Swarmers Privacy Policy

Effective date: September 1, 2026 Last updated: September 14, 2026

This Privacy Policy explains how Marbir Digital, LLC ("Swarmers," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Swarmers mobile game, the website at swarmers.app, the Swarmers API, and related services (the "Services").

The short version: Swarmers has no sign-in and no user accounts in the traditional sense. We do not ask for your name, email address, or phone number to play. Your device creates a player identity that does not require your real name but can link activity to your player profile. What appears publicly on the global leaderboard is the handle you choose, plus the score, sector, difficulty, and submit time of ranked runs (opaque profile and run identifiers may also appear in the public API). Gameplay telemetry is off by default; you can turn it on in Settings if you want to help us tune the game. When on, we collect gameplay activity, app and device details (including device model and OS version), purchase interactions and outcomes, and selected error reports. Telemetry is associated with your device-bound game identity. Telemetry is separate from the optional Global Board and can be toggled independently. Separately, the game sends crash and error reports to a monitoring provider so we can keep the app stable; that reporting is not controlled by the Telemetry setting. You may optionally provide an email when sending in-game feedback if you want a reply, or on swarmers.app if you want a launch notification. We do not sell your personal information. You can delete your player profile and its data from inside the game at any time.

---

1. Information We Collect

Information you provide

• Handle. When you enable Global Board, you claim a public handle that appears on the global leaderboard. Choose a handle you are comfortable making public. Do not use your real full name, email address, or other personal information as your handle.
• Launch notify email. If you submit the Notify Me form on swarmers.app, we store the email address you provide so we can tell you when Swarmers is available. This is optional and separate from gameplay. We do not use waitlist emails for advertising networks or sell them.
• Communications and feedback. Messages you send us, including support requests and the bug, balance, idea, or other feedback you submit through the game. In-game feedback contains the category and message you enter. If you select “Email me if you need a reply,” you may also provide an email address; leaving that field blank sends the message without an email address.

The game does not require your real name, email address, postal address, phone number, date of birth, or payment card details to play. Email is collected only when you voluntarily provide it for an in-game feedback reply or join the launch waitlist on the website.

Information collected automatically

• Device-bound player identity. On first launch, your device generates an ed25519 key pair. The private key never leaves your device. The public key is registered with our API and used to create a player profile identified by a random UUID, together with a derived device identifier and a device fingerprint (a non-reversible hash of the device-held key material, used to bind your profile to the install and to detect abuse). This identity is not derived from your Apple ID, Google account, advertising identifier, or any account you hold elsewhere.
• Run data. When a run ends and your device submits it, we receive the score, the sector reached, the difficulty, the run duration, the game version, a cryptographic signature used to validate the submission, and a client-generated run id.
• Feedback delivery identifier. In-game feedback is submitted with the same derived device identifier used to authenticate other signed game requests. We use it to prevent duplicate submissions and abuse and to delete feedback associated with a registered player profile. We do not attach your score, run, difficulty, sector, or other gameplay context to a feedback message.
• Gameplay telemetry. When Telemetry is on, we collect event names, session and run identifiers, client and server timestamps, a telemetry format version, app version, platform label, device model, and operating-system version. Event details include gameplay progress and outcomes (such as scores, difficulty, weapons, sectors, run duration, and in-game currency or run-charge balances), purchase offers shown, purchase attempts and outcomes, product identifiers, and transaction identifiers when available. Telemetry is submitted using your device-bound game identity and stored with its derived device identifier, so it can be associated with your player profile; it is not anonymous. We use it to balance the game and diagnose problems. Telemetry is off by default, is separate from the optional Global Board, and is not published on the leaderboard.
• Device and diagnostic data (Telemetry). With Telemetry on, we receive the app version, platform, device model, and OS version described above, along with selected client error reports: an error category, message, and context such as a purchase product, the screen involved, or whether a run submission is being retried. These currently cover purchase and authentication failures and are not screen recordings. We do not currently collect language preference or dedicated performance logs through game telemetry. Our servers, like any internet service, record IP addresses in request logs for security and abuse prevention. If Apple (or another platform, when available) provides developer diagnostic reports about the app, those are governed by that platform's terms.
• Crash and error monitoring. Independently of the Telemetry setting, the game uses a crash and error monitoring provider to receive crash reports, stack traces, error messages, app version, and device and OS details (and related diagnostic context such as breadcrumbs) so we can find and fix stability problems. This reporting is on while the app runs, is not published on the leaderboard, and is not controlled by Settings → Telemetry. We do not use session-replay tools that record your screen.
• Advertising data. If and when ad-supported features are introduced, ad partners may collect device identifiers, IP address, and coarse (city-level) location to serve and measure ads. We will not permit access to your device's advertising identifier for cross-app tracking without your consent through Apple's App Tracking Transparency prompt or the equivalent platform control (including on Android when an Android build is available).

What we don't collect

We do not collect precise GPS location, contacts, calendar, photos, microphone audio, or camera images. We do not use session-replay tools that record your screen. Touch and gesture input are processed on your device to control the game and are not transmitted to us. We do not collect biometric identifiers.

2. How We Use Information

We use the information described above to:

• Provide the Services: run the game, validate and store your runs, rank them on the global leaderboard, and let you delete your profile.
• Maintain fair play, safety, and security: validate run signatures, detect and remove cheated or manipulated scores, prevent fraud and abuse, and enforce our Terms of Use.
• Improve the game: analyze aggregate telemetry to tune difficulty, balance weapons and sectors, diagnose issues, and develop new features; use crash and error reports to keep the app stable.
• Communicate with you: review feedback, respond to support requests when you voluntarily provide a reply email, and post service notices. If you joined the launch waitlist, send you email about Swarmers launch availability (and related release notices you opted into). We do not use feedback or waitlist addresses for unrelated marketing lists.
• Show advertising: if ad-supported features are introduced, to display and measure ads, subject to the consent controls and opt-outs described in Sections 1 and 5.
• Comply with law: respond to lawful requests and meet legal obligations.

We do not use gameplay telemetry to build advertising or marketing profiles about you.

3. How We Share Information

We share information only as follows:

• Publicly, on the leaderboard. Your handle, score, sector reached, difficulty, and the time the run was submitted are shown publicly on the global leaderboard at swarmers.app and through the public read-only leaderboard endpoint of the Swarmers API (opaque profile and run identifiers may also appear in that API response). Nothing else about you is published.
• Service providers. Our hosting and database provider (currently Railway), Apple for App Store distribution and in-app purchases (and Google for Google Play distribution and purchases when an Android build is available), Cloudflare for content delivery and DNS for swarmers.app (Cloudflare may process IP addresses, request metadata, and TLS information when you visit the site), email delivery and support-inbox providers that process addresses and message content when you join the launch waitlist, send in-game feedback with a reply email, or email privacy/support/[email protected], a crash and error monitoring provider that receives the crash and diagnostic data described in Section 1 so we can keep the app stable, and OpenRouter when you validate or claim a handle (we send the handle text to OpenRouter for automated safety classification; we do not send gameplay telemetry, device identifiers, or email addresses to OpenRouter). Service providers are limited to processing data on our instructions and must protect it consistently with this policy.
• Advertising partners. If ad-supported features are introduced, ad networks may collect device identifiers, IP address, and ad-interaction data directly from the game to serve and measure ads, as described in Section 1. Depending on the partner and configuration, this collection may be considered a "sale" or "sharing" of personal information under some state laws; you may opt out as described in Section 5.
• Legal and safety. When required by law or legal process, or when necessary to protect the rights, safety, or property of Swarmers, our players, or the public.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred; we will notify you in the game or on swarmers.app of any change in ownership or use of your information.

We do not sell personal information for money, and we do not license or commercialize datasets derived from your personal information. Some advertising-related disclosures described above may qualify as a "sale" or "sharing" under California law and similar state laws; Section 5 explains how to opt out.

Payments

We do not collect, store, or process payment card details or financial credentials on our servers. In-app purchases are processed by Apple through the App Store under Apple's privacy policy and, when an Android build is available, by Google through Google Play under Google's privacy policy. We receive only confirmation that a transaction occurred and what was purchased, never your card details, billing address, or financial account information.

4. Data Retention

• Player profile, handle, and runs: retained while your profile is active, so that your scores can stay on the leaderboard.
• Launch waitlist emails: retained until Swarmers launches and launch notices are sent, or until you ask us to remove the address by emailing [email protected]. We then delete the row.
• Feedback messages and optional reply emails: retained only as long as reasonably necessary to review the message, respond when requested, improve the Services, prevent abuse, and meet legal obligations, then deleted or de-identified.
• Gameplay telemetry: retained for as long as reasonably necessary to analyze gameplay, improve the Services, maintain security, prevent abuse, and meet legal obligations. Aggregated or de-identified statistics may be kept longer.
• Crash and error monitoring reports: retained by our monitoring provider for a limited period needed to diagnose and fix stability issues (typically 90 days or less), then deleted or aggregated.
• Server and diagnostic logs: retained for a limited period (typically 90 days or less) and then deleted or aggregated.
• After profile deletion: your profile, its runs and leaderboard entries, its device registrations, feedback associated with its registered devices, and the telemetry rows associated with its devices are deleted. Residual copies in our encrypted backups are purged on a rolling basis, no later than 90 days after deletion. Crash and error monitoring reports are not tied to your in-game profile deletion control and expire under the retention period above. We may retain limited records where required for legal, security, or dispute-resolution purposes, and we may retain aggregate statistics that no longer identify you. Waitlist emails are separate from player profiles; deleting a profile does not remove a waitlist address unless you also ask us to.

5. Your Rights and Choices

Regardless of where you live, we offer everyone the following:

• Deletion. Delete your player profile and its associated data from inside the game (Settings → DELETE DATA), or by emailing [email protected]. Turning off Global Board only stops score posting; it does not delete your profile. Deletion removes your leaderboard entries and feedback associated with registered devices on that profile. To remove a feedback reply email or launch waitlist email, contact us from the address you submitted.
• Access and portability. Request a copy of the information associated with your profile. Because gameplay profiles hold no name or email address, we can only fulfill profile requests we can tie to a device key (see the note on verification below). Waitlist requests can be fulfilled when you contact us from the same email address you submitted.
• Correction. Your public handle is chosen when you enable Global Board. The game does not currently offer an in-game rename after that claim. To use a different handle, delete your profile (Settings → DELETE DATA) and claim a new one.
• Advertising choices. If ad-supported features are introduced, you can decline cross-app tracking via Apple's App Tracking Transparency prompt (iOS Settings → Privacy & Security → Tracking) or, when an Android build is available, reset or limit your advertising identifier on Android (Settings → Google → Ads). Where the game offers a "Do Not Sell or Share My Personal Information" setting, you can use it to opt out of ad-related disclosures that qualify as sale or sharing under state law. Paid options may reduce or remove ads.
• Analytics. Telemetry is off by default and is separate from the optional Global Board. You can turn it on at any time under Settings → Online → Telemetry. When it is on, the game captures and uploads gameplay events as described in Section 1. When it is off, the game does not capture, upload, or retain gameplay telemetry on your device. Turning it off also deletes telemetry waiting to upload, but does not retroactively delete telemetry already received by our servers. Crash and error monitoring described in Section 1 continues regardless of the Telemetry setting. You may request deletion as described above.

A note on verification. Because Swarmers is anonymous by design, we usually cannot connect a request we receive by email to a specific player profile, and we will not treat a handle alone as proof of identity. The reliable way to exercise deletion is the in-game control, which is authenticated by your device's key. If you contact us at [email protected], tell us what you need and we will explain what we can verify and do. We will respond within the time required by applicable law (generally 45 days). We will not discriminate against you for exercising your rights.

US state privacy rights

If you live in California or another state with a comprehensive privacy law, you have rights to know/access, correct, delete, and obtain a portable copy of your personal information, and to opt out of sale, sharing, and targeted advertising, subject to the verification limits described above. To the extent any ad-related disclosure described in Section 3 qualifies as sale/sharing or targeted advertising, you may opt out using the advertising choices in this Section 5 or by emailing [email protected] with the subject "Opt-Out Request." We do not currently sell or share personal information for targeted advertising, so there is no Global Privacy Control (GPC) signal for us to honor today; if we introduce advertising that qualifies as sale or sharing, we will honor GPC where required. We do not use or disclose sensitive personal information for purposes requiring a right to limit.

EEA, UK, and other international users

If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar laws: we process information on the legal bases of contract performance (running the game you asked to play), legitimate interests (security, anti-cheat, service improvement), consent (where requested, such as advertising consent), and legal obligation. You additionally have rights to object to or restrict processing and to withdraw consent, and you may lodge a complaint with your local supervisory authority. The Services are operated from the United States, and your information is transferred to and processed in the U.S.; where required, we use appropriate safeguards for such transfers.

6. Children's and Minors' Privacy

The Services are intended for players aged 13 and over. There is no separate in-game age confirmation gate; eligibility is a condition of use. Swarmers is not directed to children under 13, is not offered through the Apple Kids Category (or the Google Play Families program when an Android build is available), and we do not knowingly collect personal information from anyone under 13. App Store age ratings are set in App Store Connect when a build is submitted and should be kept consistent with this 13+ policy. If we learn that we have collected personal information from a child under 13, we will delete it and remove the associated profile.

We do not knowingly serve personalized advertising to, or sell or share the personal information of, players we know to be under 18. Parents or guardians who believe a child under 13 has provided personal information should contact [email protected]; because profiles do not require your real name, please include enough detail (such as the handle shown on the leaderboard and the approximate date of play) for us to locate the profile.

If you are between 13 and the age of majority where you live, please review this policy with a parent or guardian, and do not make in-app purchases without their permission.

7. Security

We protect information with measures including encryption in transit (TLS), encryption at rest for stored data, scoped access controls, device-held private keys that never reach our servers, short-lived access tokens, and server-side validation of every submitted run. No system is completely secure; if a breach affecting your personal information occurs, we will notify you as required by law.

8. Cookies

swarmers.app does not set first-party tracking, advertising, or analytics cookies, and we do not use a cookie consent banner for that reason. The site may rely on strictly necessary technical storage from our hosting and CDN providers (currently Cloudflare), such as load-balancing or security cookies that are required to deliver the page. The Swarmers game does not use website cookies. The separate ops console at dash.swarmers.app uses a session cookie for authenticated staff access only; it is not part of the player-facing game experience.

If we later add advertising, analytics, or other non-essential cookies or similar technologies on swarmers.app, we will update this section and, where required, provide consent or opt-out controls before those technologies run.

9. Third-Party Links and Services

The Services may link to third-party websites and services (for example, the App Store, Google Play when an Android build is available, or a store where Swarmers merchandise is sold). Their privacy practices are governed by their own policies, which we encourage you to review.

10. Changes to This Policy

We may update this Privacy Policy. For material changes, we will notify you in the game or on swarmers.app before the changes take effect and update the dates at the top. If a material change would allow us to use information we collected before the change in a materially different way, we will apply the change prospectively only, or ask for your affirmative consent before applying it to previously collected information. For other changes, your continued use of the Services after the effective date constitutes acceptance.

Disputes arising out of or relating to this Privacy Policy are subject to the dispute-resolution, arbitration, governing-law (Wyoming), and venue provisions of our Terms of Use.

11. Contact Us

Marbir Digital, LLC 30 N Gould St Ste N Sheridan, WY 82801 United States

Privacy inquiries: [email protected] Legal inquiries: [email protected]