< Back to Home

Privacy Policy

Updated: October 10, 2026

Scope

This policy explains how Electron Game Studios (ElectronGameStudios on Google Play; “we”, “us”, “our”) handles information in our games and on this website. It covers Neon 21: Blackjack Roguelike, Cathedral Collapse, Cascade Blast, Color Merge, The Casebook: Detective Puzzle, Veilborn, Witchmark, Embertable, ShipRekt, Human Resources (also developed as Mob Boss HR Simulator), and Short Circuit: Voltage Puzzle.

Services vary by game, version, platform and release configuration. Development and testing versions may have different features or integrations from released versions. The game-specific descriptions below identify those differences. The dedicated Veilborn and Witchmark policies take precedence for those games. The general sections explain the services used where applicable; they do not mean every game uses every service.

Privacy by game

Find your game below. “Local” means stored on your device; operating-system or browser backups are separate. On a small screen, scroll the table sideways to see all columns.

Game-specific services and storage
GameServices and featuresSaves and purchases
Neon 21: Blackjack RoguelikeFirebase Analytics, Crashlytics and Performance Monitoring; Amplitude analytics; Android TikTok advertising attribution; optional AdMob rewarded ads. Local reminders and platform age/access checks.Local saves and purchase entitlements. Store billing for chips, content and permanent benefits. No studio player account or cloud-save service.
Cathedral CollapseFirebase Analytics, Crashlytics and Performance Monitoring; Amplitude analytics; AdMob ads and local reminders. TikTok attribution in builds configured for it. Country lookup using SIM/locale information and ipapi.co. Optional camera QR scanning.Local saves and shared board codes. Current implementation has no active store purchase flow or studio player account/cloud saves.
Cascade BlastFirebase Analytics, Crashlytics and AdMob rewarded/interstitial ads; optional local reminders. Google Play age/access checks where available.Local saves and entitlements; store billing. Remove Ads removes interstitial ads; optional rewarded ads remain available.
Color MergeFirebase Analytics and AdMob rewarded/interstitial ads. Google Fonts may download fonts. No active TikTok, Crashlytics, Amplitude or session replay integration.Local saves and entitlements; store billing. Remove Ads removes interstitial ads; optional rewarded ads remain available.
The Casebook: Detective PuzzleFirebase Analytics, Crashlytics, Remote Config and AdMob rewarded ads for hints or cooldown skips. Google Fonts may download fonts.Local progress and profile. The current development purchase flow simulates case-pack unlocks; it does not charge through a store. Store purchase data is processed only in versions that enable real billing.
VeilbornFirebase Analytics/Crashlytics, optional AdMob rewarded ads, platform age/approval signals and iOS tracking permission, subject to the controls in its dedicated policy.Local saves; store billing and transaction records. No studio player account/cloud-save service. Platform approval records may use Apple iCloud, as explained in the dedicated policy.
WitchmarkCurrent prototype: local gameplay, with no active advertising, analytics or crash-reporting SDKs. See its dedicated policy.Local saves, collections and simulated currency/readings. Real-money purchases are not enabled in the current prototype.
EmbertableAdMob optional rewarded ads and Google consent messaging. No current Firebase, TikTok, Amplitude, session replay or separate crash-reporting SDK.Local saves. Store billing and HTTPS receipt verification only in releases configured to enable real purchases. Details below.
ShipRekt; Human Resources; Short Circuit: Voltage PuzzleCurrent development versions: no active advertising, analytics, crash-reporting or store-billing integration. Some Short Circuit versions may download Google Fonts.Progress and settings saved locally. No studio player account/cloud saves in these versions.

Local progress and information you provide

Our current games do not require a studio player account. Progress, settings, collections, locally chosen profile details and purchase-delivery records are stored on your device. Platform backup services may retain copies according to your settings. Clearing app data or uninstalling may remove progress; it does not delete data already processed by advertising, analytics, store or support providers.

If you email support, we receive your email address and the information you send, such as device details, screenshots and order references. We use it to respond and investigate problems. Do not send passwords, payment-card details or full purchase receipts. Locally entered profile text is not a request to create an online account.

Analytics, diagnostics and remote settings

In games identified above, Google Analytics for Firebase and Amplitude process app-instance or device identifiers, app and device information, session and gameplay events, progression and purchase-event information. Network information can reveal approximate location. We use these services to understand play, improve games and measure retention. These records are pseudonymous and may be personal data; they are not necessarily anonymous.

Firebase Crashlytics processes installation identifiers, device/operating-system details, app versions, crash stack traces, error messages, diagnostic keys and, where enabled, recent analytics events. Firebase Performance Monitoring measures app performance and network-request diagnostics. The Casebook uses Firebase Remote Config to retrieve game settings; Google processes installation information to deliver those settings. These services are not cloud saves.

We do not currently enable visual session replay in the games listed here. Amplitude event analytics does not itself mean that recordings of your screen are collected. See Firebase privacy information, Google’s Privacy Policy and Amplitude’s Privacy Policy.

Advertising and attribution

Games listed with AdMob may display interstitial or optional rewarded ads. Google and its advertising partners may process IP addresses, approximate location, device and advertising identifiers where available and permitted, app/ad interactions and diagnostics for ad delivery, measurement and fraud prevention. Personalization and identifier access depend on platform settings, applicable consent choices and the game version. Declining personalization does not prevent all advertising-related processing.

Neon 21 uses TikTok attribution on Android; Cathedral Collapse uses it in configured builds. These integrations can send device/advertising identifiers and install, app-use, retention and conversion events, including purchase events where implemented, to TikTok/ByteDance to measure campaigns. Color Merge’s current version does not enable TikTok SDK tracking. See TikTok’s Privacy Policy.

Neon 21, Veilborn and Embertable provide Google consent messaging and available ad privacy options. Other games may offer different controls; this policy does not promise that every game has an in-app consent switch. Use the controls actually offered in your version and your device’s privacy settings. Accepting these Terms or reading this policy is not itself advertising or tracking consent.

A Remove Ads purchase in Cascade Blast or Color Merge suppresses interstitial ads. Optional rewarded ads remain available if you choose them. Removing ads does not automatically disable analytics or other services. Reward availability depends on connectivity, eligibility and ad supply.

Purchases and verification

Where real purchases are enabled, Apple or Google handles payment details under its own terms and privacy policy. We do not receive payment-card details. The app receives product identifiers, transaction identifiers, purchase status and receipts or tokens to deliver content, restore eligible purchases and prevent duplicate grants. Analytics-enabled games may also report purchase-event details such as product and price.

The current Neon 21, Cascade Blast and Color Merge implementations handle store transactions without a separate studio receipt-verification server. Cathedral Collapse has no active purchase flow in the current implementation. The Casebook and Witchmark development purchase flows are simulations; they do not establish that real-money billing is enabled in a released version. Veilborn and Embertable verification behavior is described in their game-specific sections.

Store transaction records may be retained by Apple or Google independently of local data. See Apple’s Privacy Policy and Google’s Privacy Policy.

Country, permissions and age information

Cathedral Collapse resolves a country using available SIM/locale information and a request to ipapi.co. The request exposes your IP address and ordinary network-request information to that provider; the game reads the returned country code. This does not require GPS access. See ipapi’s Privacy Policy.

Cathedral Collapse can request camera access when you choose to scan a shared board QR code. Decoding occurs on your device; the game does not upload camera images to us. You can use the manual board-code option instead. Sharing a code sends the content to the recipient or service you choose.

Neon 21, Cathedral Collapse and Cascade Blast offer optional local reminders using device notification permission. These are not studio-server push messages. Android versions may also request scheduling/boot permissions so reminders can work. Other games do not necessarily implement notifications even if they display reminder settings.

Neon 21 and Cascade Blast use available platform age-category and approval information to determine access. They do not require an exact birth date to be entered into the game or forward those age signals to analytics. Veilborn’s age and parental-approval handling is described in its dedicated policy. Store age checks are distinct from a game’s content rating.

Embertable

Embertable stores company progress, characters, equipment, settings, rewards and entitlements locally, without a studio player account or cloud-save service. It uses AdMob and Google’s User Messaging Platform for optional rewarded ads and privacy choices. These services may process identifiers, IP addresses, ad interactions, diagnostics and consent choices. Its Ad privacy control lets you revisit choices where available.

Embertable has no current Firebase Analytics, TikTok, Amplitude, session replay or separate crash-reporting SDK. In releases configured to enable real purchases, the app sends the product identifier, store source and receipt or purchase token to our HTTPS verification service. The service checks them with the store; local transaction records and entitlements prevent duplicate rewards. Pending verification records can include receipts stored locally. Purchases remain unavailable when the required verification service is not configured.

It does not request camera, microphone, contacts or precise-location access. Optional rewarded ads grant the displayed benefit only after completion is confirmed. The general analytics descriptions above do not apply to Embertable’s current configuration.

Fonts, website and external links

Color Merge, The Casebook and some Short Circuit builds may download font files from Google Fonts, which exposes the request’s IP address and network information to Google. Neon 21 currently bundles fonts and disables runtime font downloads.

This website is hosted on GitHub Pages and loads Google Fonts on pages that reference them. Hosting and font providers receive ordinary web-request information, including IP address and browser details. We do not currently add studio analytics, ad SDKs or session replay to this website. See GitHub’s Privacy Statement. Following a store or other external link brings you under that provider’s policies.

Use, sharing and international processing

We use information to operate and improve games, deliver purchases and chosen rewards, diagnose faults, measure advertising, answer support requests and meet legal obligations. Depending on the processing and applicable law, we rely on consent, providing requested services, legitimate interests where permitted, or legal obligations. You can withdraw consent where it is the basis for processing.

We disclose information to the service providers described for your game, and where needed to comply with law, protect rights or handle a business transfer subject to applicable safeguards. We do not sell player data for money. Advertising disclosures may qualify as sharing for targeted advertising under some laws; applicable controls depend on the game, provider, region and device.

Providers may process data outside your country. Where required, appropriate transfer safeguards apply, such as provider data-processing terms and standard contractual clauses. Using an app does not waive your privacy rights.

Retention and security

Local records remain until removed, overwritten or affected by backups. We retain support correspondence while needed to resolve requests and meet legal obligations. Purchase records may be retained for delivery, fraud prevention, accounting and legal requirements.

Analytics retention follows the relevant property/service configuration; diagnostic and advertising data follows provider practices and applicable settings. Google documents Crashlytics, Performance Monitoring and Remote Config retention in its Firebase privacy information. We do not claim that uninstalling erases provider records. We use reasonable safeguards, but cannot guarantee absolute security.

Your choices and privacy requests

You can decline optional rewarded ads and purchases, deny optional camera/notification permissions, adjust device advertising and tracking controls, and use available in-app ad privacy controls. These choices affect different services; no universal analytics opt-out is currently offered across every game. Uninstalling stops future collection from that installation but does not itself erase historical records.

Depending on your location, you may request access, correction, deletion, restriction or portability of personal information, object to certain processing, withdraw consent, or complain to your privacy regulator. Contact electron.cyber.secure@gmail.com and name the game and request. We may need limited information to verify and locate records. Because games do not use studio accounts, we may be unable to match an installation identifier to an email address. Some records must be retained by law; store and advertising providers also offer their own privacy controls.

Younger players

Our games covered by the shared audience policy are intended for teens and adults, not directed to children under 13. Witchmark’s intended audience is 13+, not adults-only. Follow the store rating, platform access decisions and applicable local requirements; these can differ by region and game. A low store content rating does not by itself mean a game is directed to children.

Where a platform supplies age or parental-approval signals, handling varies by game as described above. We do not claim that every game includes an age-verification service. If you believe a child has provided personal information, contact us so we can investigate and address it.

Changes and contact

Questions and privacy requests: electron.cyber.secure@gmail.com. We will update this policy when services or data practices change and provide additional notice or obtain consent where required.