Privacy Policy

Release status

Helmet Horizon is complete and production-ready. Initial App Store availability is limited to selected countries as part of a phased regional rollout. This policy describes the data practices of the release build.

Who we are

Helmet Horizon is made and published by Csaba Tamás, an independent developer and the data controller responsible for the processing described in this policy. For privacy questions, write to hello@helmethorizon.com.

Website analytics

This website uses Umami Cloud to understand aggregate traffic and improve the site. The tracker does not set cookies. It processes page URL and title, referrer, browser, operating system, device type, screen size, language and approximate location. Umami processes the visitor's IP address and browser user agent to create an anonymous session identifier; the IP address is not stored as a field in the standard analytics records.

We do not use this website analytics data to identify you, build advertising profiles or track you across other websites. The data is processed on our behalf by Umami Software, Inc. Our Umami Cloud workspace is configured to retain website analytics data for six months. Further details are available in Umami's Privacy Policy and metric definitions.

Data stored on your device

The game stores the following data locally so it can remember where you left off:

• Level progress and completion in Free Rider, Beat the Ghost and Endurance
• Remaining lives or attempts and their refill timers
• Drivers, helmets and other items you have unlocked or bought
• Sound, music and other in-game settings

We do not receive a copy of this save data. Deleting the app normally removes it, and we cannot restore it for you.

Server time checks

To protect life-refill timing against changes to the device clock, the app may send HTTPS HEAD requests to Apple, Cloudflare or Google and read only the server Date header. These requests do not include game progress, account data or information entered by the player. The destination server necessarily receives the IP address and standard connection information required to respond.

Firebase Analytics

The game uses Google Analytics for Firebase to understand how the game is used and to improve its design and performance. Depending on the configuration and your privacy choices, Firebase Analytics may process app interactions and events, session information, app version, device model, operating-system version, language, approximate country or region derived from an IP address, and app-instance or similar device identifiers.

We do not set a User-ID or send names, email addresses, account identifiers or other information intended to directly identify a player. Google Analytics for Firebase automatically assigns a pseudonymous app-instance ID so events from the same app installation can be measured. We do not maintain a separate database or mapping that connects this identifier to a person, and we use Analytics reports for aggregate product analysis rather than to identify individual players. Google explains Firebase data processing in its Firebase privacy information and Privacy Policy.

Google Analytics retains event-level data for 2 months and user-level data for 14 months under the settings of our Analytics property. Because reset on new user activity is enabled, the user-level retention period may restart when new activity is recorded. Standard aggregated reports are not affected by these settings and may remain available for longer, but they do not identify individual players. We do not keep a separate copy of Analytics data on our own servers.

Analytics data is not used for advertising purposes unless you allow it. Google's advertising-related Analytics signals (advertising storage, advertising user data and ad personalization) are switched off by default and are only enabled if you allow tracking in Apple's App Tracking Transparency prompt and, where consent is required, have also consented to the relevant purposes in the privacy message.

Firebase Crashlytics

The game uses Firebase Crashlytics to detect crashes, understand their causes and improve stability. When the app crashes, Crashlytics automatically processes crash stack traces, relevant application state, the time of the crash, app and operating-system versions, device model and technical characteristics, and random installation and session identifiers. Because Firebase Analytics is also enabled, a crash report may include breadcrumb logs describing app interactions immediately before the crash.

Helmet Horizon has no player accounts, and we do not attach your name, email address, account identifier or a developer-defined user ID to Crashlytics reports. We use these reports only to diagnose, prioritize and fix stability problems, not to track you across other companies' apps or websites or to target advertising. Google states that Crashlytics keeps crash traces and associated identifiers for 90 days before beginning their removal. Further details are available in Google's Firebase privacy and security information.

Google AdMob, rewarded ads and interstitial ads

Helmet Horizon displays rewarded video ads and interstitial ads. Rewarded ads are optional and provide an in-game benefit when you choose to watch them. Choosing not to watch a rewarded ad does not prevent you from playing. Interstitial ads may appear at applicable breaks between gameplay sessions and do not provide an in-game reward.

Ads are provided by Google AdMob. The Google Mobile Ads SDK may process information such as IP address, device type and settings, approximate location, app or device identifiers, ads shown, ad views and interactions, diagnostic and performance information, and signals used to measure advertising and prevent fraud. The Google Mobile Ads SDK is started only after the privacy message and Apple's tracking permission prompt have been answered. After that, an ad may be loaded before it is displayed or before you decide whether to watch a rewarded ad.

More information is available in How Google uses information from sites or apps that use its services and Google's Privacy Policy.

Advertising partners and mediation

At the date of this policy, Helmet Horizon has not enabled a separate third-party ad network through AdMob mediation. AdMob may nevertheless use the ad technology providers selected in our AdMob account to deliver, measure and protect ads. Where required, the consent message identifies the providers that may receive data and links to information about their processing. Google maintains information about AdMob ad technology providers.

If a separate mediation network is enabled later, this policy and the in-app consent flow will be updated to identify it before it processes player data.

Identifiers, tracking and ad measurement

Helmet Horizon uses Apple's App Tracking Transparency framework. On first launch, the tracking permission request appears after the introductory screen, when the main menu opens. In the EEA, the UK and Switzerland, Google's GDPR consent message appears first; in all other regions, a short explanation screen appears first. Apple's system prompt follows in both cases. Ads are not loaded and the advertising-related data described in this policy is not collected for tracking until you have answered.

If you allow tracking, the iOS advertising identifier (IDFA) and related information may be used by Google AdMob and Google Analytics for Firebase to show ads that are more relevant to you and to measure advertising. If you ask the app not to track, the IDFA is not shared, ads are still shown but are not based on tracking, and the game works the same way. Your choice does not affect gameplay.

Regardless of your choice, Google services may use app-scoped or device identifiers for analytics, ad delivery, frequency limits, security and fraud prevention, and Apple's SKAdNetwork may provide aggregated advertising measurement without revealing your identity to us.

Your consent and privacy choices

In regions where consent is required, Helmet Horizon uses Google's User Messaging Platform to present privacy choices. The app checks whether advertising may be requested before loading an ad. When Google requires a privacy-options entry point, you can reopen the privacy choices from the app's settings or menu and change or withdraw your consent.

You can change the tracking permission at any time in iOS Settings → Privacy & Security → Tracking, or in iOS Settings → Helmet → Allow Tracking. The game's Settings screen also has an Ad Tracking option that opens the app's page in iOS Settings.

Withdrawing consent does not necessarily stop all advertising or technical processing. You may still receive limited or non-personalized ads, and information may still be processed where needed for security, fraud prevention, delivery and measurement. You can also review Google's controls in My Ad Center.

Legal bases for processing

Where the GDPR, UK GDPR or similar laws apply, the legal basis depends on the purpose and context of the processing:

• Consent, for personalized advertising, advertising storage and analytics storage where consent is required
• Performance of a contract or steps requested by you, for delivering purchases and the game features you choose to use
• Legitimate interests, where permitted, for service security, fraud prevention, aggregate product and website improvement, traffic measurement and reliable operation
• Compliance with legal obligations, when information must be processed or disclosed under applicable law

When processing is based on consent, you may withdraw that consent as described in the privacy-choices section above. When we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.

Purchases

Helmet Horizon is free to download and offers optional in-app purchases. Apple handles all payments through the App Store. We receive purchase status and product information needed to unlock or restore the purchase, but not your full payment-card details. Apple's handling of transactions is covered by Apple's Privacy Policy.

How data is shared and retained

We do not sell your name or contact details, and the game does not collect those details from you. App-related data is shared with Google and its selected advertising providers as described above, purchase information is processed by Apple, and website analytics data is processed by Umami Software, Inc. Server time checks contact Apple, Cloudflare or Google as described above. These providers may process data in countries other than your own. We use them under their published terms and applicable agreements and require service providers that receive app data to provide protection consistent with this policy and applicable law.

Local save data remains on your device until you delete the app or erase its data. Google Analytics retains event-level data for 2 months and user-level data for 14 months; the user-level period may restart when new activity is recorded. Standard aggregated reports may remain available for longer. Google states that Crashlytics keeps crash traces and associated identifiers for 90 days before beginning their removal. Advertising data is retained by Google according to the applicable service settings and policies. Our Umami Cloud workspace retains website analytics data for six months.

Data security

We use reasonable technical and organizational measures appropriate to the limited data handled by Helmet Horizon. The game has no player accounts, and local save data is not uploaded to us. Apple, Google, Umami and any disclosed advertising providers are responsible for the security of data they process under their own systems and policies. No method of electronic transmission or storage can be guaranteed to be completely secure.

Children

Helmet Horizon is not directed at children under 13 and does not knowingly ask children for names, contact details or other personal information. The Google services and Umami Cloud described in this policy may process technical information automatically. Age-related advertising and consent settings will be configured according to the app's age rating and applicable law. If you are a parent or guardian and believe a child has provided personal information, contact hello@helmethorizon.com.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction or information about the processing of your personal data, and to object or withdraw consent. Because Helmet Horizon has no player accounts, we may not be able to link analytics or advertising records to you without additional technical information. Send a request to hello@helmethorizon.com and we will respond as required by applicable law. Requests concerning data controlled by Apple, Google or Umami may need to be directed to those companies.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data-protection authority. In Hungary, the supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

This privacy page

This page uses the same cookie-free Umami Cloud analytics described above. It contains no advertising tags or consent-message scripts. It also loads web fonts from Google, so your browser may send Google an IP address and ordinary request information when loading the page.

Changes to this policy

If the game, website or their service providers change in a way that affects this policy, this page will be updated and the date at the top will change. Material app-related changes may also be noted in the app or its release notes.

Contact

Privacy questions and requests: hello@helmethorizon.com.