Privacy Policy
This privacy policy applies to the Banana in the Dark app for mobile devices, together with any related services operated by Adrian Brady (collectively, the “Application”). Adrian Brady is hereby referred to as the “Service Provider”.
This privacy policy is effective as of 2026-06-25
Information Collection and Use
The Application collects information when you download and use it. This information may include:
- Your device's Internet Protocol address
- Time spent in the Application
- Your mobile operating system
- An app-generated player identifier (UUID) used to identify your session
- Your chosen in-game username (used transiently during multiplayer sessions only. See below)
- Gameplay data (such as board state, tile actions, and room codes) when using multiplayer features
- An advertising identifier (IDFA), collected by Google AdMob only if you grant permission via Apple's App Tracking Transparency (ATT) prompt
Multiplayer Services
When you use the multiplayer features of the Application, your device connects to a game server operated by the Service Provider (bananas.adrianbrady.dev). The following data is transmitted to and processed by this server:
- Player identifier: A persistent UUID generated by the Application and stored on your device, used to identify your session across games
- Username: Your chosen in-game name, transmitted during gameplay to display to other players in the same room. It is used only for the duration of the game session and is not stored on disk or retained after the session ends
- Gameplay data: Board state, tile actions, room codes, and related game events
- IP address: Transmitted inherently as part of the WebSocket connection
Server logs retain only the player UUID and technical connection data for up to 90 days, after which they are automatically deleted. Usernames are never written to logs or stored on disk.
Please do not use your real name or any personal information as your in-game username. Choose a nickname or alias instead.
Advertising
The Application displays ads served by Google AdMob. AdMob may collect your device's advertising identifier (IDFA) and approximate location to serve interest-based advertisements only if you grant permission via Apple's App Tracking Transparency (ATT) prompt when first launching the Application. If you decline, AdMob will serve non-personalized ads only and will not use your IDFA for cross-app tracking.
You may remove ads entirely via an in-app purchase.
For more information on how Google uses data, see Google's Privacy Policy.
Location Information
The Application's third-party advertising partner (Google AdMob) may collect approximate (coarse) location data from your device for the purposes of serving geographically relevant advertisements and measuring ad performance. The Service Provider does not directly collect or store your location.
In-App Purchases
The Application offers optional in-app purchases (such as removing ads or leaving a tip). All purchases are processed by Apple through the App Store. The Service Provider does not have access to your payment information. Purchase history is used solely to unlock the relevant features within the Application.
Apple Game Center
The Application integrates with Apple Game Center for leaderboards and achievements. Your Game Center nickname and scores may be visible to other players via leaderboards. This data is governed by Apple's Privacy Policy.
Cookies and Tracking Technologies
The Application or its third-party SDKs may use device identifiers and similar technologies to support functionality, advertising, or service delivery. Tracking-based advertising only occurs with your explicit permission via Apple's ATT prompt.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, contact the Service Provider at support@adrianbrady.dev.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights.
Note that under CPRA, sharing your data with AdMob for personalized advertising may constitute “sharing” of personal information. The most direct way to opt out on iOS is to deny the ATT permission prompt, or to revoke it in Settings > Privacy & Security > Tracking. You may also contact the Service Provider at support@adrianbrady.dev.
Third Party Services
The Application uses the following third-party services, each with their own privacy policies:
The Service Provider may also disclose information:
- As required by law, such as to comply with a subpoena or similar legal process
- When necessary in good faith to protect rights, safety, or to investigate fraud
- With trusted service providers acting on the Service Provider's behalf who have agreed to adhere to this privacy policy
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards, the Service Provider will use appropriate mechanisms including Standard Contractual Clauses or other legally recognized transfer mechanisms.
Opt-Out Rights
You can stop all data collection by uninstalling the Application. To opt out of personalized advertising specifically, deny or revoke ATT permission in iOS Settings > Privacy & Security > Tracking.
To request deletion of your personal data, contact the Service Provider at support@adrianbrady.dev.
Data Retention Policy
- Server logs (player UUID and technical connection data only): Automatically deleted after 90 days via systemd-journald rotation
- Usernames: Never stored on disk or retained after a multiplayer session ends
- Advertising identifiers: Governed by Google AdMob's own retention policies
- Aggregated and anonymized data: May be retained indefinitely
- Data required for legal compliance: Retained as long as required by law
Children
The Application is not intended for children under 13 years of age. The Service Provider does not knowingly collect personal information from children under 13. If the Service Provider discovers that a child has provided personal information, it will be deleted promptly. Parents or guardians who believe their child has provided personal information should contact support@adrianbrady.dev.
Security
The Service Provider takes reasonable measures to protect the information collected and maintained through the Application. However, no method of transmission or storage is 100% secure.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements.
Changes
The Service Provider may update this Privacy Policy from time to time. Material changes will be posted with an updated effective date. Previous versions are available upon request at support@adrianbrady.dev.
Contact Us
If you have any questions regarding this privacy policy, please contact the Service Provider at support@adrianbrady.dev.