This Privacy Policy explains how DomiGaming, LLC ("DomiGaming," "we," "us," or "our") handles information when you play Orbital Bakery (the "Game") on iOS or Android. It applies to the Game only, and covers every version we distribute — beta builds through TestFlight and Google Play testing included.
Orbital Bakery is free to play. It is supported by advertising, and it also offers a small set of optional in-app purchases. We collect the minimum information needed to run the Game, fix problems, operate leaderboards, serve those ads, and deliver anything you choose to buy.
The Game does not require you to create an account, and it never asks for your name, email address, phone number, contacts, photos, microphone, or precise (GPS) location. The information collected is limited to the following.
Device model, operating system version, language, country or region (derived by our service providers from your IP address, not GPS), screen and hardware characteristics, app version, and the identifiers described next. Used for analytics, crash diagnostics, and ad delivery. The Game itself also reads the country set in your device's region settings — only to decide how your analytics choice is applied, as described in section 2 — and does not send that anywhere.
The Game does not know who you are, but it needs a stable way to tell one player's leaderboard record from another's. To do that it keeps a player identifier. On most devices this is derived from the device's own app identifier (Apple's identifier-for-vendor on iOS, or the Android ID on Android); where that isn't available the Game generates a random ID instead. On iOS the identifier is stored in the device Keychain so it survives reinstalling the Game; on Android it is stored with the Game's data. It is sent to PlayFab (see section 4), which creates an anonymous player record keyed to it. It is not your name, not your email address, not the advertising identifier, and it is not linked to your Apple ID or Google account. Separately, Firebase and Unity each generate their own app-instance identifiers for analytics, crash reporting, and ad delivery. Your device's advertising identifier is used only by the advertising services and only as described under "Advertising data" below.
If analytics is enabled (see section 2), the Game sends Firebase a small set of gameplay events: when a level or Endless run starts, ends, or is quit — with the level number, the mode (campaign or Endless), whether it was won, how long it took, and how many attempts it took — together with the highest campaign level you have reached. Firebase also records its standard app-usage events automatically: first open, session start and length, and time spent in the app. If a leaderboard submission or reward claim fails, the Game sends a diagnostic event describing the failure, which can include the score that was being submitted and the error text returned. This helps us understand how the Game is played, where players get stuck, and when the leaderboards misbehave. None of these events include your name, contact details, or the player identifier above.
Crash logs, stack traces, and device state at the moment of a crash, used to find and fix bugs. If you email us about a problem, anything you choose to send us — a description, a screenshot — is used only to answer you and fix the issue.
Your campaign progress, stars, unlocked levels, consumable balances, purchases, settings, and tutorial state are saved only on your device. We do not upload your save, and we cannot restore it if you delete the Game or move to a new device.
When you play, PlayFab keeps a record under the player identifier above containing: your Endless Mode scores on the daily, weekly, monthly, and all-time leaderboards; for each submitted run, its length and the number of recipes completed; your chosen display name and selected in-game avatar; your progress toward the current daily and weekly quests, and which quest rewards you have claimed and when; and your leaderboard reward history — the board, the period, your finishing rank, and what was paid out. We also keep the highest campaign level you have reached, which decides which quests you are offered. Your display name, avatar, and scores are visible to other players on the leaderboards — please don't use your real name or anything else you'd rather not publish. Everything else in this record is visible only to us.
If you buy something in the Game, the transaction is handled entirely by Apple's App Store or Google Play. We never receive or store your name, billing address, card number, or any other payment details. The store confirms to the Game that a purchase completed; the Game then records what you own — and how many of each consumable boost you have left — in its local save on your device. Nothing about your purchases is sent to our servers or to our analytics. The ad-free purchase can be restored on a device signed into the same store account using the Restore Purchases button in the in-game store; consumable packs, once spent, are not restorable. We also see anonymous, aggregate sales reporting from Apple and Google: how many of each item sold and the revenue, with no individual purchaser identified.
On iOS, if you are already signed in to Apple's Game Center, the Game connects to it when it starts so that it can report the achievements you earn. The Game will not ask you to sign in, and if you are not signed in it simply skips this. The only thing the Game learns from Game Center is whether you are signed in — it does not receive your Game Center player ID, nickname, or friends, and it sends nothing about Game Center to PlayFab, Firebase, or us. Achievements are handled by Apple under Apple's privacy policy. The Android version does not connect to Google Play Games.
When an ad is shown, Unity LevelPlay and the ad network serving that ad receive your device's advertising identifier (Apple's IDFA on iOS, the Google Advertising ID on Android), IP address, coarse location derived from that IP address, device and app information, an app-installation-specific ID, and ad interaction events such as which ad was shown, whether it was watched to the end, whether it was tapped, and whether a reward was granted. Section 2 explains exactly how this works and how to limit it.
Orbital Bakery is free because it is advertising-supported. Ads are delivered through Unity LevelPlay, Unity Technologies' ad mediation service, which selects which ad network fills each ad request. Unity Ads is currently the only demand network we have enabled; if we add others, they will be named here before they begin serving. We use two formats:
The Game requests non-personalized advertising unless you affirmatively tell us otherwise. This is true everywhere in the world, and stays true unless you choose "Allow Personalized Ads" on the consent screen. Non-personalized ads are chosen based on general context — roughly where in the world you are, what device you're on, and what content is on screen — rather than a profile of your interests or activity across other apps.
The consent screen. The Game shows a consent screen at first launch, wherever you are in the world, before any ad is requested. It offers "Allow Personalized Ads" or "Non-Personalized Only." No ad is requested until you have answered.
Analytics is treated differently depending on where you are, and this is the only thing the Game uses your device's region setting for. If your device's region is set to a country in the European Economic Area, the United Kingdom, or Switzerland (or the Game cannot determine your region), analytics and crash reporting also stay off until you choose "Allow Personalized Ads." Everywhere else they run unless you decline on this screen or turn them off in Settings.
If you reset your progress or your profile in the Game's Settings, the consent screen is shown again on the next launch, and your previous answer is discarded rather than carried over.
On iOS, Apple's App Tracking Transparency (ATT) prompt is additionally shown to everyone before the first ad, and asks whether the Game may track you across other companies' apps and websites; if you choose "Ask App Not to Track," your IDFA is not made available and no cross-app tracking takes place.
Declining costs you nothing. The Game plays identically either way — same levels, same leaderboards, same rewarded-ad rewards. You'll simply see less relevant ads.
We do not receive or store your advertising identifier ourselves; it is used by Unity to select, cap, and measure ads. We receive only aggregate reporting — how many ads were shown and what revenue they earned — with no individual player identified.
Our legal bases under the GDPR are: performance of a contract (running the Game), legitimate interests (crash diagnostics, security, fraud prevention, and aggregate analytics), and consent (personalized advertising, which you may withdraw at any time as described above).
The Game uses a small number of established service providers, which process data on our behalf or, in the case of advertising, as independent controllers of the data they collect:
| Service | Provider | Purpose |
|---|---|---|
| Firebase Analytics & Crashlytics | Google LLC | Anonymous gameplay analytics and crash reporting |
| PlayFab | Microsoft Corporation | Anonymous player records keyed to the player identifier: online leaderboards (scores, display names, avatars), quest progress and claims, leaderboard reward history, and highest campaign level |
| Game Center (iOS only) | Apple Inc. | Achievements — only if you are already signed in to Game Center; the Game never prompts you to sign in |
| Unity LevelPlay (ad mediation) | Unity Technologies | Deciding which ad network fills each request, frequency capping, measurement, and ad-fraud prevention |
| Unity Ads (ad network) | Unity Technologies | Serving the rewarded and interstitial ads themselves — currently our only enabled demand network |
| Unity engine and Unity In-App Purchasing | Unity Technologies | Game engine services, and the on-device purchasing library that talks to the App Store and Google Play |
| App Store / Google Play | Apple Inc. / Google LLC | App distribution and beta testing |
| In-app purchases | Apple Inc. / Google LLC | Processing payments, issuing receipts, restoring previous purchases, and handling refunds — under their own terms, not ours |
Each provider handles data under its own privacy policy: Google · Firebase · Microsoft (PlayFab) · Unity · Unity (players) · Apple
We share player data only with the providers named above, and only for the purposes described in this policy. Each is bound by its agreement with us to protect that data to a standard equal to or greater than what this policy promises. We do not share player data with any other third party, we do not share it with third-party AI services, and we do not use it to train AI models.
Analytics and crash data are retained by the services above for limited periods — generally up to 14 months for Firebase analytics events and 90 days for crash reports — and are then deleted or reduced to aggregates. Advertising data held by Unity is retained under Unity's own retention schedule. Purchase records are held by Apple and Google under their own schedules; on our side, all we keep is the aggregate sales reporting those stores provide. Your PlayFab player record — leaderboard entries, quest progress and claims, reward history, and highest campaign level — is retained for as long as the Game operates its online features, so that long-running boards such as all-time scores continue to work and rewards are never paid twice. Saved progress lives only on your device and is retained for as long as the Game is installed.
Email [email protected] from any address and tell us your leaderboard display name as it currently appears in the Game (Profile screen), plus anything else that helps us find the right record — for example your best Endless score or roughly when you last played. We will delete your PlayFab player record, including all leaderboard entries, quest and reward history, and any associated data we can identify, and we'll confirm when it's done — normally within 30 days. Because the player identifier is derived from your device, playing again on the same device afterwards will start a fresh record.
Saved progress is on your device, not with us. Settings → Reset Game erases it, and so does uninstalling the Game. Settings → Reset Profile Data replaces your leaderboard display name with a generated one and clears your avatar, but does not delete your scores or other server-side records — email us for that.
To withdraw advertising consent, use Settings → Privacy Choices in the Game, your device settings, or the in-ad Data Privacy icon described in section 2. To stop analytics, use the Analytics switch in the Game's Settings. You do not need to contact us for either, and the change takes effect immediately.
Deleting the Game from your device stops all further collection.
Because Orbital Bakery has no user accounts, there is no account for you to delete — uninstalling removes your saved progress, and a deletion request to us removes your leaderboard and reward record.
Orbital Bakery is intended for a general audience. It is not directed to children under 13, is not listed in the App Store Kids Category, and is not marketed to children. We do not knowingly collect personal information from children under 13, and the Game collects no contact details or photos from any player — the only free-text field anywhere in the Game is the leaderboard display name, which defaults to a generated nickname.
If you believe a child under 13 has provided personal information through the Game — for example, in a leaderboard display name — contact us at [email protected] and we will remove it promptly.
Parents should be aware that the Game contains advertising and offers optional in-app purchases. Both platforms provide parental controls for content and for spending: Screen Time and Ask to Buy on iOS, and Family Link / Play Store purchase approvals and authentication on Android.
Depending on where you live — for example, the European Economic Area, the United Kingdom, Switzerland, Brazil, Canada, or a US state with a comprehensive privacy law such as California, Colorado, Connecticut, Virginia, or Texas — you may have the right to access, correct, delete, port, or restrict the processing of your personal information, to withdraw consent you previously gave, to opt out of targeted advertising, and to lodge a complaint with your data protection authority. We will not discriminate against you for exercising any of these rights.
To exercise a right, email [email protected]. Because the Game holds no identifying information about you, we will need your leaderboard display name (and possibly a recent score or the date you last played) to locate your record.
We do not sell personal information for money. However, serving advertising through Unity LevelPlay and Unity Ads may qualify as "sharing" personal information for cross-context behavioral advertising under the California Consumer Privacy Act when a player has consented to personalized ads. You can opt out at any time and at no cost by declining the consent prompt, by selecting "Ask App Not to Track" in the iOS ATT prompt, by opting out of ads personalization in your Android settings, or through Unity's Do Not Sell My Personal Information form. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Our service providers are headquartered in the United States and process data on servers in the United States and other countries. Where data is transferred out of the European Economic Area, the United Kingdom, or Switzerland, those providers rely on the European Commission's Standard Contractual Clauses or another approved transfer mechanism described in their own privacy policies, which are linked in section 4.
Data sent to the services above is transmitted over encrypted connections (TLS). Access to the analytics, leaderboard, and advertising dashboards is limited to DomiGaming personnel who need it, and is protected by multi-factor authentication. No method of transmission or storage is perfectly secure, so we also limit what we collect in the first place — which remains the best protection available. We cannot lose what we never collect.
If we add features or services that change how data is handled, we will update this policy and revise the effective date at the top of this page. Material changes will be noted in the Game's update notes, and where the law requires it we will ask for your consent again before the change takes effect.
Questions, concerns, or deletion requests:
DomiGaming, LLC
[email protected]
domi-gaming.com
We're a small studio and we read every message. If something in this policy is unclear, tell us and we'll fix the wording.
Effective September 6, 2026. This version replaces the policy dated August 18, 2026. The substantive changes are: the advertising consent screen is now shown to every player at first launch, anywhere in the world, rather than only to players whose device region is set to the European Economic Area, the United Kingdom, or Switzerland — no ad is requested until you have answered it; choosing "Non-Personalized Only" now also stops Firebase Analytics and Crashlytics collection wherever you are, where previously it did so only inside those regions, and the separate in-game Analytics switch continues to work independently of it; resetting your progress or your profile in the Game's Settings now shows the consent screen again on the next launch and discards your previous answer; and your device's region setting is now used only to decide how your analytics choice is applied, rather than to decide whether you are shown the consent screen at all.