IALING: THE NEW FRONTIER - PRIVACY POLICY

Version 1.1
Effective 5 October 2026
Eclectic Eight Holdings LLC, doing business as Gravity Line Studio

SHORT VERSION

Ialing: The New Frontier uses online accounts to save progress and operate social features. Optional managed error reports help us find software problems; you can turn them off in Profile > Settings > Share error reports. Usage analytics is disabled in the current version. There are no ads or in-app purchases. You can request permanent account deletion in the game, or use https://ialing.web.app/ for a linked account without reinstalling. Limited security and abuse records may be retained as explained below.

1. WHO THIS POLICY COVERS

This Privacy Policy explains how Eclectic Eight Holdings LLC, doing business as Gravity Line Studio ("Gravity Line Studio", "we", "us"), handles personal information in connection with the mobile game Ialing: The New Frontier (the "Game") and our website.

Eclectic Eight Holdings LLC is a limited liability company registered in the State of Wyoming, United States, doing business as Gravity Line Studio. For any question about this policy or your information, contact support@gravitylinestudio.com.

2. INFORMATION WE COLLECT

Account identifiers.
The Game creates an account for you when you first play. By default this is an anonymous account: you are identified by a randomly generated Player ID issued by Unity Gaming Services. We do not ask for your name, email address, or phone number to play. If you choose to link your account so it survives a device change, you supply a username and password. Unity Gaming Services verifies these credentials. Our game and official deletion page send credentials to that authentication service; we do not store your password or ask you to email it to us.

Game progress.
Your Player ID links progress, settings and social activity to your account. Unity Cloud Save and Google Firebase services store colony state, resources, buildings, research, population, progression, alliance membership and similar game records. Leaderboards publish ranking information associated with your account.

Content you create.
We store display names, alliance details, applications, forum posts, chat and messages to provide those features. World and region channels can be seen by other players. Alliance channels are available to authorized alliance participants; private messages are available to their participants. Authorized studio staff may review reported content and related evidence for safety. Private messages are not end-to-end encrypted. Non-alliance players must have a first message request accepted before continuing that conversation. Do not share sensitive personal information in the Game.

Optional error reports.
When Share error reports is enabled, the Game can send a report identifier, app version, platform, error category and filtered game-code stack-frame names. These reports are associated with your account identifier; they are not anonymous. The reporter does not include raw chat contents, raw application logs, passwords or native crash dumps. It covers managed software errors, not native crashes or application-not-responding events. Firebase Analytics collection is disabled and Firebase Crashlytics is not used by the current version. The current Android build does not request advertising-ID or AdServices advertising/attribution permissions.

Technical service data.
Our online providers process connection and operational data, including IP addresses, request times, service/resource identifiers, authentication activity and error/security logs, to deliver and protect their services. Our websites also involve hosting and font providers receiving browser requests. This essential service processing is separate from optional error reporting and is not disabled by its toggle. We do not request GPS or precise device location.

Notification identifiers.
Firebase Cloud Messaging uses an installation identifier and registration token for remote messages; the Game may associate the token with your account. The Game also schedules local reminders on your device. Android permission controls whether notifications can be displayed. Denying it does not itself delete or invalidate a Firebase registration token, and is not the same as turning optional error reports off.

Support and safety requests.
If you contact us or report content, we process your contact details, request and the account/content information needed to respond, verify ownership or investigate abuse. Do not send passwords or authentication tokens in a support message.

What we do not collect.
- No precise or GPS location
- No contacts, photos, microphone, or camera access
- No payment information. The Game is free and contains no in-app purchases
- No advertising SDKs and no ad targeting profiles

3. HOW WE USE THIS INFORMATION

- To create and maintain your account and restore your progress across sessions and devices
- To operate multiplayer features: alliances, applications, chat, forums, and leaderboards
- To deliver notifications you have opted into
- To diagnose managed software errors, fix bugs, and improve stability when optional reporting is enabled
- To detect and prevent cheating, abuse, and violations of the Terms of Service
- To comply with legal obligations

We do not use your information to build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects about you.

4. SERVICE PROVIDERS

We are a one-person studio and rely on established platforms to run the Game. These providers process data on our behalf under their own privacy commitments.

Unity Gaming Services (Unity Technologies). Authentication, Cloud Save and leaderboards. Processes account identifiers, linked-account credentials, saved game state and ranking records.

Google Firebase and Google Cloud (Google LLC). Account identity bridging, shared game/social records, Cloud Messaging, optional managed error reports, web hosting and backend processing. Processes the corresponding account, content, notification and technical service data. The current version does not use Firebase Analytics or Crashlytics for collection.

GitHub (GitHub, Inc.). Hosts our studio website and legal pages through GitHub Pages. Google Fonts supplies web fonts. These services receive technical browser requests. Gmail handles email sent to our support address.

Google Play (Google LLC). Distribution and app integrity. Google Play's own handling of your data is governed by Google's privacy policy, not this one.

We do NOT sell or share your personal information for money or for cross-context behavioural advertising, as those terms are defined under California law. We disclose information only to the providers above, or where required by law, or to protect the rights and safety of players and the studio.

5. LEGAL BASES (EEA AND UK PLAYERS)

- Performance of a contract: creating your account, saving progress, and running multiplayer features, which are the service you asked for
- Consent: optional error reporting where consent is required, and notification display permission. Accepting the Terms or acknowledging this policy is not itself consent to optional reporting. You may withdraw your reporting choice as described in Section 7
- Legitimate interests: keeping the Game secure, preventing abuse, and defending legal claims

The reporting preference is separate and account-scoped. Collection stays off until that preference has loaded or its absence has been confirmed. If no preference exists, the current default is off for an EEA or UK device country, or an unknown country, and on for other recognized device countries. Country comes from device locale, not a GPS or geo-IP lookup. A saved preference takes precedence. You can change it in Settings. These defaults are not a claim that a default setting constitutes affirmative consent.

6. RETENTION

Account and game records are kept while needed to provide your account. When account deletion completes, we remove the account identities, associated game records, and authored message contents/public attribution, leaving neutral deletion markers where needed to preserve shared conversation structure. Other players' content is not deleted merely because it involved your account. Restricted abuse evidence is subject to the periods below.

Our game-data retention periods are:
- Optional managed error reports: scheduled expiry after 30 days
- World and private messages: 30 days; declined message requests: 7 days
- Other shared content: until removed or deleted through the applicable account/content process
- Restricted abuse reports: 180 days if open, or 90 days after closure
- Moderation audit records: 180 days

Scheduled expiry and deletion are asynchronous; physical removal may occur after the expiry time.

Detailed records of completed account deletion become eligible for minimization 90 days after completion. Cleanup removes processing/checkpoint detail. We retain restricted minimal proof of completion, a cryptographic verifier for the original recovery receipt, and account-blocking records while needed to prevent recreation or replay and let you verify completion. They do not contain your gameplay save, authored message bodies or password. We review the continuing need for these limited records. Unfinished or failed requests retain what is needed to investigate and finish processing.

Provider-managed operational, security and backup records have separate retention and are not all erased when game-account cleanup completes. Our Google Cloud logging buckets retain ordinary logs for 30 days and required audit logs for 400 days. Firebase documents that installation identifiers used for messaging remain until an installation-deletion request and may take up to 180 days after that request to leave live and backup systems; Firebase Hosting retains IP data for a few months. Removing an account's messaging token from our records is not a promise that the provider installation identifier was erased. Provider details: https://firebase.google.com/support/privacy .

Older game versions used Firebase Analytics and Crashlytics. Disabling or removing those SDKs does not itself erase previously transmitted records. Crashlytics documents 90 days before removal processing begins; historical Analytics records remain subject to the configured provider retention and applicable deletion requests. Contact us about historical records associated with your account. Support correspondence is retained while needed to resolve the request and meet applicable legal obligations.

7. YOUR CHOICES AND RIGHTS

Deleting your account.
Use Profile > Settings > Delete Account and type the requested confirmation. Deletion is permanent and unrecoverable. Once accepted, server cleanup continues even if the app closes. Existing sessions must expire first, so processing takes at least 65 minutes and may take longer. An accepted request is not completed deletion: the status page or recovery screen confirms completion or reports that attention is needed.

For a linked username/password account, use our official page at https://ialing.web.app/ without reinstalling the Game. Verify your account there, confirm its identity, and submit the deletion request. Keep the recovery page/receipt to check status. Never email us your password. You may also contact support@gravitylinestudio.com for assistance or a rights request. A Player ID, username or unrelated email address alone does not prove ownership. If an anonymous account's session has been lost, we may be unable to verify ownership or recover it.

If you lead an alliance, deletion transfers leadership to an eligible remaining member where possible; a sole-member alliance is removed. Deletion does not silently remove other members' accounts.

Notifications.
Turn off notifications for the Game in Android Settings to stop their display. This does not automatically invalidate the messaging token or disable essential messaging transport.

Optional error reporting.
Turn Share error reports off in Profile > Settings to stop new optional managed report collection/sends and remove queued unsent reports from the device. A request already transmitted cannot be recalled. Withdrawal does not itself delete reports already stored on the server; they follow the retention/deletion process. You do not need to uninstall the Game. Usage analytics is disabled in the current version.

Rights under GDPR and UK GDPR.
If you are in the EEA or the UK you have the right to access, correct, delete, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with your national supervisory authority.

Rights under California law (CCPA/CPRA).
California residents may request to know what personal information we have collected, request its deletion or correction, and are entitled not to be discriminated against for exercising these rights. As stated above, we do not sell or share personal information, so no opt-out of sale is required.

Making a request.
Email support@gravitylinestudio.com. We will respond within the period required by applicable law, generally 30 days. We may need your in-game Player ID to locate data and secure verification to establish account ownership. We may be unable to act on a request we cannot verify.

8. CHILDREN'S PRIVACY

The Game is not directed to children under 13, and we do not knowingly collect personal information from them. Players in the EEA must be at least 16, or the minimum age set by their country, to consent to the processing described here.

If you believe a child has provided us with personal information, contact support@gravitylinestudio.com and we will delete the account and its data.

9. INTERNATIONAL TRANSFERS

Eclectic Eight Holdings LLC operates from the United States, and our service providers process data on servers in the United States and other countries. If you play from outside the United States, your information will be transferred there. Where required, our providers rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

10. SECURITY

Data in transit is protected with industry-standard encryption, and account credentials are stored and verified by Unity Gaming Services rather than by us. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you and the relevant authorities as required by law.

11. CHANGES TO THIS POLICY

We may update this policy as the Game changes. The effective date and version at the top will change with it. If a change materially affects how we handle your information, the Game will ask you to review and accept the updated policy before you continue playing.

12. CONTACT

Eclectic Eight Holdings LLC, doing business as Gravity Line Studio
Wyoming, United States
support@gravitylinestudio.com