Privacy Policy

The mobile game Bitcoin Tycoon · com.ondran.idlebitcoineminer

Effective from: 10 August 2026 · Version 1.0

1. Data controller

The controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 (GDPR) is:

We have not appointed a data protection officer (DPO) — our processing does not fall within the obligations under Article 37 GDPR. Please address any data protection question to the e-mail above.

2. What Bitcoin Tycoon is (and what it is not)

Bitcoin Tycoon is an offline-playable simulation (“idle”) game on the theme of cryptocurrency mining. To rule out a misunderstanding that could have financial consequences:

• The game does not mine any real cryptocurrency and does not use your device's processing power for mining.
• It is not a wallet or an exchange. Real funds can be neither paid into it nor withdrawn from it.
• The bitcoin, dollars, gems and all prices in the game are fictional in-game values with no real value of any kind. The in-game “BTC” price is a simulated mathematical model, not real market data.
• The game does not provide investment or financial advice.

Real money features in the app only when you optionally purchase in-game content through Google Play (see section 6).

3. What data is processed

The app itself requires no registration, no sign-in and no entry of any personal data whatsoever. The data below arises automatically through the third-party services integrated into the app.

Category	Specific data	Who processes it
Device identifiers	Advertising ID (AD_ID), Firebase installation ID, pseudonymous app ID. In limited ads mode, and when analytics is switched off, these identifiers are not used — see sections 5 and 7.	Google AdMob, Firebase
Device data	Model, manufacturer, Android version, language, country, screen resolution, network type	AdMob, Firebase
Network data	IP address (used for approximate geolocation at city/country level — not for precise location)	AdMob, Firebase
Usage data	App launches and session length, screens opened, in-game events (buying equipment, completing research, prestige, completing a task, unlocking an achievement, selling in-game BTC, offline earnings)	Firebase Analytics
Ad interactions	Impressions, rewarded video views, clicks, ad loading errors	AdMob
Diagnostic data	Crash and error records, stack traces, device state at the moment of the crash, technical keys (e.g. game version, state of the connection to the store)	Firebase Crashlytics
Purchase data	Which products you have bought, the transaction token and its status	Google Play Billing

3.1 Your game progress is stored with you alone

Your progress (equipment counts, currencies, research, settings) is saved solely to the app's private storage on your phone. It is not sent to any server, we have no access to it, and the game offers neither cloud sync nor a game account. Uninstalling the app deletes your progress irretrievably.

The save file carries a checksum whose only purpose is to detect a corrupted file. It is not a tracking or identifying element and it never leaves your device.

4. What we do not collect

We consider it equally important to say what the app does not do:

• It does not ask for or process your name, e-mail address, telephone number or date of birth.
• It does not access your precise location (GPS), contacts, photos, files, microphone or camera, nor the list of installed apps.
• It sends no notifications — it does not even ask for permission to send them.
• It contains no banner or native ads and no offerwall.
• It does not sell or rent any data to third parties.
• It has no user accounts, no profiles and no social or chat feature of any kind.
• It does not use your device for cryptocurrency mining or for any other background computation.

5. Purposes and legal bases

Purpose	Legal basis (Article 6 GDPR)
Serving personalised ads and measuring their performance	Consent — Article 6(1)(a) GDPR. You may withdraw it at any time (section 7).
Serving non-personalised ads (advertising without profiling, selected on the basis of the content and the approximate area)	Consent — Article 6(1)(a) GDPR. Beware of a widespread misconception: non-personalised advertising is not “advertising without consent”. It too requires your consent to the storing of information on your device and to gaining access to it (IAB TCF Purpose 1), because it still uses the advertising identifier — for frequency capping and for aggregate reporting.
Serving limited ads after you have refused consent	Legitimate interest in funding a free game — Article 6(1)(f) GDPR. This mode accesses neither the advertising identifier nor your device's storage and carries out no personalisation; only the data necessary for the delivery of the ad itself and for security and fraud prevention is processed (IAB TCF Special Purposes 1 and 2). You may object to processing based on legitimate interest — see section 11.
Usage analytics and improvement of the game	Consent — Article 6(1)(a) GDPR. Measurement is tied to the same consent to the storing of information on your device (IAB TCF Purpose 1): if you refuse it, analytics is switched off (Google Consent Mode) — and that is so even where limited ads continue to be shown to you.
Crash reporting and app stability	Legitimate interest in the functionality and security of the product — Article 6(1)(f) GDPR.
Handling an in-app purchase and restoring purchased content	Performance of a contract — Article 6(1)(b) GDPR.
Dealing with your enquiry or with the exercise of your rights	Compliance with a legal obligation / legitimate interest — Article 6(1)(c) and (f) GDPR.

6. Third-party services

These companies act as independent controllers or as processors, depending on the nature of the particular processing. We recommend that you read their own policies:

Google AdMob (ads)

Serves rewarded video ads (which you always start yourself) and occasional full-screen ads. Policy: policies.google.com/privacy · How Google uses data from partners' apps: policies.google.com/technologies/partner-sites

Google Firebase Analytics and Crashlytics

Anonymised usage statistics and automatic crash reports. Policy: firebase.google.com/support/privacy

Google Play Billing (in-app purchases)

Payments are handled exclusively by Google. We have no access to your payment details — we see neither your card number nor your billing address, only the information that a particular product has been purchased, so that we can unlock the content for you and restore it after a reinstall. Policy: policies.google.com/privacy

Google User Messaging Platform (consent)

Presents your consent and stores it in accordance with the GDPR and the IAB TCF.

7. Ads and your consent

The game is free and is funded by ads. In doing so we keep to several rules:

• Rewarded video ads are always voluntary. They never start on their own — you always start them with a tap, and you can see in advance what you will get for watching.
• No ad interrupts your play. Full-screen ads appear only between screens and after dialogs you have closed yourself, and they are frequency-capped.
• No banners and no native ads.

If you are in the EU, the EEA, Switzerland or the United Kingdom, a consent form is shown to you on first launch. Whatever you choose, the game remains fully playable and rewarded ads remain available; the only difference is which ads you will see and what happens to data from your device in the process:

Your choice in the form	Which ads you will see	What is used in doing so
Consent	Personalised	The device's advertising identifier, an interest profile, performance measurement.
Manage options — consent to the storing of information on the device, but without personalisation	Non-personalised	The advertising identifier (for frequency capping and aggregate reporting), the content on screen and the approximate area. No interest profile.
Do not consent	Limited (“limited ads”)	Neither the advertising identifier nor device storage. Only the data needed to deliver the ad and to prevent fraud. Analytics is switched off.

Please do not conflate the terms: “non-personalised” does not mean “without consent”. Non-personalised advertising also reaches into your device (it uses the advertising identifier for frequency capping and for reporting), and access to the device is itself subject to consent under the ePrivacy Directive, regardless of whether a profile is subsequently built from the data. The mode that genuinely works “without consent” is limited ads, which accesses neither the identifier nor the device's storage.

Buying the Remove Ads or Miner Pass product switches full-screen ads off permanently. Rewarded video ads remain available, because they are a voluntary source of in-game bonuses.

8. App permissions

Permission	Why it is needed
INTERNET	Loading ads, sending analytics and crash reports, communicating with the Google Play store.
ACCESS_NETWORK_STATE	Finding out whether the device is online — so that no ad is requested when there is no connection.
com.android.vending.BILLING	In-app purchases.
com.google.android.gms.permission.AD_ID	Access to the advertising identifier for ad selection and measurement. If you refuse consent, the identifier is not used (limited ads mode), even though the permission is declared in the app.
VIBRATE	Brief haptic feedback when you tap in the game. Can be turned off in Settings.

The app requests no further permissions — in particular not location, contacts, storage, camera, microphone or the sending of notifications.

9. Transfers of data outside the EU

The providers named above (companies of the Google group) may process data on servers outside the European Economic Area, in particular in the United States. Such transfers are safeguarded by standard contractual clauses approved by the European Commission and, in the relevant cases, by the EU–US Data Privacy Framework. You will find the details in the policies of the individual providers linked in section 6.

10. Retention periods

Data	How long
Game progress (on your phone)	Until the app is uninstalled or the app's data is cleared. You keep it, not us.
Analytics data (Firebase)	According to the retention setting in Firebase, by default no more than 14 months; after that it is aggregated or deleted.
Crash reports (Crashlytics)	As a rule, 90 days.
Advertising data	According to Google's retention policies.
The record of your consent	Stored on the device; its validity is periodically renewed in accordance with the TCF rules.
E-mail correspondence with us	No longer than 3 years from the settling of your enquiry.

11. Your rights

Under the GDPR you have the right of access to your data (Article 15), and the rights to rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), to object to processing based on legitimate interest (Article 21) and to withdraw consent (Article 7(3) GDPR) with effect for the future.

You can exercise your rights by e-mail at 0ndr4N@proton.me. We will reply within one month at the latest.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz. If you are in the EEA, you may equally lodge your complaint with the supervisory authority of your own country — in the Member State of your habitual residence, place of work or of the alleged infringement.

12. Children

The game is not intended for children under 13 and is not aimed at a children's audience. We do not knowingly collect children's data. On Google Play it is not enrolled in the “Designed for Families” programme.

The game contains optional purchases for real money. We recommend that parents turn on purchase authentication in the Google Play store (Play → Settings → Require authentication for purchases) and make use of parental controls.

If you discover that a child under 13 has provided us with personal data, contact us — we will remove the data without delay. In countries where the age limit for consent to processing is higher (15 in the Czech Republic), that higher limit applies.

13. Security

All communication between the app and third-party services takes place encrypted over HTTPS/TLS. The save file sits in the app's private storage, to which, under the Android security model, other apps have no access. We operate no servers or databases of our own, so on our side there is no store of data that could be compromised.

No measure is absolute; should a security breach nevertheless occur that poses a risk to your rights, we will proceed in accordance with Articles 33 and 34 GDPR.

14. Changes to this policy

We may update this policy, for example when a new feature or service is added. The current wording is always available at this address and is marked with its effective date. We will announce material changes in the app itself. The date of the last change is shown in the header of this document.

15. Contact