IDLE TOWER · KARAS GAME STUDIOS

Privacy policy

Last updated: 14 November 2026

Who is responsible

Idle Tower (com.karasgamestudios.idletower; on Google Play as “Idle Tower Defense: Offline TD”) is developed by Václav Karas, operating as Karas Game Studios. For privacy questions, contact [email protected].

Game progress and settings

Progress, currencies, upgrades, settings and an unfinished battle are stored on your device. The game uses no third-party analytics service, and core gameplay works offline. The only account is the optional Google Play Games account described below; without it nothing about your play is sent to Karas Game Studios except what the sections “World ranking” and “Optional gameplay statistics” describe.

Account and cloud save

From version 1.0.3 you can link the game to your Google Play Games account, in Settings → Account or by joining the world ranking. Linking is optional and is your request for the backup described here. The game signs you in to Google Play Games and passes a one-time sign-in code from Google to our server, which asks Google for your Play Games player ID and gamer name. The server stores a keyed hash of the player ID (not the ID itself), your gamer name, a random account ID, the dates the account was created and last used, and a hashed sign-in token for each of your devices (it expires 180 days after its last use).

Once linked, the game backs your progress up to our server: the same data it keeps on your device (currencies, upgrades, research, cards, records, settings and the like; not an unfinished battle), with a short summary (tier, wave, number of runs, play time, coins, gems), the game version, the time and a random ID of the installation that saved it. It is sent after linking, after a finished run and when you leave the game (at most once in five minutes), and when you tap Save now. The server keeps the current backup and the five it replaced; a backup you chose to overwrite (when two devices disagreed, or with Reset progress) is kept for up to 90 days so that support can bring it back. When a device and the cloud hold different progress, the game shows both and you choose; nothing is overwritten silently.

We use these data only to keep and restore your progress and to answer support requests; they are not given to advertising partners and are not joined with the optional statistics. The legal basis is providing the service you asked for. The backup is kept until you delete the account: Settings → Account → Delete account removes the account, its sign-in tokens, the backup with its history and any ranking entry (the progress on your device stays). The steps, also for when you no longer have the game, are on the account deletion page. Google Play Games (part of Google Play services on your device) handles the sign-in; once the game includes it, it may sign you in to your Play Games profile when the game starts, as your Play Games settings allow, but the game uses that sign-in and contacts our server about you only if you link or join. Google processes your Play Games profile under its privacy policy.

World ranking

From version 1.0.3 the game installed from Google Play shows a world ranking: the top 100 players by the highest tier played and the best wave in it. Looking at it needs no account. To show the list and the place your own result would take, the game asks the Karas Game Studios server and sends only two numbers, your highest tier and your best wave in it. No name, account or device identifier goes with them, and the server does not store them. As with any connection, our hosting and Cloudflare technically process your IP address; to limit abuse, the server keeps a salted hash of it (not the address itself) for at most two days.

Joining is optional. You join by tapping “Join with Play Games” in the ranking window, which first says what becomes public; the tap is your request for this service and links your account as described above (so your progress is backed up too). For the ranking the server also stores your best wave in each tier and a record of each result sent: tier, wave, the run’s length in game time, the number of runs you have finished, the game version and the time it arrived. Records of results that are no longer your best are deleted after 60 days. After you join, the game sends a result automatically whenever a run sets a new best wave in its tier.

Everyone who opens the ranking sees your Play Games gamer name, your best tier and wave and your rank. Nothing else is public. We use these data only to run the ranking and keep it fair (a result that cannot be genuine may be hidden); they are not given to advertising partners. The legal basis is providing the service you asked for. You can leave at any time in Settings → Account → Leave ranking: the server deletes your ranking entry and results at once; your account and backup stay until you delete the account.

Optional gameplay statistics

From version 1.0.1 the game offers optional gameplay statistics. It asks in a separate window after its loading screen, and they stay off unless you enable them. Without enabling them, we do not create an analytics identifier or send gameplay events. When enabled, the game sends a random installation ID, game version, platform, device language and region, event times, game sessions and return visits, battle results (tier, wave reached, duration, what ended the run, coins earned, game speed), progress (features, tiers and milestones reached, Forge, Lab, card and mission use, offline rewards) and ad/reward usage (which rewarded ad was offered, started, shown, completed, closed or failed to load, and the status of Google’s ad consent), and the game’s rating requests and update offers (whether the window or banner was shown and which button was tapped) to the Karas Game Studios server. Region is a device setting, not GPS location. We do not send your name, email or advertising ID. These data are pseudonymous, not guaranteed anonymous. We use them to find problems, understand how players progress and improve the game, on the basis of voluntary consent. Refusing does not restrict gameplay. You can change the option in Settings → Statistics. Turning it off stops further collection and removes the local ID and the queue of unsent events; a request already sent may finish. The game also attempts to request deletion from the server, but this request may not be delivered while offline or while another request is in progress. Uninstalling alone does not delete server data. Events are retained for at most 13 months, with older data removed by a daily task. Contact us above to exercise your rights or ask questions. Our hosting and Cloudflare handle delivery and also technically process your IP address during connections. These statistics are not provided to advertising partners. Accepting the game terms does not itself enable statistics.

Android backup

If Android system backup is enabled, Google may back up game progress to your Google account. This is managed by Android and Google and is separate from the cloud save of a linked account described above.

Optional ads and age category

Google AdMob provides the rewarded ads, which play only when you start one. Its services may process your IP address (also to estimate general location), device identifiers including the advertising ID, diagnostic information, app information and ad interactions to deliver and measure advertising and prevent fraud. The game is intended for players aged 13 and over and does not ask for your age. Where applicable, Google’s consent form (UMP) presents consent choices before the first ad; where privacy choices apply, they can be reopened in Settings → Privacy options. Advertising and its rewards require a connection; the rest of the game does not. How Google uses partner data.

Ratings and updates on Google Play

From version 1.0.1 the game may, after you set a new best wave and claim milestone rewards, show a window with a link to its Google Play page, where you can rate it. It asks at most twice, and Settings → Rate the game opens the same page. Everyone who sees the window gets the same link, and the game gives nothing for a rating. Google Play processes and publishes your rating and any review under its own terms and policies; the game never learns whether or how you rated, and you can edit or delete your review on Google Play. When it starts, and now and then when you return to it, the game installed from Google Play also asks Google Play (through Google Play services on your device) whether a newer version is available. If one is, it shows a link to the store; nothing is installed or forced. Google Play performs this check and, according to Google, uses device metadata, the app version and the installed modules for it. No data from this check is sent to Karas Game Studios.

Purchases

From version 1.0.4 the game offers optional in-app purchases through Google Play Billing. Google processes the payment and your payment details under its own terms and privacy policy; Karas Game Studios never receives your card or bank details. From Google Play the game learns which item you bought, the state of the order and a purchase token. On your device it records the items you own and a one-way hash of the tokens of your recent purchases, so that one purchase is never credited twice. If you linked an account, these records are part of your cloud save on our server, with the rest of your progress, and are kept and deleted with it. Purchases are not sent with the optional gameplay statistics and are not given to advertising partners. The legal basis is performing the purchase you asked for.

Contacting support

When you contact us, we use your email address, message and attachments to handle your request. Do not send sensitive information that is unnecessary to resolve it. We retain correspondence for as long as needed for the request and related claims, normally no more than 12 months after closure. Email is provided by Google Gmail.

This website

Our hosting and Cloudflare deliver and protect this website and provide HTTPS. They may process IP addresses, timestamps, requested URLs and browser information. We have not added visitor analytics or advertising tracking to the website. Access logs on our server rotate daily, with at most 14 rotated files retained. Cloudflare also processes data under its privacy policy.

Purposes, legal bases and recipients

We process information needed for support to perform a contract or take pre-contractual steps. Security and technical troubleshooting rely on legitimate interests; legal obligations are handled under applicable law. Where advertising technologies require consent, we rely on your choice; the optional gameplay statistics rely on your consent. The account with its cloud save and the world ranking are services you ask for: keeping your backup, showing the ranking and, if you join, listing you are needed to provide them. Records of purchases are needed to deliver what you bought. Google and Cloudflare may process information outside the EEA; their policies describe recipients, transfers and safeguards (Google’s privacy policy).

Deletion and your rights

Clear the app’s data or uninstall it to remove local progress; we hold no copy of it. Turn the statistics off in Settings to delete their local ID and queue and to ask our server to delete their data. Delete your account with its cloud save and ranking entry in the game with Settings → Account → Delete account, or follow the account deletion page; clearing the app’s data or uninstalling alone does not delete it. Manage Google backups, your Play Games profile and your advertising ID in your Google account and device settings. Subject to applicable law, you may request access, correction, deletion, restriction or portability, and object to processing. Consent can be withdrawn without affecting earlier lawful processing. Contact us at the address above. You may complain to your data protection authority, including the Czech ÚOOÚ.

Updates

We will update this policy when features or data practices change, with a new date on this page.