The short version
Your game progress is stored on your device. Starting with version 1.21, signed-in Android players also use Google Play Games Saved Games to back up coins and progress to their gaming account. Google handles connected Play Games and advertising features. A photo you choose for a score card is composed on your device and is only shared when you ask. You can contact us about your information at bugout@ibi.bz.
01. Who we are
Bug Out is an arcade game published by AAA IT, with Android package name bugout.bugout and iOS bundle identifier com.mtalavi.bugout. The Apple edition is named Bug Out: Tap Survival. This policy covers the game, this official website and messages you send to Bug Out support. AAA IT is responsible for the information it handles as described here. Apple, Google and Cloudflare also process information under their own policies when providing their services.
This policy describes the current game and its connected features. Some features depend on your game version, device, region, network connection and Apple or Google settings.
02. Information we handle
| Information | Purpose and where it goes |
|---|---|
| Game progress & preferences | Scores, completed runs, coins, owned plate designs, missions, achievements, language, sound, vibration and tutorial preferences are saved in the app's storage on your device. In version 1.21 and later, when signed in to Play Games, these records and the purchase receipt hashes used to prevent duplicate coin delivery are also sent to Google Saved Games, associated with your Play Games player identifier. Saved Games is private game progress, separate from public leaderboard scores. |
| Play Games profile & scores | When Play Games is available, the game can access your player identifier, display name and profile image, display leaderboards and send scores and supported achievements to Google Play Games. |
| Advertising information | Google Mobile Ads may process your IP address, approximate location inferred from it, device or account identifiers, ad interactions and diagnostic information to deliver and measure ads and prevent fraud. |
| Optional score-card photo | A photo you choose or take is used locally to create a score card. The game does not upload that photo to a Bug Out server. Sharing sends the card to the app or recipient you select. |
| Coin purchases | For versions that offer paid coins, Google Play handles checkout and payment details. Our billing service on Cloudflare receives the purchase token, product identifier and a random billing-profile identifier (included in your saved game in cloud-enabled versions) to verify the purchase with Google, deliver coins and prevent duplicate claims. It stores these purchase records in a private database. We do not receive your card number or Google password. Cloudflare also processes network information needed to serve and protect the API. |
| Support messages | When you email us, we receive your email address, message and any attachments you choose to provide. We use them to answer your request, investigate a problem or handle a privacy inquiry. |
Bug Out does not ask you to create a separate Bug Out account or password. We do not ask for contacts, microphone recordings or precise GPS location. We do not sell the support messages or game information that we directly handle.
03. Google services and advertising
Google Play Games
Google Play Games may sign you in automatically according to your Google settings. When connected, your gamer name, profile image and scores may be visible to other players according to your Play Games profile and visibility settings. Core gameplay can be used without a successful Play Games connection.
Google manages Play Games identity and service-side data. You can manage your profile, game sign-in and saved game data through Google Play Games or your Google Account. Bug Out does not receive your Google password.
AdMob and consent
Bug Out integrates Google Mobile Ads (AdMob) for advertising, including optional rewarded ads. The Google SDK processes information for advertising, measurement, diagnostics and fraud prevention. Depending on your region, consent and device settings, ads may be personalized or limited. Test versions may show sample ads; this does not mean the Google SDK has no network activity.
Where Google's consent system requires a choice, the game requests it before requesting ads. When available, open Settings → Privacy and ads → Privacy options to revisit your choice. You can also use Android and Google settings to manage advertising privacy. Refusing ad consent may make ad-supported rewards unavailable; it does not require you to send us personal information.
Google Play purchases
Coin packs are consumable in-game items, not subscriptions. The price and currency displayed by Google Play at checkout apply. Payment confirmation is checked with Google before coins are delivered. Unfinished purchases are retried when you reopen the game or choose the retry option in the coin shop. Delivered coins and items are saved on your device. In version 1.21 and later, signing in to the same Play Games account restores its available cloud save, including the remaining coin balance and records of delivered purchases. Google synchronizes saves in the background: changes made offline, or removed before synchronization finishes, may not be recoverable after uninstalling. If devices have different saves, the game asks you to choose a complete version and retains recovery copies on the device; it does not add the two coin balances together. Guest progress and versions before 1.21 remain local. A consumed purchase is not granted again merely because the game was reinstalled. Contact bugout@ibi.bz with your Google Play order reference if delivery failed; never send payment-card details or passwords.
Reward validation and refunds (version 1.22 and later)
Optional rewarded coin ads send an opaque wallet identifier and a one-time reward identifier to Google AdMob. Google sends a signed reward confirmation to our billing service on Cloudflare Workers. We store the reward identifier, wallet identifier, ad transaction identifier, reward amount and confirmation time so a missed reward can be recovered without paying it twice. These identifiers are not your email address, advertising ID or Play Games display name. Google and Cloudflare also process network information, including IP addresses, to deliver and protect these requests.
Our billing service checks Google Play for voided or refunded coin purchases and associates a reversal with the wallet that received it. A reversal removes the refunded coins that remain. If some have already been spent, later earned or purchased coins first settle the remaining coin adjustment; we do not charge money and previously owned cosmetic plates remain available. Verification and reversal records prevent repeated delivery and repeated deductions.
Operational configuration
The game periodically requests small operational settings from our Cloudflare service, such as whether advertising or global leaderboards are enabled. This request does not include a wallet identifier or game progress. The hosting provider processes network information to deliver and protect it. A recent configuration is cached on the device when the service is unavailable.
Analytics and crash reports
The current release is not connected to a Firebase project, so Bug Out's Firebase Analytics, Crashlytics, anonymous authentication and Firebase remote configuration features are inactive. Operational configuration uses our separate Cloudflare service as described above. Advertising and Play Games have their own data handling, described above. If we activate additional collection, we will update this policy and the store disclosures before releasing that change and request consent where required.
For Google's handling of information, see the Google Privacy Policy, Google advertising information and Google Mobile Ads data disclosure.
Apple edition: Game Center and iCloud
On iOS, Game Center provides gaming identity and leaderboards. When connected, Bug Out can access your Game Center player identifier, gamer name and profile image and submit your scores to Apple. Your profile and leaderboard scores are visible according to your Game Center settings. Core gameplay remains available when Game Center is unavailable.
Cloud-enabled iOS builds save coins, owned plates, progress and preferences in a private CloudKit record in your iCloud account, associated with a hashed Game Center player identifier. This save is separate from public leaderboard scores. Apple handles storage and synchronization. Both iCloud and Game Center must be available. Offline changes remain local until synchronization succeeds; conflicting saves require choosing a complete version rather than adding coin balances together.
The iOS edition is free and ad-supported. It does not offer paid coin packs or other in-app purchases. Its rewarded ads grant in-game coins or a continuation only after the advertising SDK confirms the reward. The Android purchase-verification, refund and server reward-recovery features described elsewhere on this page do not apply to this iOS release. The iOS release is not connected to Firebase or our Android billing service.
AdMob also supplies the iOS ads and processes the advertising information described above. Use the game's privacy options, when available, to revisit advertising consent. Apple tracking permission is separate from advertising consent; this release does not request access to the IDFA. The game does not request precise location.
Manage your Game Center profile and visibility in Apple's settings. Manage the game's stored iCloud data in your Apple account's iCloud storage settings. Deleting the app removes its local data but does not itself delete the iCloud save, which may be restored when you reinstall. Avoid playing another offline copy while removing cloud data. Local files use iOS app storage protections. Apple retains service data under its settings and policies; see Apple's Privacy Policy and Google Mobile Ads iOS data disclosure.
04. Photos and sharing
Adding a photo to a score card is optional. You choose a photo through your device's picker or camera flow. Bug Out requests the image needed for the card and does not request full photo metadata for this feature. The card is composed on your device, and temporary image files may remain in the app's cache until the device clears them or you clear the app's storage.
Nothing is posted automatically. Using the share button opens the system sharing interface; the app or recipient you select then handles the shared card or text under its own privacy practices. A card may contain your score, Play Games display name and chosen photo, so review it before sharing. Any copy you explicitly save or share outside Bug Out must be removed from that location separately.
05. Your choices and deletion
- Local game data: clear Bug Out's storage in Android settings to remove saved progress and preferences. Uninstalling removes the app's private data. Progress may be lost, so only do this when that is your intention.
- Google Play Games data: use Play Games settings to manage your sign-in, visibility and game data. Clearing Bug Out's local storage alone does not delete information held by Google; cloud-enabled versions can restore it when you sign in again. To remove both copies, manage the game's data in Google Play Games and clear the game's local storage. Avoid continuing to play an older offline copy while deleting game data. See Google's instructions for deleting Play Games data.
- Ad choices: revisit the in-game privacy options when available and your device's Google advertising controls.
- Support correspondence and other information we hold: email bugout@ibi.bz to ask for access, correction or deletion. State your request and provide only the details needed to identify the relevant correspondence.
Depending on where you live, you may also have rights to object to or restrict processing, receive a copy of your information, withdraw consent, or complain to a relevant privacy authority. We may need reasonable information to verify that a request concerns you. We do not ask for your password. Some information may need to be retained for applicable legal obligations or legitimate security reasons; if that affects your request, we will explain it.
06. Retention, sharing and security
On your device: progress and preferences remain until you clear the app's data or uninstall it. Temporary files follow the device's cache lifecycle. Android system automatic backup remains disabled. Version 1.21 and later instead use the separate, account-based Google Play Games Saved Games feature described above. Local account caches and conflict recovery copies are removed when you clear app storage; clearing them does not itself delete the Google save.
Reward records: signed ad-reward confirmations are retained as needed for missed-reward recovery, duplicate prevention, support and security. Recovery returns the latest 100 confirmations for the private wallet identifier. Clearing local game data does not automatically delete these server records. You can request access or deletion through our support address; limited records may need to be retained for fraud prevention or applicable obligations.
Purchase records: we retain verification and delivery records as needed to complete purchases, prevent duplicate delivery, resolve disputes and meet applicable obligations. Clearing the game does not remove those server records. You can request access or deletion through our support address; limited records may need to be retained for fraud prevention or legal obligations.
Support: we keep correspondence for the time needed to resolve your request and necessary follow-up, and longer only where required for legal or security purposes. You can ask us to delete it.
Connected services: Apple, Google and Cloudflare retain information according to their service settings, purposes and policies. We do not set or guarantee deletion dates for information those providers independently control.
We share information as necessary with the providers described in this policy, with a recipient you choose through sharing, or when legally required. Email to the published support address is routed by Cloudflare to our support inbox hosted by Google. These providers may process information in countries other than your own.
Local data uses Android's app storage protections. This website is delivered over HTTPS, and connected service communication uses the protections provided by those services. Access to support correspondence is limited to handling support and privacy requests. No service can guarantee absolute security.
07. Children and families
Bug Out is a general-audience arcade game. A difficulty choice such as Easy does not determine a player's age. We do not knowingly ask children to provide personal information to our support service. A parent or guardian who believes a child has sent us personal information can contact us to request its removal. Parents can also manage Google accounts, Play Games features and advertising choices using Google's family and privacy settings.
08. This website
This website is hosted on Cloudflare Pages. We do not add advertising trackers, analytics scripts, account forms or marketing cookies to these pages. Cloudflare may process network information such as IP addresses, browser information and request logs, and use essential security measures to deliver and protect the site. See the Cloudflare Privacy Policy.
Email links open your own email application. External links take you to another provider's site, where that provider's privacy policy applies.
09. Contact and policy updates
Bug Out · AAA IT
Support and privacy inquiries
We will update this page when our practices change and revise the date at the top. For a material change requiring notice or consent, we will provide that notice or obtain consent as appropriate before the new processing begins.
