Privacy and Support
RESCUE PROJECT — PRIVACY POLICY AND ACCOUNT DELETION
Revised 30 October 2026 — Android online testing, including purchase-verification records and optional Google account connection.
Developer: Sir BonksALot, Ontario, Canada
Privacy and support: support.rescueproject@gmail.com
ABOUT THIS POLICY
This policy explains how Rescue Project handles information when you play, use cloud saves, view advertisements, make purchases or contact support. Sir BonksALot is responsible for the game's handling of personal information. The developer handles privacy requests at the address above.
This notice covers the online testing version. Unity accounts and cloud saves are used. Ordinary gameplay test builds keep real-money purchases and rewarded-ad requests unavailable. Google advertising libraries can still be included in the application; disabling ad buttons does not by itself establish that an SDK performs no technical processing. The advertising and purchase sections explain planned functions and diagnostic testing, rather than promising that live paid features are available. We will review the exact installed build and required privacy choices before activating those functions.
ACCOUNTS AND SAVED PROGRESS
Choosing Play / Resume creates a guest game account when no account session or saved owner is present, or resumes the existing Unity game-account session. Google and username actions are separate sign-in, creation or linking choices. Unity Cloud Save receives the player identifier, IP address and saved progress. Progress includes animals, inventory, virtual currency balances, teams, upgrades, quests, events, rewards, benefit entitlements and activity timestamps. We use this information to provide account access, save and restore progress, apply earned benefits and resolve save conflicts. A save-integrity value helps identify changed or conflicting saves.
The guest-account flow does not ask for your name, email address or password. A guest identifier is still personal information when it can distinguish or be linked to a player. Where offered, Google sign-in is optional and described below.
For username sign-in, account creation and account linking, the username and password you enter are transmitted to Unity Authentication. Linking is an explicit action for the currently verified game account, including a guest account or a Google-connected account that does not already have a username. Signing in to an existing username account must not silently replace another account's local progress. Password changes require the current password. Automatic email password reset is not provided by this sign-in method. If your credentials or guest session are lost, contact support; recovery requires reliable account-ownership evidence and is not guaranteed. The guest option does not request a username or password. Do not share credentials with other players. Review access uses a separate dedicated account.
OPTIONAL GOOGLE SIGN-IN AND LINKING
Where Google sign-in is offered, choosing it opens Google's account chooser through Android Credential Manager. Google supplies a sign-in credential that can include your Google account identifier, email address and basic profile information. We send that credential to Unity Authentication to verify access and create, sign in to, or explicitly link your game account. Our game code does not separately save your Google ID token or copy your Google profile into gameplay saves. Unity manages the authenticated session and linked external account identifier. This sign-in does not request access to Gmail, contacts, Drive or payment details, and the game does not receive your Google password. It does not authorize advertising or purchases.
Linking is an explicit action for the currently verified game account. It does not merge another player's account or automatically replace conflicting saved progress. Google sign-in remains an alternative to guest and username sign-in. Deleting your game account does not delete your Google Account. Removing the game's access through Google does not itself delete your game account or cloud progress; use the account-deletion process below.
The game requires an online connection. If connectivity is lost, play is suspended. Pending local progress and its account identifier are kept for reconciliation on the next successful sign-in; conflicting or unverified progress is not automatically accepted as a legitimate reward. Local pending records can remain after cloud acknowledgement under the current testing implementation. Clear local app storage only after resolving recovery or deletion with support.
INFORMATION ON YOUR DEVICE AND DIAGNOSTICS
The game stores progress, settings, session information and technical logs on your device. Unity Authentication caches a game-session token locally so it can resume the same game account; this is separate from the Google ID token passed through the sign-in operation. It stores your answer to whether you are 18 or older. Players under 18 are also asked whether they are at least 13 and must acknowledge purchase restrictions before playing. The resulting age category, entry acknowledgement and optional-ad preference stay locally on this device; no date of birth is requested. These preferences are not added to the Unity gameplay cloud-save payload by this implementation. You can correct your age confirmation through Privacy options; doing so turns optional ads off until you choose again. Clearing app data removes these local preferences. Game-written local logs contain information such as game version, device/graphics characteristics, scene activity and errors; the reviewed game code does not automatically upload these logs.
Unity's purchasing SDK also sends technical setup and sign-in/session information to Unity while checkout is unavailable. Its supporting services can send installation and game-account/session identifiers, timestamps, app/Unity/SDK versions and technical device/operating-system information. Related authentication requests can include device capabilities and integrity flags. Unity also lists country or approximate location and SDK diagnostic/performance information in its IAP disclosures. These records support service functionality, analytics, reliability and performance; they are separate from purchases. Advertising and Firebase identifiers follow separate consent/configuration conditions. Unity's published IAP policy gives service logs a 90-day retention period; other provider records can have different deletion handling, so this is not a promise that every SDK record is removed after 90 days. Contact support.rescueproject@gmail.com for help with privacy requests involving these records as well as account/cloud-save data.
Unity engine Diagnostics is a separate system. It is disabled in the current Android Internal beta configuration. Older installed test builds may still send crash/error and technical information with an installation-specific identifier to Unity. Changing the project setting does not erase earlier reports. This does not disable diagnostics collected by other services, such as the planned advertising SDK. Existing installed test versions are not changed by this configuration update.
OPTIONAL REWARDED ADVERTISEMENTS — PLANNED RELEASE
We have selected Google AdMob. When its Google Mobile Ads SDK is active, Google's documented default processing includes IP addresses (which can indicate approximate location), app/ad interactions, diagnostic performance information, and device or account-related identifiers, including advertising and app-set identifiers where available. Google uses this information for advertising, measurement and fraud prevention. Actual collection depends on the installed SDK, settings and applicable privacy choices. This is separate from the gameplay progress we store with Unity.
Watching a rewarded advertisement is optional. Successfully completing one activates or extends a 15-minute benefit period, including speed-control access, automatic card selection, automatic encounter progression, a 20% attack/defense/HP boost and eligible extra reward bonuses. Extra bonuses during that period do not require a separate advertisement. The timer runs in real time, including when the game is closed, except that remaining bonus time is preserved while viewing an advertisement to extend it. Gameplay pauses during advertisements. A cancelled or unsuccessful advertisement does not add the extra 15 minutes.
Choosing to watch an advertisement, confirming your age or turning optional ads on is not consent to personalized advertising. Privacy options are available at login and through Town Settings. Optional ads default to off. Unknown-age and under-13 declarations block ad requests. Explicit developer test sessions use Google demo ads and User Messaging Platform (UMP) checks; live advertising remains unavailable. Teen declarations receive conservative teen/under-age-of-consent treatment in these tests. Google receives the relevant treatment settings when the SDK is used. When Google requires a privacy form, Ad privacy choices opens that form. Turning optional ads off stops new ad requests but does not erase previously collected information or replace Google's privacy choices. Android also provides advertising-ID controls in device settings. Declining personalization does not necessarily prevent all advertising-related processing. Actual regional forms and device behavior still require verification before release.
Google's privacy policy: https://policies.google.com/privacy
How Google uses information from partner apps: https://policies.google.com/technologies/partner-sites
PURCHASES — PLANNED RELEASE
Optional purchases will be processed through Google Play. The intended 30-day pass is a one-time purchase that does not automatically renew. While valid, it provides the described benefits and eligible extra reward bonuses without watching advertisements. Its expiration is displayed in the game. Prices and purchase details must be shown before purchase.
Ordinary beta checkout is unavailable. Separate private diagnostic builds have used Google Play license-test orders, which charge no real money. Those test flows send purchase-verification information to the Rescue Project backend and Google Play; the backend retains encrypted verification records, request and account associations, entitlement status and recovery history to verify delivery, restore benefits, prevent duplicates and investigate payment-status changes. These are test transaction records, not cash sales. The game does not receive payment-card details. Real-money checkout remains unavailable. If purchases are enabled in a later version, they will use Google Play's standard purchase flow and available family approval controls. Whether Google requests parental approval depends on the player's Google account and family settings. The game does not claim independent parental verification for every teen transaction. Real-money purchasing remains unavailable in this test version. Our support mailbox never requests payment-card details. Account deletion does not itself request a purchase refund or erase Google's independently retained transaction records. This policy does not limit applicable consumer rights.
The native Google Play purchase integration processes purchase records and related identifiers. For an anonymous guest using only that purchase route, the selected Unity IAP 5.4.4 integration is not configured to request the player's Google email address through its purchase or telemetry flow. Optional Google sign-in, usernames and email support have separate data handling. This purchase-specific statement does not remove the applicable disclosures for purchase history, account and device identifiers, diagnostics or other SDK processing.
SUPPORT, WEBSITE AND SHARING
When you email us, we receive your email address, message and any attachments you choose to send. We use them to answer questions, troubleshoot and handle privacy requests. Support uses Gmail. Public privacy and deletion instructions are available on this website. This website uses Google Sites. Google processes information needed to provide those services under its privacy policy. Please do not send passwords, authentication tokens, payment-card details or unnecessary identity documents.
Unity provides account, cloud-save and, when enabled, diagnostic services. Google provides the optional Google identity service, email/website services and the planned advertising/payment services described above. We disclose information where necessary to provide these functions or meet legal obligations. This beta does not offer rewarded-ad requests or real-money checkout. Advertising libraries can remain packaged; this statement does not certify that all SDK technical processing is absent. Enabled advertising-related flows and sharing will be reviewed and disclosed before activation.
Unity's player privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
The initial private-beta candidate uses content embedded in the application and does not require the developer's local patch server. Development diagnostic builds can use a local content endpoint. We will identify any public content-delivery provider and explain its connection/logging practices before enabling that delivery.
RETENTION AND SECURITY
Cloud saves are retained for account access and recovery until a verified deletion request is completed. Our current operational target is to handle verified requests within 30 days; this is not a guarantee that every request can be completed within that period. Ownership checks, a dispute or a necessary retention requirement can affect completion. We explain applicable limits and follow applicable privacy requirements. Deletion-verification records are addressed with the associated cloud data. Resolved support correspondence is reviewed for deletion 90 days after resolution and removed when no longer needed, subject to necessary dispute, security or legal retention. Any longer necessary retention must have a recorded reason and review; it is not an indefinite keep-everything policy.
For test purchase records and any later enabled purchases, the draft purchase-record process reviews an encrypted purchase-verification token 90 days after the associated pass expires. That date is a review point, not an automatic deletion deadline. Cleanup requires completed payment/refund reconciliation through the review period, no unresolved dispute, no active or unconsumed benefit requiring the record, and clearance of any reconciliation hold. Automatic token cleanup is currently paused while Google's refund reconciliation remains unresolved. This hold does not justify keeping all gameplay data indefinitely. Necessary transaction, anti-replay, dispute, security or legal records may be retained separately with restricted access; we explain an applicable retention reason. Account deletion does not itself issue a monetary refund.
Local data remains until removed through the game/device or uninstall process, subject to device backup behavior. Unity documents a default 90-day retention period for Diagnostics personal data when that service is enabled. Advertising and payment providers maintain their own records under their policies and legal obligations; deleting a game account does not automatically remove all records independently held by those providers.
We use service authentication and access controls to protect account data. Unity Authentication/Cloud Save and Google's advertising services use encrypted connections. No system is completely secure. We respond to security incidents as required by applicable law.
YOUR CHOICES AND PRIVACY RIGHTS
Contact support.rescueproject@gmail.com to ask about information we hold, request access or correction, request deletion, or raise a privacy concern. Where applicable, you may also request a copy in a portable form, restrict or object to processing, or withdraw consent. We verify requests proportionately to protect your account and explain any limits or legally permitted exceptions. Withdrawing consent may affect functions that need that information; it does not invalidate processing that was lawful before withdrawal.
The developer operates in Ontario, Canada. Service providers may process information outside your province or country, where local laws and lawful government-access rules can differ. We remain responsible for our handling of information and applicable safeguards; worldwide availability does not mean information is stored only in Canada. You may raise a concern with the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca/) or your applicable privacy authority.
CHILDREN
Rescue Project is intended for teens aged 13–17 and adults, not for children under 13. If local law requires parental consent for a teen's personal-data processing, that requirement still applies; permission to make a purchase is separate from privacy consent. The current test version asks whether you are 18 or older before account entry, with a minimum-age check and purchase-restriction acknowledgement for teens and blocks account sign-in/cloud synchronization until the entry acknowledgement is complete and for unknown or under-13 declarations. Self-declaration is not age verification, and it can be changed on the device. The game does not independently verify parental consent for teen personal-data processing; regional privacy-consent requirements remain a release-review item. Purchase family approvals, if purchases are enabled later, are handled separately through Google Play as described above. Privacy information and deletion support remain accessible regardless of age declaration. Parents or guardians concerned about a child's information can contact support.rescueproject@gmail.com to request review or deletion. We do not use this age statement as proof that a player is an adult or as authorization to enable personalized advertising or purchases.
ACCOUNT AND DATA DELETION
Email support.rescueproject@gmail.com with the subject "Rescue Project account deletion". State that you want the account and associated cloud data deleted and include your player ID if available. You can start a request without reinstalling the game or knowing the ID.
If you still have access, open Delete account in the game and choose Verify access. This uses your existing signed-in account session to store a private verification code, player ID, request purpose and preparation time with Unity. Send the code only to our support mailbox so we can verify control of the account. The code is reused for 30 days and replaced on a later verification attempt after that period. Opening the deletion screen does not submit a request; opening an email draft does not send it. Verify access does not upload gameplay progress or delete the account.
A player ID alone is not proof of ownership. If account credentials or session access have been lost, contact us for help; verification or recovery may not be possible without reliable evidence. Keep account access while your request is being verified.
For a completed verified deletion request, we delete the Unity Authentication identity, including its linked Google identifier when Google is connected, the associated Cloud Save gameplay records and the verification record. This does not delete your Google Account or independently retained Google records. This includes stored animals, inventory, currencies, rewards and progress, and cannot be undone. We address other personal information within our control as applicable; Diagnostics requires its separate installation identifier and service procedure. We will explain any lawful retention exception. Uninstalling alone does not delete a cloud account. Clear local app storage separately if you also want to remove data from your device.
POLICY CHANGES
We will update this policy when our practices change and show its effective or revised date. Material changes will be communicated as appropriate, and new consent obtained where required. Using the game is not a blanket waiver of privacy or consumer rights.