← REAL MILLS · LEGAL
Privacy Policy
EFFECTIVE 20 JUNE 2026 · v1.8
← REAL MILLS · LEGAL
EFFECTIVE 20 JUNE 2026 · v1.8
This policy explains what data Real Mills collects, why we collect it, and what you can do about it. We have kept it plain, transparent, and focused on what the app actually does. If anything is unclear, contact us through Contact Support inside the app or email realmills2026@gmail.com.
Real Mills ("we", "us") publishes the Real Mills game on Android worldwide, but some regions may have restrictions. An iOS and Windows versions may ship later; this policy will be updated before iOS-specific or Windows-specific behavior goes live.
For users in the EU/EEA, the United Kingdom and Switzerland, we are the data controller for the data described below.
Contact: use Contact Support inside the app, or email realmills2026@gmail.com.
Guest account: a randomly generated username and your country, taken from your device region setting. We do not use GPS or location services.
Guest accounts are tied to the account and login data stored by the app. If the app is removed, device data is cleared, or the device is replaced before you connect or recover the account, access to that guest account may be permanently lost.
Google Sign-In, only if you choose it: your email address, public name, profile picture URL, and Google account ID, supplied by Google after you confirm sign-in.
Profile choices: username, avatar or selected skin, country, and other settings you choose in the app.
Support requests: the category, subject and message you submit, plus account context such as user ID, username, email if available, country, app version and platform so we can investigate and reply.
Game data: matches you played, match stake, opponent profile shown in-game, results, rank points, leaderboard position, in-game coins, skins owned, VIP status, and online/offline status.
Rank points are based on match results. Coins are a wallet for gameplay stakes, skins, rewards, and store items; coins do not boost leaderboard rank.
Technical data: IP address and network metadata for connection routing, security, abuse prevention, diagnostics, device type, operating system version, app version, and crash diagnostics used to run the game and fix bugs.
Local-only caches on your device: recent game history, downloaded skin/avatar images, scoreboard cache, sound/vibration preferences, daily reward state, and a small crash diagnostic log. These caches remain on your device until app data is cleared, the app is removed, or you delete your account.
If you buy coin bundles or lifetime VIP on Android, Google Play handles the payment screen and payment details. We do not receive your card, bank, or full payment account details.
We receive purchase metadata needed to verify and fulfil the purchase, such as product ID, purchase token, order ID where available, user ID, and fulfilment status.
We may keep purchase, refund, and chargeback records for fulfilment, fraud prevention, support, tax/accounting, dispute handling, and app-store compliance.
Google AdMob may use your Android Advertising ID, approximate location derived from IP, and ad interaction data to show ads. Our app code and backend do not intentionally read, store, or receive raw Android Advertising IDs; AdMob handles them through its SDK and servers.
Where required, AdMob privacy choices are collected through Google's User Messaging Platform (UMP) / Privacy & messaging form before personalized ads are requested.
When the app loads an avatar, board skin, or profile image from an external URL, that image host receives a normal HTTPS image request. This can include your IP address, device/network request metadata, and the image URL requested.
Avatar and image sources may include Google profile photos, DiceBear, ui-avatars.com, Azure-hosted avatar or skin images, bundled app assets, or other image hosts shown in the app.
We do not send gameplay history, coins, purchases, or private credentials to avatar/image providers. They only receive the image request needed to display the selected image.
We do not access your camera, microphone, contacts, photos, files, GPS location, calendar, or SMS.
We do not collect card numbers, bank details, GPS location, contacts, private photos, or private files.
We do not use Firebase, Crashlytics, Sentry, OneSignal, Mixpanel, or another third-party analytics/push SDK.
Performance of a contract: to provide accounts, gameplay, leaderboards, matchmaking, purchases, and support.
Legitimate interests: keeping the service secure, anti-cheat, fraud prevention, diagnostics, and fixing crashes.
Consent or opt-out choice where required: personalized advertising and ad measurement in regions that require it, including the EEA, UK, and Switzerland.
Run the game, save progress, and match you with opponents.
Calculate rank points from match results and show leaderboards, game history, and profile stats.
Detect and prevent cheating, fraud, and abuse.
Show advertising through Google AdMob.
Verify and fulfil in-app purchases, restore eligible purchases, and prevent purchase fraud.
Receive and respond to support requests.
Communicate important app changes through in-app notices.
We provide gameplay features that allow you to play against computer-controlled opponents. The logic runs locally and is not used for advertising or profiling you.
We do not sell your personal data or use it for political profiling, credit scoring, or unrelated purposes.
Microsoft Azure, which hosts our backend services and database.
Google AdMob, our ad-serving partner.
Google Sign-In, only if you choose Google login.
Google Play Billing, which processes Android purchases and provides purchase verification metadata.
Public avatar/image providers or CDNs, such as Google profile images, DiceBear, ui-avatars.com, and Azure-hosted avatar or skin images, only to load the image assets shown in the app.
Authorities, only when required by valid legal process.
Our backend runs on Microsoft Azure. Your data may be processed in Ireland, the European Union, or other Azure regions used to operate the Service.
For EU/EEA/UK users, transfers outside the EEA/UK rely on Standard Contractual Clauses or equivalent safeguards where required.
While your account is active: as long as needed to run the game.
Support requests: as long as reasonably needed to answer the request, investigate bugs, payment issues or abuse, and keep an audit trail, typically up to 3 years unless longer retention is required for legal, fraud, tax, accounting, or dispute purposes.
These Retention periods may differ based on the local law. For instance, in the EU, certain records may be kept up to 5 years if legally required.
Purchase verification records: as long as needed for refunds, fraud prevention, tax/accounting, dispute handling, and store compliance, typically several years depending on the law that applies.
Account deletion: when you delete your account in the app, we delete your active user record from production systems and clear local app storage on your device. Some purchase, support, backup, disaster-recovery, or short-retention server log records may be retained where required for legal, tax, dispute, security, or anti-fraud reasons.
Aggregated, non-identifying statistics may be kept indefinitely.
Wherever you live, you can ask to see, correct, or delete the data we hold about you. You can edit your profile in the app and delete your account from the Account screen.
Where available, you can change advertising privacy choices from the app's privacy options. EU/EEA/UK/Swiss users may also have rights to restrict or object to processing, data portability, and to complain to a local data protection authority. California users may have rights to know, delete, correct, and opt out of certain sale or sharing. We do not sell your personal information.
Real Mills is not directed at children under 13. We do not knowingly collect personal data from children under 13.
If you are a parent or guardian and believe a child under 13 has registered, contact us and we will delete the account.
In places with a higher digital-consent age, the corresponding higher minimum age applies.
All traffic between the app and our servers mostly uses HTTPS.
Backend services are hosted on Microsoft Azure with standard access controls.
We may use automated systems and manual review to detect cheating, abuse, fraud, purchase manipulation, reward manipulation, and security threats. This processing is limited to protecting the integrity and security of the Service.
No system is 100% secure. If we discover a breach affecting your data, we will notify you and relevant authorities as required by law.
The app is not a website; we do not use HTTP cookies.
Google AdMob may use a device advertising identifier and local storage as described above.
Where required, we use Google's UMP / Privacy & messaging form so you can make or change advertising privacy choices.
Android users can manage advertising ID settings in your device' s Android privacy settings.
If we materially change this policy, we will show an in-app notice before the change takes effect. The effective date at the top tells you the current version.
Questions, complaints, and data requests: use Contact Support inside the app or email realmills2026@gmail.com.