Neural Breach — Cyberpunk Puzzle Game for Android
Effective Date: May 15, 2026 | Last Updated: July 31, 2026
This Privacy Policy describes how Leonid Korsakov
("we," "us," or "our") collects, uses, and shares information when you use our
mobile application Neural Breach (the "App"), available on the
Google Play Store under the package name com.komandakycto.neuralbreach.
By downloading, installing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.
The data controller responsible for your personal data is:
For any privacy-related questions or requests, please contact us at the email addresses above.
When you use the App, certain information is collected automatically through integrated third-party services. We are responsible for ensuring these SDKs comply with applicable privacy laws and our stated data practices.
| Data Category | Specific Data | Collected By | Purpose |
|---|---|---|---|
| Device & account identifiers | Android Advertising ID (AAID), app set ID, device model, OS version | Google AdMob (Mobile Ads SDK) | Advertising, measurement, fraud prevention |
| IP address | Used for approximate location estimation and fraud prevention | Google AdMob (Mobile Ads SDK) | Advertising, analytics, security |
| User interaction data | App launches, taps, video views, ad impressions, ad clicks, rewarded ad completions | Google AdMob (Mobile Ads SDK) | Advertising, analytics, measurement |
| Diagnostic information | App launch time, hang rate, energy usage | Google AdMob (Mobile Ads SDK) | SDK performance, diagnostics |
| Player identity | Google Play Games player ID, display name (if signed in) | Google Play Games Services | Cloud saves, achievements, player identity |
| Purchase records | In-app purchase product IDs, purchase tokens, transaction timestamps | Google Play Billing | Purchase processing, entitlement verification |
| Consent status | Your advertising consent preference (personalized / non-personalized / declined) | Google User Messaging Platform (UMP) | Consent management, regulatory compliance |
| App interaction events | Which level was started, completed, restarted or failed; number of moves; tutorial started and completed; whether the App was opened a second time; advertisement shown. In addition, the SDK automatically records standard events we do not configure, including first launch, session start, screen views, engagement time, app updates and app removal | Google Analytics for Firebase | Understanding where players stop playing, so the game can be improved |
| App instance identifier | A randomly generated identifier for your installation of the App (the Firebase app-instance ID); the Android Advertising ID, unless you have deleted it in Android settings; coarse technical attributes provided by the SDK (device model, operating system version, country, App version); and coarse location derived from a masked IP address | Google Analytics for Firebase | Grouping events from the same installation into a session |
| Crash and stability reports | Stack trace of a crash or freeze, the device state at that moment (model, operating system version, memory, orientation), App version, and a randomly generated installation identifier | Firebase Crashlytics | Finding and fixing crashes. We attach no name, account or custom identifier |
In jurisdictions where prior consent is required before accessing or storing information on your device (including under the ePrivacy Directive, Article 5(3)), we do not initialize the advertising SDK or any tracking-related functionality until you have provided your consent through the consent dialog. This applies to both advertising and analytics: analytics collection ships switched off and, in these jurisdictions, is only enabled once you have consented. If you decline, no ads are requested, the advertising SDK is not initialized, and no analytics events are collected at all. Withdrawing consent afterwards stops analytics collection immediately.
Outside those jurisdictions the consent dialog is not shown, because prior consent is not legally required there. In that case analytics collection begins on first launch. We consider this the honest description of the App's behaviour rather than claiming a worldwide opt-in we do not operate. If you select non-personalized ads, advertising identifiers may still be used by Google for limited purposes such as frequency capping, aggregated reporting, and fraud prevention, but not for ad targeting.
The App stores the following data locally on your device:
On Android, this local data may be automatically backed up to your personal Google Drive via Android Auto Backup — a Google operating-system feature that stores app data in a private folder on your Google Account (up to 25 MB per app). This backup is controlled by your device settings, not by us; we do not have access to its contents. You can disable Auto Backup at any time in Android Settings > Google > Backup. Independently, your data may also be synced via Google Play Games Services if you choose to sign in (see Section 3.4).
If you choose to sign into Google Play Games Services, the following data is saved to Google's cloud servers for the purpose of cloud saves and achievements:
Cloud sync via Google Play Games Services is optional. If you do not sign in, your data is not synced through Play Games — but, as noted in Section 3.3, it may still be backed up to your personal Google Drive via Android Auto Backup if that OS-level feature is enabled on your device.
The App does not collect:
Information is collected and used for the following purposes:
| Processing Activity | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Core gameplay (saving progress, processing purchases) | Providing the game service | Contract performance (Art. 6(1)(b)) |
| Cloud saves via Google Play Games Services | Cross-device synchronization | Consent (Art. 6(1)(a)) — sign-in is optional |
| Achievements (Google Play Games) | Game feature delivery | Consent (Art. 6(1)(a)) — sign-in is optional |
| Personalized advertising (AdMob) | Supporting the free-to-play model | Consent (Art. 6(1)(a)) — via UMP consent dialog; ePrivacy Art. 5(3) consent for device access |
| Non-personalized advertising (AdMob) | Supporting the free-to-play model | Legitimate interest (Art. 6(1)(f)); ePrivacy Art. 5(3) consent for device access where required |
| Gameplay analytics (Google Analytics for Firebase) | Identifying where players stop playing so the game can be improved | Consent (Art. 6(1)(a)) — via the same UMP consent dialog; ePrivacy Art. 5(3) consent for device access. Collection is disabled by default and never starts without consent. |
| Crash and stability reporting (Firebase Crashlytics) | Detecting and fixing crashes and freezes | Legitimate interest (Art. 6(1)(f)) — keeping the App working. Unlike analytics this is not consent-based and stays active, because switching it off for the players whose App is crashing would defeat its only purpose |
| In-app purchase processing | Transaction fulfillment and entitlement verification | Contract performance (Art. 6(1)(b)) |
| Fraud prevention and security | Verifying purchase legitimacy, preventing abuse | Legitimate interest (Art. 6(1)(f)) |
| SDK diagnostics and performance data (AdMob) | SDK performance and fraud prevention | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest as a legal basis, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request details of these assessments by contacting us.
The App integrates the following third-party services. We are responsible for ensuring that the data collection by these SDKs is disclosed accurately and that appropriate safeguards are in place. Each service collects and processes data according to its own privacy policy:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Google AdMob (Mobile Ads SDK) | Google LLC | Advertising (rewarded, interstitial, app open ads) | Google Privacy Policy |
| Firebase Crashlytics | Google LLC | Crash and stability reporting | Google Privacy Policy |
| Google Analytics for Firebase | Google LLC | Aggregated gameplay analytics (consent-gated; disabled by default) | Google Privacy Policy |
| Google Play Games Services | Google LLC | Achievements, cloud saves, player identity | Google Privacy Policy |
| Google Play Billing | Google LLC | In-app purchase processing | Google Privacy Policy |
| Google User Messaging Platform (UMP) | Google LLC | GDPR/ePrivacy/CCPA consent management (IAB TCF v2.3) | Google Privacy Policy |
Apart from Google Analytics for Firebase and Firebase Crashlytics, described above, we do not use any other analytics services, tracking pixels, social media SDKs, or third-party telemetry platforms. We do not operate servers of our own: all network communication from the App is directed exclusively to Google services. The analytics SDK sends us no directly identifying data — the events reach us only in Google's aggregated reports, keyed to a pseudonymous identifier. This does not apply to information you send us yourself, such as an email to our support address.
We maintain an internal SDK register documenting the name, version, purpose, permissions, data types collected, retention periods, and recipient roles for each integrated SDK. We review this register whenever SDK versions are updated.
The App displays advertisements through Google AdMob to support the free-to-play model. The App uses the following ad formats:
Our advertising SDK (Google Mobile Ads SDK) may automatically collect and share the following data:
This data is used for purposes including advertising delivery, measurement, analytics, and fraud prevention. For full details, see the Google Mobile Ads SDK data disclosure.
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you will be shown a consent dialog (compliant with IAB Transparency & Consent Framework v2.3) on first launch. You may choose to receive personalized or non-personalized ads, or decline advertising tracking entirely. You can change this preference at any time through the Settings screen in the App.
You can opt out of personalized advertising through any of these methods:
We do not sell your personal data to third parties. We share data only in the following circumstances:
Note regarding advertising: Google AdMob may share aggregated or de-identified ad performance data with advertising partners. For details, refer to the Google Advertising Partner Policy.
We do not share personal data with data brokers, social media platforms, or any parties other than those listed above.
Your data may be transferred to and processed in the United States or other countries where Google operates data centers. These transfers are protected by the following safeguards:
For transfers to other countries where Google processes data, Google applies appropriate safeguards as described in their data transfer frameworks documentation.
| Data Category | Retention Period | Deletion Method |
|---|---|---|
| Local game data (progress, settings, inventory, gameplay statistics) | Stored on your device until you erase it via in-app PURGE, uninstall the App, or clear App data through Android Settings | In-app Settings → // DATA WIPE → PURGE, or uninstall / clear data via Android Settings > Apps > Neural Breach > Storage |
| App language selection | Stored by Android as a per-app language setting, outside the App's own storage; persists until you change or reset it in Android settings | Android Settings > Apps > Neural Breach > Language. Not cleared by in-app PURGE. |
| Android Auto Backup (Google Drive) | Stored in a private folder on your Google Account when Auto Backup is enabled; retained according to Google's backup retention rules | Android Settings > Google > Backup (disable or delete app backup) |
| Cloud save data (Google Play Games) | Stored on Google servers under your Google Account until you delete it through the in-app PURGE action (best-effort — requires Play Games sign-in and network connectivity) or through your Google Account / Play Games settings; also deleted if your Google Account itself is deleted under Google's policies | In-app Settings → // DATA WIPE → PURGE (best-effort), or your Google Account / Play Games settings; see our Data & Account Deletion page, Method B |
| Purchase records | Retained by Google under applicable legal, accounting, tax, refund, and anti-fraud obligations; see Google's Privacy Policy | Cannot be deleted due to legal retention obligations |
| Crash reports (Firebase Crashlytics) | Retained by Google for up to 90 days, then deleted automatically. Reports carry a randomly generated installation identifier, not your name or account | Not individually deletable — a crash report cannot be traced back to a person |
| Analytics events (Google Analytics for Firebase) | Held by Google for the retention period configured on our Analytics property, after which event-level records are deleted automatically. The events are tied to a randomly generated app-instance identifier, not to your name or account. The data is pseudonymous rather than anonymous: we hold nothing that identifies you and cannot connect these events to you unaided, but if you send us your app-instance identifier we can ask Google to delete the events recorded against it. Withdrawing consent stops any further collection immediately, and does not erase events already recorded. | Withdraw consent where the in-app Settings → Privacy Settings entry is offered, or clear the App's data / uninstall it. Note that resetting your advertising ID in Android settings does not reset the separate app-instance identifier |
| Advertising data (AdMob) | Retained by Google per their data retention policies; advertising identifiers can be reset or deleted by you at any time | Android Settings > Google > Ads |
| Consent preferences | Stored locally on your device; updated when you change preferences | In-app Settings > Privacy Settings |
| Privacy / data-deletion request correspondence | Email messages sent to support-komandakycto@proton.me in connection with a data-deletion or privacy request, retained as a record of compliance for up to 12 months from completion of the request, then deleted. Held in our Proton Mail inbox; we do not export or back up this correspondence to any other system. | Automatic deletion at the end of the 12-month retention period, or earlier on your request once the original deletion request has been processed |
Apart from the privacy / data-deletion request correspondence described in the last row above (which is held in our Proton Mail inbox for compliance purposes), we do not retain any personal data on our own servers. All other data is either stored locally on your device or processed by Google's services as described in this Section. We will delete or anonymize data when the purpose for which it was collected has been fulfilled, unless a longer retention period is required by law.
We implement reasonable technical and organizational measures to protect your data:
However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. Any transmission of data is at your own risk.
The App is not intended for children as defined by applicable law in the jurisdictions where the App is available. This includes, but is not limited to, children under 13 in the United States (COPPA); between 13 and 16 in the European Economic Area, depending on each EU Member State's implementation of GDPR Article 8 (some Member States, such as Belgium, Denmark, and Sweden, have set the threshold at 13); and under 18 in India (DPDPA).
We do not knowingly collect personal information from children. The App is configured to indicate that it is not designed for children in the Google Play Console's target audience settings. Ad requests are tagged accordingly to prevent child-directed ad serving, and the consent flow is configured with under-age-of-consent set to false.
If we become aware that we have inadvertently collected personal data from a child, we will take prompt steps to delete such information and disable related processing where feasible. If you are a parent or guardian and believe your child has provided personal information through the App, please contact us at support-komandakycto@proton.me.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:
To exercise any of these rights, please contact us at support-komandakycto@proton.me. We will respond to your request within 30 days as required by law. If the request is complex, we may extend this period by an additional 60 days, and we will inform you of any extension within the initial 30-day period.
You also have the right to lodge a complaint with your local data protection supervisory authority. A list of EU/EEA supervisory authorities is available at edpb.europa.eu. For UK residents, the supervisory authority is the Information Commissioner's Office (ICO).
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you the following rights:
We do not sell personal information as defined under the CCPA. However, the use of advertising identifiers by Google AdMob for personalized advertising may be considered "sharing" of personal information under the CCPA. You may opt out of this at any time:
As described in Section 3, we collect the following categories (as defined by the CCPA):
| CCPA Category | Collected | Shared for Advertising | Sold |
|---|---|---|---|
| Identifiers (device ID, advertising ID, player ID) | Yes | Yes (AdMob) | No |
| Commercial information (purchase history) | Yes | No | No |
| Internet or electronic network activity (ad interactions, app usage) | Yes | Yes (AdMob, Google Analytics for Firebase) | No |
| Geolocation data (approximate, via IP) | Yes | Yes (AdMob) | No |
| Inferences (ad interest profiles) | By Google | Yes (AdMob) | No |
Where applicable under your state's privacy law (including California, Colorado, Connecticut, Texas, Virginia, and similar laws in other US states), you may have rights to access, delete, correct, or opt out of certain processing of your personal data. To exercise any of these rights, email us at support-komandakycto@proton.me with the subject line "Privacy Rights Request" and include your state of residence and enough information for us to locate your data (e.g., your Google Play Games player ID or device on which you use the App).
Because the App does not require account creation or collect email addresses, we verify requests by matching the information you provide against data associated with your use of the App. As an indie developer, we may not meet every state law's applicability threshold, but we will respond to verifiable requests in good faith.
If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) provides you with rights including: confirmation of processing, access to your data, correction, anonymization or blocking of unnecessary data, data portability, deletion of data processed with consent, information about shared data, and the right to revoke consent. To exercise these rights, contact us at support-komandakycto@proton.me. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).
If you are located in South Korea, the Personal Information Protection Act (PIPA) requires separate, specific consent for advertising and tracking purposes. Our consent mechanism provides this separation. You have the right to request access, correction, deletion, and suspension of processing of your personal information.
If you are located in Japan, the Act on the Protection of Personal Information (APPI) applies. Your data may be transferred to the United States (where Google operates) for the specific purposes of advertising delivery, measurement, and fraud prevention. The United States does not have the same level of data protection as Japan. Google, as the receiving entity, maintains security measures as described in their privacy policy. You may request disclosure, correction, deletion, or cessation of use of your personal information.
If you are located in India, the Digital Personal Data Protection Act (DPDPA) applies. Under the DPDPA, a "child" is defined as a person under 18 years of age. If you are under 18, you should not use this App without verifiable parental consent. The App is not designed for or directed at children. You have the right to access, correct, and erase your personal data.
As our home jurisdiction, Georgia's Personal Data Protection Law (modeled on the GDPR) applies to our data processing activities. The regulatory authority is the Personal Data Protection Service (PDPS). You may contact the PDPS to file a complaint regarding our data practices.
A full, step-by-step deletion guide — including the in-app one-tap PURGE flow, manual Play Games deletion through your Google Account, advertising-identifier reset, and an email-request pathway — is published at our dedicated Data & Account Deletion page. The summary below mirrors the main options:
Please note that certain data may be retained as required by applicable law (for example, purchase records for tax and accounting compliance) or for legitimate purposes (such as fraud prevention). We will inform you if we are unable to fully comply with a deletion request and explain the reasons.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where practicable, provide notice through the App or the Google Play Store listing. We encourage you to review this Privacy Policy periodically.
Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Privacy Policy, please discontinue use of the App. Where required by applicable law, we will seek your affirmative consent before applying material changes to how we process your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: