Swarmers Privacy Policy

Effective date: September 15, 2026 Last updated: October 6, 2026

This Privacy Policy explains how Marbir Digital, LLC ("Swarmers," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Swarmers mobile game, the website at swarmers.app, the Swarmers API, and related services (the "Services").

The short version: you can play Swarmers without an account, and the game never asks for your name. Offline play and local records stay on your device. Your device creates a cryptographic key that does not require your real name; when the game first needs our servers (to send feedback or to delete your data), it registers that key with our API as an anonymous player profile. Leaderboards and achievements run on Apple Game Center: Apple handles Game Center sign-in, and your Game Center identity is never sent to us. Gameplay analytics are collected through Google Analytics for Firebase and are on by default; you can turn them off at any time in Settings → TELEMETRY. Analytics cover gameplay activity, app and device details, purchase interactions and outcomes, selected error reports, and approximate location derived from your IP address, linked to a random identifier for your install. Separately, the game sends crash and error reports to Firebase Crashlytics so we can keep the app stable; that reporting is not controlled by the Telemetry setting. We do not use your advertising identifier, do not track you across other companies' apps or websites, and do not use analytics for advertising. You may optionally provide an email when sending in-game feedback if you want a reply. We do not sell your personal information. You can delete your data from inside the game at any time with Settings → DELETE DATA.

---

1. Information We Collect

Information you provide

• Communications and feedback. Messages you send us, including support requests and the bug, balance, idea, or other feedback you submit through the game. In-game feedback contains the category and message you enter. If you select “Email me if you need a reply,” you may also provide an email address; leaving that field blank sends the message without an email address. Feedback is sent only when you submit it.
• Launch waitlist email. If you joined the Swarmers launch waitlist on swarmers.app, we store the email address you provided so we can tell you when Swarmers is available. This is optional and separate from gameplay. We do not use waitlist emails for advertising networks or sell them.

The game does not require your real name, email address, postal address, phone number, date of birth, or payment card details to play, and it has no sign-in. We receive an email address only when you voluntarily provide one for an in-game feedback reply, when you joined the launch waitlist on the website, or when you email us.

Information collected automatically

• Device-bound player identity. On first launch, your device generates an ed25519 key pair. The private key is stored in the iOS Keychain and never leaves your device. The first time the game needs our servers (to send feedback or to delete your data), it registers the public key with our API, which creates a player profile identified by a random UUID, together with a derived device identifier and a device fingerprint (a non-reversible hash of the device-held key material, used to bind your profile to the install and to detect abuse). We use this identity only to authenticate feedback uploads and deletion requests. The key is not derived from your Apple Account, Game Center account, advertising identifier, or any account you hold elsewhere. If you never use an online feature, no profile is registered.
• Feedback delivery identifier. In-game feedback is submitted with the same derived device identifier used to authenticate other signed game requests. We use it to prevent duplicate submissions and abuse and to delete feedback associated with a registered player profile. We do not attach your score, run, difficulty, sector, or other gameplay context to a feedback message.
• Gameplay analytics (Telemetry). While Settings → TELEMETRY is on (the default), the game sends gameplay events to Google Analytics for Firebase: event names, a run identifier, and a format version, with details of gameplay progress and outcomes (such as scores, difficulty, weapons, sectors, run duration, and in-game currency or run-charge balances), purchase offers shown, purchase attempts and outcomes, product identifiers, and transaction identifiers when available. Google Analytics also records, on its own, the app version, device model, operating-system version, language, sessions and engagement time, in-app purchase events reported by the App Store, and approximate location (country, region, and city) derived from your IP address. Google Analytics does not log or store IP addresses for this. These events are linked to a random app instance identifier that Google Analytics assigns to your install. The game does not give Google Analytics a user ID, your advertising identifier (IDFA), or the identifier for vendor (IDFV), and does not link analytics to your player profile, your Game Center identity, or any account. Analytics data is pseudonymous rather than anonymous. We use it to balance the game, understand how it is played, and diagnose problems. It is never published.
• Device and diagnostic data (Telemetry). With Telemetry on, Google Analytics also receives selected client error reports from the game: an error category, message, and context such as a purchase product or the screen involved. These are not screen recordings. If Apple (or another platform, when available) provides developer diagnostic reports about the app, those are governed by that platform's terms.
• Server logs. Our servers, like any internet service, record IP addresses and request details in logs and use IP addresses to rate-limit requests, for security and abuse prevention.
• Crash and error monitoring. Independently of the Telemetry setting, the game uses Firebase Crashlytics to receive crash reports, stack traces (including the game's script call stack for errors), error messages, recent log lines, app version, and device and OS details such as model, OS version, free memory and disk space, and orientation, so we can find and fix stability problems. Crashlytics assigns a random installation identifier; we do not set a user ID or attach your player profile, Game Center identity, or analytics identifier to crash reports. This reporting is on while the app runs, is never published, and is not controlled by Settings → Telemetry. We do not use session-replay tools that record your screen.
• Advertising data. If and when ad-supported features are introduced, ad partners may collect device identifiers, IP address, and coarse (city-level) location to serve and measure ads. We will not permit access to your device's advertising identifier for cross-app tracking without your consent through Apple's App Tracking Transparency prompt or the equivalent platform control (including on Android when an Android build is available).

What we don't collect

We do not collect precise GPS location, contacts, calendar, photos, microphone audio, or camera images; the only location information is the approximate location Google Analytics derives from your IP address while Telemetry is on. We do not use session-replay tools that record your screen. Touch and gesture input are processed on your device to control the game and are not transmitted to us. We do not collect biometric identifiers. We do not receive your Game Center player identifiers or display name.

2. How We Use Information

We use the information described above to:

• Provide the Services: run the game, authenticate feedback uploads and deletion requests from your device, and let you delete your data.
• Maintain safety and security: verify signed requests from the game, prevent fraud, spam, and abuse of our API, and enforce our Terms of Use.
• Improve the game: analyze gameplay analytics in aggregate to tune difficulty, balance weapons and sectors, understand retention and engagement, diagnose issues, and develop new features; use crash and error reports to keep the app stable.
• Communicate with you: review feedback, respond to support requests when you voluntarily provide a reply email, and post service notices. If you joined the launch waitlist, send you email about Swarmers launch availability (and related release notices you opted into). We do not use feedback or waitlist addresses for unrelated marketing lists.
• Show advertising: if ad-supported features are introduced, to display and measure ads, subject to the consent controls and opt-outs described in Sections 1 and 5.
• Comply with law: respond to lawful requests and meet legal obligations.

We do not use gameplay analytics or crash reports to build advertising or marketing profiles about you, and we have turned off Google signals and the Google Analytics data-sharing settings that would let Google use this data for its own products or advertising.

3. How We Share Information

We share information only as follows:

• Service providers. Our hosting and database provider (currently Railway); Apple for App Store distribution and in-app purchases (and Google for Google Play distribution and purchases when an Android build is available); Google LLC, which provides Google Analytics for Firebase and Firebase Crashlytics and processes the analytics and crash data described in Section 1 on our behalf under Google's data processing terms; Cloudflare for content delivery and DNS for swarmers.app and the Swarmers API (Cloudflare may process IP addresses, request metadata, and TLS information when you visit the site or the game contacts our API); and email delivery and support-inbox providers that process addresses and message content when you join the launch waitlist, send in-game feedback with a reply email, or email privacy/support/[email protected]. Service providers are limited to processing data on our instructions and must protect it consistently with this policy.
• Advertising partners. If ad-supported features are introduced, ad networks may collect device identifiers, IP address, and ad-interaction data directly from the game to serve and measure ads, as described in Section 1. Depending on the partner and configuration, this collection may be considered a "sale" or "sharing" of personal information under some state laws; you may opt out as described in Section 5.
• Legal and safety. When required by law or legal process, or when necessary to protect the rights, safety, or property of Swarmers, our players, or the public.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred; we will notify you in the game or on swarmers.app of any change in ownership or use of your information.

We do not sell personal information for money, and we do not license or commercialize datasets derived from your personal information. Some advertising-related disclosures described above may qualify as a "sale" or "sharing" under California law and similar state laws; Section 5 explains how to opt out.

Payments

We do not collect, store, or process payment card details or financial credentials on our servers. In-app purchases are processed by Apple through the App Store (StoreKit) under Apple's privacy policy and, when an Android build is available, by Google through Google Play under Google's privacy policy. The game receives confirmation that a transaction occurred, with its product and transaction identifiers, so it can grant what you bought, and it asks the App Store which one-time purchases (such as Unlimited Runs) your Apple Account already owns so it can restore them. While Telemetry is on, those identifiers and the purchase or restore outcome are also sent to Google Analytics. We never receive your card details, billing address, or financial account information.

Game Center

On iOS, Swarmers can post scores to Apple Game Center leaderboards and may report Game Center achievements. Game Center sign-in is handled by Apple in iOS Settings; we never see your Apple Account credentials. Scores and achievement progress you submit to Game Center go to Apple and are processed under Apple's privacy policy, and Apple shows them to other players according to your Game Center settings. Your Game Center player identifiers and display name stay on your device: they are never sent to Swarmers servers and are not included in telemetry, in-game feedback, or crash and error reports. If you are not signed in to Game Center, nothing is sent to it and the game plays the same.

4. Data Retention

• Player profile and device registration: the anonymous profile, its public key, derived device identifier, and device fingerprint are retained until you delete your data.
• Launch waitlist emails: retained until Swarmers launches and launch notices are sent, or until you ask us to remove the address by emailing [email protected]. We then delete the row.
• Feedback messages and optional reply emails: retained only as long as reasonably necessary to review the message, respond when requested, improve the Services, prevent abuse, and meet legal obligations, then deleted or de-identified.
• Gameplay analytics: event-level data in Google Analytics is kept for 2 months, after which Google deletes it; aggregated reports that no longer identify an install may be kept longer.
• Crash and error monitoring reports: retained by Firebase Crashlytics for 90 days, then deleted.
• Server and diagnostic logs: retained for a limited period (typically 90 days or less) and then deleted or aggregated.
• After you use DELETE DATA: your profile, its device registrations, and feedback associated with its registered devices are deleted from our servers. The game also sends us your install's Google Analytics app instance identifier, and we ask Google to delete the analytics data linked to it; Google completes those requests on its own schedule, generally within about two months. The game then resets its analytics identifier, so later analytics cannot be joined to the deleted data. Residual copies in our encrypted backups are purged on a rolling basis, no later than 90 days after deletion. Crash reports are not linked to your profile or analytics identifier, so they are not covered by DELETE DATA and expire under the retention period above. We may also retain limited records where required for legal, security, or dispute-resolution purposes, and we may retain aggregate statistics that no longer identify you. Waitlist emails are separate from player profiles; deleting your data does not remove a waitlist address unless you also ask us to.

5. Your Rights and Choices

Regardless of where you live, we offer everyone the following:

• Deletion. Delete your data from inside the game (Settings → DELETE DATA), or by emailing [email protected]. Deletion removes your server profile, its device registrations, and the feedback associated with its registered devices, and asks Google to delete your install's analytics data, as described in Section 4. Turning Telemetry off is not deletion. To remove a feedback reply email or launch waitlist email, contact us from the address you submitted.
• Access and portability. Request a copy of the information associated with your profile. Player profiles hold no name or email, so we can only fulfill those requests when we can tie them to a device key (see the note on verification below). Waitlist and feedback-reply requests can be fulfilled when you contact us from the same email address you submitted.
• Correction. The game does not hold a name or other profile details for you to correct. To correct a feedback reply email or waitlist address, contact [email protected] from that address.
• Advertising choices. If ad-supported features are introduced, you can decline cross-app tracking via Apple's App Tracking Transparency prompt (iOS Settings → Privacy & Security → Tracking) or, when an Android build is available, reset or limit your advertising identifier on Android (Settings → Google → Ads). Where the game offers a "Do Not Sell or Share My Personal Information" setting, you can use it to opt out of ad-related disclosures that qualify as sale or sharing under state law. Paid options may reduce or remove ads.
• Analytics. Telemetry is on by default. You can turn it off or on at any time under Settings → TELEMETRY. When it is off, the game stops sending gameplay analytics and tells Google Analytics to stop collecting for your install. Turning it off does not delete analytics already sent; use DELETE DATA for that. Crash and error monitoring described in Section 1 continues regardless of the Telemetry setting.
• Game Center. Apple controls Game Center data. You can sign out of Game Center or manage your Game Center profile in iOS Settings → Game Center, and exercise privacy rights over Game Center data with Apple.

A note on verification. Player profiles are anonymous by design: they hold no name or email, so we usually cannot connect an email request to them. The reliable way to exercise deletion is the in-game control, which is authenticated by your device's key. If you contact us at [email protected], tell us what you need and we will explain what we can verify and do. We will respond within the time required by applicable law (generally 45 days). We will not discriminate against you for exercising your rights.

US state privacy rights

If you live in California or another state with a comprehensive privacy law, you have rights to know/access, correct, delete, and obtain a portable copy of your personal information, and to opt out of sale, sharing, and targeted advertising, subject to the verification limits described above. To the extent any ad-related disclosure described in Section 3 qualifies as sale/sharing or targeted advertising, you may opt out using the advertising choices in this Section 5 or by emailing [email protected] with the subject "Opt-Out Request." We do not currently sell or share personal information for targeted advertising, so there is no Global Privacy Control (GPC) signal for us to honor today; if we introduce advertising that qualifies as sale or sharing, we will honor GPC where required. We do not use or disclose sensitive personal information for purposes requiring a right to limit.

EEA, UK, and other international users

If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar laws: we process information on the legal bases of contract performance (running the game you asked to play), legitimate interests (security, abuse prevention, crash reporting, and improving the game through analytics, which you can object to at any time by turning Telemetry off), consent (where requested, such as advertising consent), and legal obligation. You additionally have rights to object to or restrict processing and to withdraw consent, and you may lodge a complaint with your local supervisory authority. The Services are operated from the United States, and your information is transferred to and processed in the U.S., including by Google; where required, we use appropriate safeguards for such transfers, such as the Standard Contractual Clauses in Google's data processing terms.

6. Children's and Minors' Privacy

The Services are intended for players aged 13 and over. There is no in-game age gate; eligibility is a condition of use. Swarmers is not directed to children under 13, is not offered through the Apple Kids Category (or the Google Play Families program when an Android build is available), and we do not knowingly collect personal information from anyone under 13. App Store age ratings are set in App Store Connect when a build is submitted and should be kept consistent with this 13+ policy. If we learn that we have collected personal information from a child under 13, we will delete it and remove the associated profile.

We do not knowingly serve personalized advertising to, or sell or share the personal information of, players we know to be under 18. Parents or guardians who believe a child under 13 has provided personal information can remove the child's profile and its data with Settings → DELETE DATA on the child's device, or contact [email protected]. Because profiles do not hold a name, please include enough detail (such as a feedback reply email the child used and the approximate date of play) for us to locate the data.

If you are between 13 and the age of majority where you live, please review this policy with a parent or guardian, and do not make in-app purchases without their permission.

7. Security

We protect information with measures including encryption in transit (TLS), access controls on stored data, device-held private keys that never reach our servers, short-lived access tokens, and server-side verification of signed requests from the game. Our database is hosted by Railway; we do not independently assert volume encryption-at-rest beyond that provider's platform defaults. No system is completely secure; if a breach affecting your personal information occurs, we will notify you as required by law.

8. Cookies

swarmers.app does not set first-party tracking, advertising, or analytics cookies, and we do not use a cookie consent banner for that reason. The site may rely on strictly necessary technical storage from our hosting and CDN providers (currently Cloudflare), such as load-balancing or security cookies that are required to deliver the page. The Swarmers game does not use website cookies. The separate ops console at dash.swarmers.app uses a session cookie for authenticated staff access only; it is not part of the player-facing game experience.

If we later add advertising, analytics, or other non-essential cookies or similar technologies on swarmers.app, we will update this section and, where required, provide consent or opt-out controls before those technologies run.

9. Third-Party Links and Services

The Services may link to third-party websites and services (for example, the App Store, Apple Game Center, Google Play when an Android build is available, or a store where Swarmers merchandise is sold). Their privacy practices are governed by their own policies, which we encourage you to review.

10. Changes to This Policy

We may update this Privacy Policy. For material changes, we will notify you in the game or on swarmers.app before the changes take effect and update the dates at the top. If a material change would allow us to use information we collected before the change in a materially different way, we will apply the change prospectively only, or ask for your affirmative consent before applying it to previously collected information. For other changes, your continued use of the Services after the effective date constitutes acceptance.

Disputes arising out of or relating to this Privacy Policy are subject to the dispute-resolution, arbitration, governing-law (Wyoming), and venue provisions of our Terms of Use.

11. Contact Us

Marbir Digital, LLC 30 N Gould St Ste N Sheridan, WY 82801 United States

Privacy inquiries: [email protected] Legal inquiries: [email protected]