Privacy Policy of “Dungeon Thieves”
Last updated: October 14, 2026 · Versión en español
This policy explains what personal data the game Dungeon Thieves (also published as Ladrones de Mazmorras; the “App”) processes, what we use it for, who we share it with and what rights you have. It complies with the General Data Protection Regulation (GDPR, EU 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Galactor Solutions, developer of the App (identifier com.galactorsolutions.ladrones).
Contact for any privacy matter: galactorsolutions@gmail.com
2. What data we process
| Category | Data | Source |
|---|---|---|
| Account | Unique Firebase user identifier. If you sign in with Google, Firebase Authentication receives your email address, your name and your Google profile photo. In the game we only show your Google name and photo if you expressly agree; otherwise we use an alias. | You, when signing in with Google |
| Game data | Player name, gold, trophies, level, upgrades, inventory, your dungeon layout, statistics, daily reward, chosen language and the date of your last session. | Generated while playing |
| Raids | Records of raids between players: who raided whom, the result, gold stolen, date and the replay (the thief’s route). | Generated while playing |
| Notifications | The device’s Firebase Cloud Messaging token, only if you turn notifications on. | Your device |
| Achievements | The achievements you unlock. On Android, if you use Google Play Games, they are also sent to your Google Play Games profile, which Google manages under its own privacy policy. | Generated while playing |
| Preferences and consent | Language, sound, music and vibration settings and the record of your consent (date and options), stored in your device’s local storage. | You |
We do not collect your precise location, contacts, photos or microphone. We do not use our own analytics tools and we do not sell your data.
2a. Advertising (Google AdMob)
In the Android app you can watch rewarded video ads only if you ask for them (for example, to double your gold). These ads are served by Google AdMob (Google Ireland Ltd. / Google LLC), which independently collects the device’s advertising ID, IP address (approximate location), device information and ad interaction data in order to show and measure ads and prevent fraud. If you accept personalized ads, Google may tailor them to your interests; otherwise they will be generic. You can change your choice in Settings → Review my consent and Settings → Ad privacy, and reset or delete your advertising ID in Android settings. More information: policies.google.com/technologies/ads. The web version has no ads.
3. Purposes and legal basis
- Providing the game (creating your account, saving and syncing your game, matching you with other players, showing the leaderboard and replays): performance of the contract for use of the service (Art. 6.1.b GDPR).
- Sending you notifications when someone raids your dungeon: your consent (Art. 6.1.a GDPR), which you can withdraw in Settings or in Android settings.
- Showing your Google name and photo as your public identity in the game: your consent (Art. 6.1.a GDPR).
- Personalized ads in the optional videos: your consent (Art. 6.1.a GDPR). Non-personalized ads are based on our legitimate interest in funding the free game (Art. 6.1.f GDPR).
- Security and cheat prevention in the game: legitimate interest (Art. 6.1.f GDPR).
4. What other players see
For the game to work, other registered players can see your player name, your trophies, your available gold and your dungeon layout. If someone raids you or you raid someone, both of you can see the replay of the raid and the other player’s name. We never show your email address.
5. Processors and international transfers
In addition to Google AdMob (see section 2a), we use Google Firebase (Google Ireland Ltd. / Google LLC): Firebase Authentication, Cloud Firestore and Firebase Cloud Messaging, which act as data processors. Google may process data outside the European Economic Area; these transfers are covered by the EU-US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission. More information: firebase.google.com/support/privacy.
6. Retention
We keep your data while your account is active. You can delete it at any time from Settings → Delete my account and data, which removes your game, your raids and your game account. You can also request deletion without the app at ladrones-de-mazmorras.web.app/delete-account-en.html. Accounts inactive for more than 24 months may be deleted. If you play as a guest, your data is stored only on your device and is deleted when you uninstall the App or clear its data.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time without affecting the lawfulness of prior processing, by writing to galactorsolutions@gmail.com. You can also change your options in Settings → Review my consent. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority in your country.
8. Minors
The App is intended for people aged 16 or over. Younger users may only use it with the consent of their parent or legal guardian. If you believe a minor has given us data without that consent, write to us and we will delete it.
9. Security
Communications with Firebase are encrypted (HTTPS/TLS) and access to data is protected by security rules: only you can modify your game and only the participants in a raid can see its replay.
10. Local storage
The App stores your progress, preferences and consent on your device (local storage) so it can work offline. We do not use third-party or tracking cookies.
11. Changes to this policy
If we make significant changes to this policy we will let you know in the App and, where required by law, ask for your consent again.