Privacy Policy
This policy explains what personal data we process when you play our games or visit nook-games.com, why we do it, who we share it with and how you can control it. We have written it to be read, not skimmed past.
- No accountsOur mobile games do not ask for your name, email or a Nook Games account.
- Ads pay for free gamesFree games show ads from Google AdMob, which uses device identifiers. Personalised ads need your consent.
- We never sell your dataWe do not sell personal data, and we do not build profiles of you.
- You are in controlChange your ad choices at any time and write to us to exercise your rights.
1. Who we are
Contact for anything related to privacy: hello@nook-games.com. We are a small studio and have not appointed a Data Protection Officer, as the law does not require one for our activity.
2. What this policy covers
This policy applies to:
- Our mobile games on Google Play and the App Store: Diamond Mine, Mine Runner, Tap and Shoot, RPG Puzzle, Relic Puzzle, Super Adventure World and Spider Web, including their versions for Windows through Google Play Games.
- Mine Runner on Steam.
- Our website, nook-games.com, and any email you send us.
Google, Apple, Valve (Steam) and Meta (Facebook) run their own stores, accounts and services as independent controllers. When you use them, their own privacy policies apply. We link to them in section 7.
3. Data we process
3.1 When you play our mobile games
- Game progress and settings. Levels, scores, settings and the levels you build in the level editor are saved on your device. We do not receive them.
- Advertising data. Free games show ads through Google AdMob. To serve and measure ads, Google processes your device's advertising identifier (Android Advertising ID or Apple IDFA, only if you allow tracking on iOS), IP address, device model, operating system, language, app version and how you interact with ads. See section 5.
- Crash reports and diagnostics. If a game crashes or does not work as expected, a technical report (device model, OS version, app version, the error and when it happened) may be sent to our technical service providers so we can fix the problem. These reports do not include your name or contact details.
- Optional sign-in. Where a game offers it, you can sign in with a platform service such as Google Play Games, Game Center or Facebook to sync progress and use leaderboards and achievements. If you do, we receive a player ID and the display name from that service, never your password. Signing in is always optional.
- Online and cross-play features. When you play online with other players, including players on other platforms, your player ID, display name and IP address are processed by our online service providers to connect the session.
3.2 When you play Mine Runner on Steam
- Valve handles your Steam account, purchase and payment. We do not receive your payment details.
- Through Steamworks we receive your Steam ID and Steam display name to run online co-op, Remote Play Together, achievements, stats and Steam Cloud saves.
- In online sessions, your Steam display name is visible to the other players, and your connection is routed through Steam's networking service.
- Steam gives us aggregated sales and usage reports that do not identify you.
3.3 When you visit nook-games.com
- Our hosting provider records standard server logs: IP address, browser, the page requested and the date and time. We use them only for security and to keep the site working.
- The website does not use analytics, advertising or tracking cookies, so we do not show a cookie banner. If we ever add cookies that are not strictly necessary, we will ask for your consent first.
- Some resources, such as fonts, may be loaded from third-party providers, which receive your IP address to deliver them.
3.4 When you contact us
If you email us, we process your email address, your name if you give it and the content of your message (for example, the game and device for a bug report) to answer you.
4. Why we use it and legal bases
Under the EU and UK General Data Protection Regulation (GDPR) and the Spanish data protection law (LOPDGDD), we rely on these legal bases:
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the game, online play, cloud saves and achievements you request | Player ID, display name, IP address, game data | Performance of a contract (Art. 6.1.b GDPR) |
| Personalised ads | Advertising ID, IP address, device data, ad interactions | Your consent (Art. 6.1.a), which you can withdraw at any time |
| Non-personalised ads, ad frequency limits and ad fraud prevention | Device data, IP address, ad interactions | Our legitimate interest in funding free games (Art. 6.1.f); where the law requires consent to access your device, we ask for it |
| Fixing crashes and improving stability | Crash reports and diagnostics | Our legitimate interest in providing working games (Art. 6.1.f) |
| Website security and operation | Server logs | Our legitimate interest in keeping the site secure (Art. 6.1.f) |
| Answering your emails and requests | Email address and message | Our legitimate interest in helping players (Art. 6.1.f), or a contract if it concerns a purchase |
| Keeping records required by tax and consumer law | Correspondence about purchases and refunds | Legal obligation (Art. 6.1.c) |
Where we rely on legitimate interest, you can object at any time (see section 10). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
5. Advertising and your choices
- European Economic Area, United Kingdom and Switzerland: the first time you open a free game, a consent message from Google's certified consent platform (IAB Transparency and Consent Framework) asks whether you agree to personalised ads. If you do not, you will see non-personalised ads, which are based on context rather than your profile. You can change your choice at any time from the game's privacy settings, where available, or by writing to us.
- iPhone and iPad: we only use your IDFA if you allow tracking when iOS asks. You can change this in Settings → Privacy & Security → Tracking.
- Android: you can delete or reset your advertising ID in Settings → Privacy → Ads (the path can vary by device).
- California and other US states: see section 11.
Google acts as an independent controller for some advertising processing. You can learn more at How Google uses information from sites or apps that use its services. Mine Runner on Steam has no ads.
6. Children
Our games are rated for all ages and are suitable for children, but we do not knowingly collect personal data from children under 14 in Spain (or under the age of digital consent in their country, which in the EU ranges from 13 to 16), or under 13 in the United States.
- When a player is identified as a child or their age is unknown, ad requests are tagged for child-directed treatment. Those players only see non-personalised ads suitable for a general audience, and their advertising ID is not used for advertising.
- Our games do not include chat, user profiles or the sharing of personal information with other players, apart from the display name shown in online sessions.
- Steam requires its users to be at least 13 years old, and online play in Mine Runner on Steam follows Valve's rules and parental controls (Steam Family View).
If you are a parent or guardian and believe your child has given us personal data, write to hello@nook-games.com and we will delete it.
7. Who we share data with
We do not sell personal data. We only share it with these providers, and only for the purposes above:
| Provider | What for | Their policy |
|---|---|---|
| Google (AdMob, Google Play, Google Play Games, Google Fonts) | Ads, game distribution, sign-in, achievements, website fonts | policies.google.com/privacy |
| Apple (App Store, Game Center) | Game distribution, sign-in, achievements | apple.com/legal/privacy |
| Valve Corporation (Steam) | Sale of Mine Runner on Steam, online play, achievements, cloud saves | Steam Privacy Policy |
| Meta Platforms (Facebook) | Optional sign-in in Tap and Shoot | facebook.com/privacy/policy |
| Technical service providers | Crash reports, online multiplayer and cross-play, website hosting and email | They act on our behalf, under contract, and may only use the data to provide their service to us |
We may also disclose data if the law requires it, for example in response to a court order, or to protect our rights in a legal claim.
8. International transfers
Some providers, such as Google, Apple, Valve and Meta, are based in the United States or process data outside the European Economic Area. Where this happens, the transfer is protected by the EU–US Data Privacy Framework (for certified companies), the European Commission's Standard Contractual Clauses or another safeguard recognised by law.
9. How long we keep data
- Game progress saved on your device: until you delete the game or its data.
- Crash reports and diagnostics: only as long as needed to fix the problem, and no longer than 90 days.
- Website server logs: up to 30 days, unless needed to investigate a security incident.
- Emails: up to 2 years after our last exchange, or longer if the law requires it (for example, for purchase-related records).
- In all other cases, we keep personal data only for as long as necessary for the purpose it was collected for, and then delete or anonymise it.
- Data held by Google, Apple, Valve and Meta: according to their own policies.
10. Your rights
You have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time without affecting earlier processing.
To exercise any of these rights, email hello@nook-games.com and tell us which game and device you use. Because we do not run accounts, we may ask for information that helps us find your data, such as your Steam display name. We will answer within one month.
If you are not happy with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority in your country.
11. Notice for US residents
Under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other US states:
- In the last 12 months we have processed identifiers (advertising ID, IP address, player ID), internet activity (ad interactions) and device information, for the purposes and with the providers described above.
- We do not sell personal information for money. Showing personalised ads through AdMob may count as "sharing" for cross-context behavioural advertising. You can opt out by turning off ad personalisation on your device (see section 5) or by emailing us. We honour Global Privacy Control signals on our website.
- You have the right to know, delete and correct your personal information, and we will not treat you differently for exercising these rights. We answer within 45 days.
12. Security
Our website and our games use encrypted connections (HTTPS) for data in transit. We collect as little data as possible, limit access to it and only work with providers that offer appropriate security guarantees. No system is completely secure, but if a breach affects your data we will notify you and the authorities as the law requires.
13. Changes to this policy
We will update this policy when our games or the law change. We will always show the date of the latest version at the top, and if a change is important we will also let you know in our games or on our website.
14. Contact
Nook Games · hello@nook-games.com