Privacy policy

1. About this policy

This policy covers Moo Heist: UFO Abduction (also called Moo Heist) and the SlicedLemon website at slicedlemon.xyz. The game and website are operated by Krisztian Bernath, an individual developer based in Norway using the publishing name SlicedLemon. “The developer” means Krisztian Bernath, who is the data controller for information handled by the developer as described here.

Current test release: the Android game uses Google test ads and does not accept real-money purchases. Live rewarded ads and Google Play purchases are planned for the next release.

You can play without giving the developer your name or email. Third-party technology in the game can still process technical information, as described below.

2. Game saves and settings

The game saves progress, run checkpoints and in-game position, virtual currency and gem balances, upgrade levels, cosmetic ownership, selected skins, reward-claim state, tutorial completion and preferences in local app storage. This lets you resume play, keep your selections and avoid duplicate rewards. When purchases are enabled, the local inventory also keeps duplicate-prevention purchase hashes, as explained in section 4.

The mobile game requires confirmation that you are 16 or older before entering. It saves this age-eligibility choice on your device, without saving your birthday or exact age. Selecting under 16 closes the game. Google's SDK separately stores the privacy choices you make in its forms.

The developer's game code does not upload these save files to a developer-operated server. Device or operating-system backup features may keep copies under your device and account settings. The game does not include its own online backup or cross-device account. Ad, diagnostic, update and purchase services can process their own information separately from these local save files.

The game does not request access to your contacts, photos, microphone, camera or precise GPS location.

3. Rewarded ads and Unity diagnostics

Google Mobile Ads / AdMob

The game includes Google's Mobile Ads SDK for optional rewarded ads. Watching an ad can grant an in-game reward. You choose whether to use these offers; no automatic banner or interstitial ads are included. Test ads do not earn revenue.

Google's SDK can process IP addresses (which can indicate approximate location), advertising IDs, app set IDs and other available device or account-related identifiers, app/ad interactions and diagnostic information. Google uses this information for ad delivery, analytics, measurement and fraud prevention, subject to its settings and your applicable choices. Test ads still use Google's SDK and network services.

The game requests non-personalized ads. Non-personalized ads still involve data processing. For eligible players, the game uses Google's User Messaging Platform to check privacy requirements and show Google's consent message when required before requesting ads. Confirming age 16 or older is separate from consenting to advertising data processing. Google's forms retain your privacy choices, including declining consent. Ad requests are made only when Google's SDK allows them.

Once the age and Google privacy checks permit it, the SDK can initialize and load an ad in advance, before you choose to watch one. Skipping rewarded-ad offers therefore does not prevent all Google SDK processing. A network error or unavailable ad does not grant an ad reward.

Read Google's Privacy Policy and Google's Mobile Ads data disclosure for details about Google's processing and controls.

Unity engine and diagnostics

Moo Heist is built with Unity and is configured to use engine diagnostics. Unity can process technical information about the device, operating system, application, sessions, performance, crash logs and errors, including available device or installation identifiers, to operate its technology and diagnose reliability issues. The separate Unity Analytics and Unity Ads services are not enabled. That does not disable engine diagnostics or the separate Unity IAP purchase reporting described in section 4. Google's advertising consent form is separate from Unity diagnostics and purchase reporting.

Unity explains its handling and privacy choices in its Game Player and App User Privacy Policy and Developer Data diagnostics documentation.

4. In-app purchases

Real-money purchases are not available in the current test release. When available, optional consumable gem packs and non-consumable ship skins use Google Play and Unity In-App Purchasing (Unity IAP). The game does not offer subscriptions.

When billing is enabled, the game can connect to Google Play on main-menu entry to fetch product details, localized prices and existing purchases, including after a Play account change. These store checks can happen before you choose to buy an item and are separate from Google's ad-consent flow. Google handles checkout and payment details under its own terms and privacy policy. The developer's game code does not collect payment-card numbers or your Google account's name or email address.

The game and its purchase SDK receive product and transaction information, including receipts, order or transaction identifiers, purchase tokens, purchase time and purchase state. The game uses this information to check receipts, grant purchased items, confirm purchases, prevent duplicate grants and restore eligible ownership. Its local inventory stores balances, ownership and hashes derived from product IDs and purchase tokens, rather than saving raw receipts or tokens in that inventory. No developer-operated purchase server is included.

Unity IAP also sends purchase-start, payment, failure and fulfillment information to Unity for purchase reporting and service operation. This can include product, price, currency, quantity, transaction identifiers, receipt data and signatures, failure information, timestamps, and available installation, session, device, operating-system and app information, plus network information that can indicate approximate country or location. Optional identifiers depend on the SDK, enabled services, settings and applicable choices. This reporting is separate from the standalone Unity Analytics service, and raw receipt information can be transmitted by the purchase SDK even though the game's local inventory stores only duplicate-prevention hashes.

RESTORE PURCHASES checks eligible skins bought directly through Google Play. It does not restore confirmed consumable gem packs, your local gem balance or skins unlocked using gems. Clearing app data, uninstalling or moving to another device without a supported backup can permanently remove those local items and save history. Restoring eligible direct purchases depends on the relevant Google Play account and store availability. Google's transaction records are separate from the game's local data.

See Google's Privacy Policy, Unity IAP privacy information and Unity IAP's Google Play data-safety disclosure.

5. Google Play update checks

The Android game uses Google's Play In-App Updates service to check for updates when the main menu opens. An update can be downloaded and installed through Google's update flow, or the game can open its Google Play listing. Google determines availability for your installation and store account. These checks are separate from optional ads and their consent flow; there is no developer-operated version server or game-account sign-in.

Google's update library processes device metadata, the app version and a list of installed modules and asset packs to determine update availability and size. Google states that this data is encrypted, is not transferred to third parties and is deleted after a fixed retention period. See Google's In-App Updates data-safety disclosure and Google's Privacy Policy.

6. Support and external links

If you email the developer, your email address, message and any attachments you choose to send are used to answer your request, investigate problems and handle follow-up. If you send purchase support information, this may include an order number or receipt screenshot. Support uses the developer's personal Gmail mailbox; Google's handling is described in its linked privacy policy. Please do not send passwords, payment-card details or other sensitive information.

The Discord button opens an invitation in your browser or Discord app. Joining is optional and requires your action. Discord handles accounts and activity under its Privacy Policy. The developer and other server members may see information you choose to post, according to the channel's visibility. The game does not use Discord sign-in or automatically send your saves to Discord. External links take you to services with their own data practices.

7. Why information is used and shared

Information is used to run the game, preserve local progress, deliver requested ad rewards, handle enabled purchases and eligible restoration, provide updates, diagnose faults, prevent abuse, answer support requests and meet applicable legal obligations.

Google processes advertising, store and update information; Unity processes engine diagnostics and enabled purchase-service information. Support correspondence is handled through Gmail, and Cloudflare provides website hosting and network services. Discord handles activity if you choose to join. Information may also be disclosed when necessary to comply with a valid legal requirement or protect players and service security. The developer does not sell player save files or support correspondence.

Where data-protection law in the European Economic Area (including Norway) or the UK applies, processing necessary to provide the requested game features, purchases or support may rely on performing a contract or taking requested steps before one. Legitimate interests may support proportionate reliability, security, abuse prevention and support administration. Legal obligations apply where records or disclosures are required by law. Consent is used for processing that requires consent, including applicable advertising processing. Providers may have their own responsibilities and legal bases, explained in their policies. This policy itself is not a request for consent.

Service providers may process information outside your country, including in countries with different privacy laws. Their policies explain their international processing and applicable safeguards, such as contractual protections where required.

8. Your choices and privacy rights

• Optional rewards: you can skip rewarded-ad offers. Skipping an offer does not grant its bonus and does not prevent all SDK processing described above.
• Ad settings: open AD SETTINGS on the main menu, or in the main menu's Settings → Credits, to review the age check. AD CHOICES opens Google's privacy form when Google requires that entry point in your region. Choosing under 16 exits the mobile game. Exiting does not itself withdraw consent previously given to a provider. Use AD CHOICES or the provider's controls to review those choices. The privacy policy is also linked from in-game settings.
• Advertising controls: Android provides advertising-ID and ad-privacy controls in device settings. Availability and names vary by Android version. Non-personalized ads can still involve technical data processing.
• Purchases: when available, buying items is optional. Google Play provides its own purchase, payment and refund controls. RESTORE PURCHASES checks eligible skins bought directly through Google Play; it does not recover local gem balances or skins unlocked using gems.
• Delete local progress: use Android Settings → Apps → Moo Heist → Storage → Clear storage/data, or uninstall the game. This removes app-local saves and can permanently remove local gems, cosmetic state and purchase hashes. Device backups are managed separately. Clearing local data does not cancel a purchase or erase a store's transaction records.
• Privacy requests: email bernathkrisztian14@gmail.com to request access, correction or deletion of information handled by the developer. Provide enough context to locate your request, without sending sensitive identification documents unless necessary and specifically arranged. The developer will handle information under the developer's control and coordinate with service providers, including Unity where it acts on the developer's behalf, as appropriate.

Depending on your location, you may also have rights to restrict or object to processing, obtain a portable copy, withdraw consent without affecting earlier lawful processing, and complain to your local data-protection authority. Requests may be subject to proportionate identity verification, legal exceptions and the information actually held.

In Norway, you can complain to Datatilsynet (the Norwegian Data Protection Authority). You may also complain to the data-protection authority in your country where applicable.

There is no game account to delete. Uninstalling does not automatically erase information already held by Google, Unity, Discord, Cloudflare or an email provider. Where a provider acts independently, use its privacy controls or contact the developer for help directing your request. No in-game control for Unity engine diagnostics or Unity IAP purchase reporting is currently provided.

9. Retention and security

Local game data remains until replaced, reset, cleared or removed from the device. This includes local purchase hashes and ownership records when purchases are enabled. Device backups can remain according to your operating-system and account settings.

The developer stores support messages in a Gmail mailbox. No fixed deletion schedule is currently used. You can request deletion using the privacy contact above. The developer may retain relevant messages where needed for support follow-up, disputes, abuse prevention or legal obligations, subject to applicable exceptions.

Google, Unity, Discord and Cloudflare apply retention rules for information they hold, explained in their policies. Requests about information processed on the developer's behalf can be raised with the developer; information held independently by a provider may require that provider's own request process. Provider backups and legally required transaction records can remain separately from the game's local saves.

Game saves use the app's local storage and are not represented as encrypted vaults. Reasonable care is taken to protect information, and Google's ad SDK uses encrypted network transport. No device, network or storage system can be guaranteed completely secure.

10. Younger players

The mobile game is intended for players aged 16 or older. Players must confirm this before entering; choosing UNDER 16 / EXIT closes the game. The game does not ask for a date of birth or verify identity documents. The age check does not replace Google's separate advertising privacy choices or prevent the update and enabled store-service checks described above. Ad-consent ages and other protections can differ by country. If you are a parent or guardian and believe a child has sent personal information to the developer, contact the privacy email so the matter can be investigated and information removed where appropriate.

11. The SlicedLemon website

This static information website is hosted at slicedlemon.xyz using Cloudflare hosting. The website's source does not include developer-added advertising, analytics scripts, tracking pixels or forms. It does not set its own cookies. External links open services with their own privacy practices.

Cloudflare and network providers may process IP addresses, browser and device/request information, delivery information and security logs to serve and protect the website. Cloudflare's standard hosting statistics report requests, visits and technical traffic information. Cloudflare may also supply security scripts or cookies according to the protection features enabled. See the Cloudflare Privacy Policy and Cloudflare's cookie information for its handling and controls.

12. Updates and contact

This policy will be updated when data practices change, including changes to advertising or purchases and before adding accounts, cloud saves or new service providers. The revision date above identifies the latest changes. Material changes will be communicated through the game, its store listing or another appropriate notice.

For questions or privacy requests, contact Krisztian Bernath (SlicedLemon, Norway) at bernathkrisztian14@gmail.com.