Effective date: 27 October 2026
Gulp Games ("we", "us") makes the mobile game Mob Surge (the "Game") for iOS and Android. This policy explains what data the Game handles, why, who else sees it, and what you can do about it. We wrote it to be read, not skimmed: there is no account to create, we never ask for your name or email, and you can delete everything from inside the Game.
1. What we collect
| Data | What it is | Why |
|---|---|---|
| Anonymous player ID | A random identifier created by Google Firebase the first time the Game starts. It is not your name, email, phone number or device serial number. Shown in Settings so you can quote it to support. | To save your progress and tell your profile apart from everyone else's. |
| Game progress | Level reached, coins, gems, upgrades, guns, missions, season-pass tier, settings, your call sign (or, if you never set one, the "Survivor-" name made from your player ID), platform (iOS/Android), app version and last-played time. | To save your progress to our servers so it survives reinstalls on the same device and to let us run live events, gifts and support. |
| Purchase records | For each in-app purchase: the product, price, currency, store (Apple or Google), the store's transaction ID, app version and time. | To grant what you bought, restore purchases, investigate problems and keep accounts. Apple or Google process the payment; we never see your card or bank details. |
| Advertising data (Google AdMob) | Advertising identifier (IDFA on iOS, AAID on Android), IP address, rough device information and how you interact with ads. | To show ads and measure them. Ads are personalised only with your consent, asked through Google's consent form (GDPR in Europe, US state laws, and the App Tracking Transparency prompt on iOS). Say no and you still get ads, just not personalised ones. |
| Leaderboard entry | Your chosen call sign (3–16 letters or digits), your best weekly wave and your level. | The weekly challenge leaderboard. This is public: other players see the call sign, wave and level. Pick a call sign that does not identify you. |
| Error reports | When the Game hits a software error: the error message and where in the code it happened, your device model, operating system version, app version, level and the player ID. At most five a session. | To find and fix bugs. They contain no personal content and are deleted once the problem is fixed, or after 12 months. |
We do not collect your name, email, phone number, contacts, photos, precise location, health data or anything you type other than the call sign. The Game has no chat. We do not use third-party analytics or crash-reporting SDKs; the only backend is Google Firebase, used for sign-in, saving and the Game's own error reports above. Reminder notifications are scheduled on your device and do not send anything to us.
2. Who else sees it (third parties)
- Google Firebase (Authentication, Firestore): stores the player ID, progress, purchase records, leaderboard entries and error reports on Google's servers. https://firebase.google.com/support/privacy
- Google AdMob (ads) and its mediation partners: receive the advertising data above and act as independent controllers for ad personalisation. https://policies.google.com/technologies/ads
- Apple App Store / Google Play (payments, subscriptions): handle billing under their own privacy policies and send us the transaction ID and product, not your payment details.
We do not sell your data and we do not share it with anyone else unless the law requires it.
3. Children
The Game is rated 12+ / Teen and is not directed at children under 13 (under 16 in the European Economic Area and the UK). We do not knowingly collect data from them. If you believe a child has used the Game, email us at mob.surge.support@gulpgames.com with the player ID and we will delete that profile.
4. Deleting your data
In the Game: Settings → Delete My Data. This immediately deletes your progress on the device, your cloud profile, your leaderboard entries and the Firebase account behind the player ID. It cannot be undone. Purchases stay tied to your Apple or Google account and can be restored into a new profile.
By email: write to mob.surge.support@gulpgames.com with the player ID shown in Settings and we will delete it within 30 days.
To stop personalised ads without deleting anything, open Settings → PRIVACY CHOICES in the Game (where the law requires it), or reset / disable the advertising identifier in your device settings.
5. How long we keep it
- Progress, player ID and leaderboard entries: until you delete them, or after 24 months without playing, when we delete inactive profiles.
- Purchase records: as long as tax and accounting law requires (typically 7 years), then deleted.
- Error reports: until the problem is fixed, and never longer than 12 months.
- Advertising data: held by Google under its own retention rules; we keep none of it.
6. Your rights
Wherever you live, you can ask us what we hold about your player ID, get a copy, correct it, delete it, or object to how we use it. If you are in the EEA/UK (GDPR) you also have the right to restrict processing, to data portability and to complain to your data-protection authority. If you are in California (CCPA/CPRA) you have the right to know, to delete, to correct, to opt out of "sharing" for cross-context behavioural advertising (in the Game: Settings → PRIVACY CHOICES, or your device's ad settings) and not to be discriminated against for exercising these rights. We do not sell personal information.
Changing or withdrawing your ad consent. Open Settings → PRIVACY CHOICES in the Game at any time to see and change the choices you made in the consent form (the button appears wherever a consent choice applies, for example in the EEA, the UK and US states with privacy laws).
Legal bases (GDPR): performance of the contract to provide the Game (progress, purchases); your consent (personalised ads, leaderboard call sign); our legitimate interest in keeping the Game working and fraud-free.
Because we only hold an anonymous ID, you will need to send that ID from the Game's Settings screen for us to find your data. Requests go to mob.surge.support@gulpgames.com and we answer within 30 days.
7. Security and transfers
Data travels over HTTPS and is stored by Google Firebase, which may process it in the United States and other countries under Google's standard contractual clauses. No system is perfectly secure; we keep what we collect to the minimum and you can delete it at any time.
8. Changes
When this policy changes we update the effective date above and, for material changes, show a notice in the Game before the new version applies. Older versions are available on request.
9. Contact
Gulp Games — mob.surge.support@gulpgames.com