NeonOverrun

Who We Are

Neon Overrun, formerly Neon Extraction (“the Game”), is developed and operated by Unrushed (“we”, “us”, “our”), Mitaka, Japan. We are the data controller for the personal data described below.

You can reach us at any time using the contact form above.

The Short Version

The Game plays fully offline. There is no account, no login, and we never ask for your name, email address, or contact details. We do not know who you are.

When you are online we collect crash reports and gameplay analytics, tied to a random identifier generated on your device. When advertising is switched on, Google serves the ads. We also use Singular to learn which ad campaign brought you to the Game; it receives your advertising identifier only if you allow tracking.

If you are in the EEA, the UK or Switzerland, or we cannot tell where you are, ads are always non-personalised, whatever you choose in the consent message. Everywhere, Settings → ABOUT → SHARE ANONYMOUS USAGE DATA turns off analytics, crash reports and install attribution.

Your Choices at a Glance

• Consent message (Google's User Messaging Platform) — shown at launch where the law requires it, including the EEA, the UK and Switzerland. Change your answer later in Settings → ABOUT → PRIVACY → CHOICES. The CHOICES button appears wherever the consent message applies to you.
• Apple's tracking prompt (iPhone and iPad only) — choose “Allow” or “Ask App Not to Track”. Change it later in the iOS Settings app under Privacy & Security → Tracking.
• SHARE ANONYMOUS USAGE DATA (Settings → ABOUT, on by default) — turning it off stops gameplay analytics, crash reports and Singular, and deletes analytics events on your device that have not been sent yet.

Crash and Error Diagnostics

What: the error and stack trace, the Game version and build, and basic device context (operating system and version, device model). Sentry also counts crash-free sessions using a random identifier it generates on your device. Processed by Sentry on our behalf. We have configured Sentry with personally identifying data collection disabled (sendDefaultPii: false), no screenshots, performance tracing switched off, and a sanitisation step that strips event payloads before they are sent.

When: crash reporting follows the same choices as gameplay analytics below. In the EEA, the UK and Switzerland it starts only if you consent; everywhere, turning off SHARE ANONYMOUS USAGE DATA stops it.

Why: to find and fix crashes.

Legal basis: where the GDPR applies, your consent (Article 6(1)(a)); elsewhere, our legitimate interest in keeping the Game working, with the Settings opt-out above.

Retention: up to 90 days.

Gameplay Analytics

What: in-game events — runs starting and ending (sector reached, duration, cause of death), level-ups, which cards you were offered and which you picked, upgrades bought with in-game shards, tutorial steps, screens viewed, settings changed, and session start and summary (time played, progress counts, shard balance, and your sound, haptics and accessibility settings). Also technical events: frame-rate and loading-time summaries, the device's heat state, short error reports (error type, message and top stack frame), whether ads were offered, loaded, shown or completed and their estimated revenue, the outcome of a Remove Ads purchase or restore, the outcome of the consent message and Apple's tracking prompt, and which external links you opened (Discord, store review, this policy). Events are sent in batches.

Alongside this, once per session, a device snapshot: device model, operating system and version, screen width and height in pixels, screen density, GPU name, system language, time zone, and CPU core count. Every batch also carries the platform (iOS or Android), the Game version and build number, the store it was installed from, and timestamps.

Identifiers: a randomly generated install ID stored on your device and a per-session ID. These are created by the Game itself. They are not the advertising ID, not a hardware serial, and not linked to any Google or Apple account. Reinstalling the Game generates a new install ID. If you updated from a version before 1.9.0, a one-time report about importing your save includes the install ID of that earlier version, so the two can be linked.

When: in the EEA, the UK and Switzerland, only if you consent in the consent message (the measurement choice); nothing is sent until you have answered. Everywhere, SHARE ANONYMOUS USAGE DATA in Settings → ABOUT turns it off. Apple's tracking prompt does not affect gameplay analytics, because no advertising identifier is involved.

Why: to understand how the Game is played, to balance difficulty and progression, and to find performance problems.

Legal basis: where the GDPR applies, your consent (Article 6(1)(a)); elsewhere, our legitimate interest in improving the Game, with the Settings opt-out. The data concerns gameplay rather than you as a person, and is not used to target advertising or make decisions about you.

Retention: up to 12 months.

Where it goes: our own telemetry service, hosted on Railway. The service does not record or store your IP address. Standard hosting infrastructure logs may contain an IP address transiently, as with any internet service.

Advertising

Advertising in Neon Overrun is served by Google AdMob and is controlled by a server-side switch.

Consent first. At launch the Game checks Google's User Messaging Platform, which decides whether a consent message applies where you are and shows it if so. This check runs even when advertising is switched off, because the same answers govern analytics and attribution. The advertising SDK itself starts only when advertising is switched on, and only after your answers (and, on iPhone and iPad, Apple's tracking prompt) are resolved.

Personalised or not:

• In the EEA, the UK and Switzerland — and whenever we cannot tell where you are — every ad request is non-personalised, whatever you answer. Our audience includes players aged 13 to 17, and Article 28 of the Digital Services Act prohibits ads based on profiling for minors.
• Everywhere else, ads may be personalised only if your choices allow it: your answer to Google's consent message where one is shown (for example, US state privacy opt-outs), and on iPhone and iPad, “Allow” in Apple's tracking prompt. If you choose “Ask App Not to Track”, ads are non-personalised. On Android you can also reset or delete your advertising ID in the system settings.

Non-personalised ads are chosen from context rather than a profile of you, but Google still uses device identifiers and similar technology for frequency capping, aggregated ad reporting, and fraud and abuse prevention.

What: your IP address (which Google may use to estimate your approximate location), an advertising identifier (the IDFA on iOS only if you tapped “Allow”, the Android advertising ID), coarse device and connection information, and ad interaction data (whether an ad loaded, was shown, was dismissed, or earned a reward). Collected and used by Google as an independent controller for the ads it serves.

Legal basis: where the GDPR applies, your consent (Article 6(1)(a)), and consent for storing and accessing information on your device under Article 5(3) of the ePrivacy Directive.

Withdrawing consent: open Settings → ABOUT in the Game and tap CHOICES next to PRIVACY, or change Apple's tracking setting in the iOS Settings app. Withdrawal does not affect processing carried out before you withdrew.

Google's handling of advertising data is described at policies.google.com/technologies/partner-sites.

Install Attribution (Singular)

The App Store and Google Play versions use Singular to measure which ad campaigns bring new players to the Game. Singular starts only when SHARE ANONYMOUS USAGE DATA is on and the consent message, where one applies to you, allows it. In the EEA, the UK and Switzerland that means you consented in the message; without that consent, or if we cannot tell where you are, Singular does not start. If you later withdraw consent or turn the setting off, the Game stops Singular.

Without tracking permission: if you have not allowed tracking (on iPhone and iPad, by tapping “Allow” in Apple's tracking prompt; on Android, through the consent message), Singular still receives device and usage data and install and app-open (session) events, with Apple's identifier for vendors and Apple's SKAdNetwork on iOS, but no advertising identifier, and the Game tells Singular to limit sharing that data with ad partners. We do not use fingerprinting. Your advertising identifier (IDFA on iOS, Android advertising ID) is sent only after you allow tracking; if you later deny it, the Game stops sending it.

What: your IP address, device and operating-system details, Apple's identifier for vendors on iOS, install and app-open (session) events, a small set of gameplay events (tutorial step reached, run started, run ended, milestone completed, ad shown, ad completed), the estimated revenue of ads you watch, and verified Remove Ads purchases (transaction ID, product, price and currency); plus your advertising identifier only if you allowed tracking.

Why: to attribute installs to the ad campaigns that drove them and to measure whether those campaigns pay for themselves.

Role: Singular processes this data on our behalf and on our instructions, as our processor, under its data processing agreement. It is stored in the United States.

Legal basis: where the GDPR applies, your consent (Article 6(1)(a)), and consent under Article 5(3) of the ePrivacy Directive.

Retention: Singular keeps this data, on our instructions, for as long as we use its service, and permanently deletes it when our agreement with Singular ends (section 15 of Singular's Terms of Service). We can instruct Singular to delete it earlier, and do so when you ask us to delete your data.

Purchases

If you buy an in-app product, the transaction is handled by Google Play or the Apple App Store as merchant of record. We receive confirmation that a purchase occurred and the product purchased. We never receive your payment card details, billing address, or name. If install attribution is allowed (see above), a record of the verified purchase is also sent to Singular.

Legal basis: performance of a contract (Article 6(1)(b)).

Your Save File and iCloud

Your save file — your progress, unlocks, and shards — is stored on your device. We never receive it.

On iPhone and iPad, if you are signed in to iCloud, the Game also keeps a copy of your save in your own iCloud account using Apple's iCloud key-value storage, so your progress follows you across your devices. Apple stores that copy under your agreement with Apple; we never receive it and cannot access it. You can turn iCloud off for the Game in the iOS Settings app.

What We Never Collect

• Your name, email address, phone number, or postal address
• Your precise location — the Game never asks for location permission (Google and Singular may estimate an approximate location from your IP address, as described above)
• Contacts, photos, files, microphone, or camera data
• Any special category data under Article 9 GDPR
• Anything at all while you play offline, beyond what is stored locally on your own device

Who We Share Data With

• Sentry — processor · crash diagnostics · EU / US
• Railway — processor · hosting for our telemetry service · US
• Singular (Singular Labs) — processor · install attribution, only if you allow tracking · US
• Google (AdMob and the User Messaging Platform) — independent controller · consent message and serving advertising · global
• Google Play / Apple — independent controllers · purchase processing · global
• Apple (iCloud) — your own iCloud provider · syncing your save to your iCloud account; we receive nothing · global
• Formspree — processor · delivering the contact form on this page · US

We do not sell personal data, and we do not share it with data brokers.

International Transfers

We are established in Japan. The European Commission has adopted an adequacy decision for Japan, which means personal data may be transferred from the EEA to Japan without additional safeguards.

Where a processor listed above transfers data outside the EEA to a country without an adequacy decision, that transfer is covered by the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data) under that provider's data processing terms. Singular's terms use these clauses for its US processing.

Your Rights

If you are in the EEA or the UK you have the right to: access your data; have it corrected; have it erased; restrict or object to processing; and receive it in a portable format. Where processing rests on consent, you may withdraw it at any time.

How to exercise them without an account

Because we deliberately hold no identity data, we cannot find your records from a name or an email address. Send us a request using the contact form above, telling us your install ID and roughly when you played. Open Settings → ABOUT in the Game and tap COPY next to INSTALL ID to copy it. For install-attribution data held by Singular, we may ask for your device's advertising ID (if you allowed tracking) so Singular can find the records. We will act on your request within one month.

If you have already deleted the Game, the install ID is gone with it and we may not be able to match your records. Under Article 11(2) GDPR we may have to decline a request we cannot match.

Two routes are always available to you: deleting the app stops all further collection and severs any link to future data, and all data already collected is deleted at the end of its retention period — 90 days for crash diagnostics, 12 months for gameplay analytics.

You also have the right to lodge a complaint with a supervisory authority — in the EEA, the data protection authority of the country where you live or work. A list is maintained at edpb.europa.eu.

Children

Neon Overrun is rated for players aged 13 and over and is not directed at children under 13. We do not knowingly collect data from children under 13. Because players aged 13 to 17 may play the Game, ads in the EEA, the UK and Switzerland are never based on profiling. If you believe a child has provided us with data, contact us using the form above and we will delete it.

Earlier Versions

Versions before 1.9.0 were built on a web view. Their device snapshot also included the WebView version, and they requested non-personalised ads everywhere.

Changes

We will update this page when our practices change and revise the “Last updated” date. Material changes affecting how we use your data will be announced in the Game before they take effect.

Contact

Unrushed — Mitaka, Japan. If you have questions about this privacy policy, please contact us using the form above.