PL

Prop Hunt: Party Time

Privacy policy

Version of 15 October 2026

This policy explains what data the mobile game Prop Hunt: Party Time (iOS and Android) and the website prophunt.axperts.pl collect, why, how long we keep it and what your rights are. We keep it plain and specific: if something is not listed here, the game does not collect it. This is a translation; if the versions differ, the Polish version prevails.

1. Who is responsible for your data

The data controller is Axperts Dariusz Zalewski, ul. Pelikana 1/3, 71-698 Szczecin, Poland, tax ID (NIP) 851 319 2109, REGON 363785540, the developer of Prop Hunt: Party Time. For anything about your data, write to biuro@axperts.pl.

2. What the game collects and why

Online matches run on our server, so some data has to reach it for the game to work at all, to save your progress and to find you a match. Here is the full list.

Player account

On first launch the game creates an account by itself. We store a random account number, your player tag (for example #8QLC2V), your in-game name (generated by the game or chosen by you, with the date of the last change, because the name can be changed once every 7 days), the hunter shown as your avatar, the dates the account was created and last connected, and the device sign-in key; if the account is banned for breaking the rules, also the reason and duration of the ban. The sign-in secret itself stays on your phone; the server only knows its hash.

Why: running your account and saving progress. Legal basis: performance of a contract, i.e. providing the game (Art. 6(1)(b) GDPR).

Device

Device identifier (on iPhone the identifier for vendor, IDFV; on Android a hash of the Android ID), phone model, system version, platform, game version and build number, game language, and the dates of the first and last connection from that device. We keep at most the 10 most recent devices per account. We separately store the same data for the device on which the account was created, so that we know how the account came about when you ask for help; it stays with the account until the account is deleted. The device identifier is not used for sign-in or for ads. The game also reports whether it is a store release or a test build; accounts from test builds are marked as test accounts and left out of rankings and statistics.

Why: recognising your account when you ask for help, asking you to update an old version, finding bugs that occur on specific phones. Legal basis: performance of a contract and our legitimate interest in a smooth and secure game (Art. 6(1)(b) and (f) GDPR).

Progress and matches

Level and experience, coins and gems, hunter characters (bought, earned and equipped), role statistics, daily missions, the disguise album, the daily gift, rewards from the story mode, your entries and places in the weekly tournament, and the history of settled matches (map, role, result, experience earned, time and length of the match). The server decides the result of online matches. Progress in the story mode “Cone's Adventures” stays on your phone; only the rewards for completed chapters reach the server. We also store messages from the game team sent to your account.

Why: the game, rewards, rankings, the tournament, cheat detection. Legal basis: Art. 6(1)(b) and (f) GDPR.

In rankings other players see your tag, in-game name, avatar hunter, points and place. Friends also see whether you are in the menu, in the queue or in a match.

Usage statistics

The game records how you use it: launch, going to the background and coming back, first launch, first steps (start, each step, skip, finish), screens you open (for example the menu, characters, shop, ranking, friends, settings, match results), button taps, entering and leaving the queue, the start and end of a match (role, hunter, map, result, time, whether the match was abandoned), opening the shop and purchases (product and price, including test purchases), ads watched, player reports, actions in private rooms and with friends, and errors shown on screen (for example no connection or an update request). Each event carries a random game session number, the time, your account number, device identifier, platform and game build number. These are only fixed names from a list in the game: we do not record text you type or anything outside the game.

Events travel over an encrypted connection to our own server, not to analytics companies. We look at them in aggregate (how many people finish the first steps, play a second match, come back the next day, where errors happen), and when you ask for help, also at your account's event history.

Why: improving the game by seeing where players struggle or give up, and fixing bugs. Legal basis: our legitimate interest in developing and improving the game (Art. 6(1)(f) GDPR). How to turn it off: in the game, Settings, the Usage statistics switch. When you turn it off, the game stops recording events, deletes those waiting to be sent, and the server deletes your account's events on the next connection. You can turn it back on with the same switch.

Ads

The game is free and ads cover part of the cost: a full-screen ad after some matches (never during a match, not in the first matches after installing, with breaks and a daily limit, never for players who have bought anything) and a rewarded ad that you only watch when you choose to double your coins after a match, double the daily gift or swap a daily mission. Ads never give ranking points.

Age question

Before the first ad, the game asks how old you are. The answer stays on your phone only and never reaches our server. It is used to choose ads and consents: under 13 you only get ads meant for children, from 13 to 15 only non-personalised ads, without the tracking prompt and without Google Analytics, and from 16 you decide yourself in the consent windows described below. Legal basis: our duty to protect younger players and our legitimate interest (Art. 6(1)(c) and (f) GDPR).

Google AdMob and Unity Ads

Ads are served by Google AdMob (Google Ireland Limited), and some of them come from Unity Ads (Unity Technologies) through AdMob mediation. To show and account for an ad, these companies receive technical data about your phone: the advertising identifier (on iPhone only with your consent in the system prompt; on Android the Google advertising ID, which you can delete in your phone's settings), IP address (approximate location), phone model, system, language, information about the app and how you interact with the ad (impression, click). For a rewarded ad, the game passes Google your in-game account number and a one-time token, and Google confirms to our server that the ad was watched; only then does the server add the reward. We do not pass these companies your in-game name, e-mail address or progress.

In the European Economic Area, the United Kingdom and Switzerland, we show Google's consent window with the list of ad partners and purposes before the first ad. Without consent, ads are non-personalised (chosen for the app, not for you). On iPhone, from 16 the system also asks for permission to track (App Tracking Transparency). You can change your consent in the game: Settings, the Ad privacy button (shown where the law requires it), and on iPhone in the system settings, Privacy, Tracking. Google and Unity also process ad data as separate controllers under their own rules: policies.google.com/technologies/ads and unity.com/legal/game-player-and-app-user-privacy-policy. Legal basis: personalised ads only with your consent (Art. 6(1)(a) GDPR); non-personalised ads and reward verification in our legitimate interest in funding a free game (Art. 6(1)(f) GDPR).

Crash reports (Firebase Crashlytics)

When the game freezes or closes with an error, Firebase Crashlytics (Google) records a report: where in the code the error happened, phone model, system, game version, free memory and a random installation identifier. The report does not contain your account number, in-game name or e-mail address. Why: fixing bugs. Legal basis: our legitimate interest in a working game (Art. 6(1)(f) GDPR). You can turn reports off with the same Usage statistics switch in Settings.

Google Analytics for Firebase

From 16, with Usage statistics on and, in the European Economic Area, only if you allow storing information on your device in Google's consent window, the same events as in usage statistics (above) also go to Google Analytics for Firebase (Google Ireland Limited) together with a random app instance identifier. We do not pass your account number or our device identifier. Google Analytics may also count ads watched when your consent allows ads. Why: reports and comparisons we do not build in our own panel, and ad measurement. Legal basis: your consent (Art. 6(1)(a) GDPR). Turning Usage statistics off also turns Google Analytics off and deletes its data stored on the phone.

Purchases

Payments are handled by Apple (App Store) or Google (Google Play); we never receive your card details or billing address. After a purchase, the game sends us the store's confirmation (Apple's signed transaction or Google's purchase token), and the server verifies it with Apple or Google Play and stores it with your account: the store, transaction or order number, product, quantity, date, price and currency (Apple includes them in the transaction; for Google we fetch from Google Play the order amount including tax, the tax amount and the currency, and we do not store the buyer address Google Play includes in the order data), whether it was a test purchase, and what was added to your account. We do not keep Google's purchase token, only its hash. Why: delivering what you bought, preventing double grants and fraud, handling refunds and complaints. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest (point (f)).

Sign-in (optional)

You can link your account to a sign-in method to move your progress to another phone:

Signing in with Google (on iPhone and Android) and with Apple on Android goes through a browser window and our sign-in page id-prophunt.axperts.pl. For the duration of the sign-in (at most 10 minutes) the page stores one technical cookie in your browser, which ties the return from Google or Apple to the window where the sign-in started; it disappears after the return. We do not keep tokens from Google or Apple: the server checks them once and stores only the identifier and the confirmed e-mail address.

Why: moving and recovering progress. Legal basis: Art. 6(1)(b) GDPR. You can unlink a sign-in method at any time in the game (Settings, Account, Unlink).

Friends, party and private rooms

Your friends list, sent and received invitations, blocked players, your party (up to 3 people playing together), private rooms with a code, and the list of people you played with in the last 48 hours (so you can easily add them as friends). In matches you can send quick messages from a fixed list; the game has no text chat and we do not store quick messages. Legal basis: Art. 6(1)(b) GDPR.

Player reports

In the game you can report another player by choosing a reason from a fixed list (offensive name, cheating, harassment with invitations or quick messages, something else). A report contains no text from you. We store your account number, who you report, the reason, where in the game the report was made, when, and the reported player's name and tag at that moment. The reported person never learns who reported them. Reports are reviewed by the game team, who may change the player's name or ban the account. When three different people report the same name within a day, the server temporarily replaces it with a generated name until review; it never bans an account on its own. Why: player safety and moderation of content visible to others. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a safe game, also for younger players).

IP address

The game server sees the IP address of the connection and uses it for limits that protect against abuse (for example the number of connections, registrations and sign-in attempts from one address). These counters are kept only in the server's memory, for at most a day. We do not store IP addresses in the account database or in game logs. Legal basis: our legitimate interest in security (Art. 6(1)(f) GDPR).

Contacting us

When you write to biuro@axperts.pl (help, account deletion, questions about data), we receive your e-mail address and your message. We reply from the same address. Why: answering and resolving your request. Legal basis: Art. 6(1)(b) and (f) GDPR.

3. What we do not collect

The game is built with the Unity engine. On launch the engine may send Unity Technologies anonymous hardware statistics (for example device model, system and graphics card). We do not use Unity Analytics; Unity Ads only come through AdMob mediation, described above.

4. Who we share data with

We do not sell data. The game server and account database run on a server owned by Axperts in Szczecin, Poland. We also use a few providers who process data on our instructions or as separate controllers:

Some providers are based in the USA. Transfers outside the European Economic Area rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses.

5. How long we keep data

How to delete your account is described on the Account deletion page.

6. Website

The website prophunt.axperts.pl uses no cookies, loads no scripts, fonts or images from other services and has no analytics. It is served by an Axperts server in Szczecin that does not log visitors' IP addresses or the pages they open; it only logs server errors. The only cookie appears on the sign-in page id-prophunt.axperts.pl while you sign in from the game (section 2, Sign-in).

7. Your rights

You have the right to access your data and get a copy, to rectification, erasure, restriction of processing, data portability, and to object to processing based on our legitimate interest. The fastest way to object to usage statistics and crash reports is in the game itself (Settings, Usage statistics); you can change consent to personalised ads in Settings with the Ad privacy button or in your phone's settings, but you can also write to us. Write to biuro@axperts.pl and include your player tag. We will reply within a month.

You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your country.

8. Children and teens

We design the game for a PEGI 12 rating. Before the first ad we only ask your age (the answer stays on your phone): under 13 we only show ads for children, from 13 to 15 only non-personalised ads, without the tracking prompt and without Google Analytics. We do not ask for data that would identify you, the game has no chat (matches only have quick messages from a fixed list), and friends can only be added by tag. Any player can be reported from the game, and reports are reviewed by the game team. If you are a parent or guardian and want to check or delete your child's account, write to us.

9. Security

Match results and rewards are decided only by the server; the phone only sends movement, view direction and buttons. The account database is not reachable from the internet, and only Axperts staff can access the game's admin panel. The connection to the account service (sign-in, e-mail codes, profile, friends, purchases, match tickets) and the handshake with the match server are encrypted, and the game checks that it is talking to our server. Only the match itself (movement, buttons, map state), which contains no personal data, travels unencrypted.

10. Changes to this policy

When we change how the game uses data, we will update this page and the version date at the top. We will also announce important changes in the game and in the release notes in the App Store and Google Play.