§ Legal · Privacy

Privacy Policy

Heist Protocol · Effective October 5, 2026

Heist Protocol ("the game") is made by Code Creative Digital Marketing ("we", "us"). This policy explains what information the game handles, why, and the choices you have.

// In short

§01Information on your device

The game saves these on your phone or tablet only. They are never sent to us:

You can delete them at any time: Settings → Data → Clear statistics or Reset all settings, or uninstall the game.

§02Online play

Hosting or joining an online heist (Play with Friends) uses Unity Gaming Services, run by Unity Technologies:

  • Authentication creates an anonymous player ID on your device the first time you go online. It isn't linked to your name, email or store account.
  • Lobby and Relay connect the players in a heist. Your callsign, your icon and the moves you make are shared with the other players in that heist. To route the connection, Unity processes your device's IP address.
  • A heist's lobby, with its code, crew list and callsigns, exists only while the heist is running. Unity removes inactive lobbies automatically.

The game has no chat and no public profiles. Callsigns are visible only to the people in your heist. Unity handles this data under its own privacy policy.

§03Purchases

The one-time Host Unlock purchase is processed by Google Play or the Apple App Store. The game receives only a confirmation that the purchase was made, so it can unlock hosting and restore it later. We never receive your card or payment details. The store's own privacy policy covers the payment.

§04Crash and diagnostic data

If the game crashes or stops responding, the Unity engine can send a crash report to Unity so we can find and fix the problem. A report includes the device model, operating system version, app version and technical details of the error. It doesn't include your names, statistics or anything you typed.

§05What the game does not do

§06Children

The game isn't directed at children under 13, and we don't knowingly collect personal information from them. Online play needs no account and has no chat; other players see only a callsign. If you believe a child has provided personal information through the game, contact us and we'll help remove it.

§07How long information is kept

§08Your choices and rights

Depending on where you live (for example the EU, the UK or California), you may have the right to access, correct or delete personal information, or to object to its use. The game collects no account details, so most information can't be linked back to you. Clearing the game's data or uninstalling it removes everything on your device. For anything held by Unity, or any other request, email us and we'll respond within 30 days.

§09Security and transfers

Connections to Unity Gaming Services are encrypted. Unity may process data on servers outside your country, under its own safeguards.

§10Changes to this policy

If the game starts handling information differently, we'll update this page and its effective date before the change ships.

// Contact

Code Creative Digital Marketing
developer@codecreativedm.com