Controller and contact
The controller for the processing described in this policy is Przemysław Majak, Poland, the developer of LastPackage. For game support and privacy matters, contact halfspritestudio@gmail.com. You do not need to create a player account.
Game progress and settings
The game stores completed and unlocked levels, the state of an ongoing puzzle, tutorial progress, coin balances, reward receipts and settings such as language locally on your device. These records allow the game to work and resume your progress. They are not automatically uploaded to a developer-operated server. We cannot access the local save on your phone. System backup and restoration may depend on your Android and device-account settings.
Advertising and Google data
The game integrates Google AdMob (Google Mobile Ads SDK) and Google User Messaging Platform (UMP) for ads and privacy choices. The current alpha uses test ads. Watching a rewarded ad is optional; declining it does not block normal level progression.
Google SDKs may process and share your IP address, approximate location inferred from IP, device or account identifiers including the advertising ID when available, app launch and app/ad interaction information, and application/SDK diagnostics. Purposes include ad delivery and measurement, diagnostics, security and fraud prevention. We do not obtain GPS location or request precise-location permission.
The current game configuration disables ad personalization. Non-personalized and test ads do not mean that no technical data is processed. No separate gameplay analytics using Firebase Analytics or Unity Analytics has been implemented. Advertising statistics and diagnostics remain part of AdMob operation.
Your advertising choices
Where required, UMP displays a form allowing you to accept, decline or customize data choices. You can revisit your choices using “Ad privacy” when this button is made available in the game according to UMP requirements. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Declining consent does not block core gameplay. Depending on your choices and availability, it may affect ads and their optional additional rewards. Android privacy settings also provide advertising-ID controls. Changing these controls does not automatically erase all data previously processed by providers.
Messages and support requests
If you email the developer, we process your sender address, message and any attachments you choose to provide to respond, offer technical support and handle your request. Do not send passwords, payment details or other information that is unnecessary for your request. The game does not retrieve your contacts, photos or private Google account details to determine your age.
Purposes and legal bases
Where GDPR applies, processing necessary to provide and operate the game is based on performance of the agreement to use it (Article 6(1)(b)). Processing and device access requiring consent rely on consent and applicable terminal-equipment rules (Article 6(1)(a)). Responding to messages, security and establishing, exercising or defending legal claims may rely on legitimate interests (Article 6(1)(f)), taking account of your rights. Legal obligations are addressed under Article 6(1)(c) where applicable. Legitimate interests do not replace consent where consent is required.
Providers and data recipients
Google processes technical data associated with advertising and consent forms, together with parties identified in Google information and, where applicable, the consent form’s partner list. Under Google’s privacy policy, Google Ireland Limited is the relevant Google controller for the EEA and Switzerland; other regions are covered by the relevant Google entities identified by Google. The consent form and provider policies explain their roles and practices.
Email sent to halfspritestudio@gmail.com is handled through Gmail. This policy website is hosted using Cloudflare Pages. Email and hosting providers may process technical information needed to deliver messages, serve the page and protect their services. We do not add ads, analytics tools, external fonts or tracking scripts to the policy page.
We do not sell local game saves or support correspondence. This does not mean the advertising SDK never shares data for the purposes described above. Public authorities or advisers may receive information where required by law or necessary to protect legal claims.
Transfers outside the EEA
Google, email and hosting services may process information outside the European Economic Area, including in the United States. Appropriate mechanisms depend on the provider and transfer and may include an applicable adequacy decision or standard contractual clauses and supplementary safeguards. Provider documents linked below explain their arrangements and how to obtain information about safeguards. We do not claim all data remains in Poland or the EU.
How long data is kept
Local saves remain on the device until you clear app data or uninstall the app, subject to any system backups. We keep support correspondence for as long as needed to handle the matter and afterwards only as necessary for legal obligations or establishing, exercising or defending claims under applicable limitation periods.
Advertising and diagnostic information, consent choices and provider logs may have different retention periods depending on the purpose and service. Google describes its retention periods and criteria in its data-retention policy. The developer cannot directly erase all data held in independent Google or hosting systems.
Your rights and deleting data
Subject to GDPR conditions, you may request access, correction, erasure and restriction, and where applicable data portability, and object to processing based on legitimate interests. You may withdraw consent and complain to the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl), or the competent authority in your country.
Send requests to halfspritestudio@gmail.com. We may ask for proportionate information needed to identify and handle your request. You do not need to provide additional identifying information just to play.
You can delete local progress by clearing the app’s data in Android settings. This removes local progress and coins. System backups must be managed through the backup provider’s settings. For data for which Google acts as an independent controller, you can also use the controls and contact options in Google’s privacy policy.
Intended audience
LastPackage is intended for people aged 16 and over. The game does not request your date of birth or use Google Play Age Signals. We do not verify age through a Google account. We do not knowingly collect information from children under 16. If you believe such information has been provided to us, contact the developer so we can investigate and take appropriate action.
Changes to this policy
This policy may change as features or providers change. The date at the top identifies the current version. Before adding new processing purposes, separate analytics or new providers, we will update the information and obtain new consent where required. This policy does not replace the choices provided by the UMP form.