Blackvale Studio LLC
Privacy
POLICY
Effective date: August 21, 2026
Last updated: October 11, 2026
Blackvale Studio LLC ("Blackvale Studio," "we," "us," or "our") provides the XenoDefense mobile application (the "App"). This Privacy Policy explains how information is handled when you use the App on iOS or Android, including pre-release testing, visit www.blackvale.studio, or contact us. Features may differ by platform and release.
Summary
- XenoDefense does not contain third-party advertising or track activity across other companies’ apps or websites.
- We do not sell personal information or share it for cross-context behavioral advertising or targeted advertising.
- Gameplay data and settings are stored locally. On Android, when Google Play Games Saved Games is available and you are authenticated, earned progress also synchronizes to Google-hosted storage. We do not operate a separate Blackvale player-account system or custom gameplay-data server.
- The App uses Apple Game Center and App Store services on iOS, and Google Play Games and Google Play Billing on Android. These providers process account, game-service, purchase, and diagnostic information under their own terms and privacy policies.
- The App uses Google Firebase Crashlytics on iOS and Android to collect crash reports and related diagnostics automatically so that we can investigate stability problems.
- On Android, optional Google Firebase Analytics collects app usage and gameplay statistics only after you allow it. You can turn it off in Settings. iOS does not include this usage-analytics integration.
- If you contact us, we receive the information you choose to provide so that we can respond.
1. Scope
This Privacy Policy covers Blackvale Studio’s handling of information for XenoDefense and our website. Apple, Google, and other linked services have their own privacy notices for information they process through their services.
Website requests
Our website does not require an account or provide a personal-information collection form. Our AWS hosting and content-delivery services process request information such as IP address, browser or device information, requested page, referral information when supplied by your browser, and request time. Access logs support delivery, security, abuse prevention, and troubleshooting. We do not use advertising trackers on the website.
2. Information handled by the App
Information stored locally on your device
The App stores information needed to provide and remember your experience, such as:
- campaign and Endless Mode progress, scores, stars, unlocks, and achievements awaiting submission;
- selected towers, loadouts, tutorial state, and other gameplay choices;
- audio, language, vibration, accessibility, and gameplay settings;
- locally cached purchase-entitlement state, virtual-item balances, and transaction identifiers used to avoid applying the same purchase more than once, where those features are available; and
- limited performance counters and diagnostic information used on-device to help the App run reliably.
This information is stored in the App's local storage. The game does not send these local records to a custom Blackvale gameplay server. The platform exchanges described below are separate. iOS may include App data in Apple-managed backups depending on your settings. The Android app disables its Android operating-system backup; its Play Games progress synchronization is a separate feature.
Game Center and Apple Games
If you are signed in to Game Center, the App uses Game Center to authenticate through Apple, submit achievements, submit Endless Mode scores, retrieve your scores and achievement status, and display Apple-hosted leaderboards. With iCloud available, the App also stores and retrieves campaign and Endless progress through Apple’s GameKit saved-game service to synchronize your earned progress across devices. These saved games include level unlocks, stars, scores, and Endless wave records; they do not include purchase entitlements or consumable balances. Scores and achievements may be associated with your Game Center profile and may be visible to others according to your Apple and Game Center settings.
Apple may process information such as your Apple Account or Game Center identifier, nickname, avatar, device information, game activity, scores, achievements, purchases, and fraud-prevention information. Blackvale Studio does not receive your Apple Account password. Apple's handling of this information is governed by Apple Games and Privacy and the Apple Privacy Policy.
App Store purchases and StoreKit
Where purchases are available, the App uses Apple's App Store and StoreKit services to request product information, initiate or restore purchases, and verify entitlements. Apple processes payment and billing information. Blackvale Studio does not receive or store your payment-card or bank-account details.
The App may receive a product identifier, transaction identifier, purchase status, entitlement status, and related verification information from Apple. The App uses that information to deliver purchased content, restore access, prevent duplicate fulfillment, troubleshoot purchase issues, and prevent fraud. Apple may also provide Blackvale Studio with aggregated sales and App Store reports.
Google Play Games on Android
When authenticated with Google Play Games, the App uses your game-specific player identifier to associate services with the correct player. It submits earned achievements and Endless leaderboard scores to Google and displays Google-hosted leaderboards. Your gamer profile, scores, and achievements may be visible to other players according to Google’s service rules and your profile visibility settings. The App does not receive your Google Account password. Scores and achievement reports may be queued locally while offline and sent after a later authentication or resume. Each queued report is stored for the game-specific player identifier for which it was created and is submitted only while that same player is authenticated; changing the signed-in account does not transfer another player's queued reports.
Where Saved Games is available, the App automatically uploads and downloads earned campaign stars, best scores, unlocked levels and Dominions, and Endless unlocks and best depth/score records. The cloud save includes a player identifier to help keep records associated with the correct account. Synchronization can occur on foreground resume and after earned progress changes; offline changes remain local until a later successful synchronization. Cloud and local records are merged to preserve earned progress, including across installations signed in as the same player.
This cloud save does not include payment receipts, purchase ownership, remaining consumable Power-Up balances, settings, language, tower or Power-Up kits, tutorial state, or diagnostic/reviewer changes. Those exclusions mean that cloud progress restoration does not restore all local app data. Ordinary gameplay can continue locally without Play Games authentication or connectivity. Google’s SDK also collects service analytics and diagnostic data to maintain and improve its services.
Google processes these exchanges under the Google Privacy Policy. Manage sign-in and profile visibility through Google Play Games and your Google Account settings.
Google Play Billing on Android
Google processes payments. The App receives product identifiers, purchase status, quantities, purchase tokens, signed purchase records, and acknowledgement or consumption status to verify purchases, grant content, prevent duplicate delivery, and reconcile ownership. It keeps purchase verification records and delivery tokens in private local storage. Blackvale Studio does not receive your payment-card or bank-account details; Google may provide us with sales, order, and financial reports for administration and support.
Permanent Dominion purchases can be restored through Google Play using the relevant purchasing account. Consumed Power-Up packs are not restored from Play purchase inventory, and their remaining local balance is not part of the cloud progress save. Reinstalling or clearing local data can therefore lose that balance. Offline cached ownership is reconciled with Google when connectivity and purchase queries succeed.
Diagnostics and analytics
On iOS, the App uses Apple’s MetricKit and operating-system logging for on-device performance diagnostics. Android also keeps local diagnostic and performance information. We do not upload these on-device diagnostic payloads or a custom gameplay-analytics stream to a Blackvale Studio server.
The App also uses Google Firebase Crashlytics to send crash reports and related diagnostics automatically. These reports can include stack traces, app version/build, device model, operating-system information, installation identifiers used by Firebase, and limited diagnostic logs identifying app startup and the active Dominion and level. We use these reports to find and fix stability problems. We do not attach your name, email address, Game Center or Play Games player identifier, purchase records, or other account information to Crashlytics reports. Crash reporting is separate from the optional Android usage analytics described below; the usage-analytics switch does not disable Crashlytics. Neither integration is used by us for advertising tracking. Firebase processes this information as described in Privacy and Security in Firebase and the Google Privacy Policy.
On Android, Crashlytics also uses Firebase Sessions for stability measurements. This can send app and device information and session timing, such as when the app enters the foreground, even when optional usage analytics is off. When usage analytics is enabled, Analytics events may also appear as breadcrumbs in crash reports.
On Android, if you choose Allow analytics or enable Share usage analytics in Settings, the App uses Google Firebase Analytics to help us understand app usage, gameplay, and purchase conversion. Data can include app sessions and engagement, screens visited, levels started and their results, scores, stars, waves reached, active play duration, Power-Up use, store offers and checkout starts, and purchase events reported by Google Play. Firebase also processes an app-instance identifier and technical information such as app version, device and operating-system information. Google may derive approximate location from network information according to its Analytics practices. We do not attach your name, email address, Game Center or Play Games account identifier, or purchase tokens to our analytics events. We do not use this data for advertising and disable advertising-ID collection and advertising consent categories in the App. These statistics describe participating installations, not all players or necessarily unique people.
Usage analytics is off before your choice; declining or dismissing the prompt leaves it off. You can play without enabling it and change your choice in Settings. We do not queue earlier gameplay for upload after acceptance. Turning it off stops future collection and resets Analytics data stored locally; it does not delete information already uploaded. See retention and privacy-request information below. Firebase Analytics is governed by Google Analytics privacy information and the Google Privacy Policy.
Apple and Google may separately collect platform analytics, crash reports, performance information, device or service identifiers, and diagnostics through their operating systems, stores, and game-service SDKs. They may provide Blackvale Studio with platform reports. Their policies, applicable service requirements, and device/account settings govern that processing; the absence of a custom Blackvale analytics server does not mean these platform services collect no data.
Information you provide to us
If you email us or otherwise request support, we receive the information you choose to provide. This may include your name, email address, message, device model, operating-system version, screenshots, and diagnostic details. Please do not send passwords, payment-card information, or other sensitive information that is not needed for support.
Information the App does not request from you
The App does not request access to your precise location, contacts, photo library, camera, microphone recordings, health information, or advertising identifier. It does not create a Blackvale Studio player account, display third-party advertising, or track your activity across other companies' apps or websites.
3. How we use information
We use information available to us only as reasonably necessary to:
- provide, maintain, secure, and troubleshoot the App;
- respond to support, privacy, and legal requests;
- deliver and restore purchases and prevent duplicate or fraudulent transactions;
- understand reliability and performance in aggregate and, with your opt-in on Android, understand app usage, gameplay outcomes, and purchase conversion;
- enforce applicable terms and protect users, Blackvale Studio, Apple, Google, and others; and
- comply with law, legal process, tax, accounting, and regulatory obligations.
Where data-protection law requires a legal basis, we process personal information as necessary to provide the service you request or perform a contract with you; for our legitimate interests in operating, securing, and improving the App and responding to users; with consent where required; or to comply with legal obligations. Where we rely on consent, you may withdraw it at any time, without affecting earlier lawful processing.
4. How we disclose information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use personal information for targeted advertising.
We may disclose information in these limited circumstances:
- Apple services. Information is exchanged with Apple as needed for Game Center, Apple Games, the App Store, StoreKit, device backup, diagnostics, and related platform functions.
- Google services. Information is exchanged with Google for Play Games authentication, achievements, leaderboards, cloud progress, Play Billing verification and fulfillment, platform diagnostics, Firebase crash reporting, and optional Android usage analytics.
- Service providers. If you contact us, providers that host email or help us operate support systems may process your communication on our behalf. AWS hosts our website and processes website requests and access logs. We require providers handling personal information for us to protect it consistently with this Privacy Policy and applicable law.
- Legal and safety reasons. We may disclose information when we reasonably believe disclosure is required by law or legal process, or is necessary to protect rights, safety, security, and integrity.
- Business changes. Information may be disclosed as part of a proposed or completed merger, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections. A successor must honor this Privacy Policy or provide notice of materially different practices.
5. Retention and deletion
- On-device information: remains on your device until the App removes or replaces it, you reset relevant settings where an option is available, or you delete the App and its data. Apple-managed backups may retain a copy according to your Apple settings and Apple's retention practices.
- Game Center, App Store, StoreKit, and Apple diagnostics: are retained by Apple under Apple's policies. Manage or request deletion of Apple-held information through your Apple Account and Apple privacy controls.
- Google Play Games and Google Play Billing: Google retains service and transaction information under its policies. Deleting or resetting local app data does not delete cloud progress, submitted achievements/scores, or store transaction records. A later synchronization may restore retained cloud progress. Use Google’s Play Games data-deletion controls and Google Account privacy controls to manage Google-held data. Local progress can be uploaded again if you resume authenticated play without also addressing local data.
- Optional Android usage analytics: retention is governed by the configured Google Analytics and any linked export retention settings. Turning the Settings switch off stops future collection and clears local Analytics data, but previously uploaded data remains subject to those settings. Contact us for access or deletion requests concerning information we control. Because we do not attach your account identity to Analytics, we may need additional information to locate a relevant installation record; we cannot promise to identify or remove data from a name or email alone.
- Website access logs: retained for operational and security needs, with automated retention limits in our hosting configuration; legal or incident-response needs may require preservation of relevant records.
- Support communications: are kept only as long as reasonably necessary to resolve the request, maintain security and business records, and meet legal obligations. We generally delete or de-identify routine support communications within 24 months after the last meaningful interaction unless a longer period is reasonably necessary or legally required.
- Legal and transaction records: may be retained for the period required by tax, accounting, fraud-prevention, consumer-protection, or other applicable law.
Because Blackvale Studio does not operate a XenoDefense player account or gameplay-data server, we generally cannot access or delete information stored only on your device or only through your Apple or Google Account. Contact us for help identifying the appropriate platform controls; we do not require you to create a Blackvale account to make a privacy request.
6. Your choices and privacy rights
You can:
- manage Game Center, Apple Games, App Store, purchase, analytics, backup, and privacy choices through your device and Apple Account settings;
- enable or disable optional Android usage analytics through Share usage analytics in the App’s Settings;
- manage Google Play Games authentication, profile visibility, game data, and Google Play purchase/privacy settings through Google’s controls;
- stop future use of the App by deleting it and its data from your device; and
- ask us to access, correct, delete, restrict, or provide a copy of personal information that we control by emailing us at the address below.
Depending on where you live, you may also have rights to object to processing, withdraw consent, receive portable data, opt out of certain disclosures or automated decision-making, appeal a denied request, or complain to your local privacy or data-protection authority. We do not make decisions that produce legal or similarly significant effects using automated processing of your personal information.
We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity. We will respond within the time required by applicable law. You will not be discriminated against for exercising a privacy right.
Blackvale Studio does not sell or share personal information for targeted advertising, so the App does not provide a separate "Do Not Sell or Share" control. If our practices change, we will update this policy and provide any controls required by law.
7. International data transfers
Blackvale Studio is based in the United States. If you contact us from another country, your communication may be processed in the United States or another country where our service providers operate. Where required, we use legally recognized safeguards for cross-border transfers. Apple, Google, and our hosting/support providers determine the locations and safeguards applicable to information they process through their services, subject to their terms and applicable law.
8. Children's privacy
XenoDefense is intended for a general audience and is not designed to solicit personal information from children. We do not knowingly collect personal information directly from a child under 13, or under the higher minimum age required by local law, without any consent required by law. If you believe a child has provided personal information to us through a support communication, contact us so that we can review and delete it as appropriate. Parents and guardians can manage Game Center, purchases, content restrictions, and family settings through Apple’s or Google’s parental and family controls.
9. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the limited information we control. No storage or transmission method is completely secure, and we cannot guarantee absolute security. Keeping your device, Apple or Google Account, and operating system secure also helps protect local and platform-held information. Platform network services use their secure transport mechanisms; website access is served over HTTPS.
10. Changes to this policy
We may update this Privacy Policy to reflect changes to the App, our practices, or applicable law. We will revise the "Last updated" date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.
11. Contact us
Blackvale Studio LLC is the entity responsible for personal information it controls under this Privacy Policy.
For privacy questions or requests, contact:
Blackvale Studio LLC
Email: contact@blackvale.studio
Website: https://www.blackvale.studio
If you are in the European Economic Area, United Kingdom, Switzerland, Brazil, or another jurisdiction that provides a right to complain, you may also contact the privacy or data-protection authority where you live or work.