Privacy Policy

This Privacy Policy explains how Carlos Corral, who publishes as CCSDev ("we", "us", "our"), collects, uses and protects your information when you use any of our applications (the "Apps") — on Garmin Connect IQ, on Wear OS and on Android, including their websites and online services. It applies to all of our Apps except WatchTrace, which has its own privacy policy because it works with your location and your routes. By using an App you agree to this Policy.

1. Information we collect

• Device identifier: on Garmin, the unique identifier of your watch; on Wear OS and Android, a random identifier the App creates when it is first opened. It is used as your account key.
• Activity data: the daily figure the App runs on (steps, floors climbed or distance, depending on the App), needed for the App to work (rankings, challenges, battles).
• Account details (in Apps with an account): in Universe Battle, the email address you add to your account and, if you set one, a password (stored only as a hash). We use the email to secure your account and to send you game notices (an attack, the end of a round), which you can switch off in Options. If you also tick the box to receive news, we send you occasional updates about the game; you can untick it in the options or use the unsubscribe link in any email.
• Nickname: the name you choose, shown to other players.
• What you write inside an App: in Apps with a social side, the text you type: names you give to things (a planet, a team), messages you send to other players or to a shared board, and reports you file about someone else — a report keeps a copy of the text being reported, so that we can look at it. Other players see what you post to them or to a board, messages between players are not encrypted, and we say so inside the App.
• Usage data: technical information such as date/time of use, app version and IP address.
• Contact and purchase data (only if you buy something): in Apps that offer optional in-app purchases, when you choose to buy we collect your email address and the details of your order (item, amount, reference, payment status, and the date and time you agreed to immediate delivery). Card payments are processed by Stripe, which receives your card details directly: we never see or store your card number. From Stripe we only receive the result of the payment and the country of the card, which we need to apply the correct VAT. Bank transfers are processed by your own bank.

1.b Health and fitness data

Some of our Apps read a daily activity figure from the watch (steps, floors climbed or distance, depending on the App), because that number is what the game or the ranking runs on. We want to be precise about what that means.

• What we read: today's steps — or, in the Floors and Distance World Ranking apps, today's floors climbed or distance — and nothing else. On Wear OS this comes from Android Health Services with the Physical activity permission you grant; on Garmin it comes from the device's own activity monitor.
• Android phones (Health Connect): our phone Apps read only the Steps data type from Health Connect, for today and the previous 7 days, so that days you did not open the App still count. Steps entered by hand are ignored. If you allow it, the App also reads your steps in the background to keep the game up to date and to send you game alerts (for example an incoming attack, or the lava about to catch you). We do not write anything to Health Connect. The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
• What we do not read: heart rate, sleep, GPS location, routes (WatchTrace is the exception: see its own policy), workouts, weight, calories, or any other health measurement. We do not ask for those permissions and the Apps would not work any differently if we had them.
• What we keep: the daily total and a running total for the current season, tied to your account. We do not keep a minute-by-minute history of your movement.
• What we never do with it: we do not sell it, we do not share it with advertisers or data brokers, and we do not use it to build advertising profiles. It is used to run the App you installed and for nothing else.
• Revoking it: you can withdraw the activity permission at any time in your watch's settings (on a phone, in Health Connect). The App will keep opening; it simply will not have any steps to work with.

2. How we use your information

• To provide and maintain the Apps and their features (rankings, challenges, battles).
• To identify your account and save your progress.
• To process and confirm optional purchases and send you the related emails.
• To analyse usage, prevent fraud/cheating and improve the Apps.
• To contact you about your account or your purchases.

3. Legal basis (EU/EEA users)

• Contract: to provide the App you requested and to process your purchases.
• Consent: for news emails, only if you ticked that box (you can withdraw it at any time).
• Legal obligation: to keep purchase and tax records.
• Legitimate interest: to keep the service secure and prevent cheating.

4. Sharing your information

• With other players: your nickname, level and ranking position are shown to other users (that is the purpose of the game).
• Service providers acting on our behalf, only for what each one does: our hosting provider (servers in the EU), Brevo and Google (email delivery) and Stripe (card payments).
• Legal: if required by law or to protect our rights and users.

We do not sell your personal data.

5. Retention

We keep your data only as long as necessary for the purposes above. Inactive accounts may be deleted automatically. Purchase records are kept as required to meet our legal and accounting obligations.

6. Your rights

You may request to access, rectify, delete, restrict or port your data, and to object or withdraw consent. To exercise any right, email [email protected]. You also have the right to lodge a complaint with your local data protection authority.

7. Security

We take reasonable measures to protect your information. However, no method of transmission or storage over the Internet is 100% secure.

8. Children

Our Apps are not directed to children under 16 (or the minimum age required in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

Your information may be processed on servers located in other countries. We take reasonable steps to ensure it is handled securely and in line with this Policy.

10. Changes

We may update this Policy from time to time. We will post the new version on this page and update the "Last updated" date.

11. Who we are & contact

Controller: Carlos Corral (publishing as CCSDev), Madrid, Spain. Full identification is in the legal notice. For any question about this Policy or to exercise your rights, email [email protected].