Privacy Policy

At a glance

Who we are

Hollow Porch Games ("we", "us", "our") is the independent developer of Welcome to Zombie Springs ("the game"). We are responsible for the personal data described in this policy (the "controller" under EU and UK data protection law), except where this policy says that Google, Roblox or another company decides how data is used. You can reach us at hollowporchgames@gmail.com.

Where this policy applies

• Android (Google Play): every feature described below.
• Windows (PC): the same game without ads, purchases or cloud saves. Online play and feedback work as described below. If the game is offered through a store such as Steam, that store's own privacy policy also applies to your store account, purchases and any store features you use, and the parts of this policy about Google Play apply only to Android.
• iPhone and iPad: if the game is released on the App Store, this policy will apply to it. Purchases will then be handled by Apple, and the game will ask your permission (App Tracking Transparency) before any ad partner can use data that tracks you across other companies' apps and websites. If you say no, you may still see ads, but they won't be personalized using that data.
• Roblox: the Roblox version runs on Roblox's platform. See Roblox.
• This website, hollowporchgames.com. See This website.

What stays on your device

The game saves a file on your device that holds:

• your progress, settings, in-game cash, diamonds, items, records and the username you choose;
• a random account key and the public Player ID made from it (see Player ID);
• a record of each purchase (the store's purchase token), so each purchase is delivered only once and permanent purchases can be restored;
• the players you've blocked, and a short history of the player reports you've sent (so the same player isn't reported twice);
• a copy of the game's ban list, so it still works without an internet connection.

The game also checks, on your device, that it is an unmodified copy, by reading the app's own signature, which store installed it, and whether the device is rooted. This check never leaves your device. A modified copy of the game can't use the store or online play. Usernames are checked against a list of offensive words on your device.

If backup is turned on for your Android device, Android may back up the game's save file to your Google account and restore it when you reinstall. That is your device's own backup, which you control in your device settings.

We receive none of this unless you use one of the features below.

Your Player ID

The first time you play, the game creates a random secret account key on your device. There is no sign-up, email or password. From that key the game calculates your public Player ID (shown as XXXX-XXXX-XX in Settings > Controls > Profile). The account key itself is never shown and never sent online.

Your Player ID is sent with your online profile so other games can recognise you for blocking, reporting and bans. It doesn't contain your name or any other personal details. Changing your username doesn't change your Player ID. Delete My Data deletes your account key, and you get a new Player ID the next time you play.

Google Play Games and cloud save (Android)

On Android the game uses Google Play Games Services so your progress can come back after you reinstall or move to a new device. Google may sign you in automatically with the Play Games profile you already have, or you can sign in from Settings > Controls > Profile. Signing in is optional, and the whole game works without it.

When you're signed in:

• The game receives your Play Games player ID and gamer name from Google, and shows your gamer name in Settings. It doesn't send them anywhere else.
• Your save file (including your account key, so your Player ID comes back with it) is stored in your Google account as a Play Games saved game. The game updates it as you play. We can't see it; only the game, signed in as you, can read it.
• Google processes the information it needs to run Play Games Services under the Google Privacy Policy.

Online play

Online co-op and PvP are optional. They connect to free public relay servers (MQTT brokers) run by other organisations, currently EMQX, HiveMQ, the Eclipse Foundation and the Eclipse Mosquitto project, to exchange game data with the other players in your match. When you play online, the game sends:

• your username, Player ID, character, skins, loadout and level;
• the game version, a random session number and your party code (and, if you host a public party, a short public listing with your username, Player ID, party code, map, mode, player count and game version, so Quick Match can find it);
• live gameplay: positions, actions, damage, scores and quick-chat messages.

The other players in your match see your username and your gameplay. Because these servers are public, other people connected to them could also see this match data, and the server operators can see your device's IP address. We don't store online match data or link it to you. Please don't put personal information in your username. Before you go online for the first time, the game shows the online rules and asks you to agree to them.

Player reports, blocking and bans

• Blocking a player is stored only on your device.
• Reporting a player sends us, through our Google Form: the reason you chose; the reported player's username, Player ID and level; the mode, map, party code and time of the match; the game version; and your own username and Player ID. If the form can't be reached, your email app opens with the report written out, and sending it shares your email address with us. We use reports only to keep online play fair and safe.
• Bans. When the game starts, it downloads our public ban list (a list of banned Player IDs) from this website. Like any web request, this shows your IP address to our website host (see This website). A banned Player ID can still play offline but can't play online. If you think you were banned by mistake, email us with your Player ID.

Feedback

If you send feedback from the game, your message goes to a Google Form owned by Hollow Porch Games and is stored in Google Sheets. If you leave Include game info ticked, it also includes your game version, device model and operating system, the day you've reached, your player level, your username, your character and your graphics setting. If the form can't be reached, your email app opens instead, and sending that email shares your email address with us. We use feedback only to reply to you and to fix and improve the game.

Performance reports (optional)

If the game keeps running slowly on your device, it may ask whether you'd like to send us a performance report. Nothing is sent unless you tap Send info, and the game asks at most once per game version. A report contains technical information only: your device model, operating system and version, graphics chip and graphics system, screen size, number of processor cores, memory use, the game version and graphics settings, frame rates and frame timings, what was on screen (for example the number of zombies and effects), the map and mode, and your Player ID. It's sent through our Google Form, and we use it only to make the game run better on more devices.

Purchases

In-app purchases are optional and are made through the store you got the game from: Google Play on Android, Robux through Roblox on Roblox, and Apple or Steam if the game is released there. We never see your name, card or payment details. The store tells the game which item you bought (with an order number and a purchase token) so it can be delivered. The store keeps the payment record under its own privacy policy (Google, Roblox, Apple, Valve).

Advertising (Android)

The free Android version shows ads from Google AdMob: a video between some runs, and optional reward videos (for example to revive, get 1.5x cash from a run, or get free diamonds, boosts or items in the shop). Reward ads are always your choice. Ads are limited to content suitable for teens. The Windows and Roblox versions have no ads from us.

To show and measure ads and to prevent fraud, Google collects your device's advertising ID, your IP address (from which it can estimate your general location), information about your device and the app, and how you interact with ads. Google uses this data under its own privacy policy, and uses it for personalized ads only as your choices allow:

• EEA, UK and Switzerland: before ads can use your data, the game asks for your consent with Google's consent form (certified under the IAB Transparency & Consent Framework). If you don't consent, you may still see ads, but they won't be personalized.
• US states with privacy laws (such as California): you can opt out of personalized ads ("Do Not Sell or Share My Personal Information") in the game.
• Change your choice at any time in Settings > About > Your Privacy Choices (shown where these laws apply). You can also reset or delete your advertising ID in your device's settings.
• Buying Remove Ads or VIP turns off all ads for good, including the ads between runs. If you still want reward ads after that, you can turn them on yourself in Settings > Controls > Profile > Reward Ads.

Learn more: How Google uses information from apps that use its services · How Google uses advertising data · My Ad Center.

Roblox

The Roblox version runs on Roblox's platform under the Roblox Privacy Policy, and Roblox's own rules and parental controls apply. Roblox gives the game your Roblox user ID and display name. The game stores your progress, settings and purchases in Roblox's data storage, linked to your Roblox user ID, so they're there when you come back. Purchases are made with Robux through Roblox. Chat and feedback use Roblox's own systems. We don't receive your Roblox account details, email or payment information, and the Roblox version doesn't send data anywhere outside Roblox.

This website

hollowporchgames.com is hosted by Cloudflare. It uses no cookies, no analytics and no advertising, and it loads no third-party scripts or fonts. Like any web host, Cloudflare processes your IP address and basic request details (such as your browser type and the page requested) to deliver the site and protect it from attacks, under the Cloudflare Privacy Policy. The game's ban list is downloaded from this website in the same way.

What we don't collect

• No sign-up of our own: no email address (unless you email us), password, real name, phone number or date of birth.
• No contacts, photos, files, microphone, camera or precise location.
• No sensitive personal information.
• No analytics or tracking tools of our own. AdMob's use of the advertising ID is described under Advertising.

Google Play (and other stores) may collect crash reports and app statistics under their own privacy policies. We see these only as anonymous totals and crash details that don't identify you.

How we use data

• To run the game and its features: saving and restoring progress, delivering purchases, and online play.
• To show ads in the free Android version, as you've allowed.
• To keep online play fair and safe: reports, blocks and bans.
• To answer you, fix bugs and improve the game, using feedback and performance reports you send.
• To meet our legal obligations and to defend legal claims.

We don't make decisions about you by automated means that have legal or similarly significant effects. Bans are decided by a person.

Legal bases (EEA, UK and Switzerland)

• Consent: personalized ads and storing or reading ad identifiers on your device, and performance reports. You can withdraw your consent at any time; this doesn't affect what happened before.
• Performance of a contract (providing the game you asked for): your save, cloud save when you sign in, delivering purchases, and online play when you choose to play online.
• Legitimate interests: non-personalized ads, ad measurement and fraud prevention (funding a free game), feedback and player reports, bans and the integrity check (keeping the game fair and secure), and fixing problems. You can object (see Your rights).
• Legal obligation: keeping records we must keep by law.

Who receives data

If Hollow Porch Games or the game is ever sold or transferred, the information we hold would pass to the new owner under this policy, and we would tell you in advance.

We do not sell personal information for money. Under some US state laws, letting AdMob use your advertising ID for personalized ads can count as "selling" or "sharing" personal information, or as "targeted advertising". You can opt out as described under Your privacy choices.

International transfers

We are based in the United States. Google, Roblox, Cloudflare and the relay server operators may process data in other countries, including the United States. When data leaves the EEA, the UK or Switzerland, these companies rely on safeguards such as the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and the European Commission's Standard Contractual Clauses.

How long we keep it

Your privacy choices

• Ads: Settings > About > Your Privacy Choices lets you change your ad consent or opt out of personalized ads, where these laws apply. You can also reset or delete your advertising ID in your device settings (Android: Settings > Privacy > Ads, or Settings > Google > Ads).
• Reward ads: always optional. After Remove Ads or VIP, they stay off unless you turn them on.
• Cloud save: optional; you can play without signing in to Google Play Games.
• Online play: optional; the whole story and Survival mode can be played offline.
• Feedback and performance reports: only sent when you choose to; you can untick Include game info.
• Delete your data: Settings > About > Delete My Data, and the other options on our Delete your data page.

Your rights

Wherever you live, you can email us to ask what personal information we hold about you, or to have it corrected or deleted. Depending on where you live, you may also have these rights:

• EEA, UK and Switzerland (GDPR, UK GDPR, Swiss FADP): access, correction, deletion, restriction, data portability, objection, and withdrawing consent at any time. You can also complain to your local data protection authority.
• US states with privacy laws: see the US state privacy notice.
• Canada, Brazil (LGPD), Australia and other countries: similar rights to access, correct and delete your information, and to complain to your privacy regulator.

Email hollowporchgames@gmail.com and we will reply within 30 days (45 days where a US state law allows). Because the game has no sign-up, we hold very little that's tied to you. To find it, we may ask for your Player ID or details such as the date and text of feedback you sent. For data that Google or Roblox holds, use their tools (for example My Ad Center or Google Account > Data & privacy), or ask us and we'll point you to the right place.

US state privacy notice

This section is for residents of California and other US states with consumer privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others). In the last 12 months, the game collected these categories of personal information:

We collect this information from you and your device, for the purposes described in How we use data. We don't collect sensitive personal information, and we don't knowingly sell or share the personal information of anyone under 16.

You have the right to know about and access, correct and delete your personal information; to opt out of its sale or sharing and of targeted advertising (see Your privacy choices); and not to be treated differently for using these rights. You can use an authorized agent; we may ask them for proof that you authorized them. If we turn down your request, you can appeal by replying to our answer; if we turn down your appeal, you can contact your state's attorney general.

Children

The Android and Windows versions are made for players aged 13 and over, and are not directed at children under 13. We do not knowingly collect personal information from children under 13. In the EEA and the UK, if you are under the age your country sets for agreeing to online services (between 13 and 16), ask a parent or guardian before agreeing to personalized ads.

On Roblox, players of all ages may play under Roblox's own age rules, parental controls and privacy policy, and the game receives only what Roblox provides, as described in Roblox.

If you think a child under 13 has sent us personal information, for example in feedback or an email, email us and we will delete it.

Security

The game's connections to Google services, the online servers, the feedback form and this website are encrypted (TLS). Your account key never leaves your device except inside your own cloud save. The online servers are public and no system is perfectly secure, so keep personal details out of your username, feedback and chat.

Changes to this policy

If we change this policy, we'll update the effective date at the top. For significant changes we will also tell players in the game before they take effect, and ask for your consent again where the law requires it.

Contact

Hollow Porch Games
hollowporchgames@gmail.com
Help and support