Privacy Policy

Effective date / Last updated: 5 October 2026

This policy explains how Mobover ("we", "us") handles information when you use Lottery Shop Sim (the "Game"), and visit this privacy policy website.

1. Information we process

• On-device game data. Progress, virtual currency, unlocked items, upgrades, settings, tutorial state, and records needed to grant an ad reward are saved locally. The main game save is not uploaded as a cloud backup by the current Game. Your operating system may separately back up app data under your device settings.
• Guest account information. Firebase Authentication creates a pseudonymous guest account and a unique player identifier (UID). Authentication services process session credentials, IP addresses, and technical request information to maintain sessions and protect against abuse. A guest identifier is not your real name, but can still be personal data.
• Analytics. Firebase Analytics processes app-instance and device identifiers, device and operating system information, app version, session and interaction events, and approximate region information. We associate the guest UID and account type with analytics and record guest sign-up/login, the home screen view, and game startup. Google also collects standard automatic events. Advertising identifiers may be processed where available and permitted by device settings.
• Advertising. Unity LevelPlay, ironSource, Unity Ads, and their advertising service partners may process advertising or app/device identifiers, IP address, approximate location inferred from IP, device and app information, ad impressions, clicks, video completion, reward events, and diagnostic information. The exact processing depends on the service, device permissions, and privacy choices. The Game stores reward receipts to prevent duplicate rewards.
• Online gameplay, when available. If you use online duels or heist features in a version that enables them, the online service processes the guest UID, public player identifier or generated player name, room codes, moves, match results, defense layouts, virtual balances, timestamps, and action receipts. Offline practice remains on your device. Other players can see the public gameplay information needed for the mode, such as a generated name and match or target status.
• Messages you send us. If you email us, we receive your email address, message, and any information you choose to provide so we can respond.

The current Game does not request access to your contacts, camera, microphone, or precise GPS location. It does not ask you to submit payment card details.

2. How information is used

We use information to run the Game, maintain guest sessions and progress, provide online gameplay when available, show and measure rewarded ads, grant rewards, understand app usage, improve reliability, prevent abuse and duplicate actions, answer support requests, and meet applicable legal obligations.

Where applicable law requires a legal basis, essential gameplay and session processing supports providing the service; security and support processing may rely on legitimate interests or legal obligations. Processing that legally requires consent, including certain analytics or advertising uses, requires a separate valid consent mechanism. Reading this policy or choosing to watch an ad does not by itself provide that consent.

3. Service providers and sharing

Information is processed by the following services as needed for their functions:

• Google Firebase Authentication and Google Analytics for Firebase: guest sessions, analytics, and service security. See Firebase privacy and security and the Google Privacy Policy.
• Unity LevelPlay / ironSource and Unity Ads: rewarded ad delivery, mediation, measurement, ad quality, and fraud prevention. See the Unity Game Player and App User Privacy Policy and ironSource Privacy Policy. Advertising partners may process information under their own policies.
• Cloudflare Workers and Durable Objects: hosting and persistence for enabled online gameplay. See the Cloudflare Privacy Policy.
• Firebase Hosting: delivery and security of this website. This static page includes no advertising SDK, analytics script, third-party font, or application cookies. Hosting infrastructure can process IP addresses and request information to serve and secure it.

We may also disclose information when required by law or to protect users and the service. Advertising-related transfers may qualify as "sharing" or "sale" under some privacy laws; rights and available controls depend on your jurisdiction and the provider's processing.

4. Privacy choices

You can choose whether to watch rewarded ads. Ad services may initialize and process technical information before you choose to watch an ad. Your Android or iOS privacy settings can limit or reset advertising identifiers and, where available, restrict tracking. These settings do not necessarily stop all analytics or technical processing.

For applicable provider privacy choices and requests, use the provider links above. You can also contact us to request access, correction, deletion, restriction, portability, or to object to processing or withdraw consent, where those rights apply. You may complain to your local data protection authority.

5. Retention

• Local saves: remain on your device until app data is removed. Uninstalling or clearing app data may remove progress; operating system backups are managed separately.
• Guest accounts: remain in Firebase until deleted by us or by a configured provider cleanup process. Uninstalling the Game does not automatically delete a server-side guest account.
• Analytics and ad information: are retained according to the applicable provider's retention policies and our configured service settings. Contact us for information about the settings that apply to your request.
• Enabled online gameplay: finished duel rooms are scheduled for cleanup after approximately 24 hours. Completed heist records older than 30 days are removed during scheduled backend cleanup; cleanup timing can vary with backend activity. Online profiles and action receipts remain until deleted; a match ending is not an account deletion.
• Support correspondence: is retained as needed to resolve your request, handle related follow-up, and satisfy applicable legal requirements.

Information subject to a verified deletion request is deleted or anonymized where applicable. Any records retained for a legal obligation, security, fraud prevention, or a legal claim are limited to what is necessary, and we explain relevant exceptions when responding. Provider backups and technical logs can follow separate deletion schedules.

6. Request account or data deletion

To request deletion of your guest account and related data, email support@mobover.com with the subject Lottery Shop Sim — Data deletion. You can use this contact without reinstalling or opening the Game.

Tell us that you want your account or data deleted. If available, include your public player identifier or room code to help us locate the records. These are optional; if you cannot find an identifier, contact us and we will help determine whether we can identify your account. Never send a password, authentication token, or payment card details.

We may request proportionate information to verify that records belong to you. Once verified, the request covers the guest authentication account, identifiable online profiles and gameplay records, and associated analytics data under our control. For information controlled independently by an advertising provider, we will explain the applicable provider request process. We respond within the time required by applicable law.

Deleting server-side data does not erase your local save. To remove local data, use your device's app storage controls or uninstall the Game and manage any operating system backups. Local deletion does not erase server-side information. Deletion may permanently remove access to your guest account or online progress; opening the Game again may create a new guest account.

7. Security and international processing

We use encrypted network connections for production online gameplay and rely on the access controls and security measures of our service providers. No storage or transmission method can guarantee absolute security.

Our providers may process information outside your country, including in the United States. Applicable safeguards and transfer arrangements are described in the providers' privacy and data processing documentation.

8. Children and parents

Parents and guardians with concerns about a child's information can contact us using the address below. If you believe a child's information has been processed contrary to applicable requirements, tell us so we can investigate and take appropriate steps, including deletion where required. Please do not include unnecessary personal information about a child in your message.

9. Changes to this policy

We update this policy when our services or data practices change. The latest version and its date appear on this page. Where required, we provide additional notice or obtain consent for relevant changes.

10. Contact