Privacy Policy

Effective: launch day · Last updated: 2026-07-22

Who we are

HEFT is a free, ad-supported physics game for iOS and Android. It is made by Amrudin Catic, an independent developer based in Bosnia and Herzegovina ("we", "us", "the developer"). For privacy purposes, the developer is the sole data controller. You can reach us any time at amrudincatic@hotmail.com.

This policy explains exactly what the game and this website collect, what we never collect, who it is shared with, and the choices you have. We wrote it to match what HEFT actually does · nothing more, nothing hidden.

The short version

• The game is free to download. The one optional purchase (Remove Ads) is processed by Apple or Google · we never collect or process payment information.
• Your progress, stats, and settings live on your device. There is no HEFT account and no HEFT server.
• We show ads (Google AdMob) and measure the game (Google Firebase Analytics). A tracking-consent prompt decides whether either may use your device advertising identifier.
• This website (playheft.com) uses cookieless, privacy-friendly Vercel Web Analytics for aggregate page-view counts · no cookies, no cross-site tracking, no profile of you.
• Leaderboards and achievements run through Apple Game Center and Google Play Games.
• We do not sell your personal information.
• You can change your tracking choice, or ask us to delete your data, at any time.

What stays on your device

The following is stored locally with the platform's standard key-value store (NSUserDefaults on iOS, SharedPreferences on Android) and is not transmitted to us:

• Game progress · best height, missions and blueprints completed, daily streak, achievements earned.
• Settings · sound, music, music volume, haptics, dark mode, and your chosen language.
• Your tracking-consent answer.

If you have turned on iCloud or Google device backup at the OS level, this local data may be included in that backup under Apple's or Google's control. Deleting the app, or using Settings → RESET PROGRESS in-game, clears this data on the device.

What we collect, and why

The categories below describe the live, shipping game. Each lists the data, the purpose, and the legal basis we rely on for users in the EEA and UK (GDPR).

• Crash and performance diagnostics · device model, OS version, and an anonymous crash/install identifier, collected through Apple's and Google's standard developer dashboards. Purpose: find and fix bugs and stability problems. Legal basis: legitimate interest in a working app.
• Advertising (Google AdMob) · ad requests and interactions, coarse (non-precise) signals, and · only if you allow tracking · your device advertising identifier (Apple IDFA / Google Advertising ID). Purpose: to fund the free game by showing ads and measuring them. Legal basis: your consent for personalized ads; legitimate interest for non-personalized ads.
• Analytics (Google Firebase Analytics) · in-game events and the values attached to them · for example: app launch, game-over (mode, height reached, blocks dropped, clean landings, outcome), mission or blueprint completion (stars), ad shown, and your consent status · along with an app-instance identifier. This first-party analytics, including the app-instance identifier, is collected whether or not you allow tracking; allowing tracking additionally lets it be linked to your device advertising identifier (Apple IDFA / Google Advertising ID). Purpose: understand how the game is played and improve it. Legal basis: our legitimate interest for the first-party analytics; your consent for any advertising-identifier linkage.
• Leaderboards and achievements (Apple Game Center / Google Play Games) · your score values (such as best height, mission stars, total blocks, daily streak) and your platform gaming account, submitted when you play with these services signed in. When you are signed in, HEFT also reads back which achievements your platform account has already unlocked, so that they can be restored on your device if you reinstall the app. This data is handled by Apple or Google under their own privacy policies; HEFT does not store it on any server of ours. Purpose: rankings, achievement unlocks, and restoring your unlocked achievements after a reinstall. Legal basis: your use of the feature and our legitimate interest in offering it.

The tracking-consent prompt

On the first game-over of a session, your device shows a tracking-consent prompt · App Tracking Transparency (ATT) on iOS, the User Messaging Platform (UMP) consent form on Android.

• Allow · ads may be personalized and analytics may be linked to your advertising identifier.
• Don't Allow · you still see ads, but they are not personalized, and your device advertising identifier is not used. First-party analytics, tied to a per-install app-instance identifier (not shared across apps), continues either way.

The full game is playable either way · nothing is gated behind allowing tracking. You can change your answer at any time:

• iOS: Settings → Privacy & Security → Tracking → HEFT.
• Android: in-app Settings → TRACKING row.

What we never collect

• No name, email, phone number, or account · unless you choose to email us, in which case we only use that to reply.
• No precise location or GPS.
• No access to your camera, microphone, photos, or contacts.
• No payment information · the game is free to download, and the one optional purchase (Remove Ads) is processed by Apple or Google, not by us.
• No HEFT-owned server stores your gameplay; the game makes no network calls of its own beyond the third-party services named above.

This website

Separately from the game, this marketing site (playheft.com) uses Vercel Web Analytics to count page views and see which pages people find useful. It is privacy-friendly by design · it sets no cookies, stores nothing on your device, and uses no identifier that follows you across sites or apps. It records only aggregate, anonymous signals such as the page visited, the referring site, and a coarse device, browser, and country. Visitors are counted with a hash derived from the request, which is discarded within 24 hours rather than stored. It builds no profile of you and is not linked to anything the game collects. The legal basis is our legitimate interest in understanding site usage; because it uses no cookies or personal identifiers, it needs no separate consent prompt.

Who we share with

We do not sell your personal information. We rely on a small number of service providers, each governed by its own privacy policy:

• Google AdMob · interstitial and rewarded ads.
• Google Firebase Analytics · gameplay measurement.
• Apple · App Store distribution, Game Center leaderboards and achievements, crash diagnostics.
• Google · Google Play distribution, Play Games services, crash diagnostics.
• Vercel · hosting and cookieless analytics for this website (playheft.com).

These providers may process data outside your country, including in the United States. Where the law requires it, such transfers rely on the providers' own safeguards (for example, Standard Contractual Clauses).

Selling and sharing (California)

We do not sell your personal information, and we do not knowingly "share" it for cross-context behavioral advertising except when you opt in through the tracking-consent prompt. If you opt in, your advertising identifier may be used by Google for personalized ads · which can count as "sharing" under California law. You can opt out at any time by declining the prompt or turning tracking off in OS settings, as described above. California residents have the rights set out in "Your rights" below, and we do not discriminate against you for exercising them.

Your rights

• Everyone: turn tracking off at any time; ask us what device-tied data we hold and ask us to delete it. Email us and we will respond within 30 days.
• EEA / UK (GDPR): you have the right to access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent at any time, and the right to lodge a complaint with your local Data Protection Authority.
• California (CCPA / CPRA): you have the right to know, delete, and correct your personal information, and to opt out of its sale or sharing. We do not sell it.

To exercise any of these, email amrudincatic@hotmail.com. Because most data is anonymous or device-tied, we may ask for information to locate it (such as your platform or approximate dates of play).

Data retention

On-device data stays until you delete the app or reset progress in-game. Diagnostics, analytics, and advertising data are retained by Apple, Google, AdMob, and Firebase according to their own schedules · Firebase Analytics event data, for example, defaults to a retention window measured in months. Where we hold device-tied data ourselves, we delete it on request within 30 days. Website analytics on playheft.com is aggregate and anonymous · Vercel discards the per-visitor hash within 24 hours and keeps only aggregate counts under its own schedule.

Children

HEFT is intended for players aged 13 and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app and provided data, email us and we will delete it.

Security

We rely on the platform's built-in protections for on-device data and on our providers' security for anything they process. No method of storage or transmission is ever completely secure, but we take reasonable steps to protect your information.

Changes

If we change this policy, we will update the "Last updated" date above. Material changes will surface in-app on the next launch.

Contact

Questions, opt-outs, access or deletion requests: amrudincatic@hotmail.com.

HEFT is an independent project by Amrudin Catic, Bosnia and Herzegovina · the sole data controller. This English version is the authoritative one; any translations of the marketing site are provided for convenience.