Privacy Policy

1. Welcome

This Privacy Policy explains how Breaking Barriers Now B.V. ("Island Tycoon", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our website, online game, and related services (the "Service"). Island Tycoon is an online game that uses server-side systems and databases to provide account authentication, save and restore game progress, operate online game functionality, maintain game integrity, provide security, and improve the Service. If you have questions, contact us at islandtycoongame@gmail.com.

2. What Personal Data We Collect

3. Google Sign-In and Google User Data

Island Tycoon allows you to sign in using Google Sign-In. When you choose Google Sign-In, we request only the following Google OAuth scopes:

• https://www.googleapis.com/auth/userinfo.profile — to retrieve your name and profile picture
• https://www.googleapis.com/auth/userinfo.email — to retrieve your email address

The table below shows exactly what Google user data we access through these scopes and the specific purpose for each item:

No other Google data is accessed. We do not request access to Gmail, Google Drive, Google Contacts, Google Calendar, Google Photos, YouTube, or any other Google service. We do not read, modify, or store any content from those services.

OAuth tokens: When you sign in with Google, we receive a short-lived OAuth access token from Google. We use this token only during the sign-in process to retrieve the profile information listed above. We do not store Google OAuth access tokens or refresh tokens on our servers. Once the sign-in process is complete and the profile data has been retrieved, the token is discarded.

4. How We Use Your Personal Data

We process your data for the following purposes:

• (a) To create and manage your account, including authenticating your identity via Google Sign-In;
• (b) To operate, personalize, and improve the Service, including saving and restoring game progress and synchronizing game state;
• (c) To analyze usage trends, measure engagement, and diagnose technical issues via Firebase Analytics and Google Analytics;
• (d) To detect, prevent, and investigate fraud, abuse, unauthorized access, or violations of our Terms of Service;
• (e) To communicate with you about the Service, including account-related notices and support requests;
• (f) To comply with legal obligations.

Where required, we rely on your consent, the necessity of processing to perform our contract with you, or our legitimate interests in operating and securing the Service as the legal basis for processing.

We do not use Google user data obtained through Google APIs for personalized advertising, targeted advertising, retargeting, interest-based advertising, or advertising profiling.

5. With Whom We Share Your Information

We do not sell your personal information or Google user data. We may share information with:

• Service providers who perform functions on our behalf, such as cloud hosting, database operations, infrastructure, analytics, and security — all under confidentiality and data-protection obligations;
• Google, which processes information in connection with Google Sign-In, Google API Services, Firebase Analytics, and Google Analytics, subject to Google's applicable terms and policies;
• Legal and regulatory authorities where required to comply with law, respond to lawful requests, or protect the rights, safety, or property of Island Tycoon, our users, or the public;
• Business transferees in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not transfer Google user data to data brokers, information resellers, advertising networks, or other third parties for advertising or unrelated purposes.

6. How We Secure Your Information

We implement administrative, technical, and physical safeguards designed to protect your information. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is protected using TLS/HTTPS encryption.
• Encryption at rest: Personal data and Google user data stored in our databases is encrypted at rest.
• Access controls: Access to user data is restricted to authorized personnel only, on a need-to-know basis, and protected by authentication mechanisms.
• Server security: Our servers are hosted by reputable cloud infrastructure providers with industry-standard physical and network security controls.
• Audit logging: Access to sensitive data is logged for security monitoring and incident response.
• Minimal data collection: We only collect the minimum data necessary to operate the Service, as described in this Policy.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you become aware of a security issue, please contact us immediately at islandtycoongame@gmail.com.

7. Where We Store and Transfer Your Information

Your information may be processed and stored in countries other than the one in which you reside, including countries that may not have data-protection laws equivalent to those in your jurisdiction. Where we transfer personal data internationally (for example, from the EU/UK to other countries), we rely on appropriate safeguards such as standard contractual clauses, where required by applicable law.

8. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Account information and associated Google Account data are generally retained while your account is active and for a reasonable period after account deletion to comply with legal, tax, or security obligations, after which it is deleted or anonymized. Game data may be retained for as long as reasonably necessary to provide the game, maintain game integrity, prevent abuse, and comply with applicable legal obligations. Analytics information is retained according to the retention settings and policies of the analytics services we use.

9. Your Rights and Choices

Depending on your location (for example, if you are in the EU/UK under the GDPR, in California under the CCPA/CPRA, or in Brazil under the LGPD), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at islandtycoongame@gmail.com. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

10. Account and Data Deletion

You may request deletion of your Island Tycoon account and associated personal information by contacting us at islandtycoongame@gmail.com. If account deletion functionality is available within the game, you may also use that feature directly.

When submitting a deletion request, please provide enough information for us to identify the relevant account. We may request reasonable verification to prevent unauthorized deletion.

After verifying a valid deletion request, we will delete the relevant personal information and associated Google Account data from our active systems. Deletion may result in the permanent loss of your account, game progress, game items, achievements, settings, and other account-related data. We may retain limited information where required or permitted by law, for legitimate security purposes, to prevent fraud or abuse, or to resolve disputes.

11. Children's Privacy

Island Tycoon is intended solely for users who are 13 years of age or older (or the minimum age required by applicable law). We do not knowingly collect personal information from anyone under that age. If we learn that we have collected personal information from a child below the applicable minimum age, we will delete it as soon as reasonably possible. If you believe a minor has provided us with personal information, please contact us immediately at islandtycoongame@gmail.com.

12. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and collect anonymous usage analytics (via Firebase Analytics and Google Analytics) to improve the Service. Google Analytics may use cookies or similar technologies to distinguish users and sessions and to provide measurement functionality. You can control cookie and local storage settings through your browser, though disabling them may affect the Service's functionality.

13. Google API Services: Limited Use Disclosure

Island Tycoon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with the Google API Services User Data Policy, we confirm the following:

1. Limited use to provide user-facing functionality

We only use Google user data (Google Account identifier, email address, display name, and profile picture URL) for the purposes explicitly described in this Privacy Policy: authenticating users, creating and managing Island Tycoon accounts, displaying player identity in-game, and providing account-related functionality. We do not use Google user data for any other purpose.

2. No transfer to third parties except as permitted

We do not transfer Google user data to any third party, except: (a) where necessary for service providers that help us operate the Service (e.g., cloud hosting), bound by confidentiality obligations; (b) where required by applicable law or legal process; or (c) as part of a merger, acquisition, or asset sale, with notice to users. We do not sell, rent, or trade Google user data.

3. No use for advertising

We do not use Google user data for serving advertisements, personalized advertising, retargeting, interest-based advertising, advertising profiling, or creating advertising audiences.

4. No unauthorized human access

We do not allow humans to read Google user data unless: (a) we first obtain the user's affirmative, explicit consent to view specific data (e.g., to help troubleshoot an account issue the user reported); (b) the data has been aggregated and anonymized and is used for internal operations; (c) it is necessary for security purposes, such as investigating abuse or a security incident; or (d) it is necessary to comply with applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect. The "Last updated" date at the top of this page indicates when this Policy was last revised.

15. EU Establishment

Breaking Barriers Now B.V. is incorporated and established in the Netherlands, a member state of the European Union. As an EU-based controller, we are directly subject to the GDPR and do not require a separate Article 27 representative. For any privacy-related inquiries, please contact us directly at islandtycoongame@gmail.com.

16. Contact Us

If you have questions about this Privacy Policy, your personal information, Google user data, or an account/data deletion request, please contact us:

Island Tycoon
Breaking Barriers Now B.V.
Hoogoorddreef 15
1101BA Amsterdam
Netherlands

Privacy inquiries: islandtycoongame@gmail.com
Data Protection Officer: islandtycoongame@gmail.com
General support: islandtycoongame@gmail.com

Website: https://islandtycoon.app/