Sequence Slayer — Privacy Policy

Last updated: October 14, 2026

PB Fun Gaming ("we", "us") operates the Sequence Slayer mobile application and this website. This page describes what data we collect, why, and the choices you have.

Information We Collect

• Account information: Sequence Slayer creates a game account automatically so you can start playing without entering an email address or password. We store a game account ID, a randomly generated installation ID, and a salted verifier for a random sign-in secret. The secret is kept in secure storage on your device and is not stored in plain text on our server. Where available, an existing Play Games identity can sign you in or be linked during startup. You can also choose to link Play Games, Google, or a code-verified email address in Settings to recover the same account on another installation. Provider linking supplies the provider ID and, where applicable, your email address and display name. Email passwords are stored only as salted hashes, never in plain text.
• Game data: Gameplay statistics and progress — scores, XP history, level and title, dungeon/story/campaign progress, creature discoveries, daily goal and challenge progress, ranked matches and rating, and your in-game Runestone balance with its transaction history.
• First-run measurement: To improve the first-run experience, we store the furthest onboarding checkpoint reached with your game account: completing the startup privacy-choice step, tutorial steps, starting and finishing the first fight, and reaching the main menu. This is product-improvement measurement, separate from optional Gameplay Analytics. The checkpoint records only the step reached, not your age, birth date, privacy choices, time spent, or text you enter. It is collected even when optional Gameplay Analytics is off, and is deleted with your game account. We process this checkpoint on the basis of our legitimate interest in improving the game's first-run experience. You can object at any time by contacting info@pbfungaming.cz; we will then stop recording it for your account.
• Feedback and suggestions (optional): If you choose to send feedback in Settings, we store the category you select, the text you write, your account ID, an individual request ID, the app version, platform, and submission time. We do not automatically attach a screenshot, game log, email address, or device identifier. Feedback is visible to authorized studio staff, not to other players.
• Public profile: Your display name, selected avatar, level, and title are visible to other players on leaderboards and in multiplayer matches (including emotes you send during a match).
• Custom avatar uploads (optional): If you purchase and use the custom avatar feature, the image you upload is stored on our servers, screened by automated moderation (Google Cloud Vision SafeSearch) and may be reviewed by a human moderator. Approved avatars are visible to other players.
• Purchases: In-app purchases are processed by Google Play. We never receive your payment details. We store the purchase token and the owning game account to grant items once and protect against fraud. Future permanent purchases include an account identifier in the Google Play purchase record; this is our server account ID, not an email address. Link your account to protect access to your purchases. An unlinked account's Runestone balance and purchases remain with that account if its device sign-in secret is lost; this release does not transfer permanent purchases from another existing account automatically.
• Crash reports: On Android, Firebase Crashlytics collects crash reports (device model, OS version, and technical stack traces). We deliberately do not attach your user ID to crash reports.
• Gameplay analytics (optional): When Gameplay Analytics is active under the consent choices below, we collect gameplay statistics — run starts and endings, game mode, difficulty tier, the floor or chapter you reached, run outcomes and duration, revives used, rewarded ads offered and taken, streak days, story completion, and the product family of a purchase. We also record which game screens you visit, observed time on each screen in the foreground, transitions between screens, and observed changes between foreground and background. We do not record the contents of feedback messages or other text you enter. These statistics use a pseudonymous app-instance identifier generated on your device, not your account, display name, scores or purchase token. We do not reset analytics data at startup. Turning analytics off disables collection and resets the local analytics identifier; it does not delete data already received by Google.
• Advertising identifiers: Our ad provider (Google AdMob) may process your device's advertising ID as described in Google's Privacy Policy.

How We Use Your Information

• To provide and maintain your game account and sync progress across devices
• To operate leaderboards, multiplayer matches, and rankings
• To grant and restore in-app purchases
• To moderate user-submitted avatar images
• To fix crashes and improve stability
• To read the feedback you choose to send, investigate reported problems, and consider your suggestions; submitting feedback does not guarantee an individual reply
• To show ads that keep the game free
• To analyse gameplay and balance difficulty while Gameplay Analytics is active under your consent choices

Advertising & Consent

Sequence Slayer shows ads served by Google AdMob (interstitial and optional rewarded video). In the European Economic Area, the UK and Switzerland, we ask for your consent through Google's certified consent framework before any ad is requested. You can review or change your choice at any time in the app under Settings → Ad Privacy Options. A "Remove Ads" purchase disables interstitial advertising.

Gameplay Analytics is off on a new installation until your privacy situation is known. If Google's consent tool tells us that consent is not required where you are (generally outside the European Economic Area, the UK and Switzerland) and you have not made a choice yourself, gameplay analytics turns on by default. This setting is saved on your device and stays in place across restarts and offline play until a later check shows that consent is required, analytics is declined in the consent dialog, Google's consent tool reports analytics is unavailable, or you make your own choice in Settings. While offline we cannot notice a change in these requirements. Where consent is required, analytics starts only after you allow it in the consent dialog or turn it on yourself. You can turn analytics on or off at any time under Settings → Gameplay Analytics, also offline. Your own choice in Settings always takes precedence. Turning analytics off stops collection and resets the local analytics identifier, but does not delete data Google has already received.

The Gameplay Analytics setting controls optional Google Analytics for Firebase collection, including the automatic sign-in outcome event. It does not disable the account-linked first-run checkpoint described above or the account and game-progress data needed to play.

When analytics is enabled, we collect automatic sign-in outcomes and coarse duration ranges to improve sign-in reliability.

Third-Party Services

• Google AdMob (advertising) — privacy policy
• Google Play Billing (purchases) — privacy policy
• Google Play Games Services (optional achievements/leaderboards via your Google account)
• Google Analytics for Firebase (optional gameplay analytics; Google Ireland Limited, and Google LLC for the United States) — privacy notice
• Firebase Crashlytics (crash reporting) — privacy notice
• Google Cloud Vision (automated moderation of uploaded avatar images)
• Resend (transactional email for account verification and up to one daily notice to our studio containing only the number of feedback submissions in each category; no feedback text, player name, account ID, or player contact details are included; never marketing)

Our servers run on Google Cloud Platform, and game data is stored in a Supabase-hosted database. All traffic is encrypted with HTTPS/TLS.

International Data Transfers

Some of our service providers (Google, Resend) process data in the United States and other countries outside the European Economic Area. These transfers rely on the providers' compliance frameworks — European Commission adequacy decisions (such as the EU-U.S. Data Privacy Framework) and/or Standard Contractual Clauses.

Gameplay analytics data is transferred to Google LLC in the United States under the EU Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.

This Website

This website sets no cookies and uses no analytics. The home pages load font files from Google Fonts, which involves transmitting your IP address to Google to deliver the fonts; the legal pages you are reading use only system fonts.

Data Retention & Deletion

We keep your data for as long as your account exists. You can delete your account and its data at any time from the in-app Settings menu — see how to delete your account. Deletion permanently removes your account profile, game progress, XP history, ranked history, Runestone ledger, entitlements, and any uploaded avatar image. Records of processed purchases may be retained where necessary for refund handling and fraud prevention. Collected gameplay analytics data is retained by Google for 14 months and then deleted automatically.

Feedback submissions linked to your account are kept while your account exists and are deleted with it. The daily studio notice contains only category totals, not messages or account identifiers; an already sent aggregate notice cannot be withdrawn by deleting an account. We do not use feedback submissions for public profiles or advertising.

If you do not link your account, uninstalling the app, clearing its data, or losing the device may remove the sign-in secret and prevent recovery of your progress, Runestones, and purchases. A support account ID can help us locate an account, but is not proof of ownership. Unlinked automatic accounts become eligible for automatic deletion after 180 days of inactivity only if they are not bots and have no recorded purchases or entitlements. Linked accounts and accounts with purchases or entitlements are excluded from this automatic cleanup. You can delete your account from Settings while you can still sign in. Deletion removes the installation credentials, provider links, first-run checkpoint, and other account data described in this policy; processed-purchase records may be retained for refund handling and fraud prevention.

Your Rights (European Economic Area, the UK and Switzerland)

Where the GDPR applies, you have the right to access, rectify, export, and erase your personal data, and to lodge a complaint with your local supervisory authority — in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz). Most of these rights you can exercise directly in the app (profile settings, account deletion); for anything else, contact us at the address below. You can turn analytics off at any time under Settings → Gameplay Analytics; this disables optional Google Analytics for Firebase collection and resets the local pseudonymous app-instance identifier, but does not delete data already received by Google.

Children's Privacy

Our app is not directed at children under 13, or under 15 or 16 where local law sets a higher digital age of consent (in the Czech Republic that age is 15). We do not knowingly collect personal information from children below that age; if you believe a child has provided us personal data, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact Us

Sequence Slayer and this website are operated under the PB Fun Gaming brand by Bc. Ing. Petr Bartek, IČO 01033450, Czech Republic (the data controller).

If you have questions, contact us at: info@pbfungaming.cz