PushBump
Privacy Policy
Last updated: 7 November 2026
In short
Signing in with Google is optional in PushBump; if you do, your Google name appears to other players on the leaderboard. In quick match the game creates an anonymous account for you. The game uses Google AdMob ads, Firebase Analytics and Unity Relay. You can delete your account from the game's Settings screen.
Who is responsible
PushBump is published by Neuvikon. Neuvikon is the data controller under the GDPR and Turkey's Law No. 6698 (KVKK).
- Data controller
- Neuvikon
- neuvikon@gmail.com
Privacy contact: neuvikon@gmail.com
What this covers
This policy covers PushBump, an online arena game published by Neuvikon for Android, along with its Firebase database and server functions.
What we process and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Firebase user ID (from Google sign-in or the anonymous account created for quick match) | Linking your trophies, points and characters to one account | GDPR Art. 6(1)(b): performance of a contract | Until you delete your account |
| If you sign in with Google: your name, email address, profile photo link and Google account ID | Creating your account and letting you open your progress on another device | GDPR Art. 6(1)(b): performance of a contract | Until you delete your account |
| Display name (the first 24 characters of your Google name, or a name like Player_1234) and trophy count | Showing you on the leaderboard | GDPR Art. 6(1)(b): performance of a contract | Until you delete your account |
| Game progress: trophies, points, unlocked characters and skins, daily reward counters, last match time | Saving your progress and enforcing reward and price limits on the server | GDPR Art. 6(1)(b): performance of a contract | Until you delete your account |
| IP address and app information (Firebase Authentication sign-in logs) | Keeping sign-in secure and preventing abuse | GDPR Art. 6(1)(f): legitimate interest in protecting the game from abuse | Firebase keeps logged IP addresses for a few weeks |
| Match listing: room code, user ID, trophy count, session ID, timestamp | Finding you an opponent in quick match and estimating the wait | GDPR Art. 6(1)(b): performance of a contract | Deleted when the room fills or you disconnect; old listings are cleared within minutes |
| Unity anonymous player ID, IP address and in-match game traffic | Carrying an online match between two players through Unity Relay | GDPR Art. 6(1)(b): performance of a contract | Game traffic passes through during the match; the player ID and logs fall under Unity's policy |
| Purchase record: product, Google Play order number, user ID, date and a hash of the purchase token | Verifying the purchase with Google Play, giving you the item and stopping one receipt being used on another account | GDPR Art. 6(1)(b): performance of a contract | Not deleted automatically and kept after account deletion; you can write to us to have it removed |
| Match summary without identity: character, result, duration, damage dealt and taken, timestamp | Measuring character balance | GDPR Art. 6(1)(f): legitimate interest in improving game balance | Not deleted automatically; it is not linked to you, so it stays after account deletion |
| Firebase Analytics data: app instance ID, advertising ID, device and version details, launch and session events | Understanding how many people use the game and how much | GDPR Art. 6(1)(f): legitimate interest in understanding use to improve the game | As long as the Google Analytics retention setting in the Firebase project |
| Advertising ID, IP address, device details, ad impressions and clicks | Showing and measuring Google AdMob ads and preventing fraud | GDPR Art. 6(1)(a): consent, through the ad consent screen; where that screen does not appear, Art. 6(1)(f): legitimate interest in funding the free game with ads | As long as Google's own policy sets |
| Technical engine statistics such as device model, operating system and Unity version | Letting Unity measure which devices its engine runs on | GDPR Art. 6(1)(f): legitimate interest in maintaining the game engine | As long as Unity's own policy sets |
| Your email address and message when you write to us | Answering your support request | GDPR Art. 6(1)(f): legitimate interest in answering players' questions | Up to 1 year after the matter closes |
How data is collected
Your Google details arrive through Google when you press Sign in. The anonymous account is created automatically when you enter quick match without signing in. Game, ad, analytics and engine data are collected automatically while the game runs. Purchase details come from Google Play, and email data arrives when you write to us.
Do you have to provide it
You can play bot matches without signing in; your progress then stays on your device only. Online matches need an anonymous account and a Unity Relay connection. Google sign-in is optional, but without it your progress does not move to another device. Purchases and rewarded ads are optional too.
What we do not collect
- Location, contacts, photos, camera or microphone data. The game does not ask for these permissions.
- Chat messages or voice. The game has no chat and no friends list.
- Passwords. Google handles sign-in. Your email address is not shown to other players.
- Card details. Google Play handles payment and we never see your payment information.
- Crash reports. Firebase Crashlytics is not used and Unity's cloud crash reporting is off.
Multiplayer
During a match your character, skin, position and health are sent to your opponent's device. Because the game connects through Unity Relay, your IP address is not shown to your opponent. If you connect directly by typing an IP address instead of a room code, the two devices see each other's IP addresses.
Ads
The game shows Google AdMob banner, interstitial and optional rewarded ads. We do not send a setting that turns personalisation off, so ads may be personalised according to Google's settings and your choices.
In regions where Google requires it, such as the EU and the UK, a consent screen (Google UMP) appears before ads load. If you saw this screen, you can change your choice under Settings > Ad Privacy.
Your ad preferences: https://myadcenter.google.com/ . Google's advertising cookies: https://policies.google.com/technologies/ads
Firebase Analytics
Firebase Analytics is included in the game. Our code sends no custom events; the SDK measures events such as launches and sessions by itself, and this does not depend on your choice in the ad consent screen. How Google uses this data: https://policies.google.com/technologies/partner-sites
Game engine
PushBump is made with Unity. The project is linked to Unity Cloud. Unity Analytics, Unity Ads and cloud crash reporting are off; Unity Authentication, Relay and the engine's technical statistics are on. Unity acts under its own policy for these services.
Android permissions
The game uses the internet and advertising ID permissions. You play by tilting the phone; the motion sensor only steers your character and its data is not saved.
This page
neuvikon.com's hosting provider may keep standard access logs such as IP address, browser details and a timestamp when you open this page. The site's general privacy policy has the details.
Who receives data
| Party | Role | Location |
|---|---|---|
| Firebase (Google Cloud) | Provides the infrastructure for accounts, game data and server functions. Processes your user ID, Google account details, IP address and game data. | Database in Belgium (europe-west1), functions in the US (us-central1), authentication in the US |
| Google Analytics for Firebase | Measures use automatically. Receives the app instance ID, advertising ID and device details. | Global |
| Google AdMob | Shows and measures ads. Receives the advertising ID, IP address and device details directly from your device and processes them under its own policy. | Global |
| Unity Technologies | Sets up the online match connection through Unity Authentication and Relay and receives engine statistics. Processes the player ID and IP address. | A Relay region near the player, which may be outside your country |
| Google Play | Distributes the game and handles purchases and payment. Our server verifies purchases with Google Play. | Global |
| Google (Gmail) | Email service where support messages are stored. | Global |
We use the Firebase infrastructure to run the game. Google AdMob, Google Analytics, Google Play and Unity process what they receive under their own policies, partly for their own purposes too. We do not sell your data. We may disclose information where a lawful request from an authority requires it.
International transfers
The game database runs in Belgium, and the server functions and Firebase authentication run in the US. Ad, analytics, support email and Unity Relay data may also reach servers outside your country.
Security
Traffic between the game and Firebase, Google and Unity is encrypted. Database rules close trophies, points and character ownership to the client; only our server functions write them, and each player can read only their own record. All signed-in players can see the leaderboard and match listings. Progress on your device is not encrypted.
Deleting your data
In the game, use Settings > Delete Account. This permanently deletes your account, your progress on the server, your leaderboard row and the local progress on your device. If Firebase asks for a recent sign-in the game cannot finish the deletion; sign in again and retry. If you have uninstalled the game, write to neuvikon@gmail.com with your display name and ask us to delete it. Purchase records and match summaries without identity remain, and items bought on a deleted account cannot be restored to a new one. Write to us to have your Unity player ID deleted. You can reset or delete your advertising ID in Android settings.
Children
PushBump is an online game with ads, a public ranking and random opponents; it was not designed for, and is not directed at, children under 13. The game does not ask your age, so we do not know how old players are, and it has no children's mode. If someone under 13 plays, their data is processed the same way as any other player's and ad requests carry no child-directed flag. We do not aim to collect data from this age group. If you are a parent, write to neuvikon@gmail.com with your child's display name or delete the account from Settings.
Your rights
You may ask for access to your data, correction, erasure, restriction and portability, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time, without affecting earlier processing. Turkish users have the rights in KVKK Art. 11, listed on our data protection notice page.
Write to the address above with your name and request. It is free, and we answer within one month at the latest (30 days under KVKK). KVKK applications are made in Turkish.
Complaints
You can complain to us first. You may also complain to your local data protection authority (in the UK, the ICO) or, in Turkey, to the Personal Data Protection Board (KVKK).
Changes
When this text changes, the date at the top changes too. Significant changes are also announced in the product or its release notes. We do not respond to browser Do Not Track signals.