Privacy Policy — Granite Crown

Malrok Studio · Granite Crown (Android, package studio.malrok.granitecrown) · Effective: the day the app is first published. Last updated: 12 October 2026.

The short version

• There are no accounts. The game never asks for your name, e-mail or phone number.
• Your progress is kept on your own device, in the app's private storage.
• For the RANKING the game sends our server a random number that stands for your phone, your best wave and level, and a few counts of play (hours, days, battles, lost battles, the game's version), and the nickname of your Google Play Games profile if you are signed in to Play Games — it shows in the table.
• If you sign in to Google Play Games, Google keeps your achievements and a copy of your save in your Google account.
• The game shows rewarded ads — only ones you choose to watch — through Google AdMob, and sells goods through Google Play. Google is the only outsider that sees anything.

1. Who is responsible

Granite Crown is published by Malrok Studio (“we”). Questions and requests: help@malrok.com.

2. What stays on your device

Everything the game remembers is written to the app's private storage on your device and to nowhere else:

• your progress: gold, crystals, player level, wave, castle and archer levels, heroes, towers, treasures, skills
• goods you have bought or won: auto battle time, the x3 speed boost and its remaining time
• how many rewarded videos you have watched today, so the daily limits hold
• your settings: sound and music volume, shadows and the other switches.

If device backup is switched on in your Android settings, Android may include this data in the backup of your own Google account. That backup is controlled by you and Google; we have no access to it. Uninstalling the game, or clearing its data in Android settings, removes all of it from the device. On our side there is only the ranking row of section 3.

3. The ranking and the counts of play

The game has a RANKING of the best waves. For it, the game makes a random identifier once (it stands for this copy of the game, not for you, your phone or your accounts) with a secret key, and sends our server, when your best wave grows and once each time you start playing:

• the identifier and its key, your best wave, your player level and castle level
• the name of your Google Play Games profile (your nickname), if you are signed in to Play Games — everyone sees it in the table
• whether PREMIUM is on and until when (so the table can show its crown by your name)
• how much gold and how many crystals you have got in the game in all (bought ones too) — these two numbers are shown in the table
• counts of play: hours played, days played on, battles fought and lost, the game's version
• what you have built: castle and archer levels, how many heroes, towers and treasures and their levels, skill points spent, unspent gold, whether MAGIC is on, the wave you are stuck on and what last brought your castle down.

The table shows players by their Google Play Games nickname (one without it, by a nickname our server makes up) with their wave, level, all the gold and crystals they have got and, while PREMIUM is on, its crown; the other counts are never shown. We use them to see where players stop and what to make easier or better — never for advertising, and we never sell or share them. The server is our website at Cloudflare (Cloudflare, Inc., our hosting provider); it does not store your IP address. The row is kept while the ranking exists. To have it deleted, write to help@malrok.com with your nickname from the RANKING window. A new install of the game starts a new row. Report a problem. If you write to us from the game (SETTINGS → REPORT A PROBLEM), the server receives your text, the game's version, your phone's model and the same random number of your ranking row — only to look into your report. Your IP address is not stored (against spam, only an unreadable fingerprint of it for one day). A report is kept while we look into it and no longer than a year; to have it deleted sooner, write to help@malrok.com.

4. Google Play Games

If you are signed in to Google Play Games on your device, the game signs in quietly through it, reports the achievements you earn, and keeps a copy of your save in your Google account (Saved Games), so a new phone can carry on your game. That is processed by Google under its Privacy Policy; we see only what the game itself saves. You can sign out of Play Games or delete its data in the Play Games app at any time; the game then works as before, without the cloud copy.

5. Ads

The game shows rewarded video ads only — a video is always something you choose to watch, in exchange for gold after a wave. Nothing in the game is blocked behind an ad, and no ad is ever forced. Ads are delivered by Google AdMob (Google Ireland Limited). To select and measure an ad, Google may process your device's advertising ID, coarse location derived from the IP address, device and app information, and interaction with the ad. See Google's Advertising policies and terms and Privacy Policy. If you are in the EEA, the UK or Switzerland, the game asks for your consent through Google's User Messaging Platform before any personalised advertising. You can change that choice later in the game's settings. Declining does not lock anything: you still get videos and their rewards, without personalisation.

6. Purchases

Goods are sold through Google Play Billing. Google processes the payment; we never see your card or payment details. We receive only the fact that a purchase for this app succeeded, and the game then hands over the goods on your device. Refunds and payment history are handled by Google Play. After a purchase the game sends our server that purchase's code from Google Play and the good's number. The server checks with Google Play that the purchase is real (the good, the amount, the country) and tells the developer about the sale. We keep only a one-way fingerprint of the code (so one purchase is never reported twice), the good's number and the time — nothing that points to you, your account or your device.

7. Permissions

• Internet and network state — to load the ads you choose to watch, to talk to Google Play about a purchase and Google Play Games, to send the ranking (section 3), and to ask our own website what time it is (the daily gift is dated by that answer, not by the phone's clock). That request carries nothing about you or your game; like any web request it reaches the site's host, Cloudflare, with your IP address, which we do not store or use.
• Advertising ID (com.google.android.gms.permission.AD_ID) — added by the ads library, used as described above.

The game asks for no camera, microphone, location, contacts or storage permission.

8. Children

Granite Crown is not aimed at children. Its Play listing target age group is teenagers and adults, and we do not knowingly process children's data.

9. Your rights

Depending on where you live (for example under the GDPR or Ukrainian data protection law) you may have the right to access, correct, delete or restrict the processing of your data, and to complain to a supervisory authority. Your game data is on your device and under your direct control; the ranking row is deleted on request (section 3). For what Google processes as an advertising or payment partner, use Google's own tools and policy, linked above. Write to help@malrok.com with anything else.

10. Changes

If the way data is processed changes — for example if the game one day gains a crash reporter — this page and its effective date are updated before that version reaches Play.