Privacy Policy

Last updated: 2 November 2026

1. Scope and controller

This policy explains how data is processed in AirWar and on airwar.games. The game publisher and the controller for the processing described below is SAMSUFI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, address: ul. Jagiellońska 4A, 19-120 Knyszyn, Poland, entered in the Polish National Court Register (KRS) under number 0000901262, EU VAT: PL5423435334.

For privacy, GDPR and data deletion requests, contact [email protected]. For technical support and purchases, contact [email protected]. We do not run a telephone helpline; email is our contact channel. You do not need to install the game or create an account to contact us.

The company has not appointed a data protection officer (DPO). For data protection matters, contact [email protected].

This policy covers Android, including the app with package name pl.samsufi.airwar. An iOS version is planned. The Apple provisions describe the arrangements planned for that version and will apply once it is released; before the release we will update this policy with any iOS-specific details.

We do not operate our own server containing player profiles. This does not mean that no data leaves your device when you use the game: Google provides advertising, Play Games and store services, Apple will also provide account and cloud services for the planned iOS version, and Cloudflare delivers the website. We are responsible for selecting and configuring the services used in AirWar to the extent required by law.

2. Key information

• AirWar is a single-player game against computer-controlled opponents. It has no multiplayer mode, chat, AirWar accounts, user-generated content or forms.
• Settings and progress are stored locally. Selected data may be synchronised through Google Play Games when that service is used.
• The game does not ask for your real name or email address. However, these may appear in an email you send to us. A Google Play Games profile has its own display name and avatar.
• The game has no analytics or crash-reporting tool of our own, and its own code makes no network connections. All of the game's network traffic comes from Google SDKs, which may process their own diagnostic and service usage data.
• The game does not use contacts, the camera, microphone, photos or location permissions. AdMob may estimate your approximate location from your IP address; this is not GPS location.
• The game is intended for ages 13 and above. The age for playing the game and the age for independently consenting to data processing are different questions.

3. Data, purposes and legal bases

In the table, “contract” means GDPR Article 6(1)(b), “consent” means Article 6(1)(a), “legal obligation” means Article 6(1)(c), and “legitimate interest” means Article 6(1)(f). A legal basis for personal data processing does not replace any required permission to store or access information on your device.

Providing information in correspondence is voluntary, but we cannot handle a matter without the information necessary to respond. Technical data is needed for the selected service to work. Purchases and Play Games features are additional; the game itself works without a Play Games profile. Refusing ad personalisation consent does not mean refusing access to the core game.

4. Device files and purchases

The game stores the following information in its private app directory:

We do not upload these files to our own server. Summaries in sessions/ remain local. Sending selected progress, statistics or score values to Play Games is a separate operation explained in section 6.

Payments are handled by Google Play Billing and, for the planned iOS version, Apple In-App Purchase. We do not receive your card number or the payment details used to charge your account. The game receives the product ID, purchase or subscription status, and purchase token. These differ from payment instrument details and are used to recognise entitlement to content.

AirWar does not use Android Auto Backup: the game is built with user data backup disabled, so the files listed above are not included in Google device backups. Uninstalling the game or clearing its data removes them from the device. Play Games cloud saves are stored separately and are described in section 6. In the planned iOS version, progress will be kept in the player's private iCloud container, as described in section 8.

5. Advertising and privacy choices

How advertising works

AirWar uses full-screen Google AdMob ads after campaign matches. There are no banner ads or rewarded ads. With an active ad-free subscription, no interstitial ads are shown. However, the advertising SDK is still initialised at launch (after the consent step) and may request or preload an ad in the background. This means that Google may process the data described below for AdMob even for subscribers.

The Android version uses the godot-admob 5.1.0 plugin by Poing Studios with the Google Mobile Ads SDK Next-Gen (version 1.4.0), which includes Google's User Messaging Platform, or UMP. It also uses the godot-play-game-services 3.4.0 plugin (Google Play Games Services v2) and the godot-google-play-billing 3.3.0 plugin (Google Play Billing Library 9.1.0). AirWar's own code makes no network connections: all of the game's network traffic comes from these Google SDKs, which Google states use encrypted HTTPS/TLS connections.

The advertising SDK may process IP addresses, approximate location inferred from IP, the Android advertising ID, App Set ID, device and app information, interactions and diagnostics. Google's documentation also includes certain account identifiers where applicable. This does not mean that the game receives your Google Account email address.

Consent and withdrawal

At every launch, the game first asks UMP for the status of your choices. In regions where consent is required (the EEA, the United Kingdom and Switzerland), UMP shows a form based on the IAB TCF. Delivering the form itself may require a technical connection to Google; that is different from consent to personalised advertising.

The advertising SDK is initialised and ads are requested only when UMP reports that consent has been obtained (you have completed the form, whatever choices you made) or that consent is not required. If UMP fails and no earlier status exists, the SDK is not started and no ad is requested.

Settings → “Privacy and ads” reopens the UMP privacy options form. You can change your choices or withdraw consent there. If an ad was preloaded on the basis of your earlier choices, it is discarded. The game settings also contain a link to this policy. Withdrawal does not affect the lawfulness of processing carried out previously.

Refusing personalisation disables personalisation based on that consent. It does not automatically provide permission for identifiers or advertising measurement. Non-personalised ads may also use device storage and require consent. Google decides, based on your TCF choices, whether a personalised ad, a non-personalised ad, a limited ad or no ad is shown. Declining personalisation never blocks the game.

Device settings

On Android, search the device settings for “Ads” or go to Privacy → Ads; on some versions, use Google → All services → Ads. You can reset or delete your advertising ID. Older versions offer an option to opt out of ad personalisation. Menu names vary by device. See Google's instructions.

Resetting the ID does not delete data Google has previously collected and does not replace changing your UMP choice. It also does not change other SDK identifiers, such as App Set ID.

In the planned iOS version, the game will show Apple's App Tracking Transparency (ATT) prompt before any use of the advertising identifier (IDFA). A refusal must not be bypassed using a different identifier. Permissions can be managed under Privacy & Security → Tracking, where available. See Apple's explanation. Before the iOS version is released, we will add any iOS-specific details to this policy.

6. Google Play Games and store data

On Android, the game uses Google Play Games Services v2. If your Google Play Games profile and automatic sign-in are enabled on the device, Play Games signs you in automatically when the game starts. You can turn this off in the Google Play Games settings. The game works fully without Play Games, and its Settings contain a manual “Sign in to Google Play Games” button. Achievements are unlocked and scores submitted only while you are signed in.

The service supports 22 achievements, a leaderboard for each of the eight opponents and an overall leaderboard. The score for a won campaign match is the number of points conceded × 100,000 plus the fight time in tenths of a second; a lower score is better. Your display name, avatar and scores may be visible to other players according to your Google profile visibility settings.

The cloud save (Saved Games) is a single save named airwar_progress. It contains JSON with the format version, the save date, campaign progress (stars, unlocked opponents, paint schemes) and profile data (match, win and takedown statistics, achievement progress and the selected paint scheme). If the cloud save and the save on the device differ, the game merges them in favour of the more advanced progress. The save is held on your Google Account; we have no separate administrative access to it outside operations performed by the game. Clearing data on your phone does not automatically delete this save. Section 11 explains how to delete it so that it is not uploaded again.

Google also describes automatic collection of analytics and diagnostic data by the Play Games SDK to maintain stability and improve its services. This is processing by the provider, despite AirWar having no analytics of its own. Google's Play Games data information.

Stores separately handle installations, updates, payments, refunds and subscriptions. Through Google Play Console and Android vitals, we receive aggregated statistics (such as installs, ratings, countries, device models and Android versions) as well as crash and ANR (“app not responding”) reports containing technical stack traces, the device model and the operating system version. Crash, ANR and vitals data come only from users who have allowed their device to share usage and diagnostics data with Google. We do not link this data to a player's identity. It is available to us for as long as Google Play Console retains it.

For the planned iOS version, Apple App Analytics and crash reports will provide us with aggregated data only from users who have chosen to share analytics with app developers.

7. The airwar.games website

Hosting and security

The website is static, without accounts, forms or advertising. Cloudflare Pages delivers the website and protects it against abuse. Cloudflare receives IP addresses and HTTP request data needed to transmit content and protect its services, and keeps its logs according to its own policy. We do not have access to raw IP logs.

The site itself sets no cookies. Cloudflare's security features may set strictly necessary security cookies (such as __cf_bm) only when bot protection requires it.

Website statistics

We use Cloudflare Web Analytics on airwar.games. According to Cloudflare, it uses no cookies and no fingerprinting. The page loads a small beacon script from static.cloudflareinsights.com, which collects aggregated metrics: page views, referrer, browser, device type, country derived from the IP address and page performance. We see only aggregated statistics. The legal basis is our legitimate interest in improving the website.

Remembering your language

Only when you explicitly select a language from the menu does the site write an aw-lang entry to your browser's localStorage. It contains the language code and an expiry date, expires automatically 6 months after it is saved, and is never sent to us. It is not used for tracking. You can change the choice in the menu or remove the entry by clearing this site's data in your browser. Blocking storage may prevent the site from remembering your preference.

Article 399 of Poland's Electronic Communications Law and Article 5(3) of the ePrivacy Directive apply to localStorage as well as cookies. Storage strictly necessary to provide a feature you have explicitly requested is exempt from the consent requirement. The aw-lang entry serves only to provide the function you requested by choosing a language, so it does not require consent.

The website links to the stores and Godot Engine. When you follow an external link, that website's operator applies its own privacy rules.

8. Player age and the planned iOS version

The game is not directed at children under 13 and is not enrolled in Google Play's Families programme. This does not remove protection for minors. In Poland, a person under 16 cannot independently give consent covered by GDPR Article 8; consent or authorisation from the holder of parental responsibility is required. Other EU countries may set the threshold between 13 and 16. This does not mean that every game feature requires personal data consent.

The game does not ask your age and does not set TFUA, TFCD or age-restricted treatment in AdMob or UMP. This is our deliberate decision: ad personalisation depends solely on the choices made in the UMP consent form. Clicking a UMP form or labelling the game “13+” does not verify age or parental consent.

If you live in the EEA and are under 16, check the digital consent age applicable in your country. If you are below the applicable threshold, do not agree to personalised ads without consent or authorisation from your parent or guardian. You can refuse personalisation in the UMP form; Google will then show non-personalised or limited ads, or no ad, depending on your other choices, as explained in section 5. The game has no technical mechanism that verifies age or parental consent, so please follow this guidance.

If you believe that a child's data has been processed improperly, contact [email protected]. Do not send identity document scans or additional information about the child unnecessarily.

For the planned iOS version, achievements and leaderboards will use Apple Game Center, and progress will be saved in iCloud, in the player's private container. Game Center settings govern the visibility of relevant profile and activity data. A private progress save is not a public leaderboard. Purchases will be made through Apple In-App Purchase. Saves and purchases will not be transferred between Android and iOS. Game Center & Privacy and iCloud & Privacy.

These iOS provisions will apply once the iOS version is released. Before the release, we will update this policy with any iOS-specific details, including the use of App Tracking Transparency described in section 5.

9. Recipients and transfers outside the EEA

Google: for AdMob, the publisher and Google generally act as separate controllers. Certain features may be subject to processor terms; refusing personalisation does not automatically turn the entire relationship into a processor arrangement. Google is also separately responsible for its accounts, Play Games and store. Read Google's Privacy Policy, how Google uses data from partner websites and apps, and its explanation of AdMob roles.

AirWar uses Google AdMob as its only ad network and does not use ad mediation. The UMP consent form lists the ad technology providers Google may work with when serving ads; you can review that list and make your choices in the form.

Apple: for the planned iOS version, Apple will separately process account and App Store data. The planned features also use Game Center and a private iCloud container; we will describe any iOS-specific details in this policy before that version is released. Apple Privacy Policy.

Cloudflare: it acts as a processor for data processed on our instructions, including customer logs and website statistics covered by its data processing agreement. It may act as a separate controller for its own network data and its own purposes described in its policy. Cloudflare Privacy Policy and Data Processing Addendum.

Email: messages sent to [email protected] and [email protected] are routed through Cloudflare Email Routing to a Gmail mailbox provided by Google. According to Cloudflare, Email Routing forwards messages and does not store their content beyond delivery. Both Cloudflare and Google are recipients of this correspondence and process it as our processors. We keep no other backups of this correspondence beyond the mailbox provider.

Google, Apple and Cloudflare may process data in the United States and other countries outside the EEA. The mechanism depends on the recipient and the particular transfer:

• Google identifies the EU–US Data Privacy Framework for Google LLC and covered certified US companies, and European Commission standard contractual clauses where required for transfers not covered by an adequacy decision. Google's transfer frameworks.
• Cloudflare identifies the EU–US Data Privacy Framework for transfers covered by its certification, and standard contractual clauses, including for other relevant transfers and as a fallback if the DPF basis is lost. Its privacy policy and Data Processing Addendum provide details.
• Apple describes standard contractual clauses for EEA data. We do not attribute DPF participation to Apple based on Google's or Cloudflare's statements. Information and contact details for requesting copies of clauses are in Apple's policy.

The DPF does not automatically cover every company or transfer. Contractual clauses require assessment of transfer conditions and, where necessary, supplementary safeguards. To ask about safeguards for data for which we are responsible and how to obtain a copy, contact [email protected].

10. Retention and security

Local files remain until you uninstall the game or clear its data. Cloud saves and store data require separate action. Clearing the website's localStorage removes the language preference, not the history of data previously processed by providers.

We retain emails sent to [email protected] and [email protected], including their attachments, for 2 years after the case is closed. This also applies to emails containing GDPR requests.

In addition, we keep a separate minimal register of how GDPR requests were handled: the date, the scope of the request, the outcome, the response date and confirmation that the request was fulfilled. We keep this register for 3 years after the case is closed. It does not contain full emails or attachments.

We do not keep a separate set of evidence for possible disputes by default. If an actual dispute or claim arises, we keep the specific messages relevant to it until the dispute is finally resolved and the limitation period for claims has expired, and we inform the person concerned.

Data held by Google, Apple and Cloudflare under their own control is retained according to their policies: Google's information on data retention, Apple's Privacy Policy and Cloudflare's Privacy Policy. We cannot set a single deletion date for that data. UMP stores your consent choices on the device until you change them or clear the app data.

Where providers act as separate controllers, their retention depends on the service purpose, account settings, deletion requests, legal obligations and abuse prevention. We cannot independently shorten mandatory retention of store transaction records.

Local data is kept in the app's private directory. Google states that data collected by its advertising and Play Games SDKs is encrypted in transit. This does not mean that every game file is encrypted or that email is end-to-end encrypted. We do not promise absolute security. The game's own code sends nothing over the network; its network traffic is limited to the Google SDKs described in section 5.

11. How to delete data without installing the game

1. Data on your phone: uninstall AirWar or clear its data in the app settings. This removes local progress and settings. AirWar files are not included in Android device backups; Play Games saves require separate deletion (points 2 and 3).
2. Play Games: open your Play Games profile in a browser, go to profile data and the option to delete data for individual games, then choose AirWar. You can also use the Play Games profile settings in the store. See deleting game data or a profile.
3. Cloud save: to stop the save from being uploaded again, first uninstall AirWar or clear its data on every device where you are signed in to Play Games, and only then delete AirWar's data or your Play Games profile in the Google Play Games settings, as in point 2. Otherwise, a device that still holds local progress may upload it again. If a Saved Games save remains visible after deletion, contact us.
4. Google Play history: Play Games profile data and Play activity history may be separate. Also check the history settings in your Google Account. Deleting game data does not automatically remove purchase records.
5. Data under our control: email [email protected], identifying AirWar and what you want deleted. You may use ordinary webmail. We do not require installation, an AirWar account or an in-app request.

There are no AirWar accounts to delete. We also have no remote access to your phone's files and no authority to delete your entire Google or Apple Account. Where needed, we will help identify the right route, fulfil requests within our responsibility and will not refer you to a provider instead of fulfilling our own obligation. For Apple data, you can use Apple's privacy portal; we will describe deleting data from the iOS version of the game in this policy before that version is released.

Deleting the app or its data does not cancel a subscription. Cancel it separately in the store settings.

12. Your rights

To the extent and under the conditions provided by the GDPR, you may:

• access your data and obtain a copy;
• correct inaccurate data and complete incomplete data;
• request deletion or restriction of processing;
• obtain data in a portable format where processing is automated and based on consent or a contract;
• object, on grounds relating to your situation, to processing based on legitimate interests; objection to direct marketing is unconditional;
• withdraw consent as easily as it was given, without affecting earlier lawful processing;
• complain to the President of the Personal Data Protection Office in Warsaw, Poland, or the competent authority in the country of your habitual residence, work or the alleged infringement. UODO complaint information.

Send requests to [email protected]. We respond without undue delay, normally within one month. Where the law allows an extension because of a request's complexity or the number of requests, we will explain the reason and extension within the first month, with a maximum of two additional months. If there is reasonable doubt, we may request only information necessary to confirm that the request concerns you.

Rights are not absolute. For example, certain data cannot be deleted where law or the defence of claims requires it. We will explain any refusal and the available remedies. We do not collect extra identifiers solely to identify local data that we do not hold.

AirWar does not make decisions about you based solely on automated processing that have legal or similarly significant effects. Ad personalisation may involve profiling by providers, depending on consent and settings.

13. Policy changes

If data, services or legal requirements change, we will update this policy and its date. We will communicate a material change in a way appropriate to its scope before it affects your data. Updating this document or continuing to use the game does not replace fresh consent where required.

For questions about this policy, contact [email protected].