Final Holdout — Privacy Policy
Effective date: November 16, 2026 Last updated: November 16, 2026
This Privacy Policy explains what information the mobile game Final Holdout (the "Game") collects, why, who we share it with, and the choices and rights you have.
1. Who we are
The Game is published by Atronia Innovations Inc. ("Atronia", "we", "us"), 3134 Friendswood Ave, El Monte, CA 91733, USA. Atronia is the controller of the personal information described in this policy.
Contact: info@innotronia.com (support, privacy and legal requests).
2. The short version
- You can play without an account. As a guest, the Game does not ask who you are, and your progress stays on your device.
- Signing in is optional. If you choose to sign in with Apple or Google, we receive an account user ID and the email address your Apple or Google account shares with us, and we store a copy of your save in the cloud so you can restore your progress on another device (Section 3.3).
- The Tower and its leaderboard are optional. If you play the Tower, other players see the player name you choose, your portrait and your floors and power (Section 3.4). Pick a name that does not identify you; never use your real full name.
- No contacts, no precise location, no photos, no microphone or camera.
- The Game uses a few service providers that collect device and usage data automatically: Google AdMob (rewarded ads), Google Firebase (analytics, crash reports, remote configuration) and RevenueCat (purchase validation).
- Ads only play when you choose to watch one. Personalised ads are used only where you allowed them (consent in the EU/UK, tracking permission on iOS, and no opt-out under US state law).
- You can delete your data at any time in Settings → Delete my data. If you are signed in, this also deletes your account and your cloud save. You can ask us to delete analytics data by email.
3. What we collect and why
3.1 Information stored only on your device
| What | Why |
|---|---|
| Game progress: levels, stars, buildings, currencies and items, settings, defense plans, a log of currency changes, transaction IDs of purchases already delivered (so a purchase is never delivered twice), the redeemed-code list, your draw history (pool, what you spent, what you received) and guarantee counters | To run the Game and keep your progress |
| Your acceptance of the Terms of Use and this Privacy Policy: which version you accepted, when, and the Game version (up to the last 20 acceptances) | To show the notice again when the documents change, and as a record of your agreement |
| A random player ID created on first launch | To keep the save consistent and to seed in-game randomness. It is also sent to RevenueCat and Firebase Crashlytics (Section 3.2). It is a random code, not your name or any account, and a new one is created if you reinstall the Game |
This information is stored in the Game's private storage on your device. We do not receive it unless you sign in (then a copy is stored in the cloud, Section 3.3), except the limited items listed in 3.2 (for example the level you are playing, as part of analytics events).
3.2 Information collected automatically by our service providers
When you play, the SDKs (software components) listed below send some information from your device to the provider's servers. We do not receive your IP address or your advertising ID directly; we see aggregated reports and pseudonymous event data in the providers' dashboards.
| Category | Examples | Collected by | Purposes |
|---|---|---|---|
| Game and device identifiers | The Game's random player ID, which we use as the RevenueCat app user ID and attach to crash reports; Firebase installation ID, Firebase Analytics app instance ID and Crashlytics installation ID; on iOS the identifier for vendors (IDFV); on Android the app set ID. None of these is linked to your name, email or store account. If you sign in, RevenueCat uses your account user ID instead of the player ID, so your monthly pass follows your account (Section 3.3) | Firebase, RevenueCat, AdMob | Analytics, crash reporting, delivering configuration, recognising your purchases, ads measurement, fraud prevention |
| Advertising identifier | Apple IDFA (iOS, only if you allow tracking), Google advertising ID (Android, unless you deleted or reset it in Android settings) | AdMob only (we configure Firebase Analytics not to collect advertising identifiers) | Showing ads, measuring ads, frequency capping, fraud prevention; personalised ads only where permitted (Section 5) |
| Device and app information | Device model, operating system and version, app version, language, country code, time zone, network connection type, screen size, memory tier, WebView version, graphics quality setting | All providers | Making the Game work on your device, diagnosing problems, performance tuning |
| Network and approximate location | IP address, and an approximate location (country/region/city) derived from it. Firebase Analytics uses a masked IP address; RevenueCat uses the IP address only to determine your country and does not store it | AdMob, Firebase, RevenueCat | Delivering content and ads, legal compliance (e.g. which consent rules apply), fraud prevention, regional statistics. We do not collect precise (GPS) location and the Game does not use your device's location services |
| Gameplay and usage data | Events such as app opened, tutorial step reached, level started/finished with result, stars and time, waves cleared, buildings upgraded, currency earned and spent, rewarded ad shown and its result, draws made (pool, single or ten-draw, free or paid, highest rarity received, guarantee progress) and views of the Rates screen, acceptance of the Terms of Use and this Privacy Policy (the version accepted), signing in and out, Tower use (opening it, floors started and finished with result and time, uploads and whether they were verified, rewards claimed, setting a name or portrait, reports of names), cloud save restores and sync errors, account deletion (these events never contain your email address or account user ID), shop and store pages viewed, session length | Firebase Analytics | Understanding how the Game is played, balancing difficulty and the economy, fixing problems with new-player onboarding |
| Purchase information | Which product you bought, price and currency, store transaction ID, Apple receipt or Google purchase token, subscription status and renewal dates | Apple / Google (who process payment), RevenueCat, Firebase Analytics (which records in-app purchase events automatically) | Validating and delivering purchases, restoring subscriptions, preventing fraud, revenue reporting |
| Crash and performance data | Crash logs and stack traces, error messages, device state at the time of a crash, frame-rate summaries | Firebase Crashlytics, Firebase Analytics | Finding and fixing bugs and performance problems |
| Ad interaction data | Ads requested and shown, whether you completed a rewarded video, taps, app launches, and ad-related performance data (such as app launch time and hang rate) | AdMob | Serving and measuring ads, rewarding you, analytics, fraud prevention |
Unless you choose to sign in (Section 3.3), we do not collect your name or email. We never collect your phone number, contacts, photos, microphone or camera data, precise location or health data, and we do not sell your personal information for money. The Game does not have chat or user-generated content.
Payment details (card number, billing address) are handled entirely by Apple or Google; we never receive them.
3.3 Optional account and cloud save
Signing in is optional; you can play as a guest forever. If you choose Sign in with Apple or Sign in with Google, we use Google Firebase Authentication and Google Cloud Firestore:
| What | Why |
|---|---|
| An account user ID, the sign-in provider (Apple or Google), and the email address your Apple or Google account shares with us (with Sign in with Apple this may be a private relay address, or none at all) | To identify your account so that you can restore your progress on another device |
| Your name, if your Apple or Google account shares it with Firebase Authentication | Firebase keeps it with your account; we do not display or use it |
| Sign-in times and the IP address used when you sign in, recorded by Firebase Authentication | Security and preventing abuse |
| A copy of your save (everything listed in Section 3.1: progress, currencies, items, purchase records, settings, privacy choices, your acceptance of these documents, the log of currency changes and your last 10 battle replays), with a short summary (save version, last played time, levels cleared, power, diamonds and gold), the random player ID, the upload time, the platform, the app version and a revision number | To back up your progress and restore it on another device, and to resolve conflicts between devices |
We use this information only to provide the account and cloud save (app functionality). We do not use it for ads or tracking, and we do not share it for advertising. Your email address is not stored in your save or in analytics. Your cloud save can be read and written only by your signed-in account. It is stored on Google Cloud servers in the United States.
When you are signed in, RevenueCat identifies your purchases by your account user ID instead of the random player ID, so that your monthly pass and purchases follow your account.
Signing out keeps your save on the device. To delete the account and the cloud save, see Section 8.
3.4 The Tower, leaderboards and your player profile
The Tower is optional. It opens after the first campaign. You can climb offline; your clears are uploaded when you are online, and only clears our servers have verified count on the leaderboard. The first time you open it, the Game signs in to Firebase Authentication anonymously: it creates a random tower user ID without asking you for anything. If you sign in with Apple or Google (Section 3.3), that ID is linked to your account so your rank and profile are kept; if you play as a guest and delete the Game, you lose access to them. If you are already signed in, the Tower uses your account user ID instead of creating an anonymous one.
Your clears are checked on our servers (Google Cloud Functions) by replaying them with the same game rules, and tower data is stored in Google Cloud Firestore in the United States.
| What | Why | Who can see it |
|---|---|---|
| Tower user ID (the anonymous ID, or your account user ID if you signed in) | To identify your profile and rank | Only us |
| Your player name, typed by you (3 to 16 characters: English letters A to Z, digits and spaces). Until you choose one, a default name such as "Survivor 1234" | To show you on the leaderboard and your profile | Other players |
| Your portrait (chosen from the survivors, commanders and bosses in the Game) | Shown next to your name | Other players |
| Your floors: this season's highest floor and when you reached it, your best floor ever, your rank, and your power | Leaderboard, profile and season rewards | Other players |
| Clear records: for each floor, the replay you upload (random seed, your loadout and the commands you gave in the battle), which our servers replay to verify the clear. For each floor we keep the verification result, a summary of your loadout (building levels, mods, commander) and the time. We also keep the full replay of your current best floor (replaced when you climb higher) so we can review top players by hand | To verify clears and keep the leaderboard fair | Only us |
| Fair-play data: the game data version, a summary of your recent currency changes, the purchase ID linked to your profile and whether your purchases are confirmed (we check with RevenueCat), and whether the profile was flagged or banned | To keep the leaderboard fair | Only us |
| Reports: if you report a name, the name you reported, your tower user ID and the time; if your name is reported, the report | To review names and act on reports | Only us |
| Rewards waiting to be claimed | Season rewards | You |
| Sign-in times and the IP address used, recorded by Firebase Authentication | Security and preventing abuse | Only us |
Other players never see your real name, email address, player ID or account. Names that break our rules (Terms of Use, Section 8A) are blocked when you type them, and names reported by other players are reviewed; we may replace a name with a default name. We do not use tower data for ads or tracking.
3.5 Information you send us
If you email us (for example about support or a privacy request), we receive your email address and whatever you include in the message. We use it only to answer you and keep a record of the request.
4. Legal bases (EU, EEA, UK and Switzerland)
| Purpose | Legal basis |
|---|---|
| Running the Game, delivering and restoring purchases, keeping progress on your device | Performance of our contract with you (the Terms of Use) |
| Your optional account and cloud save, and recognising your purchases across devices when you are signed in | Performance of our contract with you |
| Recording sign-in times and IP addresses for security | Our legitimate interest in protecting accounts from abuse |
| The Tower: your profile, verified clears, leaderboards and rewards, including showing your name, portrait, floors and power to other players | Performance of our contract with you (you choose to play the Tower) |
| Checking names, handling reports, fair-play checks, flags and bans | Our legitimate interest in keeping the leaderboard fair and free of offensive names |
| Personalised ads, and storing or reading information on your device for advertising where required (ePrivacy) | Your consent, collected with Google's consent message on first launch; you can withdraw it at any time in Settings → Privacy choices |
| Non-personalised and limited ads | Our legitimate interest in funding a free game, and your consent where required for storing or reading information on your device |
| Analytics and performance measurement, game balancing | Our legitimate interest in improving the Game (or consent, where local law requires consent for this) |
| Crash reporting and security / fraud prevention | Our legitimate interest in keeping the Game stable and secure |
| Answering your emails and requests, legal compliance, tax and accounting records of purchases | Legal obligation and our legitimate interests |
Where we rely on legitimate interests, you may object (Section 9).
5. Ads, consent and tracking
The Game shows only rewarded video ads that you choose to watch. There are no banner, interstitial or app-open ads.
- EU, EEA, UK and Switzerland: on first launch, before any ad is requested, the Game shows Google's consent message (Google User Messaging Platform, using the IAB Transparency & Consent Framework). If you do not consent, you may still be shown non-personalised or limited ads.
- United States: where state privacy laws (such as California's CCPA/CPRA) apply, sharing of personal information for targeted (cross-context behavioural) advertising may count as a "sale" or "sharing". You can opt out at any time in Settings → Privacy choices ("Do not sell or share my personal information"). After you opt out, ads are delivered in a restricted mode.
- iOS – App Tracking Transparency: we ask for permission to track only after you finish the first level, after a short explanation. If you decline, the IDFA is not available to the Game or to AdMob, ads are not personalised using it, and the Game works exactly the same.
- Android: you can reset or delete your advertising ID in Android Settings → Privacy → Ads (wording varies by device).
You can reopen the consent and privacy options at any time in Settings → Privacy choices.
How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites.
6. Who we share information with
We share information only with these companies:
| Company | What it does for the Game | Role | Privacy policy |
|---|---|---|---|
| Google LLC / Google Ireland Ltd. — AdMob and User Messaging Platform | Rewarded ads, ad measurement, consent management | Independent controller for its advertising (Google's own terms and policies apply) | https://policies.google.com/privacy; https://policies.google.com/technologies/partner-sites |
| Google LLC / Google Ireland Ltd. — Firebase (Google Analytics for Firebase, Crashlytics, Remote Config, Installations, Authentication, Cloud Firestore and Cloud Functions for the account, cloud save and Tower) | Analytics, crash reports, game configuration, the optional account and cloud save, the Tower | Processor (service provider) acting on our instructions | https://firebase.google.com/support/privacy |
| RevenueCat, Inc. (USA) | Purchase and subscription validation | Processor (service provider) acting on our instructions | https://www.revenuecat.com/privacy |
| Apple Inc. / Google LLC as app stores | Distribution of the Game, payment processing | Independent controllers | Their own privacy policies |
| Apple Inc. / Google LLC as sign-in providers (only if you sign in) | Sign in with Apple / Sign in with Google: they confirm your identity and tell us your account user ID and, if you allow it, your email address and name | Independent controllers | Their own privacy policies |
Other players see the Tower information marked "Other players" in Section 3.4 (your player name, portrait, floors, rank and power). Nothing else about you is shown to other players.
When you watch an ad, Google may share data with its advertising partners as described in Google's policies and in the consent message. We do not allow Firebase or RevenueCat to use your data for their own advertising.
We may also disclose information if required by law, to protect our rights or the safety of players, or as part of a merger, acquisition or sale of the Game (in which case this policy continues to apply to it).
7. How long we keep information
| Data | Retention |
|---|---|
| Save data on your device | Until you delete the Game or use Settings → Delete my data (signing out does not delete it) |
| Your account (Firebase Authentication: account user ID, provider, email address, name if shared, sign-in records) | Until you delete it in Settings → Delete my data or ask us to delete it |
| Your cloud save | While your account exists. If an account has not been used for 24 months, we may delete its cloud save, after giving notice where we have a way to reach you |
| Tower profile (player name, portrait, floors, power, flags) | While you play. If you have not opened the Tower for 24 months, we delete the profile |
| Tower clear records (including the best-floor replay), past seasons' leaderboards and reports | 12 months, then deleted |
| Firebase Analytics user-level and event-level data | 14 months, then deleted; only aggregated reports that do not identify you are kept |
| Crashlytics crash reports | 90 days, then removed from Google's live and backup systems |
| Firebase installation ID (used by Remote Config and Crashlytics) | Until it is deleted; when deleted, linked data is removed from Firebase systems within 180 days |
| RevenueCat purchase and subscription records (linked to your player ID, or to your account user ID while signed in) | While we use RevenueCat, so that purchases can be validated and restored, or until you ask us to delete them; we keep records we need for tax, accounting and legal reasons, even after you delete your account |
| Advertising data held by Google | As set out in Google's policies (for example, Google anonymises advertising data in server logs by removing part of the IP address after 9 months: https://policies.google.com/technologies/retention) |
| Emails to support | Up to 24 months after your request is handled |
8. Deleting your data
- On your device: Settings → Delete my data permanently erases your save file and progress from the device. Uninstalling the Game also removes it. This cannot be undone and we cannot restore the progress afterwards.
- Your account and cloud save (if you signed in): Settings → Delete my data, while signed in, deletes your cloud save, then your account (Firebase Authentication, including your email address), then the data on your device. If you used Sign in with Apple, we also revoke the Game's access to your Apple ID. If you can no longer open the Game, email info@innotronia.com with the subject "Delete my account" from the email address of the account (or tell us the account's email address) and we will delete it, usually within 30 days of confirming the request.
- Tower: Settings → Delete my data also deletes your tower profile (name, portrait, floors) and clear records from our servers; your name then disappears from leaderboards when they next update. To delete a profile you can no longer reach (for example after uninstalling as a guest), email info@innotronia.com with your player name.
- Purchase records: RevenueCat and store transaction records are kept as required for accounting and law (Section 7); you can ask us by email to delete the rest.
- Analytics and purchase data held by our providers: email info@innotronia.com with the subject "Delete my data". If you play as a guest, we can only find your data through the random IDs on your device, so please include the player ID shown in Settings. If you can no longer open the Game, tell us the device type and the approximate dates you played and we will do what we can. We then delete the RevenueCat records and Crashlytics data linked to your player ID and the Google Analytics data linked to your device's app instance ID, usually within 30 days of confirming the request; the providers then remove the data from their systems on their own schedules. Records of purchases that we must keep for tax or legal reasons are kept only as long as required.
- Advertising data held by Google: Google acts as an independent controller for AdMob. You can reset or delete your advertising ID in your device settings, withdraw ad consent in Settings → Privacy choices, and manage your data with Google at https://myadcenter.google.com and https://policies.google.com/privacy.
- Subscriptions are not cancelled by deleting your data or your account; cancel them in your App Store or Google Play account.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, to withdraw consent at any time (without affecting earlier processing), and to opt out of the sale or sharing of personal information or of targeted advertising. US residents: see Section 9A for the categories of personal information we collect, whether we sell or share it, and your state privacy rights.
To use these rights, use Settings → Privacy choices in the Game or email info@innotronia.com. We may need some information to find your data (see Section 8). We respond within the time required by law (for example one month under GDPR, 45 days under CCPA). You may use an authorised agent where the law allows.
You also have the right to complain to your local data-protection authority.
9A. United States privacy notice (California and other states)
This section is our notice at collection and privacy notice for California residents under the California Consumer Privacy Act as amended by the CPRA (CCPA), and also describes the rights residents of other US states with comprehensive privacy laws may have. It applies in addition to the rest of this policy.
Personal information we collect (in the past 12 months), its sources and why. Sources: your device (through the Game and the SDKs in Section 3.2), the app stores (purchase records), Apple or Google (if you sign in with them), and you (if you email us).
| CCPA category | What it means here | Purposes | Sold or shared? |
|---|---|---|---|
| Identifiers | Player ID, app instance and installation IDs, IDFV / app set ID, advertising ID (IDFA only if you allow tracking), IP address, your email address if you contact us; if you play the Tower: tower user ID and the player name you chose; if you sign in: account user ID, the email address and name your Apple or Google account shares | Running the Game, purchases, analytics, crash reports, ads, security; the optional account and cloud save | Shared with Google for cross-context behavioral advertising (advertising ID, IP address, device IDs), unless you opt out. Account details (user ID, email, name) and the cloud save are not sold or shared |
| Commercial information | Products bought, transaction IDs, subscription status | Delivering and restoring purchases, fraud prevention, analytics | Not sold or shared |
| Internet or other electronic network activity | Gameplay events, ad interactions, draws made, Tower clears and loadouts, crash and performance data | Analytics, game balance, ads, bug fixing | Ad interactions shared with Google for advertising, unless you opt out |
| Geolocation data (approximate only) | Country, region or city derived from IP address | Ads, legal compliance, statistics | IP-based location shared with Google for advertising, unless you opt out |
| Inferences | Ad interest profiles that Google may build | Ads (Google) | Created by Google as part of personalized ads |
We do not collect sensitive personal information as defined by the CCPA (such as precise geolocation, account passwords or other log-in credentials, government IDs or health data); signing in happens with Apple or Google, and we never receive your password. We do not sell personal information for money. Using Google AdMob for personalized ads counts as "sharing" for cross-context behavioral advertising (and may count as "targeted advertising" or a "sale" under other state laws). We disclose the other information above to our service providers (Google Firebase, RevenueCat) only to provide the Game. We do not have actual knowledge that we sell or share the personal information of consumers under 16; the Game is not intended for children under 13 (Section 10). How long we keep each category is set out in Section 7.
Your rights. Depending on your state, you may have the right to: know what personal information we have collected about you and how we use and disclose it; get a copy of it; correct it; delete it; opt out of the sale or sharing of your personal information and of targeted advertising; and not be discriminated against for using these rights (we will not deny you the Game, charge you different prices or give you a worse experience for doing so). We do not use personal information for profiling that produces legal or similarly significant effects.
How to use them.
- Opt out of sale / sharing / targeted advertising: open Settings → Privacy choices in the Game and choose "Do not sell or share my personal information". After you opt out, ads are served in a restricted mode that does not use your data for cross-context behavioral advertising. On iOS you can also decline tracking; on Android you can delete your advertising ID (Section 5).
- Opt-out preference signals: the Game is a mobile app and does not receive browser signals such as Global Privacy Control; if we receive a valid opt-out preference signal (for example on our website), we treat it as an opt-out for that browser or device. Our website does not use cookies, analytics or advertising.
- Know, access, correct or delete: email info@innotronia.com with the subject "Privacy request" and your player ID from Settings (Section 8). We verify a request by matching the player ID (or, if you signed in, the email address of your account) and, where needed, details only the player would know (such as recent purchases). We respond within 45 days (extendable once by 45 days where the law allows) and confirm receipt within 10 business days.
- Authorized agents: an agent may submit a request for you with your signed permission; we may ask you to confirm the request directly.
- Appeals: if we decline your request, you can appeal by replying to our answer; we will respond within the time required by your state's law, and you may contact your state Attorney General if you disagree with the result.
Do Not Track. The Game does not respond to web browser "Do Not Track" signals (there is no browser in the Game). Our website does not track visitors. Other parties (Google AdMob and Firebase) collect personal information about your activity over time and across different apps when you use the Game, as described in Sections 3.2 and 5; you can limit this with Settings → Privacy choices and your device's ad settings.
California "Shine the Light". We do not share personal information with third parties for their own direct marketing purposes.
10. Children
The Game is intended for a general audience of players aged 13 and over and is not directed at children under 13. We do not knowingly collect personal information from children under 13 (or the higher age required in their country), the Game does not ask for age, and our ad settings tell Google that the Game is not child-directed. If you believe a child has used the Game and that data about them was collected, contact info@innotronia.com and we will delete it.
11. International transfers
Atronia and our providers may process information in the United States and other countries whose data-protection laws differ from those in your country. Where personal information from the EEA, UK or Switzerland is transferred:
- Google (AdMob and Firebase) relies on the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework, and on the European Commission's Standard Contractual Clauses where applicable.
- RevenueCat stores data in the United States and relies on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, as set out in its data processing agreement.
- Atronia is established in the United States (California). Emails and requests you send us are processed in the United States.
12. Security
Data sent by the Game travels over encrypted connections (HTTPS). Your cloud save can be read and written only by your own signed-in account. Tower clears are verified and leaderboards written only by our servers. Our providers apply their own security measures. No method of storage or transmission is completely secure, but we work to protect your information.
13. Changes to this policy
We may update this policy, for example when we add a feature or a service provider. We will post the new version at https://finalholdout.com/privacy.html with a new "Last updated" date, and tell you in the Game about significant changes (the Game asks you to agree to the updated documents before you continue playing). Where the law requires your consent to a change, we will ask for it.
14. Contact
Atronia Innovations Inc. 3134 Friendswood Ave, El Monte, CA 91733, USA Email (support, privacy and legal): info@innotronia.com Website: https://finalholdout.com