Privacy Policy

Last updated: 10 November 2026

This privacy policy explains which personal data is processed when you visit this website and when you play our mobile games OMG! Aliens and OMG! Aliens 2 (together the "Games") on iOS and Android, for what purposes, on which legal basis, and which rights you have under the EU General Data Protection Regulation (GDPR).

In short: the Games do not require an account, and we do not ask for your name, email address or location. Your game progress is stored on your device. Data is mainly processed by the advertising, crash reporting and app store services described below.

1. Controller

The controller responsible for data processing within the meaning of Art. 4 (7) GDPR is:

We are not required to appoint a data protection officer. For any privacy-related questions, contact us at the email address above.

2. This website

2.1 Hosting and server log files

This website is hosted by Railway Corporation, San Francisco, California, USA ("Railway"). When you open the website, your browser automatically transmits technical information which is processed by the server: IP address, date and time of the request, requested page or file, HTTP status code, amount of data transferred, referrer URL, and browser and operating system (user agent).

This data is processed to deliver the website, to ensure its stability and security and to detect misuse. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and reliable operation of the website. Log data is deleted after a short period, typically no later than 30 days, unless it is needed to investigate a specific security incident. We have concluded a data processing agreement with Railway. Data may be transferred to the USA; such transfers are based on the EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.

2.2 No cookies, no tracking

This website does not set cookies, does not use analytics or tracking tools and does not embed content from third parties. All fonts and images are served from our own server.

2.3 Links to app stores

The website contains links to the Apple App Store and Google Play. Data is only transmitted to Apple or Google once you click such a link and leave our website; from then on the privacy policy of the respective store applies.

3. The Games

3.1 Data stored on your device

Your game progress, scores, purchases unlocked in the game and your settings (such as sound, music and controls) are stored locally on your device. We do not have access to this data. It is deleted when you uninstall the Game.

3.2 Advertising (Google AdMob)

The Games show advertisements provided by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). To deliver ads, measure their performance and prevent fraud, the AdMob SDK collects data such as your device's advertising identifier (IDFA on iOS, Advertising ID on Android), IP address, device type and model, operating system, language, app version, and information about your interactions with ads.

Where required by law, we ask for your consent before personalized ads are shown and before your advertising identifier is accessed, using Google's consent dialog (and, on iOS, Apple's App Tracking Transparency prompt). The legal basis is your consent according to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. If you do not consent, only non-personalized ads are shown; these are still delivered using limited data (for example your approximate location derived from your IP address) on the basis of Art. 6 (1) (f) GDPR, our legitimate interest being to finance the Games through advertising. You can withdraw your consent at any time in the game settings or reset or limit your advertising identifier in your device settings.

Google may process data in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. More information:How Google uses information from apps that use its services and Google Privacy Policy.

3.3 In-app purchases

The Games offer optional in-app purchases (for example removing ads). Payments are processed exclusively by Apple (App Store) or Google (Google Play). We do not receive your payment details. We only receive the information needed to deliver the purchased item, such as a transaction identifier and the product purchased. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). Apple's and Google's own privacy policies apply to the payment process.

3.4 Achievements (Game Center and Google Play Games)

If you are signed in to Apple Game Center or Google Play Games, the Games report your achievements and, where applicable, your scores to that service, linked to your player profile there. This data is processed by Apple or Google respectively. The legal basis is Art. 6 (1) (b) GDPR, as these features are part of the Game you chose to use. You can sign out of these services at any time in your device or service settings; the Games remain fully playable.

3.5 Crash and error reports (Sentry)

To find and fix bugs, the Games send error and diagnostic reports to Sentry, a service of Functional Software, Inc., San Francisco, California, USA. Our Sentry data is stored in the EU (Germany). A report may contain: technical details of the error, app version, device model, operating system version, a short log of events leading up to the error, and your IP address. We do not use this data to identify you.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to keep the Games stable and to fix errors. Reports are deleted automatically after 90 days at the latest. We have concluded a data processing agreement with Sentry; any access from the USA is based on the EU Standard Contractual Clauses.

3.6 App stores

To download the Games you use the Apple App Store or Google Play. The store operators process data such as your account, downloads, purchases and app usage statistics under their own responsibility. We only receive aggregated, non-personal statistics (for example download numbers and crash rates) from them.

4. Contacting us

If you contact us by email, we process your email address and the content of your message to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, and Art. 6 (1) (f) GDPR otherwise. We delete your data once your request has been fully handled, unless statutory retention periods apply.

5. Recipients and international transfers

Personal data is only passed on to the service providers named in this policy (Railway, Google, Apple, Sentry), who act either as our processors or as independent controllers. We do not sell your personal data. Where data is transferred to countries outside the EU/EEA, this is based on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework) or on the EU Standard Contractual Clauses.

6. Children

The Games are intended for a general audience and are not directed at children under 13. We do not knowingly collect personal data from children under 13 (or under 16 where consent of a holder of parental responsibility is required under Art. 8 GDPR). If you believe that a child has provided us with personal data, please contact us and we will delete it.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we process about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• restrict the processing of your data (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object at any time to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR),
• withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR), without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, email us at TODO@example.com. As we do not use accounts, please include any information that helps us find the data concerned (for example the approximate time of a crash and your device model).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

8. Deleting your data

Uninstalling a Game deletes all data stored on your device. Advertising data can be limited by resetting or deleting your device's advertising identifier. To request deletion of crash reports or any other data we hold, email us atTODO@example.com.

9. Changes to this policy

We may update this privacy policy when our Games, this website or the legal requirements change. The current version is always available at https://omg-aliens.imp.ms/privacy/.