Legal
Privacy policy
How Limbic Base handles your data on limbicbase.com and in our apps. Short version: we collect as little as we can, never sell anything, and you can delete your data at any time.
1. Who we are
Limbic Base is a sole proprietorship run by Roman Parodi in Switzerland. We are the controller responsible for the processing described here.
This single policy covers our website limbicbase.com and all of our apps, currently:
- Golden Grind: Business Empire (iOS, Android)
- Landlord Legacy: Rent Empire (iOS, Android, coming soon)
Future apps are covered too, unless they come with their own policy. Our apps share the same technical setup. Where a feature is only available in some apps, we say so.
For anything privacy-related, write to privacy@limbicbase.com.
2. At a glance
- No sale of data. We never sell your data or pass it to data brokers.
- Website without tracking. No cookies, no analytics, no third-party scripts.
- Play without an account. Sign-in is optional and only needed for Cloud Save and friends.
- You choose about ads. Personalised ads only with your consent.
- Hosted in Switzerland where possible. Our databases and server functions run in Zurich wherever the provider allows it.
- Delete anytime. In the app, or by email (see section 18).
3. Website
limbicbase.com is hosted by Infomaniak Network SA, Geneva, Switzerland. When you visit the site, the server automatically logs technical data: IP address, date and time, the page requested, browser and operating system, and the referring page. We use these logs only to run the site securely and to fix problems. The host deletes them after a short period.
The website sets no cookies and uses no analytics or tracking tools. It loads no fonts, scripts or images from third parties. If you switch between light and dark mode, your browser stores that choice locally (localStorage). It never leaves your device.
If you email us, we use your address and message only to answer you.
4. Apps: what we process
Depending on the app and the features you use, the following data may be processed:
| Data | Examples | Purpose |
|---|---|---|
| Device and other IDs | Advertising ID (IDFA/GAID), Firebase installation ID, RevenueCat app user ID, push token | Analytics, ads, purchases, notifications |
| App activity | Sessions, screens, in-game events such as investments made or level reached | Improving the game |
| App info and performance | Crash logs, diagnostics, app start and loading times, device model, OS version, language | Fixing bugs, speeding up the app |
| Device integrity | Attestation results from Google Play Integrity or Apple DeviceCheck | Protecting our servers from abuse |
| Approximate location | Country or region, derived from your IP address. Never precise GPS location | Consent rules, statistics |
| Purchase history | Products bought, transaction IDs, entitlements. Never payment card details | Unlocking and restoring purchases |
| Personal info | Name, email address and user ID, only if you sign in with Google or Apple | Your account and Cloud Save |
| Game data | Save game, settings, and (if enabled) public profile, friend codes, achievements and leaderboard scores | Cloud Save, friends, game services |
Features that differ between apps
| Feature | Golden Grind | Landlord Legacy |
|---|---|---|
| Sign-in with Google / Apple & Cloud Save | Optional | No |
| Online profile & friends | Optional | No |
All other services described in this policy can be used by any of our apps. Not every app uses every service at all times. Landlord Legacy is not yet released. If its feature set changes, we will update this table before launch.
5. Service providers
We work with the following providers. They process data on our behalf and only for the purposes described here, except where we state that a provider acts under its own responsibility.
- Google Firebase
- Google Ireland Ltd. / Google LLC. We use Analytics, Crashlytics (including release monitoring), Performance Monitoring, Remote Config, A/B Testing, App Check, Authentication, Cloud Firestore, Cloud Functions and Cloud Messaging. firebase.google.com/support/privacy
- Google AdMob & User Messaging Platform
- Showing ads, measuring them and collecting your consent. Google Ireland Ltd. / Google LLC. How Google uses data from partner apps
- Ad networks via mediation
- From time to time, ads may be delivered through AdMob mediation by AppLovin (AppLovin Corp., USA), Unity Ads and ironSource (Unity Technologies, USA/Israel) and Meta Audience Network (Meta Platforms Ireland Ltd.). They act under their own privacy policies: AppLovin · Unity & ironSource · Meta
- RevenueCat
- Validating, unlocking and restoring purchases. RevenueCat, Inc., USA. revenuecat.com/privacy
- Apple Game Center / Google Play Games
- Achievements, leaderboards and player profiles. Apple and Google act under their own privacy policies.
- Apple App Store / Google Play
- Download and payment. Apple and Google act under their own privacy policies. We never see your payment details.
- Infomaniak
- Website hosting and email. Infomaniak Network SA, Switzerland.
6. Analytics, quality & security
- Analytics (Firebase): we see how the game is used as a whole, for example which screens are popular or where players get stuck. We do not set our own user ID in Analytics and do not link Analytics to your name or email. Analytics is linked to AdMob so we can understand how ads perform. Ad-related use of this data for personalisation only happens with your consent (see section 7).
- Crashlytics & release monitoring: if the app crashes, a report with technical details (stack trace, device model, OS version, app version, an installation ID) is sent so we can fix the bug. We use release monitoring to spot problems right after an update. We do not attach your name, email or user ID to crash reports.
- Performance Monitoring: measures technical values such as app start time, screen loading and network request durations, together with device and app version.
- Remote Config & A/B Testing: let us adjust game settings without an app update and try out variants, for example a different balancing. Variants are assigned randomly. Results are evaluated in aggregate via Analytics.
- App Check: verifies that requests to our servers come from a genuine copy of our app on a genuine device. It uses Google Play Integrity on Android and Apple DeviceCheck on iOS. This protects Cloud Save, friend codes and our server functions from abuse.
7. Advertising & consent
Our apps are free and funded by ads through Google AdMob. Some apps offer a purchase that removes ads.
- Ad formats: optional rewarded ads that you choose to watch in exchange for an in-game bonus, and possibly banner and interstitial (full-screen) ads.
- Mediation: to fill ad slots, AdMob may pass an ad request to the networks listed in section 5. They then receive the same kind of data as AdMob: advertising ID (only with your permission on iOS), IP address, device information and ad interactions.
- Europe, UK and Switzerland: on first launch, the app asks for your consent through Google's consent dialog. Personalised ads are only shown if you agree. Otherwise you see non-personalised ads, based only on context such as the app and your rough location.
- iOS: the app asks for permission to track via Apple's App Tracking Transparency prompt. If you decline, your advertising ID (IDFA) is not shared.
- Change your mind: you can withdraw or change your consent at any time. To see the consent dialog again, clear the app's data (Android: Settings → Apps → the app → Storage → Clear data) or reinstall the app. Note that this also resets progress that isn't backed up with Cloud Save. You can also email us at privacy@limbicbase.com. On iOS you can turn off tracking per app under Settings → Privacy & Security → Tracking. On Android you can reset or delete your advertising ID under Settings → Google → Ads.
8. Sign-in & Cloud Save
Where an app offers Cloud Save (currently Golden Grind), you can back up your progress and restore it on another device. It runs on Firebase Authentication, Cloud Firestore and Cloud Functions.
- Without sign-in: your progress is stored only on your device.
- Sign-in options: only Google or Apple. Firebase receives the details your provider shares, usually your name, email address, profile picture and a user ID. With Apple you can hide your email. Apple then passes on a private relay address instead.
- We use these details only to identify your account and to answer your requests. Never for marketing. We never receive your password.
9. Online profiles & friends
Golden Grind has an optional public profile. It requires sign-in and is off by default. If you turn it on, players who have your friend code can see:
- your friend code (e.g. GG-XXXXXXX)
- the display name and avatar you choose
- progress stats such as net worth and level
Friend codes are created and resolved by our Cloud Functions. We also store the friend codes you add. You can switch your profile off at any time. Please don't use your real name as a display name if you don't want others to see it.
10. Game Center & Google Play Games
Our apps can connect to Apple Game Center (iOS) and Google Play Games (Android) for achievements and leaderboards. If you are signed in to these services on your device, the app shares game results with them, and we receive your player ID and player name from Apple or Google. Your Game Center or Play Games profile, friends and visibility are managed by Apple or Google under their own privacy policies. You can sign out or change your visibility in your device or Play Games settings.
11. Push notifications
Our apps may send push notifications through Firebase Cloud Messaging, for example reminders about in-game rewards. Notifications are only sent if you allow them in the system prompt. For this, a push token for your device is stored. You can turn notifications off at any time in your device settings, which stops them immediately.
12. In-app purchases
Payments are processed entirely by Apple or Google. We never see your payment details. RevenueCat checks whether a purchase is valid and unlocks it, using an app user ID, transaction IDs, entitlements, device type and OS version.
Currently the app user ID is an anonymous ID created by RevenueCat. We may switch to your account ID if you are signed in, so purchases can be restored on all your devices. RevenueCat does not receive your name or email address from us. For billing questions, please contact Apple or Google.
13. Legal bases
Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU/UK GDPR, we rely on:
| Processing | Legal basis (GDPR) |
|---|---|
| Running the game, Cloud Save, sign-in, friends feature, Game Center / Play Games, purchases | Performance of a contract (Art. 6(1)(b)) |
| Analytics, crash reports, performance monitoring, Remote Config, A/B testing, App Check, website server logs, answering emails | Legitimate interest in a stable, secure and improving product (Art. 6(1)(f)) |
| Personalised advertising, tracking on iOS, push notifications | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Non-personalised advertising | Legitimate interest in funding free apps (Art. 6(1)(f)) |
| Keeping purchase records | Legal obligation (Art. 6(1)(c)) |
14. Data location & international transfers
We run Cloud Firestore and Cloud Functions in Google's Zurich region (europe-west6) wherever possible. Some Firebase services, such as Analytics, Crashlytics, Performance Monitoring, Remote Config, App Check and Cloud Messaging, process data on Google's global infrastructure. Google, RevenueCat and the ad networks listed in section 5 may therefore process data in the USA and other countries outside Switzerland and the EU.
Where the recipient is certified, we rely on the EU-U.S. Data Privacy Framework, its UK extension and the Swiss-U.S. Data Privacy Framework. Otherwise we rely on the Standard Contractual Clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC). Website hosting stays in Switzerland.
15. Retention
| Data | How long |
|---|---|
| Analytics, A/B test results (Firebase) | 14 months, then deleted automatically |
| Crash reports (Crashlytics) | 90 days |
| Performance data | According to Google's retention periods for Performance Monitoring |
| Account, Cloud Save, profile, friend codes | Until you delete them |
| Push token | Until you turn off notifications or delete the app |
| App Check tokens | Short-lived, renewed automatically |
| Purchase records | As long as legally required |
| Ad data | According to the retention policies of Google and the ad networks |
| Website server logs | Short-term, deleted by the host |
| Emails | As long as needed to handle your request |
16. Children
Our games are made for a general audience. We do not knowingly collect personal data from children below the age of digital consent in their country. Depending on the country, that age is between 13 and 16. If you are below that age, please ask a parent or guardian before signing in, enabling notifications or agreeing to personalised ads. If you are a parent and believe your child has given us personal data, contact us and we will delete it.
17. Automated decisions & profiling
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. A/B testing assigns game variants randomly. If you consent to personalised ads, Google and the ad networks in section 5 use your data to infer interests and select ads. You can withdraw that consent at any time (see section 7).
18. Delete your data
In the app: open the settings and use the option to delete your account. Our Cloud Function then removes your sign-in account, Cloud Save, online profile and friend codes from our servers.
Without access to the app: email privacy@limbicbase.com with the subject "Delete my data". Tell us which app it concerns and, if you know them, the email address you signed in with or your friend code. We will delete your data within 30 days and confirm by email.
Analytics data is not linked to your name and is deleted automatically after 14 months. To have analytics data tied to your device removed earlier, mention it in your email. Apple, Google and RevenueCat keep purchase records as required by law. Game Center and Play Games data is managed by Apple and Google.
19. Your rights
You have the right to:
- access your data
- have it corrected
- have it deleted
- restrict processing
- receive it in a portable format
- object to processing based on legitimate interest
- withdraw consent at any time
Write to privacy@limbicbase.com. We will reply within 30 days. You may also lodge a complaint with a supervisory authority: in Switzerland the FDPIC, in the EU the data protection authority of your country.
US residents: we do not sell personal information. Under some US state laws, showing personalised ads may count as "sharing" personal information. You can opt out at any time by declining tracking or personalised ads as described in section 7, or by emailing us.
20. Security
All data between the apps, the website and our providers is encrypted in transit (HTTPS/TLS). App Check helps ensure that only genuine copies of our apps can reach our servers. Only we have access to our accounts with these providers.
21. Changes
If we change how we handle data, we update this page and the date at the top. For significant changes, for example a new kind of data, we will also let you know in the app where appropriate.
22. Contact
Limbic Base · Roman Parodi, sole proprietorship, Switzerland
privacy@limbicbase.com