GRIM privacy policy
GRIM is a mobile multiplayer arena shooter. This policy explains exactly what the game collects, who it goes to, and what you can switch off.
- Last updated
- Effective
Who this covers
GRIM (package com.pixamentory.grim) is published by PIXAMENTORY ONLINE SERVICES (OPC) PRIVATE LIMITED, trading as Pixamentory, registered in India. We are the data controller for the information described here.
This policy covers the GRIM mobile app only. The pixamentory.io website is covered by our main privacy policy and cookie policy.
Playing GRIM is also governed by the terms of service and the community guidelines.
GRIM does not use cookies. Cookies are a web-browser mechanism, and GRIM is a native mobile app. It uses device and account identifiers plus on-device storage instead — all of it listed in Identifiers and on-device storage below.
Children and age
When you first open Grim, we ask for your age using a neutral age selector before creating or restoring a game-services account. Grim is intended for players aged 13 and over, and an under-13 answer cannot continue to sign-in or gameplay.
The selected age and the date it was answered are stored on your device. We do not send the selected age or date to our services. After sign-in, the game records only derived eligibility flags in protected account state so the rewarded-ad server can refuse restricted claims. These eligibility flags reflect whether you are an adult; they are not a separate privacy or marketing-consent answer. None of these flags contains the selected age.
If your age is unknown or you are under 13, Grim keeps the following unavailable:
- rewarded advertising;
- product analytics and AppsFlyer attribution.
Text chat and voice chat are available only to players aged 18 and over who have accepted the Terms of Service. They stay unavailable to every player under 18 and to any player whose age is unknown.
For players aged 13 and over, product analytics and AppsFlyer attribution are on by default. You can turn both off, and back on, with the USAGE DATA switch in Settings; the game does not ask you first. Deleting your account also stops them; see Your rights and deletion below.
What GRIM collects
To let you play and to keep your progress, Grim uses Unity Gaming Services, Photon Quantum (Photon's multiplayer service) and a match gateway we run on Cloudflare.
| What | Why |
|---|---|
| A player account ID | Identifies your save. On Android the game first attempts a silent Google Play Games sign-in; when that succeeds your Grim account is linked to your Google Play Games identity. When it does not, or on any other platform, an anonymous ID is generated for you. Either way, you are never asked for a name, email address or password. |
| Your progress | Heroes, mastery levels, trophies, daily rewards, chests, purchases and your in-game currency balances. |
| Your display name and the avatar you choose | Shown to other players on leaderboards and in matches. |
| Your public profile | Your display name and player tag, level, rank and trophies, and your season wins, matches and win rate, lifetime eliminations and K/D are shown to other players who open your profile from their Friends list, a match result or a match in their battle log. Your avatar photo, battle history and purchases are not shown. |
| Who was in a match with you | When a public match you played settles (not Practice or Custom rooms), your game records your seat in it: your player account ID, your team, your eliminations, deaths and score in that match as your game reported them, the avatar you had chosen and the hero you played. The other players in that same match can see your current display name and player tag, that avatar and hero, and those match figures when they open that match from their own battle log (their ten most recent matches), and can open your public profile from there. Nobody outside that match can read it, and it is not shown while Friends is paused. If you delete your account, your seat shows as a deleted player: in the records of your 32 most recent matches your whole seat is replaced, and older records keep that seat's figures, avatar and hero under an account ID that no longer resolves to a name. |
| Match sign-in and results | When you join an online match, Photon passes your Grim sign-in token to our match gateway, which Cloudflare runs for us. The gateway checks the token and tells Photon your player account ID, and it cleans the display name your game sends before the other players in the room see it. When an online match ends, the gateway receives its result (each player's account ID, team, eliminations and deaths) to pay rewards, and holds it in a processing queue until the match is settled; the queue discards an unsettled result after a few days (four by default), and a result that repeatedly fails to settle is set aside until we retry or delete it. The gateway keeps no database, never records your sign-in token, and its operational logs replace player IDs and addresses with pseudonyms. |
| Friend connections | Only if you use the friends feature. |
| Your IP address | Used by the multiplayer networking to connect you to a match. It is not stored as part of your profile. |
How the game is performing
For players aged 13 and over, Grim records gameplay events — matches played, results, progression and session length — together with device and service-performance fields so we can find bugs and understand which parts of the game work.
Analytics is on by default for players aged 13 and over and off if your age is unknown or under 13. A player aged 13 or over can turn it off, and back on, with the USAGE DATA switch in Settings, and the change applies straight away. An unknown or under-13 age keeps it off whatever the switch says.
Product analytics is processed by Amplitude (Amplitude, Inc., US data centre). It receives your app interactions and in-app actions, a pseudonymous player ID (your game-services account ID, not your name or email), device information such as model, operating system and app version, and your country, together with a random install identifier that Amplitude's SDK creates on the device. Grim asks Amplitude not to collect your advertising ID or app-set ID, and not to record your IP address, city, region (state or province), latitude and longitude, designated market area (DMA) or mobile carrier, so that no location more precise than country is kept. Amplitude's COPPA control is switched on for every player. The Amplitude SDK is not started at all while your age is unknown or under 13, or while USAGE DATA is off; turning USAGE DATA off after it has started ends its session tracking and sets Amplitude's own opt-out.
Earlier versions of Grim used GameAnalytics for the same purpose, and a copy installed from before this change keeps using it until it is updated. Data sent to GameAnalytics stays there; see Your rights and deletion below to request its deletion.
Notifications
If you allow notifications, your device is issued a notification token so we can send you reminders about the game and tell you when a friend invites you to a match. You can turn notifications off at any time in your device settings.
Identifiers and on-device storage
This is GRIM's equivalent of a cookie table. Nothing here is a browser cookie; these are app identifiers and local storage.
| Identifier or storage | What it is | Purpose |
|---|---|---|
| UGS player ID | Random account identifier | Your account, saves, currency, leaderboards and friends |
| Analytics install ID | Random per-install identifier | Product analytics for players aged 13 and over while USAGE DATA is on |
| Attribution ID | A one-way hash of your player ID. Your real player ID is never sent to our attribution partner | Attribution measurement for players aged 13 and over while USAGE DATA is on |
| Crash session ID | Random per-session identifier | Grouping crash reports so a single fault is not counted many times |
| Advertising ID | Your device's resettable ad identifier | AppsFlyer may access it while Google Ads measurement is on for an adult. GRIM does not pass it to the rewarded-ad service. Ad networks may process device identifiers to deliver rewarded ads, except that no advertising identifier is used for players whose age is unknown or under 18 (see Advertising) |
| Push token | Device notification token | Delivering notifications, if you allowed them |
| Local settings storage | On-device preferences, including your age-band answer | Remembering your settings between sessions. This never leaves your device and is erased when you uninstall the app |
Where installs come from
For players aged 13 or over, AppsFlyer records install attribution and a small allow-list of conversion events: sign-in, tutorial completion and completed matches. Grim sends a one-way hash of the anonymous player ID as the customer identifier; it does not send the raw ID. Turning USAGE DATA off in Settings (section 3) stops AppsFlyer completely, including the Google Ads measurement described below.
AppsFlyer's TCF data collection is disabled for every player. Unless Google Ads measurement is on, AppsFlyer's advertising-identifier collection is also disabled, its consent signals for advertising use are negative and partner sharing is filtered off, so AppsFlyer receives only the limited data above, as Grim's attribution service provider.
Google Ads measurement. From the first Android version of Grim released after 12 October 2026, Google Ads measurement is on by default for players whose age answer confirms they are at least 18. While it is on, AppsFlyer may access the device's advertising ID and share install-attribution data and related device information with Google Ads, together with four milestones (app open, sign-in, tutorial completion and match completion), so that Grim can measure its advertising campaigns. No event values, revenue or purchase events are sent to Google Ads. The game does not ask about this when you first open it.
You can turn it off at any time in Settings (GOOGLE ADS MEASUREMENT, then TURN OFF), and turn it back on there. Turning it off stops further partner sharing and advertising-identifier collection through AppsFlyer. It does not change your access to the game or to rewards. A saved choice to turn it off stays off, including one saved in an earlier version of the app. It is never on for players under 18, for players whose age is unknown, or on a device where the setting cannot be read or saved, and deleting your account turns it off. Earlier versions of the app share nothing with Google Ads unless you allowed it when an earlier version asked.
Being on by default is not treated as your consent to advertising. Grim tells AppsFlyer that you consent to advertising data use and ad storage only after you have explicitly turned the setting on yourself, in Settings or by choosing to allow it when an earlier version of the app asked; until then those consent signals stay negative. The consent signal for ad personalisation is always negative.
Who processes it
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We use the following service providers, each processing only what their function needs:
| Provider | Function | What it receives |
|---|---|---|
| Unity Gaming Services | Accounts, cloud saves, economy, leaderboards, friends, live config, push | Player ID, display name, progress, push token |
| Photon Quantum | Multiplayer sessions | Session identifiers, IP address while connected |
| Amplitude (Amplitude, Inc., US data centre) | Product analytics for players aged 13 and over while USAGE DATA is on | Player ID, install ID, gameplay events, device model, OS, app version, country |
| GameAnalytics (earlier app versions) | Product analytics until an older app is updated | Gameplay and device data already sent by earlier versions |
| Cloudflare | Grim match gateway: sign-in checks and result settlement | Sign-in token for verification, player IDs and match results; operational logs use pseudonyms |
| Google Ads | Adult campaign measurement through AppsFlyer | Install-attribution and related device data, advertising ID and four milestones; no event values, revenue or purchases |
| Sentry | Crash and error reporting (EU-hosted) | Stack traces, device and app version, session ID |
| AppsFlyer | Install attribution and adult Google Ads measurement | Hashed attribution ID, install and campaign signals; advertising ID and the four milestones shared with Google Ads only while adult measurement is on |
| Unity LevelPlay and its mediated ad networks | Optional rewarded video ads for eligible players aged 13 and over | Device and network identifiers, approximate country, ad impression and revenue data; no player ID, age or advertising identifier from GRIM |
| Vivox | Text and voice chat for players aged 18 and over who accepted the Terms | Messages and voice shared with players in the same channel or match; text may be kept for up to 30 days |
| Google Play | Sign-in, app updates, and purchases | Play Games player ID and purchase tokens |
We may also disclose information where we are legally required to, or where it is necessary to investigate fraud, cheating, or abuse.
Advertising
Grim offers optional rewarded video ads to eligible players aged 13 or over. You are never required to watch one, and nothing in the game is locked behind watching one. Unknown-age and under-13 players receive no rewarded-ad offer and the ad SDK is not initialized for them.
LevelPlay and mediated ad providers may process device/network identifiers, approximate country, ad-impression metadata and revenue data to load, measure, secure and pay for an ad.
Before the ad service starts, Grim configures non-behavioural ads and disables advertising identifiers for players whose age is unknown or under 18. It sends a negative advertising-consent signal and a do-not-sell request for every player. Grim passes no player ID, no age, no placement name and no advertising identifier to the ad service. Because the consent signal is always negative, ads are configured to be non-personalised and contextual where the serving network allows it, for every player in every region; answering the age question never upgrades that.
Rewarded ads are available to eligible players aged 13 and over in the non-personalised configuration above. The age confirmation is not advertising or privacy consent.
Your choices in-game
| You want to | Do this |
|---|---|
| Stop analytics and attribution collection | Settings → USAGE DATA → off (players aged 13 and over). Deleting your account (below) also stops it |
| Stop Google Ads measurement (Android, players aged 18 and over) | Settings → GOOGLE ADS MEASUREMENT → TURN OFF. Turning USAGE DATA off also stops it |
| Stop notifications | Your device's notification settings |
| Delete your Grim account and active UGS data | Settings → Delete account → review the confirmation → confirm |
| Request deletion from analytics/attribution providers | Email support@pixamentory.io with the player ID shown in Settings so we can process the provider request |
Social communication
Friends, text chat and voice chat are available. Friends is open to every player. Text chat and match voice chat use Unity Vivox and are offered only to players aged 18 and over who have accepted the Terms of Service; players under 18 and players whose age is unknown cannot send or receive chat or voice. Messages and voice go to the other players in the same chat channel or match. Grim does not record or store voice audio or chat messages on its own servers; Vivox, which Unity operates for us, may keep text messages for up to 30 days. Voice uses your microphone only after you allow it in Android's permission prompt.
You can mute, block or report other players at any time. Reports go to Pixamentory's moderation review; to contest a moderation decision on your account, see Contact below.
Purchases
If you buy something, Google Play processes the payment. We never see or store your card details. We receive confirmation that a purchase happened so we can deliver what you bought.
Retention
- Account and progress data — kept while your account exists, and removed when the account-deletion process completes.
- Crash and security records — kept only for the provider's active operational window or as long as needed to investigate security, fraud, or legal claims.
- Product analytics and attribution — collection stops when USAGE DATA is turned off or your account is deleted. Existing provider records are handled through a verified deletion request rather than being represented as deleted merely because collection stopped on the device.
- Records we must retain — limited records may be kept where required by tax, accounting, fraud-prevention, dispute, or other applicable law, and are then restricted to that purpose.
- On-device storage — erased when you uninstall the app.
Security and encryption
Account, cloud-save, economy, support, and purchase-related requests use HTTPS/TLS in transit. We restrict provider access, minimise identifiers, and keep authoritative progression and reward decisions on trusted services.
Real-time Photon gameplay uses UDP transport and its ordinary state traffic is not universally protected by payload encryption. That traffic is limited to multiplayer session and gameplay state; it does not carry passwords or card details. This is why our Google Play Data safety declaration does not claim that every category is encrypted in transit.
What we do not do
- We do not sell your data.
- We do not ask for your real name, address or phone number.
- We do not require an email address to play.
- We disable advertising identifiers in Amplitude. AppsFlyer may access the advertising ID only while Google Ads measurement is on for an adult (Where installs come from above). Rewarded-ad providers may process resettable device/advertising identifiers as described in Advertising above.
Your rights and deletion
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict how we use it, and to withdraw consent. If you are in India, the Digital Personal Data Protection Act gives you these rights along with the right to nominate someone to exercise them on your behalf. If you are in the EEA or UK, the GDPR does. If you are in California, the CCPA/CPRA does — including the right not to be discriminated against for exercising them.
Deleting your account. GRIM includes in-game account deletion under Settings > Account > DELETE ACCOUNT. It removes your Unity Gaming Services account and progress only after the required service clean-up succeeds, clears local data, and stops further analytics and attribution collection. Separate provider records held by Vivox, Amplitude, GameAnalytics, AppsFlyer, and other linked processors require privacy operations to submit and track provider requests; GRIM does not treat logging out or leaving a channel as deletion. Some records may be retained where law requires it, as listed above. You do not need the app to delete your account: the GRIM account deletion page explains how to request deletion by email, what is erased, and what may be kept. Anonymous accounts have no email address, so include the player name and tag (for example Name#1234) shown on the game's Account screen so we can locate the correct account.
Deleting your account from the web. Use https://pixamentory.io/grim/delete-account — a standalone page that works without the app installed: it gives the in-game path, the email route (support@pixamentory.io with the player name and tag shown on Settings → Account, e.g. Name#1234, and possible proof of ownership), what is deleted, which provider records are request-based, and what may be kept.
The in-app route deliberately takes two steps: asking opens a confirmation, and only the confirmation deletes. Deleting removes your progress, balances, purchase record, friend relationships and the account itself. Amplitude and AppsFlyer provide no in-app erasure call, so those two are handled as support requests — email support@pixamentory.io with the player ID shown in Settings and we submit them for you. The same route covers GameAnalytics, for data sent by versions of Grim from before Amplitude replaced it.
We answer requests within the period required by applicable law. If you are unhappy with our response, you may complain to your local data protection authority, or in India to the Data Protection Board.
International transfers
We are based in India and our service providers operate globally, so your data may be processed outside your country. Where the law requires a transfer safeguard — for example standard contractual clauses for data leaving the EEA or UK — we rely on the mechanism our provider has in place. Crash reporting is hosted in the EU.
Changes
If this policy changes materially, we will update the date at the top and note the change in the game's patch notes.
Contact
PIXAMENTORY ONLINE SERVICES (OPC) PRIVATE LIMITED
235, Sanganer Bazar, Airport Road Sanganer, Raghunath Puri 2, Sanganer, Jaipur, Rajasthan, India - 302029
support@pixamentory.io
Support and privacy requests: support@pixamentory.io — account help, problems with the game, and the analytics and attribution deletion requests described in Your rights and deletion above. Quote the player ID shown in Settings.
Grievances: grievance@pixamentory.io — complaints about this policy, about a moderation decision on your account, or about anything support has not resolved.