Privacy Policy

Overview

Zombie Carts is a mobile arcade game. The game may use platform services for purchases, interstitial and optional rewarded ads, privacy consent, product analytics, crash diagnostics, and optional global leaderboards.

Information We Process

• Game progress, settings, upgrades, and purchases are stored so your profile can work.
• Purchase services may process transaction identifiers needed to grant or restore products.
• Product analytics may process a randomly generated app identifier and events such as app opens, tutorial progress, level results, score shares, review prompts, and purchase or ad actions. These events do not include your display name, email address, advertising identifier, or precise location.
• Global leaderboards use an automatically generated private identifier. Eligible campaign clears may send the level number, score components, elapsed time, platform, submission identifier, and a one-way hash derived from the request's network address for abuse prevention.
• If you choose a public leaderboard name, that name and your verified score may be visible to other players. If you optionally link Google sign-in on a supported platform, Supabase may process the provider identifier, email address, account name, profile image, and related authentication data needed to preserve the leaderboard identity.
• Google AdMob may process your advertising identifier, approximate (coarse) location, and ad-interaction data to serve and measure ads.
• Support messages may include the contact details and diagnostic context you provide.

Leaderboards And Optional Sign-In

Supabase provides authentication, database, and server functions for the global leaderboard. A private anonymous leaderboard identity is created automatically when the feature is available. Choosing a display name is optional, duplicate names are allowed, and you can continue playing with a private rank. Older scores from releases before version 1.1.0 are not uploaded.

Google sign-in can be linked voluntarily on supported platforms to preserve the leaderboard identity across reinstalls or platforms. Linking does not upload local campaign progress or purchase history to the leaderboard. Public names can be reported and may be hidden for safety or policy violations.

Product Analytics

When production analytics are enabled, Zombie Carts sends limited, pseudonymous product events to PostHog so we can understand onboarding, level completion, stability, and monetization health. We do not use these events for third-party advertising or sell them. The analytics identifier is separate from the leaderboard identity and advertising identifier.

Ads And Tracking

Zombie Carts shows ads through Google AdMob (Google's mobile ads service): interstitial ads between runs and optional rewarded ads you choose to watch. To serve and measure these ads, Google's ad SDK may process your device's advertising identifier, approximate (coarse) location, and ad-interaction data, which can be used for third-party advertising, ad measurement, and analytics.

Before requesting ads, the app gathers the privacy choices required in your region using Google's User Messaging Platform (EU/UK consent and US state privacy notices). On Apple platforms, Zombie Carts also asks for App Tracking Transparency permission, in context, before any tracking-based advertising. Purchasing Remove Ads stops interstitial ads; optional rewarded ads remain available when you choose to watch them.

For how Google uses this data, see Google's Privacy & Terms.

Purchases

Purchases and restores are handled through platform app stores and RevenueCat. Zombie Carts uses purchase status to grant coins, assists, or Remove Ads access.

Data Retention And Deletion

Zombie Carts does not require a public profile. Local game progress, settings, upgrades, and the purchase journal can be deleted by clearing the app's storage or uninstalling the app. The app's Settings screen can permanently delete your leaderboard identity, display name, linked sign-ins, verified scores, and queued submissions without deleting local campaign progress or purchases.

To request deletion of support information or other data we control, follow the steps on the Zombie Carts data-deletion page. We delete verified support data unless retention is required for legal, fraud-prevention, or security purposes. Supabase, PostHog, Google Play, RevenueCat, and Google AdMob may retain authentication, transaction, diagnostic, analytics, or advertising data under their own obligations and retention policies.

Contact

For privacy or support questions, email blackmoncreations@gmail.com.