A comprehensive, plain-English summary of how Tower Builder handles data on your device, what happens when you tap Continue, and the rights you have under applicable privacy regulations.
Tower Builder is a single-player arcade game developed and published by Jurayev Shahobiddin. We do not operate advertising networks, affiliate exchanges, telemetry pipelines, cross-device identity graphs, or any of the data-monetisation infrastructure typically associated with free-to-play titles.
Our commitment is simple: we collect the minimum information strictly necessary for the game to function, we never sell or rent that information, and we provide you with controls to remove it at any time.
The following items are kept inside Android's private per-app storage sandbox and are not readable by other installed applications:
These items do not contain personal information, identifiers, timestamps, geolocation, or any form of behavioural metadata. They cannot be combined with other datasets to re-identify you.
We expressly do not collect, process, store or transmit any of the following categories, in Tower Builder or on this website:
Each operation we perform has a clearly defined purpose and a corresponding legal basis under GDPR Article 6 (described in the Legal tab):
No operation we perform relies on profiling, automated decision-making with legal effect, or special-category data processing.
All game logic — physics, scoring, rendering, audio playback, high-score computation — runs entirely on your device's CPU and GPU. No gameplay telemetry is streamed to any server. If you place your device in airplane mode, Tower Builder remains fully playable; only the Continue request becomes unavailable.
We do not disclose data to third parties for marketing, profiling or any commercial purpose. The limited situations in which disclosure might occur are:
This retention schedule applies to all information held on your device by the Tower Builder app, as well as to any records held on our servers that are associated with your use of this website.
We retain data only for as long as necessary to fulfil the specific purpose for which it was collected, to comply with our legal obligations, or to resolve disputes.
Your highest score, floor count and sound preference are stored on your device indefinitely, i.e. until you choose to clear the app's storage, uninstall the app, or perform a factory reset. We never upload a backup of this data to our servers or to any cloud-save service.
When your browser or the Tower Builder app contacts this website, our hosting provider records a standard HTTP access log line. This line typically contains:
Access logs are rotated and permanently deleted after 30 days. They are used exclusively for operational troubleshooting, capacity planning and abuse prevention.
Our hosting provider may cache this page's HTML and static assets at edge locations around the world. Cached copies carry no personal data and are automatically purged according to the provider's internal cache-eviction policies, typically within hours of the original content changing.
We maintain minimal operational backups of configuration files and this policy's source code. These backups do not contain user-identifiable data. Backup media are rotated and encrypted at rest.
If you contact us to request deletion of any records associated with you, we will act on that request within the timeframes described in the Your Rights tab. Note that we rely primarily on IP-address correlation to locate records; providing additional context (approximate time of visit, device model) materially increases our ability to honour the request.
In narrowly defined situations we may be legally required to retain certain records beyond their standard retention window — for example, to preserve logs under a validly issued judicial order, or to defend against a pending legal claim. Such retention is strictly limited in scope and duration.
The rights listed below apply to the limited categories of data we actually process: locally stored game data and short-lived server access logs. If a right is not applicable because we do not hold the underlying data, we will tell you so in our response.
You can ask us to confirm whether we hold any information associated with you and, if so, to provide a copy. Because we do not maintain user accounts, we locate records by IP address. Please include in your request an approximate date and time of visit and the public IP address you used, if known.
If any record we hold about you is inaccurate or incomplete, you have the right to request correction. Given the minimal nature of the data we hold, this right is rarely applicable in practice.
You can request that we delete any server-side records associated with you. For locally stored game data, deletion is immediate and under your sole control: open Android Settings → Apps → Tower Builder → Storage → Clear storage or uninstall the app.
You may ask us to limit the processing of your data in specific circumstances, for example while the accuracy of a record is being verified. Honoured requests result in the record being flagged and excluded from any further use pending resolution.
Where processing is based on your consent or performance of a contract and is carried out by automated means, you may request a copy of the data in a structured, commonly used, machine-readable format (e.g. JSON). Given that the only data we hold is a short list of access-log entries, this request is typically trivial to fulfil.
You may object to processing based on legitimate interests at any time. Upon receiving an objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
We do not sell personal information as that term is defined under the California Consumer Privacy Act (CCPA/CPRA), nor do we share it for cross-context behavioural advertising. There is therefore nothing to opt out of; however, if you believe otherwise, please contact us.
Email [email protected] with a clear description of the right you wish to exercise and any context that will help us locate the relevant records.
We will acknowledge your request within a reasonable period and respond substantively within 30 days of receipt, in accordance with GDPR Article 12(3). Where a request is complex or we receive multiple requests from the same person, we may extend this period by a further 60 days, in which case we will inform you.
If you believe that our processing of your data infringes applicable data-protection law, you have the right to lodge a complaint with your national supervisory authority. In the European Union, you can find the list of national authorities on the European Data Protection Board website. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).
From time to time we publish featured content such as promotions, seasonal events, partner offers, community milestones or news items. When you tap Continue on this page, a short request is made to our server to determine whether featured content is currently available.
If featured content is available, the server responds with the destination URL, and that URL opens in your device's default web browser (Chrome, Samsung Internet, Firefox, etc.). If no featured content is available, you are taken straight into the Tower Builder game.
Any destination opened in your browser after you leave Tower Builder is operated independently of us and is governed by its own privacy policy and terms of service. We do not control cookies, scripts, trackers, pixel tags or any other data-collection technologies deployed by those third-party operators.
You should review the privacy practices of any external site before interacting with it, in particular before submitting personal information or completing a transaction.
Tower Builder does not embed a WebView, in-app browser, mini-browser or similar embedded surface for displaying external content inside the app itself. All external destinations open in your operating system's default browser, where the full URL remains visible to you at all times.
Featured content is reviewed before publication for compatibility with Google Play's family of policies and the applicable laws of the jurisdictions in which Tower Builder is distributed. Content that we would not be willing to display on this landing page is not surfaced to our users.
Tower Builder does not accept, store or publish user-generated content. There are no profiles, comments, chat rooms, leaderboards shared with other players, nicknames synced across devices, or any other surface where one user can create content visible to another.
Tower Builder contains no advertising, no interstitial ads, no banner ads, no rewarded video ads and no sponsored placements inside the game. There are no in-app purchases, consumables, subscriptions, loot boxes, gacha mechanics, battle passes, or any form of real-money transaction.
All communication between the Tower Builder app, this landing page and our server infrastructure takes place over HTTPS using modern TLS 1.2 or TLS 1.3 cipher suites. Certificates are issued by publicly trusted certificate authorities and automatically renewed before expiry.
Server-side storage used by our hosting provider is encrypted at rest using industry-standard algorithms (AES-256 or equivalent). Backup media are likewise encrypted. On your Android device, Tower Builder's private storage is protected by the operating system's file-based encryption, which uses a key derived from your device credentials.
Administrative access to the server infrastructure that hosts this page is restricted to the publisher and limited to the minimum necessary for operational maintenance. Access is protected by strong passwords, two-factor authentication where supported by the provider, and SSH key-based login where applicable.
Our hosting infrastructure is fronted by a reverse-proxy layer that provides DDoS mitigation, bot filtering, WAF rules and TLS termination. These measures reduce the attack surface available to automated adversaries targeting this landing page.
The Tower Builder app ships with Android's standard application sandbox enabled, uses only non-dangerous permissions, and does not request runtime permissions. Release builds are signed with a dedicated upload key that is kept offline and used solely for Google Play's App Signing enrolment.
If you believe you have discovered a security vulnerability in Tower Builder, in this landing page, or in any related endpoint, please report it responsibly to [email protected]. We appreciate coordinated disclosure and will work in good faith to acknowledge the report, reproduce the issue and ship a fix.
No method of transmission over the Internet and no method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect the information we hold, we cannot guarantee absolute security. We disclaim liability for unauthorised access that occurs despite our reasonable protective measures.
For users located in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
This landing page and the server endpoints associated with it are hosted on infrastructure that may be located outside your country of residence, including countries that have not received an adequacy decision from the European Commission. Where such transfers occur, we rely on the European Commission's Standard Contractual Clauses (SCCs) or the equivalent UK International Data Transfer Agreement as the transfer mechanism, together with supplementary measures where appropriate.
Tower Builder is a general-audience arcade title and is rated accordingly on Google Play. Nevertheless, this policy is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction, where higher), and we do not knowingly collect personal information from such children.
If you believe a child has provided personal information to us, please contact us immediately so that we can take appropriate action, including deletion of any associated records. This commitment applies globally, including to the extent that the Children's Online Privacy Protection Act (COPPA) of the United States, the UK Age Appropriate Design Code, and comparable regimes impose heightened protections.
Residents of California have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
As described above, we do not sell personal information and we do not share it for cross-context behavioural advertising; accordingly, we do not offer an "opt-out of sale" link, but we will honour verified requests to delete the limited records we hold.
We do not use the data we collect to perform automated decision-making, including profiling, that produces legal or similarly significant effects for you.
This landing page does not set any first-party cookies, local-storage items or IndexedDB records of its own. The only client-side state involved is the browser's own default handling of the single HTTPS request triggered by tapping Continue, which is governed by your browser's privacy settings.
The Tower Builder app does not use cookies; its local persistence relies exclusively on Android's standard SharedPreferences API, which is confined to the app's private sandbox.
Because we do not perform cross-site tracking, we have no behaviour to adjust in response to the DNT or Sec-GPC headers. For completeness: we treat all visits identically regardless of whether these signals are present.
Where no mandatory consumer-protection law provides otherwise, this Privacy Policy and any dispute arising out of or relating to it are governed by the laws of the country in which the publisher is established, without regard to its conflict-of-laws provisions. Nothing in this clause limits any mandatory statutory right you may have as a consumer in your country of residence.
We may update this policy from time to time to reflect changes in our practices, in applicable law, or in response to feedback from users and regulators. The most recent version will always be available at this URL. The "Effective" date shown at the top of the page is refreshed whenever a substantive change is published.
We encourage you to review this policy periodically. Continued use of Tower Builder after a revised policy takes effect constitutes acceptance of the revised terms, to the extent permitted by applicable law.
If any provision of this Privacy Policy is held to be invalid or unenforceable in whole or in part under any law, such invalidity or unenforceability does not affect the remaining provisions, which will continue in full force and effect. This policy, together with any specific notice provided inside the Tower Builder app, constitutes the entire agreement between you and the publisher with respect to the subject matter covered.
Jurayev Shahobiddin is the publisher of Tower Builder on Google Play and is the data controller for the processing described in this policy.
App listing: play.google.com/store/apps/details?id=com.lumora.towerbuilder
For privacy enquiries, data-subject requests, security reports, policy feedback or any other correspondence, please email [email protected].
Where possible, include the following in your initial message: a clear subject line (e.g. "GDPR Access Request", "Deletion Request", "Security Report"), the approximate date of any relevant interaction with Tower Builder or this landing page, and any additional context that will help us locate the records in question.
We aim to acknowledge every privacy enquiry within 72 hours of receipt and to provide a substantive response within 30 days. Where a request is particularly complex, or where we receive multiple requests from the same person in a short period, we may extend the response window by up to a further 60 days, in which case we will inform you of the extension and the reasons for it.
Because we do not maintain user accounts, verifying the identity of a data-subject requester can be challenging. We will ask for the minimum information strictly necessary to associate your request with any records we may hold, and we will not use that information for any other purpose than servicing your request.
If you are not satisfied with our response to a privacy enquiry, you have the right to lodge a complaint with the data-protection supervisory authority in your country of residence. Within the European Union, lists of national supervisory authorities are maintained by the European Data Protection Board. In the United Kingdom, the Information Commissioner's Office (ICO) is the relevant authority.
This Privacy Policy may be updated. The current version will always be available at the URL on which you are reading this page, and the "Effective" date at the top will be refreshed whenever changes are published. If a change materially affects the way we handle data, we will take reasonable steps to notify affected users where feasible, for example through a notice inside the Tower Builder app.