Last updated: 15 August 2026
This Privacy Policy applies to Boxly (dev.leadbox.boxly). Our non-game apps are covered by a separate policy.
1. The short version
- There are no accounts. We do not know your name, email, or phone number.
- Your progress is stored on your device; we do not upload your saves.
- Analytics are off until you switch them on.
- Purchases go through Google Play; your card details never reach us.
- Ads, including rewarded ads, come from third-party networks with their own privacy policies (section 6).
2. How a device is identified
A device is identified by the App Set ID issued by Google Play services — an identifier shared by every game and app published under the same developer account, which is what lets a purchase made in one of them unlock content in another.
It resets on a factory reset, when the last of our apps is uninstalled, or after 13 months of not being used. We treat it as temporary.
3. Game progress
Levels completed, in-game currency, and settings are stored on your device. Uninstalling the game removes them; we hold no copy and cannot restore progress.
If the game offers sign-in with Google Play Games (achievements, leaderboards, cloud saves), that part is operated by Google under Google's privacy policy. We see only the player ID Google issues and the scores you choose to submit — never your Google account credentials.
4. What we collect
| Data | Why | Optional |
|---|---|---|
| App Set ID | Tying purchases and unlocked content to your device | No — purchases cannot be restored without it |
| Country, derived from the IP address of the request | Ad configuration, aggregate statistics | No |
| Game version, Android version | Compatibility and the minimum-supported-version check | No |
| Gameplay events — level started, level completed, rewarded ad watched | Balancing difficulty and seeing where players stop | Yes — off by default |
| Purchase token, order ID, product ID, purchase state | Verifying the purchase with Google Play, restoring it after a reinstall | Only if you buy something |
| Play Integrity verdict | Rejecting forged purchases and tampered builds | No |
We do not collect your files, contacts, precise location, microphone, or camera, and we do not read the list of apps you installed yourself.
5. Analytics
Gameplay analytics are opt-in and can be switched off at any time in the game's settings. Events carry a name from a fixed list, a few parameters, your country, the game version, and a timestamp. Raw events are kept for 90 days; only daily aggregates remain afterwards.
6. Ads, including rewarded ads
Free games show ads, and some offer rewarded ads — you watch an ad by choice and receive in-game currency or an extra life. Watching is always voluntary; declining only means not receiving that reward.
The ads are delivered by third-party SDKs built into the game — Google AdMob, Yandex Ads, Unity Ads and others depending on the build. Those networks may use your device's advertising ID and their own identifiers to select and measure ads, under their own policies:
You can reset or delete the advertising ID and opt out of ads personalisation in Settings → Google → Ads. Buying the ad-free version removes those SDKs from the picture entirely.
7. In-game purchases
In-game currency, unlocked content, and the ad-free version are sold through Google Play Billing. Payment details are handled by Google and never reach us. We store the purchase token, order ID, product ID, and current state in order to verify the purchase, restore it after a reinstall, and honour the refunds Google reports to us.
Purchases are made from a device that may be shared with a child — use Google Play's purchase authentication settings to require a password for every purchase.
8. Children and age rating
Each game's age rating is shown on its Google Play listing. Our games are not directed at children under 13 and are not part of Google Play's Designed for Families programme; we do not knowingly collect data from children. If you believe a child has sent us data, write to hello@lead-box.dev and we will delete it.
9. Who else sees the data
Our servers and the providers that run them (hosting inside the European Union), plus the ad networks named above, which receive only what their SDK collects on the device. We do not sell data and do not share it for anyone else's profiling. We disclose data where the law requires it.
10. Deleting your data
To have everything tied to your device deleted:
- in the game — Settings → Privacy → Delete my data;
- or write to hello@lead-box.dev, quoting the App Set ID shown on the game's privacy screen.
We process the request within 30 days. Progress stored on your device is deleted by uninstalling the game. Purchase records we are required to keep for tax purposes are retained with no device identifier attached.
11. Security
Traffic between the game and our servers is encrypted with TLS, requests are checked with Play Integrity, and database access is limited to the people who operate the service.
12. Changes
We update this policy when the data we collect changes, and always publish the current version at https://lead-box.dev. The date at the top is the date of the last change.
13. Contact
LeadBox — hello@lead-box.dev