IRON & LIGHT
Rock Den Privacy Policy
Effective date: October 23, 2026
Who we are
Rock Den is a mobile game made by Iron & Light ("we", "us"). This policy explains what information the game and the services built into it collect when you play, how it is used, and the choices you have. It covers Rock Den on Android and iPhone.
Rock Den has no accounts. You never sign up or log in, and the game never asks for your name, email address or anything else about you.
Questions about this policy: support@ironandlightapp.com.
What stays on your device
Your game itself never leaves your phone. We run no servers of our own; what we learn about how Rock Den is played reaches us only as reports from the services in the next section.
- Your progress (rocks, creatures, gold, your den) is saved in a file on your device. There is no cloud save, and uninstalling the game deletes it.
- Your settings (sound, music, vibration, notifications) are kept on your device the same way.
- Reminders such as "satchel ready" or "energy full" are notifications your own device schedules. Nothing is sent to a server, and you can turn them off in the game's Settings or your device's settings.
- The game does not use your location, contacts, camera, microphone or photos.
What the services in the game collect
Four outside services run inside Rock Den. Each one collects information about your device and how you use the game, under its own privacy policy as well as this one. Where the law requires your consent, they wait for it (see Your choices).
| Service | What it's for | What it receives | Its privacy policy |
|---|---|---|---|
| Google AdMob | The optional rewarded ads you choose to watch for in-game rewards | Your device's advertising ID, IP address, device model and operating system, and which ads you see and tap | Google Privacy Policy, how Google uses data from apps |
| Google Analytics for Firebase | Understanding how the game is played, so we can improve it | An app instance ID, your advertising ID, device model, operating system, language and country, sessions and play time, and game events (see below) | Google Privacy Policy, Firebase privacy |
| AppsFlyer | Measuring which ad or link led you to install the game | Your advertising ID, IP address, device model and operating system, the install and app opens, den levels reached, and the revenue from ads you watch | AppsFlyer Services Privacy Policy |
| Google Play or the App Store | Processing anything you buy in the game | Your payment details stay with the store; we receive only a confirmation of the purchase (item, price, currency, order number) | Google Privacy Policy, Apple Privacy Policy |
The game events sent to Google Analytics are: which screen you open, each den level you reach, each rock you crack and what hatched from it, things you dig up, rocks you buy, satchels you open, den rooms you build, trade-ups, rewarded ads you watch, and badges you earn. They carry game details only, never your name or anything you type.
Rock Den is built with the Unity engine. Unity Technologies may receive basic technical details about your device when the game runs, as described in the Unity Game Player and App User Privacy Policy.
How we use it
We use this information to run, fund and improve the game, never to identify you by name.
- Ads: to show the rewarded ads you choose to watch, which help pay for the game. Ads are personalized only where you allow it.
- Improving the game: to see where players get stuck, which features they use and when they stop playing, and to find bugs.
- Measuring advertising: to learn which ads for Rock Den bring players and how far those players get, so we spend on the ones that work.
- Purchases: to give you what you bought.
- Security: the services use it to detect fraud and abuse of ads and purchases.
Where EU or UK law applies, we rely on your consent (given through the consent form) for analytics, install measurement, personalized ads, and storing or reading information on your device. Purchases rely on our agreement with you. Fraud prevention relies on our legitimate interest in keeping ads and purchases secure.
Your choices
You decide what is collected beyond what the game needs to run, and you can change your mind at any time.
- The consent form (EEA, UK and Switzerland): the first time you open the game, Google's consent form asks what you allow. Google Analytics, AppsFlyer and ads wait for your answer. If you say no, Google Analytics collects nothing and any ads you watch are not personalized. Change your answer any time in the game: Settings > PRIVACY CHOICES.
- Elsewhere: the services above run while you play. You can still limit them with your device's advertising settings, below.
- Ads are optional: you never have to watch one, and nothing in the game requires it.
- Advertising ID on Android: in your device's Settings, under Privacy > Ads (the wording varies by device), you can delete your advertising ID or opt out of ad personalization.
- Tracking on iPhone: the game asks before your advertising ID is shared, using Apple's tracking prompt. You can change this later in Settings > Privacy & Security > Tracking.
- Notifications: turn them off in the game's Settings or your device's settings.
- Uninstalling the game deletes everything it stored on your device.
Who it is shared with
We do not sell your personal information for money. It goes only to:
- The services in the table above, which collect it directly from the game.
- Google's advertising partners, through AdMob, to fill the ads you choose to watch. In the EEA, UK and Switzerland the consent form lists them, and they get your data only if you allow it.
- Authorities, if the law requires us to share it.
- A buyer, if Rock Den is ever sold, who would have to keep to this policy.
Google and AppsFlyer process data in the United States and other countries. When data leaves the EEA or UK, they use safeguards recognized by EU and UK law, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long it is kept
| Information | Kept for |
|---|---|
| Your progress and settings on your device | Until you uninstall the game |
| Google Analytics data linked to your device | No longer than 14 months; summary reports that can't identify you may be kept longer |
| AppsFlyer data | Up to 24 months, under AppsFlyer's policy |
| AdMob data | As set out in the Google Privacy Policy |
| Purchase confirmations | As long as tax and accounting law requires |
Children
Rock Den is made for a general audience and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has used the game and information about them was collected, email support@ironandlightapp.com and we will work with the services above to delete it.
Your rights
Wherever you live, you can ask us what we know about you, and to delete it; email support@ironandlightapp.com. Depending on where you live, you also have these rights:
- EEA, UK and Switzerland: to access, correct or delete your data, restrict or object to its use, receive a copy, and withdraw consent at any time (Settings > PRIVACY CHOICES). You can also complain to your local data protection authority.
- California and other US states with privacy laws: to know what is collected (this policy), to delete or correct it, and to opt out of the "sale" or "sharing" of personal information for targeted advertising. Personalized ads through AdMob and install measurement through AppsFlyer may count as sharing under these laws. To opt out, delete your advertising ID or turn off ad personalization in your device's settings, or email us. We will not treat you differently for using these rights.
- Canada: to access and correct your information and withdraw consent, and to complain to the Office of the Privacy Commissioner of Canada.
Because Rock Den has no accounts, what the services collect is tied to your device's IDs, not your name. We may not be able to find it from your name or email alone, so we will explain what we can do and ask the services to act on it where possible. We reply within the time the law sets, usually one month.
Security, changes and contact
Security: information sent by the game travels encrypted to the services above, and we limit who can see the reports they give us. No system is perfectly secure, but we do not hold your progress or any account details on our side at all.
Changes: if this policy changes, we will post the new version here with a new date at the top. If a change needs your consent again, the consent form will ask you the next time you play.
Contact: Iron & Light, support@ironandlightapp.com, ironandlightapp.com.