Orbland Privacy Policy

Effective date: October 14, 2026
Developer: Cyberleak Studios
Contact: dodgehemidude@gmail.com

This policy describes what Orbland actually uses. It applies to the Android app (com.orbland.app), the same game in a web browser, and the iOS project in this codebase. Cyberleak Studios does not run a game server and does not create accounts.

The short version

• You do not need an account. We never ask for your name, email, phone number, photos, contacts, or GPS location.
• Scores, coins, cosmetics, and settings stay on your device only. We cannot see them.
• Orbland has no analytics SDK and no crash-reporting SDK of our own (no Firebase, Crashlytics, or similar).
• On Android, Google AdMob shows a Home-screen banner and, if you tap it, an optional crash-screen rewarded ad. A Google-certified consent form (UMP) runs on every launch, in every region, before ads load. Google may collect advertising ID, an approximate location from your IP address, device information, and diagnostics, including personalized ads only where you allow them.
• The one-time Remove ads $3 purchase is handled by Google Play. We never see your payment details. That purchase turns the Home banner off. The crash-screen rewarded ad is still an optional tap.
• We do not sell your data.
• Orbland is for players 13 and older and is not directed at children under 13.

1. Information saved only on your device

Orbland stores progress in the app's local storage (and, on Android, a small on-device flag that a rewarded ad was earned). This includes:

• Best score and best distance
• Coin balance
• Unlocked and equipped balls, hats, trails, faces, cape, and face color
• Power-ups and chest progress
• Achievements and which achievement coin rewards you already collected
• Wager Mode settings and win/loss stats (in-game coins only, never real money)
• Ultra Mode and Boss Mode settings
• Thumb-side (left or right hand) setting
• Music, sound, and vibration settings
• Whether you have already seen the how-to-play card
• Your one-time age band (Under 16 or 16 or older), used only for ads
• A short-lived “pending reward” flag after you finish a rewarded ad, so the extra coins can be granted if the phone rotates

This information is not sent to Cyberleak Studios. It does not include your name or other personal details.

Android backup is allowed. If you have device backup turned on, Google's backup of the phone may include Orbland's local save along with other apps. That backup is handled by Google, not by us.

2. Ads (Google AdMob)

On Android, Orbland uses Google's Mobile Ads SDK (play-services-ads). There are two ad placements:

• A banner on the Home screen.
• An optional full-screen rewarded ad on the crash screen if you tap Watch an ad to double your coins. It does not play by itself.

There are no ads during a run. Buying Remove ads turns the Home banner off. The crash-screen offer stays as a voluntary tap.

To show ads, measure them, reduce fraud, and (where allowed) personalize them, Google's ad software in the app may collect:

• Your device's advertising identifier (Android Advertising ID). The merged Android app includes the AD_ID permission and related Ad Services permissions from Google's SDK.
• Your IP address, which Google may use to estimate an approximate location such as city or region. Orbland does not request GPS or precise location permission.
• Device information such as device type, OS version, and app identifiers.
• Diagnostics and performance related to the ad software (for example whether an ad loaded or failed).
• How ads are shown and tapped.

This information goes to Google, not to a Cyberleak Studios server. Personalized ads are gated as follows:

• Every launch, every region: Orbland asks Google's User Messaging Platform (UMP) for an updated consent / privacy message, then shows Google's form if one is required, before the ads SDK starts or any ad is requested.
• EEA / UK / Switzerland: the GDPR message asks you to opt in before personalized ads. That form is a Google-certified consent management platform (CMP).
• US states (including California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others Google supports): the US state regulations message lets you opt out of “sale/sharing” and targeted ads. Options always has a Privacy & ad choices button so that opt-out stays one tap away.
• Under 16: if you chose Under 16 on first launch, Orbland tags the ads SDK for under-age of consent, requests only non-personalized ads (npa=1), and caps ad content at rating T. Personalized ads are not shown. California also requires opt-in before selling or sharing data of users under 16; we do not sell data, and Under 16 players never get personalized ads.
• If the consent form fails to load, gameplay still works and ads fall back to non-personalized requests.

Google's use of this information is described here:

• How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
• Google Privacy Policy: https://policies.google.com/privacy

Your ad choices

• Privacy & ad choices in Options opens Google's privacy-options form (the persistent US opt-out link, and the same form wherever UMP marks it required).
• Android: reset or delete your Advertising ID, or opt out of personalized ads, in the phone's Settings (often Google → Ads or Privacy → Ads).
• Buy Remove ads $3 to turn the Home banner off.
• Do not tap the crash-screen rewarded ad if you do not want that ad.

The web version of Orbland does not load AdMob, but it still asks the age question once so a later install of the app can reuse that local choice. The iOS project includes UMP, an App Tracking Transparency pre-prompt, and the AdMob app ID; a Mac with CocoaPods is required to finish that build (see docs/ADMOB-CONSENT-SETUP.md).

2a. Age question

The first time you open Orbland, it asks whether you are Under 16 or 16 or older. Neither choice is pre-selected. The answer is stored only on the device (orbland-age) and is sent to the ads SDK as Google's under-age-of-consent tag. Clearing app data or uninstalling deletes it. The game remains 13+ and is not directed at children under 13.

3. Google Play purchases

Orbland has one real in-app product on Android: remove_ads (“Remove ads $3”). It turns the Home banner off. It does not give coins or unlocks.

• Google Play Billing processes the purchase. Your payment details go only to Google.
• The app asks Google Play whether you own Remove ads, so it knows whether to hide the banner. We do not store your purchase history on our servers (we have none).
• Purchases follow your Google account, so Restore purchases can bring Remove ads back after a reinstall on a device signed into the same Play account.

Google's handling of Play purchases is covered by Google's privacy policy linked above.

The in-game “supporter pack” is labeled as a test purchase in the Unlocks screen. It is not a Google Play product.

4. Sharing a score card

If you tap Share on the crash screen, Orbland draws a picture of your score on the device and opens the phone's share menu. Orbland does not upload that picture. It only goes where you choose to send it. A temporary copy may sit in the app cache.

5. What we do not collect

Cyberleak Studios does not collect, store, or sell:

• Names, emails, phone numbers, or account logins (there are no accounts)
• Precise location
• Contacts, camera, microphone, photos, or files (except the optional score picture you choose to share)
• Messages or chat (Orbland has no chat)
• Health, fitness, government ID, or financial account information

The only outside page the app opens for privacy is this policy.

6. Phone permissions (Android)

Orbland's own manifest asks for internet access (to load ads and talk to Google Play) and Google Play billing. The shipped app also includes permissions pulled in by Google's ads and Play libraries. The merged release manifest includes:

• INTERNET — ads and Play Billing
• com.android.vending.BILLING — Remove ads
• VIBRATE — optional in-game haptics (you can turn this off in Options)
• ACCESS_NETWORK_STATE — from Google's ads SDK
• com.google.android.gms.permission.AD_ID and Android Ad Services ad-id / attribution / topics permissions — from Google's ads SDK, for advertising ID and ads measurement
• WAKE_LOCK and FOREGROUND_SERVICE — pulled in by Google Play services ads. Orbland's own code does not start a foreground service.

Orbland does not ask for location, camera, microphone, contacts, or photo-library permission.

7. Children

Orbland is made for a 13+ audience. It is not directed at children under 13.

• Cyberleak Studios does not knowingly collect personal information from anyone, including children under 13. We do not collect personal information on our own servers.
• Google's ad software (Section 2) may still collect advertising identifiers and related data from anyone who plays on Android.
• If you are a parent or guardian, you can buy Remove ads, turn off ad personalization in device settings, and avoid the optional rewarded ad. If something about a child's data concerns you, email dodgehemidude@gmail.com.

8. How to delete data

• Options → Reset Progress clears achievements, Wager stats, and best score on this device.
• Options → Reset Unlocks clears coins, cosmetics, power-ups, chests, and Ultra unlocks on this device.
• Uninstall Orbland or clear the app's data in Android Settings to delete Orbland's local save from that device.
• Email dodgehemidude@gmail.com if you need help. We do not hold a copy of your game save, so there is nothing for us to erase on our side.

For data Google collected through ads or Play purchases, use your device's ad settings, https://myaccount.google.com/, or Google Play's purchase tools. Your Remove ads record stays with your Google account.

9. Security

Your game save stays on your device and is protected by the device's own security. Traffic to Google Ads and Google Play uses those companies' encrypted connections. We do not operate a backend that receives your save.

10. Changes

If Orbland starts using information in a new way, we will update this page and the effective date. Important changes will also appear in the app's update notes when we ship a new version.

11. Contact

Questions about this policy or your privacy: email Cyberleak Studios at dodgehemidude@gmail.com.