Effective date and last updated: October 24, 2026
The short version
- We collect what we need to run our games, keep them fair, fix crashes and show the ads that keep them free to play.
- We don't sell your personal data for money, and we never receive your full payment card details.
- Advertising and analytics partners may use your device's advertising ID — where the law requires it, only after you consent.
- You can ask us to show, correct or delete your data at any time by writing to legal@eipgames.com.
1. Who we are
EiP Game Studio (“EiP”, “we”, “us”) is an independent game developer registered in Brazil under CNPJ 47.565.154/0001-94. We decide how and why the personal data described in this policy is processed, which makes us its controller.
- Privacy and data protection requests, including requests for our data protection contact under Brazil's LGPD: legal@eipgames.com
- Player support: support@eipgames.com
- Business and general questions: contact@eipgames.com
2. What this policy covers
This policy applies to our website eipgames.com, to every game we publish — currently Idle Panda Samurai and Bagbound Hero, on Google Play and Google Play Games on PC — and to the game servers, support channels and other services connected to them (together, the “Services”). It should be read together with our Terms of Service.
Each game only uses the features and partners it actually needs, so not everything below applies to every game. If you don't agree with how we handle data, please don't use the Services.
3. Information we collect
3.1 Information you give us
- Messages to us: when you email support or contact us, we receive your name, email address and whatever you choose to include.
- Your Google Play Games profile: if you sign in with Google Play Games, we receive your player ID, display name and avatar.
- Surveys, events and promotions: any answers or details you provide if you take part in one we run.
3.2 Information collected automatically when you play
- Identifiers: the player ID our servers assign to your game account, your device's advertising ID (where your device settings allow it) and installation IDs used by our analytics and crash-reporting tools.
- Device and technical data: device model, operating system version, language settings and IP address. We use the IP address to work out your approximate location (country or region) — never your precise location.
- Gameplay and app activity: when and how long you play, your progress, items and upgrades, the in-game choices you make and the ads you view.
- Purchase records: what you bought, the price, currency, date and transaction ID. Payments are handled by Google Play or, where offered, by Xsolla; we never receive your full card details.
- Diagnostics: crash logs, error reports and performance data.
3.3 Information we receive from partners
- Stores and payment providers: confirmation that a purchase is valid, and its refund status.
- Advertising and measurement partners: information about ads shown to you and about the ad campaign, if any, that led you to install one of our games.
- Fraud signals: indications of invalid ad traffic, cheating or refund abuse.
We do not collect your contacts, photos, audio recordings or precise (GPS) location.
4. How we use information, and why we're allowed to
| Purpose | What it involves | Legal basis |
|---|---|---|
| Running the games | Creating and restoring your account, saving progress, syncing between devices, delivering what you bought. | Performing our agreement with you. |
| Purchases and fair play | Validating receipts, handling refunds, detecting cheating, fraud and abuse. | Performing our agreement; legitimate interests; legal obligations (tax and accounting). |
| Fixing and improving the games | Analytics, crash reports, and testing balance or features through remote configuration. | Legitimate interests; consent where the law requires it. |
| Advertising | Showing ads (including optional rewarded ads), measuring them, limiting how often you see the same ad and preventing ad fraud. Ads are personalized only with your consent where the law requires it. | Consent for personalized ads where required; legitimate interests for non-personalized ads and fraud prevention. |
| Measuring our marketing | Learning which campaigns bring new players to our games. | Consent where required; legitimate interests. |
| Support and communication | Answering your messages and sending in-game reminders or notifications, which you can turn off in your device settings. | Performing our agreement; legitimate interests. |
| Legal and safety | Complying with the law, answering lawful requests and enforcing our Terms of Service. | Legal obligations; legitimate interests. |
Under Brazil's LGPD these bases correspond to Article 7, items I (consent), II (legal obligation), V (performance of a contract) and IX (legitimate interests). When we rely on legitimate interests, we weigh them against your rights and keep the data we use to what is necessary.
5. Partners that help us run the Services
We work with the companies below. Some act only on our instructions; others, such as advertising networks, also use data for their own purposes under their own privacy policies, which we encourage you to read.
- Google — Google Play (distribution, billing and Google Play Games sign-in), Firebase Analytics, Crashlytics and Remote Config, Google AdMob, and Google's consent tool (User Messaging Platform). Privacy policy · How Google uses data from partner apps
- Unity — Unity LevelPlay ad mediation (formerly ironSource) and Unity Ads. Privacy policy
- Meta — Meta Audience Network ads and measurement of app installs from ad campaigns. Privacy policy
- Mintegral — advertising. Privacy policy
- Yandex — advertising. Privacy policy
- Xsolla — payment processing for purchases made outside Google Play, where offered. Privacy policy
- Cloud hosting providers — run our game servers and store account and progress data on our behalf.
As we update our games this list can change; we keep it current on this page.
6. Advertising and your choices
- Consent: where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), our games ask for your consent before personalized ads or related tracking begin. If you say no, you will still see ads, but they won't be personalized.
- Your advertising ID: on Android you can reset or delete your advertising ID in your device's privacy or Google settings (usually under “Ads”). Once deleted, apps can no longer use it to personalize ads.
- Industry tools: you can also manage interest-based advertising through Your Online Choices (Europe) and AppChoices (United States).
- Rewarded ads are always optional — you choose whether to watch them.
7. When we share information
- We don't sell personal data for money.
- Service providers and partners listed in section 5, to the extent they need it to do their job.
- Advertising partners. Under some US state laws, letting ad partners use device identifiers for targeted advertising can count as “selling” or “sharing” personal information. You can opt out at any time (see section 10.4).
- Other players. If a game shows leaderboards or other social features, other players can see your display name and scores.
- Authorities. When we are legally required to, or when it is necessary to protect the rights, property or safety of EiP, our players or others.
- Business transfers. If EiP or one of our games is merged, acquired or sold, data may pass to the new owner, who must keep protecting it as this policy describes.
8. International transfers
EiP is based in Brazil, and our partners process data in other countries, including the United States and member states of the European Union. When data leaves Brazil or the European Economic Area, we rely on transfer mechanisms recognized by the LGPD (Article 33) and the GDPR, such as standard contractual clauses and adequacy decisions, and we expect our partners to protect the data to the same standard.
9. How long we keep data
- Account and progress: for as long as you keep playing. If an account stays inactive for a long time, we may delete or anonymize it.
- Purchase records: for as long as tax, accounting and consumer protection laws require.
- Support messages: for as long as needed to solve your request and handle any follow-up.
- Analytics and diagnostics: according to our providers' retention settings, and in aggregated or pseudonymized form wherever possible.
When data is no longer needed, we delete or anonymize it.
10. Your rights
Write to legal@eipgames.com to exercise any of the rights below. To delete your account and game data, you can also follow the steps on our Delete Data page.
10.1 In Brazil (LGPD)
- Confirm whether we process your data, and access it.
- Correct data that is incomplete, inaccurate or out of date.
- Have unnecessary or excessive data, or data processed unlawfully, anonymized, blocked or deleted.
- Receive your data in a portable format.
- Delete data we process based on your consent, and withdraw that consent at any time.
- Know which public and private entities we share data with, and what happens if you don't give consent.
- Ask for a review of decisions made solely by automated processing.
- Complain to Brazil's data protection authority, the ANPD.
10.2 In the European Economic Area, United Kingdom and Switzerland (GDPR)
- Access your data and receive a copy of it.
- Correct, delete or restrict the processing of your data.
- Receive your data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, without affecting processing that happened before.
- Complain to your local data protection authority.
10.3 In Turkey (Law No. 6698)
You can learn whether and why your data is processed and who receives it, ask for incorrect data to be corrected, ask for data to be deleted or destroyed, object to decisions based solely on automated processing, and seek compensation for damage caused by unlawful processing.
10.4 In the United States
If you live in California or another US state with a consumer privacy law, you can ask to know and access the personal information we hold about you, correct it, delete it and get a portable copy. You can also opt out of the “sale” or “sharing” of your personal information and of targeted advertising — by deleting or resetting your advertising ID, or by emailing us with the subject “Do not sell or share”. We will not treat you differently for exercising these rights, and an authorized agent may make a request on your behalf.
10.5 How we handle requests
We may ask for information that links you to the account in question, such as your in-game player ID or a purchase receipt, before acting on a request. We reply within the deadlines set by law — under the LGPD, within 15 days for a complete statement of your data; under the GDPR, within one month, which may be extended in complex cases. Requests are free unless they are clearly unfounded or excessive.
11. Children
Our games are made for a general audience and are not directed at children under 13 (or the minimum age set by the law where they live). We do not knowingly collect personal data from children; if we learn that we have, we delete it. Parents or guardians who think their child has given us personal data can contact legal@eipgames.com.
12. Security
Data travelling between our games, our servers and our partners is encrypted in transit. Access to personal data is limited to the people and providers who need it to run the Services. No system is completely secure, but we work to protect your data and to collect only what we need.
13. Our website
eipgames.com does not use analytics or advertising cookies. It loads fonts from Google Fonts, which means Google receives your IP address. Game trailers are played through YouTube's privacy-enhanced mode and only load when you click to watch; YouTube may then set its own cookies under Google's privacy policy. Links to app stores and social networks are governed by those services' own policies.
14. Changes to this policy
We may update this policy as our games, partners or the law change. We will always show the date of the latest version at the top of this page, and for significant changes we will let you know in the game or on our website before they take effect where the law requires it.
15. Contact us
EiP Game Studio · CNPJ 47.565.154/0001-94 · Brazil
Privacy and data protection: legal@eipgames.com
Player support: support@eipgames.com