This Privacy Policy explains the processing of personal data by the Android game OpenCraft World, listed on Google Play as Open Craft Survival World, package ID com.hksdev.opencraftworld, and when this webpage is accessed.
1. Controller
H.K.Solution GmbH
Westerdeicher Str. 11
26553 Dornum / Nessmersiel
Germany
Email: mnhksdevelopment@gmail.com
2. Privacy at a glance
You do not need a separate player account to play. Worlds, inventory, progress, settings and your coin balance are stored locally on your device. We do not operate our own server to synchronise this game data.
Advertising and purchases use online services provided by Unity and Google. These may process device identifiers, IP addresses, approximate location, advertising interactions, purchase information and diagnostics. Storing coins locally therefore does not mean that buying coins or watching an advertisement involves no data transmission.
The game currently has no multiplayer mode, chat or public world sharing. It does not access your camera, microphone, contacts, private photos or GPS location. The in-game map represents the game world, not your real location. Health, hunger and thirst are fictional character values, not information about your health.
3. Local worlds, progress and settings
- Worlds and saves: world name, identifier and generation data, game mode, modified terrain, placed objects, player position, inventory, equipment, progress and saved world states.
- Settings: language, graphics, audio and control options and other locally saved gameplay preferences.
- Coins and unlocks: the device's coin balance, Premium status, completed and pending transactions, purchased items or deliveries to a world, and progress rewards already claimed.
- Video rewards: local transaction identifiers, timestamps, completion state and daily counters to award rewards correctly and prevent duplicate claims.
This data allows you to save and resume your game, receive purchased content and maintain your coin balance reliably. It generally remains until you delete the relevant save, clear app data or uninstall the app. Deleting a world does not automatically delete the separate coin wallet. Technical backup and recovery files may form part of local app data.
Avoid personal information in world names where possible. We cannot remotely access data stored solely on your device. The legal basis for requested game functions is Article 6(1)(b) GDPR; technically necessary local storage is governed by Section 25(2)(2) of Germany's TDDDG.
4. Coin packs, Premium and Google Play
You can buy coin packs and a permanent Premium unlock through Google Play. Coins can be spent on in-game items and building content; they cannot be cashed out. Premium unlocks Creative mode and removes automatic advertising breaks. Optional videos for coin rewards remain available with Premium.
The app uses Unity In-App Purchasing to connect to Google Play Billing. This service retrieves product information and localised prices, checks existing or pending purchases and handles purchase and restoration requests. Google processes information such as Google Account, device, network and transaction data. The app receives product information, purchase state and receipts containing transaction information and purchase tokens. Our app does not receive your full card or bank details.
The app verifies receipts locally and stores a cryptographic hash of the purchase token as a transaction identifier to prevent duplicate credits. Such an identifier is not automatically anonymous. We do not operate our own receipt-validation server.
Restoration: an existing Premium entitlement can be retrieved using the same Google Play account. Previously consumed coin packs are not credited again. Clearing app data may remove your local coin balance; we do not provide our own cloud restoration for the wallet.
The legal basis for processing and fulfilling purchases is Article 6(1)(b) GDPR. Price and entitlement checks and duplicate-credit prevention rely, where necessary, on Article 6(1)(f) GDPR. Our interests are accurate accounting, reliable unlocks and preventing misuse. Legally required records are subject to Article 6(1)(c) GDPR.
For users in the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is a relevant Google provider; Google Commerce Limited may be involved in purchases. Google's Privacy Policy and the Google Play Terms also apply.
5. Advertising and optional video rewards
Without Premium, occasional advertising breaks may appear after a play session. When external ads are declined or unavailable, the app can instead show its own locally bundled Premium promotion. This promotion makes no advertising-network request, uses no tracking and gives no video reward. It can be dismissed immediately or used to open Premium details; opening details is not a purchase. Premium removes both automatic external ad breaks and these local promotions. Optional rewarded videos remain subject to separate advertising permission.
We use Unity Ads only after advertising opt-in. With opt-in and without Premium, automatic interstitial advertisements may appear when you return to the main menu after a game session. You can also choose to start a rewarded video. Once completion is confirmed, the relevant coin reward is recorded locally. Banner advertising is not currently implemented.
The app sets Unity Ads' nonbehavioral option to request non-behavioural advertising. This setting does not stop all SDK data collection. Initialising the advertising service and loading an ad can already transmit data, before you explicitly start a rewarded video. Premium prevents automatic advertisements but does not completely disable the advertising service used for optional videos.
Unity's disclosures list IP address and approximate region, advertising and other device or user identifiers, technical device and network information, purchase history, diagnostics, and views, clicks and other interactions within advertisements. Recipients may include Unity companies, advertising partners and technical service providers. Purposes include ad delivery and measurement, analytics, app functionality and fraud prevention.
If “Acquire Optimization” is enabled in the Unity dashboard, Unity states that it also processes app usage times for advertising optimisation. Our game scripts do not send world names, inventory contents or saved buildings to Unity Ads.
Further details and privacy options are available in Unity's Game Player and App User Privacy Policy. The Unity Ads data-safety disclosures explain the SDK data categories.
6. Technical Unity data
A separate Unity Analytics service for analysing gameplay is not enabled in the reviewed project. This does not mean that Unity Ads and Unity In-App Purchasing process no analytics or diagnostic data of their own.
The purchasing SDK may process device, installation and session identifiers, country information, purchase events, error information and performance data to operate its service. The data involved also depends on the store and SDK configuration. The app uses Google Play Billing; it does not provide an additional Unity webshop or D2C payment screen requesting an email address.
Necessary purchase processing relies on Article 6(1)(b) GDPR. Necessary security and troubleshooting may rely on Article 6(1)(f) GDPR; our interest is secure and reliable operation. This does not automatically cover non-essential analytics. The Unity IAP privacy overview describes processing, responsibilities and request channels.
7. Consent and privacy options
Processing that requires consent is governed by Article 6(1)(a) GDPR. Storing or accessing information on your device that is not technically necessary requires consent under Section 25(1) TDDDG where applicable. Non-personalised advertising is not automatically exempt. Choosing to start a video does not, by itself, replace informed privacy consent.
At first launch, the app displays a privacy dialog before starting Unity Ads. No advertising choice or age confirmation is preselected. Choose “Decline external ads” to continue without starting, loading or showing Unity Ads. Gameplay and Google Play purchases remain available. To choose “Allow external ads”, you must also confirm that you are at least 16 years old. The linked privacy policy can be opened without opting in.
Your advertising choice, the notice version, the policy URL, the decision time and, when allowing ads, the confirmation that you are at least 16 are saved locally on this device. No exact age or date of birth is collected. These preferences are stored separately from worlds and the coin balance. The dialog does not reappear on every launch once a valid decision is saved. Clearing app data or a material change requiring a new notice may require a fresh choice.
You can change or withdraw permission under Settings → Privacy & advertising. Declining after previously allowing external ads immediately prevents new Unity Ads loads and displays. Because the advertising SDK has no shutdown function, the app saves your current world and closes when you select “Withdraw & close app”, fully stopping the running advertising service. Reopen the game to continue without external ads. Without Premium, local Premium promotions can still appear. If saving fails, the app asks you to retry instead of discarding your current world. Withdrawal does not remove worlds, coins or purchased entitlements and does not retroactively undo prior lawful processing.
Following opt-in, ad-service initialisation and preloading may transfer data even before you choose to watch a rewarded video. The app requests contextual advertising and does not signal permission for personalised ads. You can obtain coins through objectives or purchases without enabling advertising. Opening the privacy-policy link sends normal webpage connection data to its host as described below.
You can skip optional rewarded videos. Depending on your Android version and device, additional advertising-ID and privacy options are available in Android or Google settings. These do not necessarily stop all technical processing by the advertising service. Contact us by email for access, objection and deletion requests. Unity also provides its own privacy information and request channels, sometimes through a privacy icon within an advertisement.
8. Android permissions and security
The Android build contains permissions for internet access, network state and Google Play Billing. Unity Ads includes permissions for the advertising ID and Android Topics and Attribution interfaces. Technical libraries also contain permissions for wake lock, device-boot events and a foreground service. A permission being present does not mean every feature is actually used on every device.
No runtime permission is requested for the camera, microphone, contacts, photos or precise location. An approximate location can be derived from an IP address. Unity states that its advertising and purchasing services encrypt data in transit. The game does not add content encryption to local save and wallet files; their protection depends in particular on Android and your device lock.
9. Hosting of this webpage
This webpage is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
When the page is accessed, the web server processes connection data. IONOS lists the requested file, referrer, browser, operating system, device type, access time and anonymised IP address. For its standard web hosting, IONOS states that visitor data is kept for eight weeks and is not transferred outside the EU. WebAnalytics serves statistical analysis and technical optimisation.
The legal basis is Article 6(1)(f) GDPR; legitimate interests are secure delivery and troubleshooting. Processing on our behalf must be covered by an Article 28 GDPR agreement. This HTML page itself contains no tracking scripts, embedded third-party content or remotely loaded fonts.
Details: IONOS web hosting and IONOS WebAnalytics.
10. Contact and support
If you email us, we process your sender address, message content, time and technical message information to handle your request. Our contact inbox uses Gmail, so Google is involved as the email provider. Please send only information needed for your request, not full payment details.
The basis is Article 6(1)(b) GDPR for contract-related support, or Article 6(1)(f) GDPR otherwise, with an interest in answering requests. Messages are deleted when no longer needed unless statutory retention or necessary evidence requirements apply.
11. Recipients and international transfers
Depending on the activity, recipients include our company, Unity and its service providers or advertising partners, Google for purchases and email, and this page's hosting provider. Unity acts as a processor or independent controller depending on the activity. We do not sell local save games.
Unity and Google may process data outside the European Economic Area, particularly in the United States. Their stated transfer mechanisms include applicable adequacy decisions and Standard Contractual Clauses. Information about the safeguards applicable to a transfer and how to request details is available in their privacy policies; you may also contact us. For Google, see its international data-transfer information.
12. Deletion, retention and backups
You can delete worlds through the game's world management and remove all local app data through Android settings. This may also remove coins and progress that has not been backed up elsewhere. This does not automatically delete purchase records held by Google or data already sent to Unity.
The reviewed Android build does not expressly exclude operating-system backups or device transfers. Depending on device, manufacturer and Google settings, local data may therefore be included in a system backup or device transfer. We cannot directly access your private system backup. This does not guarantee full restoration of game or coin data.
Section 3 describes local retention; Sections 9 and 10 describe hosting and support retention. Unity and Google retain data according to the relevant purposes and legal, security and evidential needs. There is no single deletion period for all SDK data. Further details are in the linked provider notices.
13. Minors and optional features
The game is intended for teenagers and adults, not specifically for children under 13. Regional store age ratings apply and may be higher in some countries. We do not collect a date of birth. External advertising is disabled for players who do not confirm that they are at least 16; local Premium promotions may still appear as described in Section 5. There is no parental-consent flow to enable ads for younger players.
Purchases, rewarded videos and contacting us are optional. Consent-dependent processing involving minors is subject to applicable age thresholds and, where required, authorisation from a parent or guardian. Our current advertising configuration does not request behavioural personalisation. An age-rating notice does not replace required child-protection or consent measures.
14. Your privacy rights
Where the legal conditions are met, you have rights of access, rectification, erasure, restriction, portability and objection. You can withdraw consent for the future. You can object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time. We do not make our own solely automated decisions with legal or similarly significant effects within Article 22 GDPR.
Contact mnhksdevelopment@gmail.com. Where Unity processes data on our behalf, we receive your request and arrange processing with the provider. Google and Unity also offer request channels for processing for which they are independently responsible. We cannot remotely delete data held solely on your device.
You may complain to a competent supervisory authority under Article 77 GDPR, particularly where you live or where our company is based. In Lower Saxony, this is the State Commissioner for Data Protection of Lower Saxony.
15. Changes
We update this policy when the app, services or processing change. The published version is available at the privacy-policy URL provided for this app.