Privacy Policy

Effective date: 2026-11-11  ·  Last updated: 2026-11-11

This policy explains what happens to information when you play Duckpoint and when you visit this page. It is written to be read: the short version comes first, the details follow. Leaderboards through Google Play Games are optional — you can play the whole run without ever signing in.

1. Who we are

Duckpoint is developed and published by INTJ Labs, an independent game studio based in Brazil ("INTJ Labs", "we", "us", "our"). We are the controller responsible for the processing described in this policy.

This policy applies to:

• the Duckpoint game application for Android (the "App"), distributed through Google Play (package br.com.intj.duckpoint);
• this website at intj.com.br/duckpoint/ (the "Site").

Contact for any privacy question or request: .

2. The short version

• No account is required. We do not ask for your name, email address or any other personal information to play.
• We do not run a database of your personal information. We operate no user database, no first-party analytics and no servers of our own. The leaderboard is run by Google Play Games, not by us (section 5.3).
• Your game stays on your device. Settings and your purchase entitlement are stored locally in the App's private storage, and nothing is uploaded while you play.
• Leaderboards are optional. If you sign in with Google Play Games, Google stores your score against your Play Games profile and other players can see it (section 5.3). If you do not sign in, nothing leaves your device.
• The Android version shows ads through Google AdMob. Google may process device and advertising data to deliver and measure those ads (section 5.1).
• Purchases are handled by Google Play. We never see your card or bank details (section 5.2).
• No first-party analytics today. The App currently contains no analytics or telemetry SDK of ours. If we add one, we will ask for consent where the law requires it and update this policy first (section 6).

3. Information we do not collect

We do not collect, request or store on our own systems: your name, email address, phone number, postal address, contacts, photos, files, precise location, health or biometric data, user-generated content, or account credentials. We do not build advertising profiles and we do not sell personal information.

The App does not request access to your camera, microphone, location, contacts or personal files. We do not offer cloud save: your run is stored on your device, and the only thing that leaves it is a leaderboard score you choose to submit by signing in.

4. Information stored on your device

The App stores a small amount of data in its own private storage on your device:

• your audio settings, such as volume and mute state, so your preferences survive a restart;
• a local cache of your purchase entitlement (whether you own the "Remove ads" upgrade), so it keeps working offline.

This data is not transmitted to us and we cannot access the copy on your device. It is removed when you uninstall the App or clear its data in Android settings. Google Play can restore your purchase after a reinstall.

We do not run a save service. A run in progress lives in the App's memory and is not uploaded anywhere; if you close the App mid-run, that run is lost.

5. Third-party services

The App and the Site rely on services provided by Google and by our hosting provider. Their handling of information is governed by their own privacy policies, linked below. In release builds, the App's network traffic is limited to Google's advertising, billing, leaderboard and diagnostics services.

5.1 Advertising — Google AdMob (Android)

The Android version of the App displays banner and interstitial ads served by Google AdMob. To serve, cap, measure and protect those ads, Google may collect and process:

• your advertising identifier (Advertising ID) and similar device identifiers;
• your IP address, and an approximate location derived from it (typically city or region level);
• device information such as model, manufacturer, operating system version, language and screen size;
• app information such as package name and app version;
• ad interactions, such as ad requests, impressions, clicks and video views, with timestamps;
• diagnostic and performance data related to ad delivery.

This information is used to deliver ads, limit how often you see the same ad, measure ad performance, personalise ads where permitted, prevent fraud and abuse, and comply with legal obligations. Where the GDPR applies, we rely on your consent for personalised advertising and for storing or accessing information on your device, and on our legitimate interests for non-personalised advertising, measurement and security. You express or withdraw that choice through the device controls described below.

You can control advertising data:

• on Android, open Settings → Privacy → Ads to delete or reset your Advertising ID and to opt out of personalised ads;
• review Google's Privacy Policy and how Google uses information from apps that use its services;
• manage ad personalisation in Google Ads Settings.

If you buy the "Remove ads" upgrade, the App stops requesting ads.

5.2 Purchases — Google Play Billing (Android)

The Android version offers a one-time in-app purchase, "Remove ads". The transaction is processed by Google Play. Google handles your payment method, billing details and purchase records; we do not receive your card or bank details. We receive only the information needed to confirm the purchase and to unlock the upgrade, and the App caches that entitlement locally. There are no subscriptions.

Google Play's Privacy Policy, Terms of Service and refund policy apply to the transaction. Prices, currency and taxes are shown by Google Play before you confirm.

5.3 Leaderboards — Google Play Games Services (optional)

Leaderboards are optional. If you choose to sign in with Google Play Games, the App can submit your scores — for example, the highest level you cleared or your best result on a level — to a leaderboard hosted by Google. Other players can then see that score next to your Play Games gamertag. If you never sign in, your scores stay on your device and nothing is uploaded.

Through Google Play Games Services, Google processes:

• your Play Games player ID and the profile information attached to it, such as your gamertag and avatar, which identify whose score it is;
• the scores and results you submit, together with their timestamps and leaderboard rank;
• technical data needed to operate the leaderboard, such as device type and app version.

We do not operate the leaderboard servers and we never receive your Google credentials. We see the same public leaderboard you do — a gamertag, an avatar and a score — not your identity. Google stores and serves the leaderboard; the App submits scores through the Play Games APIs on your behalf. Where the GDPR applies, the legal basis for leaderboards is the performance of our agreement with you (providing the feature you asked for) and, where required, your consent. Google's handling is governed by its Privacy Policy and the Google Play Terms of Service.

You control your leaderboard participation:

• sign out of Play Games in the App, or simply never sign in, to stop scores being submitted;
• in Google Play Games, choose who can see your profile and gameplay activity, or hide your profile;
• delete your Play Games profile data, including leaderboard scores, through Google Play Games or Google account settings;
• or contact us and we will point you to the right place in Google's controls.

5.4 App diagnostics — Google Play

Google Play may collect technical information about the App, such as crash reports, application-not-responding reports, device model, operating system version and app version, and may provide developers with aggregate statistics such as installs and ratings. We see technical and aggregated reports, not your identity. Google's handling is described in its Privacy Policy.

5.5 Permissions requested by the Android app

The Android build requests: Internet access, network state, the advertising ID permission (com.google.android.gms.permission.AD_ID) and Google Play billing. It does not request location, camera, microphone, contacts, or access to your files.

5.6 This website

• Hosting. The Site is served by Netlify, which processes standard server logs (such as IP address, user agent, requested URL and timestamp) to deliver the pages, keep the service secure and prevent abuse. See the Netlify Privacy Policy.
• Fonts. The Site loads web fonts from Google Fonts, so your browser contacts Google's servers and Google receives your IP address. See Google's Privacy Policy.
• No cookies of ours. We do not set cookies ourselves and we do not run website analytics.
• Links. The Site links to Google Play and other sites. Once you follow a link, the destination's privacy policy applies.

6. Telemetry (planned)

We may introduce privacy-respecting telemetry for the App and the Site in order to understand how they are used and to improve them — for example, which levels players restart most often, or where a run ends. Such telemetry could collect:

• device model and manufacturer, operating system and version, app version, language, and country-level region;
• gameplay events, such as levels started, completed or restarted, towers built, cards drafted, and session duration;
• technical events, such as startup time and errors, in aggregate form.

Telemetry data would be used in aggregate to improve the game and the Site. It would not be used to build advertising profiles, and we would not use your advertising identifier for telemetry. Where the law requires consent — for example in the European Economic Area, the United Kingdom or Brazil — we will ask for your consent before enabling telemetry that is not strictly necessary, and declining will not prevent you from playing. We will update this policy and the Google Play data-safety declaration before any such telemetry is enabled.

7. How information is used

We use the limited information described above to:

• operate, maintain and improve the App and the Site;
• respond to your support requests when you contact us;
• provide the "Remove ads" purchase and restore it after reinstalling;
• show the leaderboard you asked to take part in;
• keep the App and the Site secure and prevent fraud and abuse;
• comply with legal obligations and enforce our Terms of Service.

We do not send marketing emails: we only have your email address if you write to us, and we use it only to answer you.

8. Sharing

We do not sell personal information. Information is shared only with:

• service providers that make the App and the Site work — Google (AdMob, Google Play, Google Play Games, Google Fonts) and Netlify (hosting) — as described in section 5;
• other players, if you take part in a leaderboard: your Play Games gamertag, avatar and submitted score are visible on the public leaderboard;
• authorities or third parties where we are required to do so by law, or where necessary to establish, exercise or defend legal claims;
• a successor in the event of a merger, acquisition or transfer of the game, subject to this policy.

9. International transfers

Google and Netlify may process information in the United States and other countries outside Brazil. Where required, these transfers rely on safeguards recognised by applicable law, such as standard contractual clauses and adequacy decisions. You can ask us for information about the safeguards that apply by writing to the address in section 16.

10. Retention and deletion

Data stored on your device remains until you uninstall the App or clear its data. We do not hold an account for you. Leaderboard scores are held by Google in your Play Games profile and are kept until you delete them there. Support emails you send us are kept only as long as needed to resolve your request and to meet legal obligations. Data processed by Google and Netlify is retained according to their own policies.

To delete local data, uninstall the App or use Settings → Apps → Duckpoint → Storage → Clear data. To delete leaderboard data, use the Play Games profile and data controls in your Google account, or contact us. To exercise a privacy right, contact us as described in section 13.

11. Security

We keep data collection to a minimum, the App stores its data in private app storage, and network connections use HTTPS. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a security incident affects your rights, we will notify you and the competent authorities as required by law.

12. Children

Duckpoint is a family-friendly game, but it is not listed in Google Play's Designed for Families programme and is not directed to children under 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has provided personal information to us, contact us and we will delete it.

Purchases should be made by the Google account holder or with a guardian's authorisation. You can require authentication for purchases in Google Play settings, and you can limit ad personalisation on the device as described in section 5.1. Leaderboards require signing in with a Google account; children below the age Google requires for account creation cannot use them.

13. Your rights

13.1 European Economic Area and the United Kingdom (GDPR / UK GDPR)

If you are in the EEA or the UK, you have the right to: access your personal data; rectify inaccurate data; erase data; restrict processing; object to processing; receive your data in a portable format; and withdraw consent at any time, without affecting processing carried out before the withdrawal. You also have the right to lodge a complaint with your local supervisory authority.

Our legal bases are: consent (personalised advertising and device storage or access, where required, and leaderboard participation where required); legitimate interests (non-personalised advertising, measurement, security and fraud prevention); performance of a contract (providing the purchase you bought and the leaderboard you joined); and legal obligation.

13.2 Brazil (LGPD — Lei 13.709/2018)

If you are in Brazil, you have the right to: confirmation that processing exists; access to your data; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or elimination of unnecessary or excessive data; portability; elimination of data processed with consent; information about the entities with which data was shared; information about the possibility of not providing consent and its consequences; and revocation of consent. You may also petition the Brazilian data protection authority (ANPD).

13.3 How to exercise your rights

Write to . We may ask for information needed to confirm your identity before acting. Because we hold almost no personal data ourselves, some requests — particularly about advertising, purchase records or leaderboard scores — are best addressed to Google, and we will point you to the right place. We respond within the period required by applicable law.

Nothing in this policy limits rights you have as a consumer under the Brazilian Consumer Protection Code (Lei 8.078/1990) or other mandatory law.

14. Do Not Track

The Site does not track you across websites and does not run analytics, so there is no first-party tracking for a "Do Not Track" or Global Privacy Control signal to disable. Third-party services linked from the Site are governed by their own policies.

15. Changes to this policy

We may update this policy when the App or the law changes. The new version will be posted on this page with a new "Last updated" date. If a change is material, we will make it prominent on this page and, where required, ask for your consent again. Please review this page from time to time.

16. Contact

INTJ Labs
Email: