Auxbrain, Inc. takes the privacy of our players seriously. We make an effort to only collect the data we need to operate our games and our business. This Privacy Policy explains what information we collect when you play our games ("Egg, Inc.", "Zombie Highway 2" and "Ski Jump", together the "Games"), use the online services that support them, or contact our customer support; why we collect it; the legal bases we rely on; who we share it with; how long we keep it; and the rights you have over it.

If you are under the age of 18 please read the section on 'Children' below.

Should you have any questions about your data, contact us at support@auxbrain.com.

Auxbrain, Inc. ("Auxbrain", "we", "us", or "our") is a game developer and corporation located in Los Angeles, California, and is the data controller for the personal data described in this policy.

Email: support@auxbrain.com
Phone: (424) 210-7140 (customer support is only available via e-mail)
Mail: 11980 San Vicente Blvd Ste 708, Los Angeles, CA 90049

Our customer support team is trained in your data privacy rights and is supported by a privacy manager should you have any concerns or wish to exercise your rights.

Representative in the European Union and the United Kingdom. Under Article 27 GDPR and Article 27 UK GDPR we have appointed Prighter as our representative in the EU and the UK. If you are in the European Economic Area or the United Kingdom you may contact Prighter, in addition to or instead of us, about our processing of your personal data or to exercise your rights.

We are constantly adding features and auditing our privacy practices, so this policy will change over time. The "Updated" date at the top tells you when it last changed. If we make a material change to how we use your personal data, we will notify you before it takes effect through an in-game notice, our app store listing, or this page, and where the law requires it we will ask for your consent again.

Under the GDPR and similar laws we may only process your personal data when we have a legal basis to do so. The bases we rely on are: performance of a contract (providing the Games and services you asked for), legitimate interests (running, securing and improving our business in ways you would reasonably expect and that do not override your rights), consent (which you can withdraw at any time), and legal obligation.

• Player and team names. To use some features you will be asked to name yourself or a co-op team, and we store those names. Basis: contract.
• Customer support communications. If you contact us, the content of your message, your email address, and any information you choose to include (such as screenshots or your player ID) are stored in our support system. Basis: contract and legitimate interests (resolving your request, keeping records of support history).

• Game data. Your progress and save data, so we can back it up, restore it to a new device, run co-op and other online features, and help you through customer support. Basis: contract.
• Gameplay analytics. Events describing what you do in the Games (for example which features you use, purchases made, ads watched) so we can understand and improve the Games and balance their economy. Basis: legitimate interests.
• Purchase information. Records of in-app purchases, confirmed against Apple or Google receipts, for accounting, tax and fraud prevention. We never receive your payment card details; Apple and Google handle payment. Basis: contract, legal obligation, legitimate interests (fraud prevention).
• Device information. A device identifier generated by the Games, your device's advertising identifier (where you have allowed it), platform and operating system version, device model, GPU, screen size, and locale and language settings. We use this to deliver the right game build and assets, to diagnose problems, to prevent fraud, and (with the advertising identifier only) for advertising attribution as described below. Basis: contract and legitimate interests; consent for the advertising identifier where required.
• Approximate location. Our hosting provider tells us the country, and for the United States the state or region, that your connection appears to come from, based on your IP address. We use this to apply the correct regional rules, pricing and legal requirements, and for aggregated analytics. We do not collect precise (GPS) location. Basis: legitimate interests and legal obligation.
• Age category signal. Where Apple or Google provide it, we receive a coarse age-category signal (for example "adult", "minor", or "unknown") for your app store account so we can comply with laws that require age-appropriate treatment of players. We do not receive your date of birth. Basis: legal obligation.
• Crash and performance data. If the Game crashes, technical diagnostics about the crash and your device are collected so we can fix it. Basis: legitimate interests.
• Push notification tokens. If you enable notifications, a token that lets us send them to your device. Basis: consent (you can turn notifications off at any time in your device settings).
• Server logs. Standard technical logs of requests to our servers, including IP address and request details, used for security, debugging and preventing abuse. Basis: legitimate interests.

• Game Center and Google Play Games. With your authorization, we receive your player ID and display name from these services to identify your account for backup and recovery, team play and customer support, and in Ski Jump for the online leaderboards (see "Ski Jump" below). Basis: contract.
• Apple and Google app stores. Purchase receipts and, where available, the age category signal described above.
• Advertising attribution. Our attribution partner tells us which advertising campaign (if any) led you to install the Game, so we can measure our marketing. Basis: legitimate interests; consent where required by law.

Auxbrain

• DOES NOT collect your precise location (GPS or similar). See "Approximate location" above for the country/region we infer from your connection.
• DOES NOT collect or store your email address, phone number, or postal address, except if you include them when you contact customer support
• DOES NOT collect your date of birth, gender, ethnicity, sexual orientation, religious or political views, or any health related information. See "Age category signal" above for the only age-related data we receive.
• DOES NOT collect your real name (unless it is the same as your username for the above-mentioned Game Services, in which case we do not know it is your real name)
• DOES NOT collect biometric information
• DOES NOT collect your browsing history, search history or network activity outside the Games
• DOES NOT collect sensor data, camera, microphone or audio data
• DOES NOT collect professional or education information
• DOES NOT collect your contacts or the contents of your device

Ski Jump is a much simpler game than our others, and its data footprint is tiny. Everything in this policy about game saves, gameplay analytics, purchases, advertising, push notifications, crash reporting, approximate location and device information describes Egg, Inc. and Zombie Highway 2. None of it applies to Ski Jump. Ski Jump contains no advertising, no analytics, no in-app purchases and no third-party software other than the Game Center (iOS) or Google Play Games (Android) service it uses to identify you.

The only online feature is the optional high score leaderboards. If you never upload a jump, Ski Jump sends us nothing about you. When you do upload one, the Game sends us:

• Your player ID from Game Center or Google Play Games, in the form Apple or Google scope to Ski Jump alone (not your global Game Center ID). We never store this ID. Our server immediately replaces it with a salted one-way hash and keeps only the hash, which cannot be turned back into the ID and cannot be matched against other apps or our other Games. Basis: contract.
• Your display name: the Game Center alias or Google Play Games name your account already has. This is the name shown next to your scores. You cannot type a different name into Ski Jump; to change it, change it in Game Center or Google Play Games and it updates the next time you upload a jump. Basis: contract.
• The jump: its distance, the jump type (Long Jump or K-Line), the level, and the day it was uploaded. The Game's version number travels with the request and appears only in our server logs, for debugging. Basis: contract.

That is the complete list. Ski Jump's leaderboard records contain no email address, device identifier, advertising identifier, IP address or location, and Ski Jump collects no analytics. Like every request to our servers, leaderboard requests appear in the standard, short-lived server logs described above.

Looking at the high scores is anonymous. Viewing the top scores does not require an identity: if you are not signed in to Game Center or Google Play Games you can still see the boards, and nothing about you is sent. Your own rank, and uploading, need the sign-in.

What other players see. Your display name and your scores, on the daily and all-time boards for each jump type and level.

How long we keep it. Daily leaderboard entries are deleted automatically 30 days after the day they were set. Your all-time best for each jump type and level, with the display name shown beside it, is kept for as long as Ski Jump is available, or until you delete it.

Deleting your data. "DELETE ONLINE DATA" in Ski Jump's SETTINGS removes your name record, every daily entry and every all-time best from our servers immediately. This cannot be undone; your next upload starts from scratch. If you no longer have the device, email support@auxbrain.com.

The "Egg, Inc." and "Zombie Highway 2" buttons under "Other" on Ski Jump's About screen open those games' pages in the App Store or Google Play, which are governed by Apple's or Google's own privacy policies. The "Privacy Policy" button there opens this page.

Some information is visible to other players as part of how the Games work, and you should treat it as public:

• Your player name and your contribution statistics are visible to the other members of any co-op you join, and co-op codes you create can be shared by their members.
• Leaderboards show player names and scores to everyone who views them. In Ski Jump the name shown is your Game Center alias or Google Play Games name.
• Shell showcases you submit in Egg, Inc. are shown to all players together with your player name, and are reviewed by our staff before and after publication. Showcase submissions are also governed by the Showcase Terms shown in the Game.

Choose a player name you are comfortable having shown publicly. You can change it in the Game at any time (in Ski Jump, by changing your Game Center or Google Play Games name), and you can leave a co-op or withdraw a showcase to remove your data from it going forward.

The Games show advertisements, including rewarded ads you choose to watch. Ads are served through a mediation platform that works with the advertising networks listed under "Third Parties". To serve and measure ads these partners receive your device's advertising identifier (if allowed), IP address, device information and coarse location.

Personalized advertising requires your consent where the law requires it. On iOS you are asked through Apple's App Tracking Transparency prompt; on Android and in regions covered by the GDPR you are asked through a consent dialog when you first play. If you decline, or later withdraw consent, you will still see ads but they will not be personalized based on your activity across other apps and websites. You can change your choice at any time:

• iOS: Settings → Privacy & Security → Tracking, or by resetting your advertising identifier
• Android: Settings → Google → Ads, or by deleting your advertising identifier
• In-game: the privacy options in the Game's SETTINGS screen, including "DON'T SELL MY DATA" which also opts you out of personalized ads and of the "sharing" of your data with advertising partners for cross-context behavioral advertising

Disabling advertisements entirely (for example by purchasing a pack that removes ads) also stops the advertising networks from receiving your data through the Games.

Data is transmitted from the Games to our servers over the internet, encrypted in transit using HTTPS, and stored on Google Cloud infrastructure in the United States. It is encrypted at rest by our hosting provider. Access within Auxbrain is limited to a small number of trained staff who need it to do their job.

Auxbrain is located in the United States, and our servers and most of our service providers are in the United States. If you play from the European Economic Area, the United Kingdom, Switzerland or another country with data transfer restrictions, your personal data will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

All of the data we hold is stored and processed on Google Cloud. Google LLC is certified under the EU-U.S. Data Privacy Framework, including its UK Extension and the Swiss-U.S. Data Privacy Framework, and our use of Google Cloud is governed by Google's Cloud Data Processing Addendum, which incorporates the European Commission's Standard Contractual Clauses and the UK Addendum. Where our other service providers (listed under "Third Parties") receive personal data, we rely on the same kinds of safeguards in our agreements with them: Standard Contractual Clauses and, where the provider is certified, the Data Privacy Framework. Auxbrain itself is not separately certified under the Data Privacy Framework. You can ask us for more information about these safeguards at support@auxbrain.com.

We do not sell your personal data. We share it only with the categories of recipients below, and only what is needed for them to do their job for us:

• Hosting and infrastructure (Google Cloud), which stores and processes all of the data described above on our behalf.
• Advertising mediation and advertising networks, which receive advertising identifiers, device information, IP address and coarse location to serve and measure ads. Some of these networks act as independent controllers of the data they receive.
• Analytics and crash reporting (Google Firebase), which receives device information and app events to help us understand usage and fix crashes.
• Advertising attribution (Adjust), which receives your advertising identifier and install information to tell us which campaign led to your install.
• Push notifications (OneSignal), which receives your push token and a device identifier if you enable notifications.
• App stores and platform services (Apple, Google), which process purchases and sign-in on their own terms.
• Customer support tooling. Support emails are received through Google Workspace and may be processed with AI-assisted tools running on Google Cloud (Google's Gemini models) to help our team categorize messages and draft responses. A member of our team reviews responses before they are sent. Your messages are not used by Google to train its models under our agreement with them.
• Professional advisers and authorities, where required to comply with law, enforce our terms, protect our players or defend legal claims.
• A successor business, if Auxbrain is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

Auxbrain works with a small number of carefully selected vendors. Advertising in Egg, Inc. is mediated through AppLovin MAX, which may pass your data to the networks below. Zombie Highway 2 does not share data with advertising partners for personalized advertising. When you use the "DELETE ALL REMOTE DATA" or "DON'T SELL MY DATA" options in the Game, we forward those requests to the partners that support it programmatically (for example Adjust and OneSignal); others must be contacted directly using the details below. Note that our partners extend GDPR and CCPA rights according to their own policies and the law that applies to you.

• AppLovin (Ad mediation, Advertisements) — privacy@applovin.com — https://www.applovin.com/privacy/
• Google AdMob (Advertisements) — https://policies.google.com/privacy
• Meta / Facebook Audience Network (Advertisements) — https://www.facebook.com/privacy/policy/
• Liftoff / Vungle (Advertisements) — privacy@liftoff.io
• Unity Ads (Advertisements) — privacy@unity3d.com
• ironSource by Unity (Advertisements) — privacy@ironsrc.com
• Digital Turbine / Fyber (Advertisements) — privacy@fyber.com
• Mintegral (Advertisements) — privacy@mintegral.com
• BidMachine (Advertisements) — privacy@bidmachine.io
• InMobi (Advertisements, iOS) — privacy@inmobi.com
• Google Firebase (Analytics, Crash reporting) — https://firebase.google.com/support/privacy
• Adjust (Advertising attribution) — privacy@adjust.com
• OneSignal (Push notifications) — privacy@onesignal.com
• Google Cloud (Hosting, AI-assisted support tooling) — https://cloud.google.com/privacy

We keep personal data only for as long as we need it for the purposes above, after which it is deleted or anonymized.

Your game save is kept for as long as the Game is available. Our Games have been running for many years and players regularly return after long breaks, sometimes five years or more, expecting to pick up where they left off. Because the purpose of your cloud save is to let you do exactly that, we do not delete it after a period of inactivity. It stays available to you for as long as the Game itself is available, and if we ever discontinue a Game we will delete the save data associated with it. You are always in control: you can permanently delete your save at any time directly in the Game using "DELETE ALL REMOTE DATA" in SETTINGS, or by asking us at support@auxbrain.com.

Archived copies of earlier saves are kept for three years. Each time your save is backed up we keep the previous version, so that if a save is lost, damaged or overwritten by mistake we can restore an earlier one. For the same reason we keep your save itself, these archives need to cover a long absence: a player returning after years away may need an older copy to recover their progress. Archived copies are deleted automatically three years after they were made, and all of them are deleted immediately when you delete your remote data.

Other data is kept for shorter, purpose-specific periods. In general:

Data	Retention
Game save data and player/team names	For as long as the Game is available, or until you delete your remote data in SETTINGS or ask us to
Archived copies of earlier saves (kept so we can recover a save that was lost or damaged, including for players returning after a long break)	Three years from when the copy was made, or deleted with your save data when you delete your remote data
Ski Jump daily leaderboard entries	30 days after the day they were set
Ski Jump all-time bests and display name	For as long as Ski Jump is available, or until you use "DELETE ONLINE DATA" in the Game or ask us to
Purchase records	For as long as required for tax and accounting purposes
Gameplay analytics	Tied to your player ID while needed to operate and improve the Games, then kept only in aggregated or anonymized form
Customer support communications	For a limited period after the request is closed, so we can refer back to your support history
Server logs	For a short period, for security and debugging
Crash reports	90 days (Firebase Crashlytics default)
Backups of our systems	Rolled over on a fixed schedule; deleted data is removed from backups when they expire

We may keep data longer where we need it to comply with a legal obligation, resolve disputes or enforce our agreements.

Depending on where you live you have a range of rights over your personal data. Auxbrain extends the rights below to everyone, wherever you live:

Right to access. You can ask for a copy of the personal data we hold about you. Some of it is visible in the Game; for a complete copy contact support@auxbrain.com.

Right to rectification. You can ask us to correct inaccurate data. Player and team names can be changed in the Game.

Right to erasure ("right to be forgotten"). You can delete your cloud save at any time in the Game's SETTINGS using "DELETE ALL REMOTE DATA", which permanently deletes your game backup, all archived copies of it and your account record (including your Game Center or Google Play Games identifiers) from our servers, and forwards a deletion request to the advertising and notification partners that support it. This cannot be undone. In Ski Jump, "DELETE ONLINE DATA" in SETTINGS immediately deletes your leaderboard name record, every daily entry and every all-time best, which is everything our servers hold about you for that Game. To have the rest of your personal data erased (for example co-op history, support communications and analytics tied to your player ID), or if you no longer have the device, contact support@auxbrain.com with your player ID and we will complete the erasure within one month. We may retain data we are legally required to keep, such as purchase records, and data that has already been anonymized.

Right to data portability. You can ask for the data you provided to us, and data generated by your play, in a structured, commonly used, machine-readable format. Note that this data is specific to our Games and is not usable in other services.

Right to restriction. You can ask us to pause processing of your data in certain circumstances, for example while we verify a correction you have requested.

Right to object. You can object to processing based on our legitimate interests, and we will stop unless we have compelling grounds to continue. You can object to personalized advertising at any time using the choices described under "Advertising And Your Choices".

Right to withdraw consent. Where we rely on your consent (personalized advertising, push notifications) you can withdraw it at any time using the settings described above, without affecting processing that happened before you withdrew.

Right to complain. If you are in the EEA, UK or Switzerland you have the right to lodge a complaint with your local data protection authority. A list of EU authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en; the UK authority is the Information Commissioner's Office (https://ico.org.uk). We would appreciate the chance to address your concern first at support@auxbrain.com.

How to exercise your rights. Use the in-game options where available, or email support@auxbrain.com from the Game's support screen (which includes your player ID) or with your player ID included. We use the player ID to verify that a request relates to your account, and we may ask for additional information if we cannot verify it. We respond within one month, extendable by two further months for complex requests, and we will tell you if we need more time. Exercising your rights is free of charge unless requests are manifestly unfounded or excessive.

We use automated checks to detect fraud, cheating and abuse, for example comparing a save file against your previous progress before accepting it, or verifying purchases against store receipts. These checks may cause a save to be rejected or a feature to be limited. They do not produce legal effects on you, and you can always contact support@auxbrain.com to have a person review a decision. We do not use your data for any other automated decision-making or profiling that has legal or similarly significant effects.

Our Games are not designed for or directed at children, and we do not knowingly collect personal data from children. If you are under the age of 16 in the European Economic Area or the United Kingdom, or under 13 elsewhere, you are not permitted to use any of our online services or play our Games while online. If you are under 18, you must have your parent's or guardian's permission to play our Games online or use our services.

Where Apple or Google tell us that an account belongs to a minor, we treat that account accordingly, including disabling personalized advertising. If we learn that we have inadvertently collected personal data from a child below the applicable age, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data can contact support@auxbrain.com, or delete the data directly from the Game's SETTINGS.

We use Google Cloud data centers with industry-standard physical and technical security, encrypt data in transit and at rest, and limit access to personal data to a small number of trained staff who need it to do their job. We require our vendors to maintain comparable safeguards. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and the relevant authorities as required by law.

Over the past 12 months we have collected the categories of personal information described under "What Data Do We Collect": identifiers (player ID, device and advertising identifiers, Game Center / Google Play Games IDs), commercial information (purchases), internet or network activity (in-game usage), coarse geolocation (country/region), and inferences used only to operate the Games (for example your progress tier). We collect them for the purposes described above and disclose them to the recipients described above.

We do not sell personal information for money. The disclosure of advertising identifiers and device information to advertising networks for personalized advertising may count as a "sale" or "sharing" for cross-context behavioral advertising under California law. You can opt out at any time by tapping "DON'T SELL MY DATA" in the Game's SETTINGS, or by disabling advertisements. We do not knowingly sell or share the personal information of anyone under 16.

You have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete it, to opt out of sale or sharing, and not to be discriminated against for exercising these rights. Exercise them as described under "Your Rights". You may designate an authorized agent to make a request on your behalf; we will ask the agent for proof of authorization.

The auxbrain.com website collects only standard server logs (IP address, browser type, pages requested) for security and to keep the site running, retained for the period described under "How Long Do We Keep Data?". It does not use advertising or analytics cookies.

Should you have any questions about this privacy policy, or wish to exercise any of your data privacy rights, please contact us at support@auxbrain.com or by mail at the address above.