CTC Games

Neon Survivor Arena

Privacy Policy · Effective date: July 29, 2026

Summary: We use Firebase and Apple services to authenticate players, keep cloud saves, deliver purchases, operate multiplayer and leaderboards, protect the game, understand feature usage, and diagnose failures. We do not sell personal data, show third-party advertising, or track people across other companies’ apps and websites.

1. Who we are

This policy applies to the iOS game Neon Survivor Arena (bundle identifier com.ctcgames.aeternyx), published under the independent developer brand CTC Games (“CTC Games”, “we”, “us”). For privacy questions or requests, email ctcgames.support@gmail.com.

2. Data we process

Account and identifiers

Firebase creates an anonymous account and user ID so cloud features work. If you choose Sign in with Apple, Firebase may also receive the Apple account identifier and the name or email address (including an Apple private relay address) that Apple makes available.

Profile and public game data

Your chosen username, avatar, leaderboard position, raid profile, trophies, and selected public statistics can be visible to other players. Do not use a username that reveals sensitive information.

Cloud save and gameplay

We process wallet and premium currency, heroes and their levels, equipment and inventory, base upgrades, career and mission progress, best wave, achievements, play time, run summaries, raid history and rewards, and related save metadata.

Purchases

Apple processes payment details. We do not receive card or bank information. We process product and transaction identifiers, purchase date and environment, validation and delivery status, and reversal evidence to deliver rewards and prevent duplicate grants or fraud.

Analytics and diagnostics

Firebase Analytics may process app-instance or device identifiers, general region derived from a masked IP address, app launches, sessions, purchases, and feature interactions such as game mode, hero, wave, upgrades, base and raid actions. Firebase Crashlytics processes crashes, stack traces, non-fatal and JavaScript errors, app/device/OS information, and diagnostic logs.

Apple services and local data

Game Center processes authentication, leaderboard scores, and achievements under your Apple settings. App Attest helps verify app integrity. Language, music, sound, tutorial, notification, local cache, and pending-delivery data may remain on your device.

If you email support, we process your email address, message, and any information you choose to send.

3. Why we use data

4. Service providers and disclosures

We do not sell personal data. We use:

We may also disclose information when required by law, to protect users or the service, or in a business transfer subject to appropriate safeguards. Provider processing is also governed by the Firebase privacy information, Google Privacy Policy, and Apple Privacy Policy.

5. Advertising and tracking

The current app does not include a third-party advertising SDK, does not request App Tracking Transparency permission, and does not use collected data to track you across apps or websites owned by other companies. Analytics is used for first-party product measurement and reliability, not targeted ads.

6. Retention and account deletion

Account, profile, and cloud gameplay data is generally kept while the account is active. In the app, open Settings → Delete My Account to request deletion of the Firebase Authentication account and associated cloud game, profile, leaderboard, and raid records. If Sign in with Apple is linked, the app requests fresh authentication and revokes the Apple authorization as part of the flow.

After completion, the raw deletion request is scheduled for removal after seven days. We may keep a restricted one-way account hash, deletion receipt, and minimum StoreKit transaction or reversal evidence for longer where necessary to prevent account resurrection, duplicate grants, fraud, chargeback abuse, disputes, or to meet legal obligations. These retained records are not used to rebuild a playable profile.

Account deletion resets local Firebase Analytics data and the app-instance identifier on that device. Previously processed aggregated analytics and diagnostic records may remain for the provider’s configured retention period and are not tied by us to a Firebase account user ID. Firebase Crashlytics states that crash traces and associated installation identifiers are generally retained for 90 days before removal begins. Apple-controlled purchase and Game Center records are managed under Apple’s policies.

Deleting the app alone removes local app data but does not delete an existing server account or cloud save. Use the in-app account deletion control first if you want the server account removed.

7. Your choices and rights

8. Security and international processing

We use authentication, Firestore security rules, server-authoritative economy operations, App Check, encrypted network transport, access controls, and deletion safeguards. No system is completely secure. Google, Apple, and Netlify may process data in countries other than yours under their contractual and legal transfer safeguards.

9. Children

The app is not directed to children under 13 or the higher minimum digital-consent age that applies in their country. We do not knowingly request a child’s real name or direct contact information. A parent or guardian who believes a child provided personal data may contact us for review and deletion.

10. Changes and contact

We may update this policy when the app, service providers, or legal requirements change. We will revise the effective date above. Questions and privacy requests:

Publisher and data controller: Ömer Çitçi
Independent developer brand: CTC Games
ctcgames.support@gmail.com