Privacy Policy & Data Protection

This Privacy Policy explains how EEND Games and Arjan Cordia collect, use, store, and safeguard your data across our website (eendgames.nl, arjancordia.com), web games, and mobile applications published on the Google Play Store.

Effective Date: October 17, 2024 (Updated for 2026 Standards)

•

Data Controller: EEND Games (Arjan Cordia), Netherlands (EU)

•

Inquiries: arjaneend@gmail.com

Google Play Games

Leaderboards, cloud saves, achievements via Google Play Games Services, and opt-outable ad delivery (AdMob / Unity Ads). We never collect sensitive personal information.

Web & AdSense

Google AdSense & H5 Games Ad Placement API for monetization. Local storage stores your game progress and audio preferences locally in your browser.

Your Rights & Deletion

Full GDPR & CCPA rights. You have the absolute right to view, correct, or request the immediate deletion of any associated account or game data within 30 days.

Section 1Google Play Store Policy Compliance

Google Play Games & Mobile Applications Privacy Policy

This section applies specifically to all mobile applications and games published on the Google Play Store by EEND Games / Arjan Cordia (including titles such as Voggel, Tower of Power, and related companion mobile apps).

1.1 Data Collected by Our Mobile Games

We collect minimal data required to deliver core game mechanics, synchronize player achievements, and keep the games free to play:

Google Play Games Services: If you sign in using your Google Play Games account, we may access your public Gamer Tag, profile avatar, achievements, and leaderboard scores. With your permission, cloud saves are synchronized to your personal Google Play Cloud Storage.
Device Identifiers & Advertising ID: For games displaying ads, third-party advertising networks (e.g. Google AdMob, Unity Ads) receive the Google Advertising ID (AAID), IP address, and coarse device metrics (device model, operating system version, locale) to serve personalized or non-personalized ads and prevent ad fraud.
Diagnostics & Crash Telemetry: Anonymized crash logs and Application Not Responding (ANR) reports gathered via Google Play Console Vitals and Firebase to identify bugs and enhance frame rates.
In-App Purchases (IAP): Any virtual goods or remove-ads upgrades are processed exclusively through Google Play In-App Billing. EEND Games does not receive, process, or store your credit card, debit card, or financial billing details.

1.2 Android System Permissions Requested

Our mobile games only request permissions strictly necessary for gameplay functionality:

Permission	Purpose
INTERNET	Enables cloud saving, online leaderboards, and ad delivery.
ACCESS_NETWORK_STATE	Verifies internet connectivity before making network calls.
VIBRATE	Provides haptic feedback during tactile actions and collisions (can be disabled in-game).
POST_NOTIFICATIONS (Android 13+)	Optional notification prompts for game daily challenges or energy refills. Only requested with explicit user approval.

1.3 Third-Party Services & SDK Disclosures

Our games integrate trusted third-party SDKs that operate under their respective privacy policies:

Google Play Services & Firebase

Authentication, leaderboards, crash logs, and cloud saves.

Google Privacy Policy

Google AdMob

Banner, interstitial, and rewarded video advertising.

Google Advertising Policy

Unity Engine & Analytics

Game rendering engine and hardware compatibility analytics.

Unity Privacy Policy

Google Play In-App Billing

Secure digital goods and upgrade transactions.

Google Play Monetization

1.4 Children’s Privacy (COPPA & Google Play Families Policy)

Protecting the privacy of children is of paramount importance to us:

Our games are designed for general audiences. We do not knowingly solicit or collect personally identifiable information from children under 13 (or under 16 in the European Economic Area).
If our games are configured for all ages or designated under Google Play’s Families Policy, we only serve non-personalized, COPPA-compliant contextual ads from Google Families Certified Ad Networks, and do not transmit the Advertising ID for behavioral tracking.
If a parent or legal guardian discovers that their child has provided us with personal information without consent, please contact us immediately at arjaneend@gmail.com, and we will promptly delete all such data from our databases.

How to Opt Out of Personalized Ads on Android

You can reset your Google Advertising ID or opt out of personalized interest-based advertising at any time directly through your Android device settings:
Settings ➔ Google ➔ Ads ➔ Reset advertising ID / Delete advertising ID

Section 2Website, Browser Arcade & Web Services

Website & Browser Games Privacy Policy

This section applies to your use of eendgames.nl, arjancordia.com, browser arcade games (like Tower of Power), contact forms, and client portals.

2.1 Information We Collect on Our Websites

Direct Inquiries & Forms: When you submit a message via our contact form, freelance consultation form, or workshop booking, we collect your name, email address, phone number (optional), and message content.
Authentication & Admin Portals: If you log in via Supabase Authentication or Google OAuth (for developer or administrative capabilities), we securely receive your verified email address, public profile name, and avatar image. We do not receive or store your Google password.
Log Files & Server Telemetry: Standard web server logs collect IP address, browser user-agent, operating system, referring URL, pages visited, and date/time stamps to maintain server security and defend against cyber attacks.

2.2 Google AdSense & H5 Games Ad Placement API

We use Google AdSense and the Google H5 Games Ad Placement API to display web advertisements, supporting the development of free browser games:

Google and third-party vendors use cookies to serve ads based on your prior visits to our website or other websites across the internet.
Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to our sites and/or other sites on the Internet.
Users in the European Economic Area (EEA) and the UK are presented with a Consent Management Platform (CMP) conforming to Google Consent Mode v2 to choose between personalized ads, non-personalized ads, or ad measurement.
You may opt out of personalized advertising at any time by visiting Google Ads Settings or through AboutAds.info.

2.3 Cookies and Local Storage (HTML5 Canvas Games)

We utilize browser cookies and client-side LocalStorage for the following purposes:

🎮 Game Progress & High Scores

Browser games like Tower of Power store your high score, wave records, sound volume, and purchased turret upgrades in your browser’s localStorage. This data remains on your device and is not transmitted to external servers.

🔒 Essential Session & Security Cookies

Authentication tokens and security state cookies required for maintaining logged-in sessions and verifying CSRF tokens.

Section 3Google Play Policy Mandate & GDPR Article 17

User Data Deletion Request

In strict compliance with the Google Play Developer Policy and GDPR Article 17 (Right to Erasure), users have the absolute right to request the deletion of all personal data, game records, or account credentials associated with our applications and websites.

Option 1: Direct Email Deletion Request

Send an email to our data privacy officer at arjaneend@gmail.com with the subject Data Deletion Request - [Game / Website].

Please specify:

Your Google Play Gamer Tag or registered email address.
The name of the application or game (e.g. Voggel, Tower of Power, or Website).
Whether you wish to delete leaderboard scores, cloud saves, or all records.

Send Deletion Request Email

Option 2: Device & Browser Reset

Android Mobile Games:

You can immediately erase all locally stored data and cache on your Android device:
Android Settings ➔ Apps ➔ [Game Name] ➔ Storage ➔ Clear Data & Clear Cache

Google Play Games Cloud Saves:

To delete cloud-synced saves: open the Google Play Games app ➔ Profile ➔ Settings ➔ Delete Play Games account & data.

Web Browser Games:

Clear your browser cache or visit dev tools ➔ Application ➔ Clear Storage for eendgames.nl.

Deletion Timeline & SLA: All verified data deletion requests received by email are permanently executed across all databases, backups, and leaderboards within 30 business days. An email confirmation will be provided once completed.

Section 4User Rights & Supervisory Authorities

Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your country or state of residence, you are entitled to exercise the following legal rights:

Right to Access (GDPR Art. 15)

Request confirmation as to whether your personal data is being processed, and obtain a free copy.

Right to Rectification (GDPR Art. 16)

Correct inaccurate or incomplete personal records held by us.

Right to Erasure (GDPR Art. 17)

Request the permanent deletion of your data where processing is no longer necessary.

Right to Data Portability (GDPR Art. 20)

Receive your submitted data in a structured, commonly used, and machine-readable format.

California CCPA / CPRA Notice

We do not sell or share your personal information to third parties for monetary consideration.

Right to File a Regulatory Complaint

You have the right to lodge a complaint with your national supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP) at autoriteitpersoonsgegevens.nl.

Data Security & Encryption

All communications with our servers, game APIs, and databases are strictly encrypted in transit using industry-standard TLS 1.2 and TLS 1.3 cryptographic protocols. Databases are protected with row-level security (RLS) policies and firewall restrictions.

Changes to this Privacy Policy

We may periodically revise this policy to reflect updates to our games, Google Play guidelines, or legal statutes. Any modifications will be posted to this page with an updated "Effective Date" timestamp.

Questions & Privacy Inquiries

Have questions regarding your data?

Arjan Cordia is the responsible data controller for EEND Games. Send questions, feedback, or data requests directly:

Contact Privacy Controller