Privacy Policy

Last updated: 10 August 2026

1. Scope and data controller

This Privacy Policy explains how the Between the Lines mobile game and the related Minsis Game Studio website (together, the “Service”) process personal data. The data controller is Individual Entrepreneur Mikhail Lenski, trading as Minsis Game Studio, Antoniukowska 15A/24, 15-740 Białystok, Poland. Privacy requests can be sent to help.minsisgamestudio@gmail.com.

Some data is sent directly from your device to the providers named below through their software development kits, platform services, or network endpoints. It may therefore be processed by those providers without first passing through a server operated exclusively by us.

2. Age

The Service is intended only for people aged 16 or older. If an app-store listing specifies a higher minimum age, that higher age applies. We do not knowingly offer the Service to or request personal data from anyone under 16. A parent or guardian who believes that a person under 16 has provided data should contact us so that we can investigate and, where appropriate, delete it.

3. Data required to operate the Service

Account and authentication. The app uses Google Play Games Services and Firebase Authentication. They process authentication credentials and platform account signals and provide the app with a Firebase user identifier (UID). We use the UID to keep the correct cloud account, enforce access controls, and show you a support identifier. We do not receive your Google password.

Game and cloud data. Firebase Firestore, Cloud Functions, Storage, and App Check process the UID, account-creation time, game progress and saved state, unlocked episodes, story branches and wardrobe items, virtual-currency balances, rewards and their timestamps, selected content language and country, and requests for game assets. A saved state may include choices or names that you enter where those values form part of the game state. App Check and our backend also process integrity tokens, request timestamps, IP address or a salted hash of it, rate-limit and security events, and restriction or ban records where needed to protect accounts, purchases, content, and the Service.

Purchases. When you make an in-app purchase, the app and our backend process the product identifier, platform, store receipt or purchase token, transaction identifier or a derived identifier, account binding, verification result, and the purchased entitlement or virtual currency. Purchase data is sent to Google Play or Apple, as applicable, to verify and finalize the transaction. We do not receive or store your complete payment-card number; payment details are handled by the app store.

Device storage. The app keeps preferences, the privacy choices described below, local save data, and downloaded-content caches on your device. This data normally remains until it is replaced, cleared in the app or device settings, or the app is uninstalled. Clearing local data does not by itself delete cloud records linked to your account.

We process this required data to provide the game and requested purchases, synchronize progress, deliver content, prevent fraud and abuse, secure the Service, troubleshoot essential operations, and comply with legal obligations. Depending on the context and applicable law, the legal basis is performance of our agreement with you, compliance with a legal obligation, or our legitimate interests in operating and protecting the Service. Where those bases are not available, we will request consent.

4. Optional analytics and diagnostics

Analytics and diagnostics are disabled until you make a separate choice in the app. If you enable them, Google Firebase Analytics, Crashlytics, and Performance Monitoring may process app screens and categorized interactions, feature and purchase-funnel events, language, selected content country and theme, app and device characteristics, operating-system information, approximate region derived by the provider, performance measurements, crash details, stack traces, and related timestamps.

When enabled, the app supplies Firebase Analytics and Crashlytics with a pseudonymous value derived by hashing the Firebase UID. We do not intentionally add your email address, phone number, raw Firebase UID, text or names entered into a story, authentication or purchase tokens, or Android Advertising ID to analytics events. Analytics data can still be personal data because it can distinguish an app instance or pseudonymous user.

The legal basis for this optional processing is your consent. Refusing it does not disable authentication, cloud saves, purchases, content delivery, security, or advertising. If you withdraw consent, the app stops future collection, resets the local Firebase Analytics identifier and data, and deletes unsent crash reports where the SDK supports this. Withdrawal does not undo lawful processing already completed or automatically erase data already retained by a provider; you may submit a deletion request as described below.

Google’s information about privacy and data processing is available at https://firebase.google.com/support/privacy/ and https://policies.google.com/privacy.

5. Advertising and Android Advertising ID

The app uses the Yandex Mobile Ads SDK to request rewarded advertisements. After you make an advertising choice, an ad request may transmit directly to Yandex technical information needed to deliver, measure, secure, and prevent fraud in advertising. Depending on the device, SDK, and request, this may include IP address, app identifier and version, device and operating-system information, language, network information, an ad-request identifier, and ad impression, click, completion, or reward events.

Personalized advertising is a separate optional choice and is not inferred from analytics consent. If you consent and your Android device settings permit it, Yandex may access the resettable Android Advertising ID (AD_ID) and use or share advertising data with its advertising partners to select more relevant ads, limit repetition, measure performance, and prevent fraud. The app declares the Android AD_ID permission so that this choice can work; declaration of the permission does not itself mean that you have consented.

If you refuse or withdraw personalized-ad consent, the app reports the non-consent state to the Yandex SDK and continues requesting available limited, non-personalized, or contextual ads. Technical ad-request and security data may still be processed, but we do not authorize use of AD_ID for personalized advertising. The type and availability of an ad are determined by Yandex and its demand partners, so an ad or reward opportunity cannot be guaranteed for every request. Refusing personalization does not otherwise disable the game.

The app disables location tracking in the Yandex SDK and does not request precise-location permission for advertising. Yandex may still infer an approximate country or region from an IP address or other ordinary request data.

The legal basis for personalized advertising is your consent. Limited advertising and the associated essential request and security processing are used to provide the requested rewarded-ad feature and protect it against fraud, based on performance of the requested service or legitimate interests where permitted by law. Yandex may also have its own legal obligations and bases for processing data it receives. Yandex’s privacy information is available at https://yandex.com/legal/confidential/.

6. Your privacy choices

You can independently change “Analytics and diagnostics” and “Personalized advertising” under “Data and privacy” in the app settings. Withdrawing personalized-ad consent applies to future requests; the app invalidates an ad cached under the previous setting and requests a replacement under the current setting. You can also reset or delete the Advertising ID and change advertising controls in Android settings. Withdrawal does not affect the lawfulness of processing completed before it.

7. Website and support

The website stores the selected language in your browser’s local storage. Firebase Hosting and ordinary network infrastructure may process standard request data such as IP address, browser or device information, requested page, and timestamp to deliver and secure the website. The website does not currently use its own advertising or analytics SDK.

If you contact support, we process your email address, user ID if supplied, message, attachments, and correspondence history to answer the request, diagnose a problem, protect the Service, or handle a legal request. Please do not send payment-card details, passwords, authentication tokens, or other information that is not needed for support.

8. Recipients and service providers

Data may be disclosed only as relevant to the function you use: to Google and Firebase for authentication, cloud infrastructure, app integrity, optional telemetry, Google Play services, and Android purchases; to Apple for App Store purchases where applicable; to Yandex and its advertising partners for advertising; to hosting, email, and technical service providers acting for the Service; and to professional advisers, courts, regulators, or law-enforcement bodies where disclosure is required or legally justified.

We do not sell personal data for money. Personalized-ad data disclosed to an advertising network may nevertheless be treated as “sharing,” “targeted advertising,” or a similar regulated activity under some laws; you can turn it off using the separate setting described above.

9. International processing

The controller is established in Poland, but Google, Firebase, Yandex, app-store operators, and their infrastructure or partners operate in multiple countries. Data may therefore be processed outside your country, including outside the European Economic Area, in countries whose data-protection rules differ from yours. The destination, provider entity, and transfer mechanism depend on the service, device platform, and request. Such processing is subject to the provider’s terms and privacy materials and to safeguards required by applicable law. You may contact us for current information relevant to your request.

10. Retention

We keep account and cloud game data while the account and Service are active or as otherwise needed to provide the features you request. Support correspondence is kept for the time needed to resolve and document the request. Purchase, entitlement, accounting, security, anti-fraud, and dispute records may be kept longer where necessary to verify transactions, prevent repeat abuse, establish or defend legal claims, or meet tax, accounting, or other legal duties. We delete or anonymize data when it is no longer needed for these purposes, subject to proportionate backup cycles and legal holds.

Google, Firebase, Yandex, and app-store providers retain data under their own settings, contracts, and policies. Their retention periods can differ from ours. A change of consent stops future optional collection by the app but does not replace a request concerning data already held by a provider.

11. Your rights

Subject to applicable law, you may ask for access to your personal data, correction, deletion, restriction of processing, portability, or information about recipients; object to processing based on legitimate interests; and withdraw consent at any time. You may also lodge a complaint with the competent data-protection authority, including the President of the Personal Data Protection Office (UODO) in Poland, or the authority where you live or work.

Send a request to help.minsisgamestudio@gmail.com. Include enough information to identify the relevant account, such as the UID shown in the app settings, but do not send a password or purchase token. We may ask for proportionate verification before acting on a request. Rights and exceptions vary by jurisdiction, and some purchase, security, or legal records cannot be erased immediately.

12. Security

We use access controls, authenticated requests, app-integrity checks, restricted database rules, transaction verification, rate limiting, and other technical and organizational measures appropriate to the data and risk. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

13. Changes to this Policy

We may update this Policy when the Service, providers, or legal requirements change. We will change the date above and provide additional notice or request a new choice where required. Continued use is not treated as consent to new optional analytics or personalized-ad processing where consent is legally required.

14. Contact

Individual Entrepreneur Mikhail Lenski, trading as Minsis Game Studio Antoniukowska 15A/24, 15-740 Białystok, Poland Email: help.minsisgamestudio@gmail.com