Privacy policy

About this policy

This policy covers ViroPop for iOS, distributed by Nicolas Kaczmarski under the NKPROD name. For privacy questions, contact hello@nkprod.fr.

Ranked play in the Daily Challenge uses a ViroPop game server: it needs an account and receives gameplay submissions, as described under “Ranked play and your account”. This functional processing is separate from the optional PostHog usage statistics described below, which run only with your consent in analytics-enabled builds. For context, version 1.0.0 (build 5) was distributed with analytics disabled; the analytics sections below apply to analytics-enabled builds, including the earlier TestFlight build 4.

Information in the game

You can play Endless mode without creating an account. Your Endless scores, local leaderboard, progress, tutorial status, language, sound and accessibility preferences are stored on your device. When you allow analytics in an enabled build, some of these values are also included in usage events sent to PostHog.

ViroPop does not access your contacts, photos, microphone or precise GPS location. Advertising in ad-enabled versions is described below; applicable consent and device permissions control advertising data use. We do not sell your personal information.

Ranked play and your account

The Daily Challenge, ViroPop’s ranked mode, needs an account. Sign in with your email address and we send you a single-use sign-in link that expires quickly — no password. You can also sign in with Apple or Google; the game server verifies their identity token. Your account is given an automatically generated, unique game alias that is not derived from your sign-in details.

When you submit a Daily Challenge run, the app sends the recorded gameplay — the inputs of your run — to the server so the score can be verified. Only a verified score is published. The daily ranking shows your alias and score to other players; your email address is never displayed.

To run the competition, the server stores your sign-in details (your email address for email sign-in, or an Apple or Google account identifier for those methods), your game alias, session information, your attempts with their recorded runs and verification results, and your best daily score. Sign-in links are delivered by our email sending service.

Optional analytics with PostHog

With your consent, we use PostHog to understand how people use the game, improve its balance and features, and investigate technical errors. Events are sent to our PostHog Cloud EU project.

• Usage and game progress: app launches, screens and interactions, tutorial progress, settings, scores, levels and game events.
• Project promotions: views, taps and dismissals of the project links shown in the game, to understand engagement.
• A pseudonymous identifier: a randomly generated identifier lets us group events from the same installation over time. We do not attach your name or email address to this profile.
• Technical context: app version and build, device model, operating system, language, network type and error reports with stack traces.
• Approximate location: PostHog can derive country, region or city from the connection’s IP address. This is not GPS location.

These events are associated with the pseudonymous profile; they are not fully anonymous. Although the current in-game setting is labelled “Anonymous usage statistics”, a persistent technical identifier is used. Screen recording and session replay are disabled. This concerns the optional analytics tool only: the recorded gameplay used to verify a Daily Challenge score belongs to the separate processing described above.

PostHog processes this information as our analytics service provider. See PostHog’s privacy policy for information about the provider.

Advertising with Google AdMob

Ad-enabled versions of ViroPop, including TestFlight version 1.2.1 (build 20), use the Google Mobile Ads SDK to display advertisements after a game. Ad requests start only when Google's User Messaging Platform (UMP) reports that ads may be requested. The ads you receive depend on availability, your privacy choices and applicable device permissions.

Google's SDK may process your IP address (including an estimate of your general location), app- or device-related identifiers, ad views and interactions, crash reports and performance information to deliver and measure ads, prevent abuse and improve its services. This processing is separate from optional PostHog usage statistics: turning off those statistics does not turn off the ad SDK. ViroPop does not send your ranked-play email address, sign-in tokens or account details to the ad SDK.

Where required, Google's consent message lets you consent, refuse or manage individual options and lists the advertising partners and processing purposes. You can revisit these choices through Settings → Ad privacy options when that option is required by Google. Refusing consent does not prevent you from playing; available advertising may be limited or absent. Advertising identifiers and tracking remain subject to Apple's permissions; accepting a Google consent message does not grant Apple's tracking permission. ViroPop does not request access to your precise GPS location.

Google and the partners listed in the consent message process advertising data under their own policies and retention periods. Read Google's privacy policy, how Google uses information from apps that use its services and Google Mobile Ads SDK data disclosures for details and provider privacy controls. Contact NKPROD for questions about ViroPop; requests concerning data held by an advertising provider can also be directed to that provider.

Storage and your choices

Optional analytics relies on your consent. You may refuse it or withdraw it in the game’s “Anonymous usage statistics” setting, without losing access to the game or your scores. Turning it off stops collection of new usage events after the opt-out is processed; events already queued, including the opt-out event, may still be sent. It does not delete data already collected.

Local game information remains on your device until you remove the app and its data. Device backups may preserve or restore it according to your Apple settings. Progress stored only on your device is not copied to the game server.

While your ranked-play account exists, the server keeps your sign-in details, alias, submitted runs and ranked results. Deleting your account in the app removes your Daily Challenge attempts, ranked results and linked sign-in methods, ends your sessions, anonymises the stored account details and releases your alias. Local Endless records stay on your device.

Analytics records remain in our PostHog project until deleted under its retention settings or in response to a request that we can associate with the relevant records. Uninstalling ViroPop does not automatically delete those server-side records. See your privacy choices to disable analytics, remove local data, delete your account or request help.

Apple and external links

Apple operates the App Store, TestFlight and device backup services under its own privacy terms. Apple may process download, diagnostic or beta-testing information according to those terms and your settings. See Apple’s privacy policy. “Continue with Apple” and Game Center activity are likewise governed by Apple’s terms and your Apple account settings.

ViroPop may display links to NKPROD and other projects. These links open in your browser. If you follow one, the destination website processes your visit under its own privacy policy. Your local scores and game progress are not included in these links.

When you contact us

If you email us, we receive your email address and the information you choose to include. We use it to answer your request and provide support. Our email service processes the message to deliver and store that correspondence.

Support correspondence is kept for as long as needed to handle the request and any applicable legal obligations. Please do not send passwords or unnecessary sensitive information.

Where applicable, you can ask to access, correct or delete information you have sent us, or exercise other data protection rights, by emailing hello@nkprod.fr. To delete a ranked-play account, use the “Delete account” option in the game or contact us for help verifying your request. We cannot retrieve game data stored only on your device. You may also contact your local data protection authority.

Visiting these pages

These privacy pages use no analytics scripts, advertising cookies, external fonts or embedded third-party content. Our web infrastructure processes ordinary connection information, such as your IP address, the requested address and browser information, to serve pages and protect the service. Technical access logs may record this information; this is separate from data inside the game.

Changes to this policy

If ViroPop’s data practices change, we will update this page and its date, along with the relevant choices in the app.