Privacy Policy

Who Is Responsible

Missile Tag is developed and operated by Walter Tengler, Portugal (the "controller" under the EU General Data Protection Regulation, GDPR). Contact: walter.tengler@gmail.com. See also the imprint.

What We Collect

• Account ID: When you open Missile Tag you get an anonymous guest account with a random ID. We don't ask for your name, email or phone number to play.
• Callsign: The display name you choose during setup. Your friends see it.
• Precise location: Your current GPS position (see below).
• Friends and invite code: Your personal 6-character invite code and the list of players you are connected with.
• Game data: Missiles you launch and receive (including launch and target positions, times and outcomes), points, rank, streak, active defenses, daily ammo usage over the last 24 hours, and — in Favor mode — the favor tally between you and each friend and the beers marked as settled.
• Purchases: If you buy a base-stage unlock on iPhone, we receive the App Store transaction details (product, transaction ID, date) from Apple to verify the purchase and restore it. Payment is handled entirely by Apple; we never see your payment details.
• Push notification token: A device token so we can alert you to incoming strikes and results.
• Sign in with Google or Apple (optional): If you link your account to Google or Apple, our sign-in provider receives a Google or Apple user identifier and your email address (with Apple, only if you choose to share it, and it may be a private relay address). We use this only to let you sign in again on another device; we don't send you emails.

Missile Tag does not access your contacts, photos, camera or microphone, and contains no advertising, analytics or crash-reporting SDKs.

Location Data

• Why: Location is the game. Friends need your position to aim at you, and when a missile lands our server checks whether you were still inside the blast radius.
• When it is sent: While the app is open, and — if you allow "Always" location access — also in the background, so you can be targeted and warned when the app is closed. How often depends on the game state (more often during an active strike).
• What is stored: Only your latest position and a "last seen" time, each overwritten by the next update — we don't keep a location history. Missile records do keep the launch position and the target position at the time of the strike, so both players can see what happened.
• Who can see it: Only players you are friends with. Our database security rules block everyone else.
• How to stop it: Turn on Off-Grid in the app (Settings → Location). Your last position is deleted from our servers straight away and no new positions are sent until you go back on the grid; friends see you as off-grid and can't target you, and you can't launch. You can also change Missile Tag's location access in your phone's settings — on iPhone: Settings → Privacy & Security → Location Services; on Android: Settings → Location → App location permissions — or delete your account.

Friends

You become friends with someone when either of you enters the other's invite code — sharing your code is how you agree to connect, so only share it with people you want to see your location. Friends can see your callsign, rank, online status and live location, and can launch strikes at you. The Training Drone is a practice target created for you by the game; it is not a real player.

Why We Use Your Data (Legal Basis)

• To provide the game (GDPR Art. 6(1)(b), performance of our agreement with you): account, callsign, location, friends, strikes, scores, favor tally, purchases and notifications.
• Your consent (Art. 6(1)(a)) for location access and push notifications, which you give — and can withdraw — through your phone's permission prompts and settings.
• Legitimate interests (Art. 6(1)(f)) to keep the game fair and secure, for example enforcing reload times and verifying purchases server-side.

We do not use your data for advertising, profiling or tracking across other apps and websites, and we never sell it.

Service Providers and Where Data Is Stored

We don't run our own servers. Missile Tag uses these providers, who process data on our behalf under data processing terms:

• Google Firebase (Google Ireland Limited / Google LLC): sign-in (Firebase Authentication), databases (Cloud Firestore in the EU; Realtime Database in the United States), game logic (Cloud Functions in Belgium) and push delivery (Firebase Cloud Messaging).
• Apple: push notification delivery on iPhone, in-app purchases and Sign in with Apple, under Apple's own privacy policy.
• Google: Sign in with Google and, on Android, location services (Google Play services), under Google's own privacy policy.
• OpenFreeMap / OpenStreetMap (Android only): map tiles. Your device downloads them directly from OpenFreeMap's servers, which see your IP address and which map area is loaded, but no account or location data from Missile Tag.

Because the live game data (including your latest location) is stored in the United States, your data is transferred outside the EU. Google LLC is certified under the EU–U.S. Data Privacy Framework, and Google's data processing terms include the EU Standard Contractual Clauses.

Push Notifications

Missile Tag sends notifications about incoming strikes and strike results. You can turn them off at any time in your phone's settings (iPhone: Settings → Notifications → Missile Tag; Android: Settings → Apps → Missile Tag → Notifications) — but you then won't be warned when a missile is on its way.

How Long We Keep Data

• Your latest location is overwritten with every update.
• Daily ammo records are pruned after 24 hours.
• Everything else is kept as long as your account exists, so your rank, friends and favor tally survive between sessions.
• When you delete your account, we delete your profile, location, friendships, invite code, strikes you launched or received, favor tally and settlements, defenses, purchase records and your sign-in account. If you signed in with Apple, we also revoke Missile Tag's access to your Apple ID.
• We keep nothing after deletion; purchase claims are removed too, so a new account can restore your purchases.

Your Rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise these rights, use the in-app settings or email walter.tengler@gmail.com. You also have the right to complain to a data protection authority — in Portugal, the Comissão Nacional de Proteção de Dados (cnpd.pt).

Children

Missile Tag is not intended for children under 16 and we do not knowingly collect data from them. Favor stakes are social IOUs between friends; no real money ever changes hands in the app. If you believe a child has created an account, contact us and we'll delete it.

Security

All data is sent over encrypted connections (HTTPS/TLS) and stored encrypted by our providers. Database security rules limit each record to the players who need it — for example, only your friends can read your location, and game results can only be written by our server.

Changes to This Policy

If we change how Missile Tag uses your data, we'll update this page and the date at the top. For significant changes we'll also let you know in the app.

Contact

Questions about privacy or your data: walter.tengler@gmail.com

← Back to Missile Tag