, only after you said yes in the game (on Android 13 and later with the system dialog; on older Android they are on until you turn them off). Turn them off any time in MENU › REMINDERS or in your phone’s settings.
- A picture of each battlefield you secure: a small screenshot of the desk, taken by the game itself when the fort falls, kept beside your save and shown on the main menu. It never leaves your device.
- Deleting the app deletes all of it.
What leaves your device — only with your consent
The first time you open the game you choose between Accept all and Essential only. The game, its rewards and its prices are the same either way.
- Anonymous play stats (Accept all only). The same game events as the local log are sent to Unity Analytics (Unity Technologies) under a random install identifier, so we can see where players get stuck. No name, no email, no contacts, no precise location. Unity’s privacy policy: unity.com/legal/privacy-policy.
- Personalised ads (Accept all only). Rewarded ads are shown by Unity LevelPlay (ironSource) and its partner ad networks. With personalised ads on, they may use your device’s advertising identifier to choose and measure ads: on an iPhone the IDFA, and only if you also allow it in the iPhone’s “Allow tracking” dialog; on Android the Android advertising ID (the app declares the
AD_IDpermission for it), which you can reset or delete at any time in your phone’s Settings › Google › Ads (the exact path varies by phone). - With Essential only, ads are still shown, without that identifier, using only what every ad request carries: device type, OS version, a rough country derived from your IP address, and the ad’s own delivery and fraud-prevention data (ironSource Ad Quality).
- Nothing else. The game does not use Unity’s built-in engine analytics or performance reporting — they are switched off every time the game starts.
Ads are optional
Every ad in Paper Siege is a rewarded ad you tap to start. Nothing is locked behind an ad. Remove Ads (a purchase) turns every ad button into an instant free claim.
Purchases
On an iPhone, in-app purchases go through Apple’s App Store. We never see your card, your Apple ID or your address. Apple tells the game which items you own, and the game keeps that in your save. Refunds are handled by Apple.
On Android, in-app purchases go through Google Play billing. We never see your card, your Google account or your address. Google holds the receipt and tells the game which items you own, and the game keeps that in your save. Refunds are handled by Google Play.
On either phone you can restore purchases from the game’s menu.
Children
Paper Siege is not made for children under 13 and does not knowingly collect anything from them. It has no chat, no user content and no social features. On a child’s account Apple does not show the tracking dialog, so personalised ads are never requested there. Android has no tracking dialog: there, Essential only is the switch, and Google itself withholds the advertising ID on accounts it manages for children.
Legal basis
Under the GDPR (which applies in Norway through the EEA Agreement) we rely on:
- consent for anonymous play stats and personalised ads;
- contract for running the game you downloaded and delivering what you buy;
- legitimate interest for non-personalised ads (they fund a free game) and fraud prevention.
Your rights
- Withdraw consent at any time: MENU › PRIVACY › Essential only stops all sharing from that moment, and asks Unity Analytics to delete what it holds for your install.
- Access, correction and deletion: everything the game itself holds about you is on your device, and deleting the app deletes it. Play stats already sent are tied only to a random install identifier. Write to privacy@umberarc.com if you want to ask us anything.
- California (CCPA/CPRA): Essential only is “do not sell or share my personal information” — the game passes that signal to the ad networks.
- Complaints: you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the authority where you live.
Retention
Your device keeps your save and the log until you delete the app. Unity and the ad networks keep their data according to their own policies; Unity Analytics keeps aggregated statistics.
Changes
When this policy changes in a way that matters (a new partner, a new purpose), the game asks you again at its next launch, and the date at the top of this page changes.