Privacy Policy
This Privacy Policy describes how Unpaved LLC ("Unpaved", "we", "us", or "our") collects, uses, and shares information in connection with our website at unpaved.com (the "Site") and the mobile applications we publish (each, an "App", and together with the Site, the "Services"). By using the Services, you agree to the practices described here.
Information We Collect
Information you provide
We collect information you choose to give us, including:
- Email correspondence you send to us;
- Content you create within an App, such as player names, game settings, and game data;
- Content you import into an App from your device, such as photos from your camera or photo library, or contacts you select for in-app use.
Information collected automatically
When you visit the Site, our web server logs limited technical information for normal operation, security, and troubleshooting: your IP address, browser type and version, operating system, the page requested, the referring URL, and a timestamp.
When you use an App, the App may collect basic diagnostic information about device type, OS version, and crashes for troubleshooting purposes.
As of the Effective Date, we do not use any third-party analytics or crash reporting services. If we add such services in the future, we will update this Privacy Policy. We anticipate any such services (for example, Google Analytics 4 with IP anonymization, or Firebase Crashlytics with user identifiers disabled) being configured for anonymous, aggregated use only.
Information from mobile platforms
Our Apps run on Apple's iOS and, where ported, Google's Android, and rely on platform services to deliver core functionality:
- App stores and in-app purchases. Apple (App Store, StoreKit) and Google (Google Play, Google Play Billing) process all purchases on their respective platforms. Each provides us with transaction status (purchased, restored, refunded) but does not share your payment details with us.
- Cloud sync. Where enabled and supported by the App, certain App data (such as game data and settings) syncs through Apple's iCloud / CloudKit on iOS or Google's cloud sync services on Android. The platform vendor is responsible for storage and transit; we never receive your iCloud or Google account credentials.
- Game services, push notifications, and other platform services. Game Center on iOS, Google Play Games on Android, push notification systems (Apple Push Notification service on iOS, Firebase Cloud Messaging on Android), and other platform services may be used as part of the App experience. Apple or Google controls what data is shared with the App.
Information from multiplayer play
When you play an online multiplayer game in an App, your device exchanges gameplay data (game state, moves, your chosen display name) with our servers during the active session. This data is used to run the game, validate moves, and synchronize state with other players. Session data is short-lived and is deleted shortly after the game ends.
Information we do not collect
We do not knowingly collect your real-world location, your full contact list (only contacts you explicitly select), your payment card details, your social network profile, microphone audio, or biometric data.
How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the Services;
- Respond to your support inquiries;
- Detect, prevent, and respond to fraud, abuse, security, and technical issues;
- Comply with legal obligations;
- Send transactional or service-related messages.
We do not currently send marketing emails. We do not use your information for targeted advertising, and we do not permit third parties to do so through the Services.
How We Share Information
We do not sell or rent your personal information. We share information only in the following circumstances:
- Service providers we use for limited operational functions (such as hosting, email delivery, and any future analytics or crash reporting). These providers are contractually limited to using information only to provide services to us.
- Apple Inc. and Google LLC, which operate the platforms on which the Apps run (the Apple App Store on iOS, Google Play on Android), as described above. Apple's and Google's handling of your information is governed by their respective privacy policies.
- Legal requirements: we may disclose information if required by law, subpoena, or court order, or to protect the rights, property, or safety of Unpaved, our users, or others.
- Business transfers: if Unpaved is involved in a merger, acquisition, or sale of all or part of our assets, information may be transferred as part of that transaction. We will provide notice where required by law.
Third-Party Services
The following third parties are involved in providing the Services as of the Effective Date:
- Apple Inc. (iOS Apps) for the App Store, StoreKit, CloudKit, Game Center, Apple Push Notification service, and related platform services. See Apple's privacy policy at apple.com/legal/privacy.
- Google LLC for:
- (Site only) Google Fonts, loaded from Google's CDN to render typography on the Site. Google may receive your IP address as part of that request.
- (Android Apps, where ported) Google Play, Google Play Billing, Google Play Games, Firebase Cloud Messaging, and other Google Play Services used to deliver core functionality on Android.
- Amazon Web Services, Inc. (AWS) and DigitalOcean, LLC for cloud hosting and infrastructure that runs the Site and certain App backend services (such as the multiplayer game services). These providers process data on our behalf under their respective security and data-processing terms. See aws.amazon.com/privacy and digitalocean.com/legal/privacy-policy.
We will update this list when we add new third-party services.
Your Rights and Choices
Access, correction, deletion, and portability
You have the right to request access to, correction of, deletion of, or a portable copy of your personal information. To make a request, see Contact Us below. We will respond within the time frame required by applicable law.
Account and data deletion
Our Apps do not require you to create an Unpaved account; identity (where used) is handled by your Apple ID, your Google Account, or by an anonymous session. You can delete local App data by deleting the App from your device. Data synced through Apple's iCloud can be removed through your iCloud settings; data synced through Google's cloud services can be removed through your Google Account settings. If we hold any other personal information about you (for example, support emails), you can request deletion; see Contact Us below.
Opt-out
For marketing communications, you can opt out by following the unsubscribe instructions in the message, or contact us as described in Contact Us below.
California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights:
- Right to know the categories and specific pieces of personal information we have collected, the sources, the business purposes for collection, and the categories of third parties with whom we share it.
- Right to delete personal information we have collected, subject to certain legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing for cross-context behavioral advertising. We do not sell or share personal information for these purposes.
- Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right.
To exercise any of these rights, see Contact Us below. We will not discriminate against you for exercising your rights.
EEA, UK, and Swiss Privacy Rights (GDPR / UK GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:
- Right of access, rectification, and erasure;
- Right to restrict or object to processing;
- Right to data portability;
- Right to withdraw consent at any time, where processing is based on consent;
- Right to lodge a complaint with a supervisory authority.
Legal basis for processing
We process personal data on the following legal bases:
- Performance of a contract, where processing is necessary to deliver a Service you have requested;
- Legitimate interests, such as operating the Services securely, preventing fraud, and improving the Services;
- Consent, where you have given us permission (for example, importing photos or contacts);
- Legal obligation, where processing is required by law.
International transfers
Unpaved is based in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we may have collected information from a child under 13, please contact us (see Contact Us below) and we will take steps to delete it promptly.
Data Retention
We retain information only as long as needed for the purposes described in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Web server logs are typically retained for 30 to 90 days. Email correspondence is retained for as long as needed for support and recordkeeping. Multiplayer session data is deleted shortly after each game ends.
Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Third-Party Websites
The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy practices of any third party before using its services or sharing your information with it.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above and, where appropriate, provide notice through the Services. Your continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy.
Contact Us
For any privacy questions, requests, complaints, or to exercise any of the rights described above, contact us at:
Email: [email protected]
Mailing address:
Unpaved LLC
1843 N Wildwood St
Boise, ID 83713
United States