Privacy policy.
How we handle information for our games, websites and private content-publishing integration.
Our games can be played without giving us your email. TerraDex collects an email address only when you explicitly opt in to news and offers, and you can withdraw that consent in the app. Our publishing tool is private and publishes only our own material to our own account.
Scope
This policy applies to Merciless Studio games, including TerraDex, mercilessstudio.com, and the private tool Merciless Studio Limited uses to publish original promotional content. A game may provide an additional product-specific notice where its data practices differ.
Information we process
- Game progress and settings. TerraDex stores progress on your device. If you choose Play Games sign-in and cloud sync, progress is also stored in Google Firebase under a Firebase user identifier.
- Account and support identifiers. If you connect Play Games, a non-guessable Firebase user identifier is also used as your RevenueCat App User ID so purchases can follow your account. Before sign-in, RevenueCat uses a random per-install identifier.
- Purchases. Google Play processes payment information. RevenueCat processes product, transaction, entitlement, country and related purchase information so the game can confirm paid access. We do not receive your full card details.
- Email preferences. If you enter an email address and check the consent box in TerraDex, we store the address, consent status and time, consent version, source, and associated customer identifier. We mirror the email and consent status to RevenueCat for customer support.
- Advertising information. Free players may choose to view rewarded ads. Google AdMob may process device or advertising identifiers, approximate location, ad interactions and diagnostic information, subject to Google's consent system and your device settings.
- Authorization credentials. An OAuth access token, and a refresh token when issued, allows the tool to act on the company account. We never request or store the account password.
- Our board information. The tool temporarily reads names and identifiers for boards owned by the authenticated company account so an authorized team member can choose where to publish. This information is fetched when needed and is not retained.
- Publishing content. We process images, titles, descriptions, destination links and alternative text created or selected by Merciless Studio for publication.
- Basic website requests. Our hosting provider may process technical request data such as IP address, browser type, requested page and time of access to deliver and protect this website.
How we use information
We use the information described above only to:
- provide requested game features, cloud sync and customer support;
- confirm, protect and restore paid game access and prevent purchase fraud;
- send occasional TerraDex news and offers only where the player has consented;
- authenticate the company account securely;
- show the company's available boards at the time of publishing;
- publish content specifically selected by an authorized Merciless Studio team member;
- maintain the security and operation of the website and publishing tool; and
- meet legal, security and platform-policy obligations.
Storage and retention
Local game data remains until you clear it or uninstall the game. Cloud progress remains while your connected account is active or until deletion is requested. Purchase records are retained as needed to provide lifetime or subscription access and meet legal obligations. If you stop email updates in TerraDex, RevenueCat's email attribute is removed and the consent record is marked unsubscribed so it is excluded from future mailing exports.
Authorization credentials are stored privately and kept only while needed for the integration, until they expire, or until access is revoked. Board and Pin information returned by the API is used transiently and is not retained. Our original media, copy and internal publishing records are business content created independently by Merciless Studio and are retained according to our operational needs.
Service providers and sharing
We use a limited number of providers to operate this service:
- Google provides Play Games, Play Billing, Firebase and AdMob. Google handles information under its privacy policy.
- RevenueCat manages game purchase entitlements and customer attributes under its privacy policy.
- Pinterest receives content and authorization requests when we choose to publish. Pinterest handles information under its privacy policy.
- Cloudflare hosts and protects mercilessstudio.com and may process technical request data under its privacy policy.
- Google Fonts supplies the typefaces used by this website and may receive technical request data when a page loads.
We do not sell, rent or share API-derived account information with advertisers, data brokers or unrelated third parties. Providers may process information outside the United Kingdom using safeguards available under applicable data-protection law.
Legal basis
Where UK GDPR or similar law applies, we process information on the basis of authorization and contract to provide requested game and purchase features, consent for optional marketing email, and our legitimate interests in operating our services, protecting our systems, preventing fraud and publishing our own content. Marketing consent and publishing credentials can be withdrawn without affecting the lawfulness of earlier processing.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal data, object to processing, or request portability. You may also complain to your local data-protection authority. To make a request, contact us using the address below.
TerraDex players can stop email updates under Options → Account & support. To delete your TerraDex account and associated data, use Request account and data deletion on that screen, or email us with the subject “TerraDex account deletion request” and include the Support ID shown there. We will delete the Firebase account, cloud progress and contact record associated with that identifier after verifying the request. We may retain limited purchase or suppression information where legally required or necessary to honour paid access or an opt-out. UK users may also complain to the Information Commissioner's Office.
Security
We restrict access to credentials, keep secrets out of public source code, use encrypted HTTPS connections, and limit permissions to those required for publishing. No method of storage or transmission is completely secure, but we use reasonable technical and organizational controls.
Children
Our games are not directed to children under 13. The private publishing integration is not offered to children. A parent or guardian who believes a child has provided personal information should contact us so we can investigate and delete it where appropriate.
Changes to this policy
We may update this policy when our services or legal obligations change. The effective date at the top of this page will show when the latest version took effect.
Contact us
Merciless Studio Limited
Registered in England & Wales, company number 17279903
London, United Kingdom
hello@mercilessstudio.com