23 Heartbeats

Privacy Policy

Effective date: 18.07.2026

This policy explains how personal data is handled in the games made by 23 Heartbeats, including Flood. It is written to be short and honest: our games are built to collect as little as possible.

Who is responsible

23 Heartbeats is the independent game studio of Alfred Stanzl, Vienna, Austria. For any privacy question, contact:

contact@23heartbeats.com

The short version

Advertising (Google AdMob)

Our games show ads through Google AdMob. To do this, AdMob may access a device advertising identifier and related device and usage information in order to serve and measure ads, including personalized ads where permitted.

If you are in the EU, EEA, United Kingdom, or another region that requires it, you are shown a consent choice for personalized advertising, and you can change or withdraw it. You can also limit ad personalization in your device settings. Purchasing the “Remove Ads” option turns ads off.

AdMob’s handling of this data is governed by Google’s privacy policy: policies.google.com/privacy and Google’s advertising policies.

Online multiplayer

Flood’s online modes connect two players through our relay server so it can pass each side’s game progress to the other. The relay is a live pass-through: it holds a match in memory only while it is being played and stores nothing afterward — no accounts, no history, no personal data. The display name you choose for a match is shown to your opponent during that match and is not retained.

Leaderboards, achievements, and cloud saves

Where you use them, these features are provided by Google Play Games Services (Android) and Apple Game Center (iOS). When you sign in, these platforms handle your gaming identity, your scores/achievements, and your saved-game data on our behalf, under their own privacy policies:

Signing in to these services is optional and controlled by you through your device.

Purchases

In-app purchases — coins, “Remove Ads,” and subscriptions — are processed entirely by the Apple App Store or Google Play. We do not receive or store your payment details; the store handles the transaction under its own terms and privacy policy.

Crash and diagnostics data

Where you have enabled it on your device, the app stores may collect standard crash and diagnostic information to help keep apps stable. This is the platforms’ built-in reporting (Apple / Google) and is governed by their policies. We do not operate our own separate crash-tracking service.

Children

Our games are intended for a general audience and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data through one of our games, please contact us and we will address it.

Your rights

Because we hold essentially no personal data ourselves, most requests (access, correction, deletion) are handled through the third parties that do — Google, Apple, and your device settings. For advertising data, use the consent controls in the app and your device’s ad settings; for platform gaming data, use your Google or Apple account. Under the EU General Data Protection Regulation (GDPR / DSGVO) you have rights of access, rectification, erasure, restriction, and objection — write to us at the address above and we will help you direct the request to the right place, or handle any part that concerns us.

International

We are based in Austria (EU). The third-party services above may process data on servers in other countries under their own safeguards and privacy frameworks.

Changes to this policy

We may update this policy as our games change. The “Effective date” above shows the current version; material changes will be reflected here.

Contact

Questions about this policy or your data: contact@23heartbeats.com