Privacy Policy

Effective date: October 21, 2026

1. Introduction

This Privacy Policy describes how Zygimantas MB ("Company", "we", "us", or "our") collects, uses, and protects personal data in connection with the Pirates mobile game, the playpirates.com website, and related services (together, the "Service"). The Company acts as the data controller for the personal data described in this Policy.

By using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Service.

2. Information We Collect

2.1 Account information

When you first play, an account identifier is created for you. If you sign in with Apple or Google, we additionally receive a unique subject identifier and the name of the identity provider from the sign-in token issued by your device. We do not receive or store your name, email address, or profile photo from these providers.

2.2 Game data

We store your game progress so that it persists between sessions. This data is associated with your account identifier and is necessary to provide the Service.

2.3 Diagnostic and analytical data

We collect crash reports and performance data to maintain and improve the Service. This may include device model, operating system version, and application state at the time of an error. We also collect aggregate gameplay statistics, such as match outcomes and progression events, to monitor service quality and balance the game. This data is recorded in aggregate form and is not linked to your identity.

2.4 Website analytics

The playpirates.com website uses privacy-preserving, aggregate analytics that do not use cookies and do not track individual visitors.

2.5 Purchases

If you buy the Pirate Pass, the App Store or Google Play handles the payment, and we never receive your card or billing details. With each purchase we give the store your account identifier, so that the store's confirmation shows the purchase belongs to your account. Once the store confirms it, we keep the store's transaction identifier, the date we applied it, and your pass's expiry date with your account. If the store tells us about a refund, or about a refund it later reverses, we also keep the store's notification identifier and its dates. We use these records to give you the pass, to make sure one purchase is never applied twice, and to apply refunds. We do not store the price you paid, your storefront, or the reason for a refund.

3. Information We Do Not Collect

We do not collect:

  • names, email addresses, or profile photos;
  • precise or approximate location data;
  • contacts, calendars, photos, or other on-device content;
  • advertising identifiers or cross-app tracking data.

4. How We Use Your Information and Legal Bases

We process personal data solely to operate the Service, namely to:

  • authenticate your session and secure your account;
  • persist your game progress between sessions;
  • provide the Pirate Pass you buy and apply refunds the store reports;
  • match you with other players;
  • diagnose and fix errors and maintain service quality.

Where the General Data Protection Regulation (GDPR) applies, our legal bases are the performance of a contract (Article 6(1)(b) GDPR — providing the game you have requested) and our legitimate interests (Article 6(1)(f) GDPR — securing, maintaining, and improving the Service).

We do not sell or rent personal data, we do not share it with third parties for advertising or marketing, and we do not use it for automated decision-making that produces legal or similarly significant effects.

5. Sharing of Information

We share personal data only with service providers that process it on our behalf and under our instructions (such as hosting and error monitoring providers), and where disclosure is required by law or necessary to protect our legal rights. We do not otherwise disclose personal data to third parties. When you buy the Pirate Pass, we also give Apple or Google your account identifier with the purchase, as described in Section 2.5.

6. Data Storage and International Transfers

Personal data is stored and processed using cloud infrastructure providers in the European Union and globally. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards recognized under applicable law, such as adequacy decisions or standard contractual clauses.

7. Data Retention

We retain personal data for as long as your account exists and as necessary to provide the Service. When your account is deleted, the associated personal data is deleted or irreversibly anonymized, except where retention is required by law. Diagnostic data is retained for a limited period and then deleted automatically. You can delete your account at any time from within the app, and deletion takes effect immediately. The account deletion page explains the steps and what deletion removes.

8. Your Rights

Subject to applicable law, you have the right to access, rectify, and erase your personal data; the right to restrict or object to its processing; and the right to data portability. You can exercise your right to erasure yourself at any time by deleting your account in the app, which takes effect immediately; the account deletion page has the steps. To exercise the other rights, contact us at the address in Section 12, and we will respond within the timeframes required by applicable law.

If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

9. Children's Privacy

The Service is not directed at children under 13 years of age, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, please contact us and we will delete it.

10. Security

We implement technical and organizational measures appropriate to the risk to protect personal data against unauthorized access, alteration, disclosure, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Policy from time to time. The effective date at the top of this page reflects the latest revision. Material changes will be communicated through the Service or this website. Your continued use of the Service after a revision takes effect constitutes acknowledgment of the revised Policy.

12. Contact

For privacy inquiries, requests to exercise your rights, or data deletion requests, contact Zygimantas MB at support@playpirates.com.