Mining Frontier Privacy Policy

Effective date: 11 November 2026

This Privacy Policy explains what information Pavle Aleksic (Lazy Devs Agency) ("we", "us", "our") collects when you play Mining Frontier (the "Game") on Android or iOS, why we collect it, who we share it with, how long we keep it and the choices and rights you have. It applies only to the Game. The app stores (Google Play and the Apple App Store) and the partners named below have their own privacy policies.

1. Who is responsible for your information

The controller of your personal data for the Game is Pavle Aleksic (Lazy Devs Agency), Banovic Strahinje 12, 21000 Novi Sad, Serbia. You can contact us about anything in this policy at support@lazydevsagency.com.

EU and UK representative (Article 27 GDPR / UK GDPR): None appointed. Send any data-protection request to support@lazydevsagency.com.

2. Summary

You do not need to give us your name, email address, phone number or any account details to play. The Game does not ask for them, and it does not access your contacts, photos, microphone, camera or precise location.
Your game progress is saved on your device. A copy is also stored on our game servers (cloud save), linked to your anonymous player ID.
When you are online, the Game signs in to our game servers with an anonymous, randomly generated player ID.
On first launch we ask your age and, for players of the required age, whether you allow analytics (including crash reports) and personalised ads. You can change these choices at any time in Settings > Privacy.
The Game is free and shows optional video ads that you choose to watch for in-game rewards. Ads are only personalised if you agree and, on iOS, allow tracking.
Purchases are processed by Google Play or the App Store. We never receive your payment card details.
We do not sell your personal information for money.
You can delete the data held about you from inside the Game: Settings > Privacy > Request data deletion.

3. Information we collect and why

3.1 Information stored on your device

The Game stores the following on your device only. It is not sent to us unless a later section says so:

Your game progress and settings (sound, notation, notification choices).
Your privacy choices: an age bracket ("child", "teen" or "adult", worked out from the age you enter; the age itself is not stored), your analytics and personalised-ads choices, the policy version you accepted and a short history of changes.
If you allow analytics, a log of gameplay events (for example a session starting, an upgrade bought, a quest completed, a reward claimed) with the Game's version, a random install ID and your consent state. This log stays on your device and is rotated automatically (a few megabytes at most); the Game does not upload it.
A random install ID generated by the Game (not a device or advertising identifier).

3.2 Game servers (Unity Gaming Services)

Our game servers run on Unity Gaming Services, operated for us by Unity Technologies as our service provider. When the Game is online it collects:

Player ID and session data: an anonymous player ID created by Unity Authentication the first time the Game goes online, a session token, the time of sign-in and the server clock used to keep timers fair. Purpose: to provide the Game's online features and keep them secure. Legal basis: performance of our contract with you (the Terms of Service); our legitimate interest in security.
Technical data: your IP address, device and operating system type, the Game's version and request timestamps, processed when the Game connects. Purpose: delivering the service, security, abuse prevention. Legal basis: legitimate interests.
Cloud save: a copy of your saved game, its version, the time it was uploaded and a short progress summary (for example lifetime earnings and play time). Purpose: keeping a server copy of your progress for your player ID (used if the save on your device is lost or damaged while the Game keeps the same player ID) and checking that progress is plausible. Legal basis: contract; legitimate interest in fair play.
Leaderboards: your score, rank and the time it was submitted, shown with an automatically generated name (for example "Player 4821"). Scores are checked on the server; implausible scores, and scores reported by several players, are held back for review. Other players can see your generated name, score and rank. Legal basis: contract; legitimate interest in fair competition.
Tournaments and leagues: the league and group you are placed in, your rank and the rewards you earned. Legal basis: contract.
Friends: your friend code and the players you added or blocked by code. Friends see your generated name. There is no chat and no free text. Legal basis: contract (you choose to use the feature).
Gifts and promo codes: gifts you send and receive (sender, recipient, time, the fixed in-game reward) and the promo codes you redeem. Legal basis: contract.
Invites (referrals): the invite code you entered, who invited you, the milestones reached and a one-way hash of your install ID so each install can be counted only once. Purpose: awarding invite rewards fairly and preventing abuse. Legal basis: contract; legitimate interest in preventing fraud.
Purchase records: see Purchases below.
Game configuration: the Game downloads settings (for example event schedules) from the server. This does not collect information about you beyond the player ID above.
Security log: a record of security-relevant actions (for example a rejected score, a refunded purchase or a deletion request) with your player ID and the time. Legal basis: legitimate interests in security and fraud prevention.

3.3 Fair-play protection

The Game signs your save file and watches for changes to the device clock, so that edited saves and time manipulation do not give unfair advantages. A save that was modified outside the Game is moved aside on your device and the last valid backup is loaded; a cloud save that fails these checks is stored but marked, and does not count towards tournaments or invite rewards. These checks run on your device and on our servers and do not collect any additional personal information. Legal basis: legitimate interest in fair play and preventing fraud.

3.4 Purchases

In-app purchases are made through Google Play Billing or Apple's App Store. The store processes the payment and shares with us only what is needed to deliver the item: the product, the transaction or order ID, the purchase time, the purchase status (pending, completed, refunded), and for subscriptions the renewal, expiry, grace-period and cancellation status. The Game passes the store a pseudonymous account token derived from your player ID so that purchases can be restored to the right player. We never receive your name, card number or billing address from the stores.

We validate each receipt with Google or Apple on our server, deliver the item exactly once, support restoring purchases and handle refunds and revoked purchases. Legal basis: contract; legal obligations (tax and accounting records); legitimate interest in preventing fraud.

3.5 Crash reports and diagnostics (Firebase Crashlytics)

Only if you allow analytics, the Game sends crash and error reports to Firebase Crashlytics, a Google service that processes them for us. A report contains: the error or crash stack trace; the device model, operating system and version, orientation, free memory and disk space at the time of the crash; the Game's version and build; the list of game modules and a session ID; a short log of recent in-game events (for example "save completed", "upgrade bought") with numbers masked; a Crashlytics installation ID; and a pseudonymous user ID that is a one-way hash of the Game's random install ID. It does not contain your name, email, player ID or advertising ID. Firebase Analytics is switched off in the Game and advertising-ID collection by Firebase is disabled. Purpose: finding and fixing crashes and bugs. Legal basis: your consent; you can withdraw it at any time in Settings > Privacy, after which no further reports are sent.

3.6 Advertising

The Game shows optional rewarded video ads: you choose to watch an ad to receive an in-game reward (for example a temporary income boost). Ads are never required to progress. Ads are delivered by Unity LevelPlay (ad mediation, Unity Technologies) and the Unity Ads network. To request, show, measure and pay for ads, and to prevent ad fraud, these partners collect from your device: your IP address (and an approximate location derived from it, at city or region level), device and operating system information, language, the app name and version, ad interactions (ads requested, shown, completed, clicked), and device identifiers: the Android Advertising ID or Apple's IDFA (only when available and permitted, see below) and the identifier for vendors (IDFV) on iOS.

Personalised ads use this information to show ads based on your interests and activity across apps. They are shown only if you agree in the Game's privacy prompt or in Settings > Privacy, and on iOS only if you also allow tracking in Apple's App Tracking Transparency prompt. Players we treat as teenagers (13 to 17) and children never receive personalised ads. Without consent you still see the same optional ads, but they are contextual (not based on your profile) and we tell our partners that you did not consent (GDPR), that you opted out of the sale or sharing of personal information (US state laws) and, for children, that the user must be treated as a child (COPPA); on Android the Game also tells the partners not to use the Advertising ID of children.

Legal basis: consent for personalised ads and for accessing advertising identifiers where consent is required; our legitimate interest in funding the free Game with contextual ads. When personalised ads are on, LevelPlay and Unity Ads act as independent controllers for their own advertising purposes under their privacy policies.

We receive from the ad partners aggregated reports and, for each ad shown, the network, ad unit, placement, country and the estimated revenue. We use it to measure how ads perform; it is not linked to your identity.

3.7 Device features

Notifications: reminders (for example "your earnings are full") are scheduled locally on your device, only after you opt in and allow notifications. They are not sent through a server and no push token is collected. You can turn each type off in the Game's settings or in your device settings.
Sharing: when you tap Share, the Game creates an image of your achievement and opens your device's share sheet. Nothing is shared unless you pick an app and send it. Shared links contain the Game's store link and your invite code.
Rating prompt and feedback: the Game may ask whether you enjoy it and then open the store's own review dialog. If you choose to send feedback instead, the Game opens our support page or your email app; we receive only what you choose to send.
Vibration: the Game can use vibration feedback, which you can switch off in Settings. No data is collected.

3.8 When you contact us

If you email us, we receive your email address, your message and anything you attach (for example a purchase order number or a screenshot). We use it only to answer you and keep a record of the request. Legal basis: legitimate interest in providing support; legal obligation for privacy requests.

4. Your choices in the Game

Age screen. Before collecting any optional data the Game asks your age. It does not verify it and does not keep the number you enter, only the age bracket.
Privacy prompt. Players aged 13 and over are asked whether to allow analytics (including crash reports) and personalised ads. Both are off until you agree (we ask everyone, wherever they live).
Settings > Privacy lets you change these choices at any time and shows the policy version you accepted. Changing them does not affect your progress or rewards.
iOS tracking. Before ads load, iOS shows Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", your IDFA is not available and ads are not personalised. You can change this in iOS Settings > Privacy & Security > Tracking.
Android advertising ID. You can reset or delete it in Android Settings > Privacy > Ads (or Google > Ads).
Notifications. Off until you opt in; can be turned off per type in the Game or in your device settings.
Data deletion. Settings > Privacy > Request data deletion (see section 8).

5. Children

The Game is intended for a general audience and is not directed at children under 13. Because younger players may still find it, the Game asks every player's age before collecting optional data. If you enter an age under 13, the Game switches to child mode:

No analytics events are recorded and no crash reports are sent.
Ads are never personalised; our ad partners are told to treat the user as a child under COPPA, and on Android not to use the advertising ID.
Friends, gifts and invites are turned off.
Notifications are not scheduled.
The privacy choices are locked and cannot be switched on.

In child mode the Game still uses the minimum needed to work: progress saved on the device, the anonymous player ID and server calls that run the online features, and purchase records if a purchase is made (purchases are controlled by the parental settings of Google Play and the App Store). We do not knowingly collect any other personal information from children. If you are a parent or guardian and believe your child has given us personal information, use Request data deletion in the Game or contact us at support@lazydevsagency.com and we will delete it.

Players we treat as teenagers (13 to 17) can allow analytics but never receive personalised ads.

We share personal information only with:

Unity Technologies (Unity Gaming Services: Authentication, Cloud Code, Cloud Save, Leaderboards, Remote Config), as our service provider hosting the game servers.
Google LLC (Firebase Crashlytics), as our service provider for crash reports, only if you allow analytics.
Google (Google Play) and Apple (App Store), which process your purchases as independent controllers; our server contacts them to verify receipts and subscription status.
Unity Technologies (Unity LevelPlay mediation and Unity Ads) to show ads. For personalised ads (with your consent) they act as independent controllers; otherwise they process data to serve contextual ads, measure them and prevent fraud.
Other players, who can see your generated player name, scores and ranks, and, if you are friends, your friend status and gifts.
Authorities, advisers and successors: where required by law or to protect rights and safety; with our professional advisers under confidentiality; and with a buyer or successor if the Game or our business is transferred, under this policy.

Our service providers may use the information only to provide their services to us, under data processing terms. Their privacy information:

Unity: https://unity.com/legal/privacy-policy and https://unity.com/legal/game-player-and-app-user-privacy-policy
Firebase: https://firebase.google.com/support/privacy and Google: https://policies.google.com/privacy
Apple: https://www.apple.com/legal/privacy/

7. International transfers

Our providers process data in the United States and other countries that may not offer the same level of protection as your own. Where personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to such a country, the transfer relies on an adequacy decision (including the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where the recipient is certified) or on the European Commission's Standard Contractual Clauses (and the UK addendum), together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards at support@lazydevsagency.com.

8. How long we keep information and how to delete it

On your device: until you delete the Game or its data, or request deletion (which clears the analytics log and resets your privacy choices; your local game progress stays until you uninstall).
Game server data (player ID, cloud save, scores, league placements, friends, gifts and invites): for as long as you keep playing. We may delete an account that has been inactive for 24 months.
Purchase records: as long as needed to deliver, restore and refund purchases and to prevent fraud, and as required by tax and accounting law (generally up to 10 years). When you request deletion they are unlinked from your player ID.
Security log: up to 12 months.
Crash reports: 90 days in Firebase Crashlytics.
Ad partners: according to their own retention policies (see section 6).
Support emails: up to 2 years after your request is closed.

To delete your data, open Settings > Privacy > Request data deletion in the Game. The Game immediately stops analytics and personalised ads, clears its local analytics log and asks our server to delete your player data (your player record, cloud save, leaderboard scores, league placements and friends, gifts and invite data) and to unlink your purchase records; it then deletes your Unity Authentication account. If you are offline, the request is retried automatically until it succeeds (usually within minutes of reconnecting). The status is shown on the same screen. Entries in the security log are removed on their normal schedule (up to 12 months).

If you no longer have the Game installed, you can ask us to delete your data by following the steps at https://games.lazydevsagency.com/mining-frontier/delete-data.html or by emailing support@lazydevsagency.com.

Deleting your data does not cancel subscriptions or refund purchases; cancel subscriptions in your store account (see the Terms of Service). Items you bought cannot be restored to a new player after deletion unless the store confirms the purchase again.

9. Your rights

9.1 Everyone

You can ask us at support@lazydevsagency.com to access, correct, delete or receive a copy of your personal data, and to stop or limit using it. We answer within one month (we may extend this by two months for complex requests and will tell you). Because you play without an account, we may ask for details that let us find your data and confirm the request is yours (for example the order number of a purchase, your friend code, your device model and when you started playing). If we cannot find data linked to you this way, use Request data deletion in the Game, which always reaches the right data. We do not charge for requests unless they are manifestly unfounded or excessive.

9.2 European Economic Area, United Kingdom and Switzerland

Under the GDPR and UK GDPR you have the right to: access your data; rectification; erasure; restriction of processing; data portability; object to processing based on legitimate interests (including at any time to processing for direct marketing, which we do not do); withdraw consent at any time without affecting earlier processing (Settings > Privacy); and not be subject to decisions based solely on automated processing that significantly affect you. Automatic anti-cheat checks can hold back a leaderboard score or mark a cloud save; they only affect in-game competition and rewards, and you can ask for a human review at support@lazydevsagency.com. You can also lodge a complaint with your local data protection authority.

9.3 California and other US states

This section applies to residents of California and other US states with comprehensive privacy laws (for example Colorado, Connecticut, Virginia, Utah, Texas and Oregon).

In the last 12 months we collected these categories of personal information, from you and your device, for the purposes in section 3:

Identifiers: random player ID and install ID, IP address, advertising ID / IDFA (ads), Crashlytics installation ID.
Commercial information: in-app purchase records (product, date, status).
Internet or other electronic network activity: gameplay and progress data, ad interactions, crash and diagnostic data.
Geolocation: approximate location derived from IP address, by our ad partners.
Inferences: interest profiles our ad partners may create for personalised ads, only with your consent.

We disclose them for business purposes to the service providers in section 6. We do not collect sensitive personal information as defined by these laws.

Sale and sharing. We do not sell personal information for money. When personalised ads are on, giving our ad partners your advertising ID and ad interaction data may count as "sharing" for cross-context behavioural advertising, or a "sale" or "targeted advertising" under some state laws. Personalised ads are off by default and only switched on if you opt in. To opt out, switch off Personalised ads in Settings > Privacy (this works as "Do Not Sell or Share My Personal Information" and "opt out of targeted advertising"), or email support@lazydevsagency.com. We do not sell or share the personal information of players we know are under 16. The Game cannot read browser-based Global Privacy Control signals; the in-game setting serves the same purpose.

Your rights: to know/access the personal information we hold and how we use it, to delete it, to correct it, to obtain a portable copy, to opt out of sale, sharing and targeted advertising, to limit use of sensitive personal information (we do not use any), and not to be discriminated against for exercising these rights. Use the in-game options or email support@lazydevsagency.com. You may use an authorised agent; we may ask for proof of the authorisation and to verify your request as described in 9.1. If we decline a request, you can appeal by replying to our decision with "Appeal" in the subject; we answer appeals within 45 days.

9.4 Other countries

Players in other countries (for example Brazil under the LGPD, or Canada) have similar rights, which you can exercise the same way.

10. Security

Data sent between the Game and our servers and partners is encrypted in transit (HTTPS/TLS). Players cannot write to our databases directly; every change goes through server code that checks it. Store credentials and server keys are kept only in our providers' secret stores, never in the app. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a personal data breach where the law requires.

11. Changes to this policy

We will update this policy when the Game's data practices change and post the new version at https://games.lazydevsagency.com/mining-frontier/privacy.html with a new effective date. If a change requires your consent again, the Game shows the privacy prompt again (its policy version changes) before the new processing starts.

12. Contact

Pavle Aleksic (Lazy Devs Agency), Banovic Strahinje 12, 21000 Novi Sad, Serbia. Email: support@lazydevsagency.com. Website: https://games.lazydevsagency.com.