GRIM privacy policy

Who this covers

GRIM (package com.pixamentory.grim) is published by PIXAMENTORY ONLINE SERVICES (OPC) PRIVATE LIMITED, trading as Pixamentory, registered in India. We are the data controller for the information described here.

This policy covers the GRIM mobile app only. The pixamentory.io website is covered by our main privacy policy and cookie policy.

Playing GRIM is also governed by the terms of service and the community guidelines.

Children and age

Before GRIM creates or signs in to an account, the game asks you to choose your age using an age slider. It does not ask for your date of birth or your name. The selected age and the date it was answered are stored only in the app's on-device settings so the game can keep applying its 13+ boundary as time passes.

GRIM is intended only for players aged 13 and over. It is not directed to children under 13. An unknown age stops account creation and sign-in until it is answered. If the answer indicates that the player is under 13, the game blocks access before online services or authentication start and continues to show that blocking state on later launches.

• Product analytics and install attribution are on for players aged 13 and over and off for an unknown or under-13 age answer. There is no in-app switch; deleting your account stops collection (section 10).
• Rewarded ads and social communication remain paused by the current release configuration.
• No Unity Gaming Services or Google Play Games account is created or linked from the blocked age state.

The age answer is asked once and is not re-editable from the game's settings. If you answered incorrectly and need it changed, contact us at hello@pixamentory.io.

If you are a parent or guardian and believe a child under 13 has used GRIM, contact us. We will help close the account and process a deletion request.

What GRIM collects

Account and gameplay

• A player ID issued by Unity Gaming Services when you first sign in. This is a random identifier, not your name.
• Your display name, chosen by you, and your avatar selection. Both are shown to other players on leaderboards and in matches.
• Progress and game state — matches played, results, currency balances, unlocked cards and heroes, and your settings.
• Match and session data — the rooms you join, session identifiers, and your IP address while connected to a game server. An IP address is unavoidable for real-time multiplayer; it is used to route your connection and is not used to profile you.
• If you sign in with Google Play Games, the player identifier that service returns to us. GRIM does not request, publish, or store your Google Play profile photo.

Diagnostics

• Crash and error reports — stack traces, the app version, the device model and OS version, and a short trail of recent in-app events. Personally identifiable information is explicitly disabled in our crash reporting configuration, screenshots are not captured, and push notification tokens are stripped from logs before they leave the device.

Product analytics

For players aged 13 and over, product analytics and install attribution are on as a normal part of the service. They stay off when no age answer has been given or the answer is under 13. There is no in-app setting to change this; if you do not want this data collected, deleting your account stops it.

• Gameplay events — such as completing the tutorial, finishing a match, or opening a shop screen — together with the device model, OS version, country, and app version. These are used to understand how the game is played and where it is confusing or broken.
• No advertising identifier is attached to analytics. Hardware, memory and frame-rate profiling are switched off.

Notifications

• If you allow notifications, a device push token, used to send match reminders and reward alerts. You can revoke this at any time in your device settings.

Identifiers and on-device storage

This is GRIM's equivalent of a cookie table. Nothing here is a browser cookie; these are app identifiers and local storage.

Our attribution partner is configured with advertising identifiers switched off and partner data-sharing switched off. We do not send purchase or revenue events to it.

Who processes it

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We use the following service providers, each processing only what their function needs:

We may also disclose information where we are legally required to, or where it is necessary to investigate fraud, cheating, or abuse.

Advertising

GRIM includes the technical capability for optional rewarded video ads, but rewarded ads are paused in the current release configuration. The ad service does not initialise while that pause is active, so it does not make ad requests or collect an advertising identifier.

We will not enable ads for a later release unless the age, consent, disclosure, provider, and Google Play declarations for that exact build have been reviewed. Any enabled ads would remain optional rewarded ads, not forced interstitials, and this policy would be updated before the change takes effect.

Your choices in-game

• Analytics. Product analytics and attribution are on for players aged 13 and over and off for an unknown or under-13 age answer. They follow your age answer and nothing else; there is no in-app setting to turn them off. Deleting your account (below) stops collection.
• Notifications. Revoke the permission in your device settings at any time.
• Social communication. Friends, invitations, text chat, and voice are paused. They also require a confirmed 13+ age and acceptance of the current communications terms before they can initialise.

Social communication

Friends, invitations, text chat, and voice chat are currently paused by live configuration. GRIM does not log in to Vivox while the pause is active. If these features are enabled later, they will require a confirmed 13+ age, acceptance of the current communications terms, and the safety controls described in the community guidelines.

Purchases

The Phase 1 Early Access build does not offer in-app purchases. If purchases are enabled in a later build, they will be processed by Google Play; we will never see or store card details, and this policy will be updated before that build is released.

Retention

• Account and progress data — kept while your account exists, and removed when the account-deletion process completes.
• Crash and security records — kept only for the provider's active operational window or as long as needed to investigate security, fraud, or legal claims.
• Product analytics and attribution — collection stops when your account is deleted. Existing provider records are handled through a verified deletion request rather than being represented as deleted merely because collection stopped on the device.
• Records we must retain — limited records may be kept where required by tax, accounting, fraud-prevention, dispute, or other applicable law, and are then restricted to that purpose.
• On-device storage — erased when you uninstall the app.

Security and encryption

Account, cloud-save, economy, support, and purchase-related requests use HTTPS/TLS in transit. We restrict provider access, minimise identifiers, and keep authoritative progression and reward decisions on trusted services.

Real-time Photon gameplay uses UDP transport and its ordinary state traffic is not universally protected by payload encryption. That traffic is limited to multiplayer session and gameplay state; it does not carry passwords or card details. This is why our Google Play Data safety declaration does not claim that every category is encrypted in transit.

Your rights and deletion

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict how we use it, and to withdraw consent. If you are in India, the Digital Personal Data Protection Act gives you these rights along with the right to nominate someone to exercise them on your behalf. If you are in the EEA or UK, the GDPR does. If you are in California, the CCPA/CPRA does — including the right not to be discriminated against for exercising them.

Deleting your account. GRIM includes in-game account deletion. It removes your Unity Gaming Services account and progress only after the required service clean-up succeeds, clears local data, and stops further analytics and attribution collection. Separate provider records held by Vivox, GameAnalytics, AppsFlyer, and other linked processors require privacy operations to submit and track provider requests; GRIM does not treat logging out or leaving a channel as deletion. Some records may be retained where law requires it, as listed above. You can also request deletion from this public web page by emailing support@pixamentory.io. Anonymous accounts may not have an email address, so include the Player ID shown in the game's Settings screen so we can locate the correct account.

We answer requests within the period required by applicable law. If you are unhappy with our response, you may complain to your local data protection authority, or in India to the Data Protection Board.

International transfers

We are based in India and our service providers operate globally, so your data may be processed outside your country. Where the law requires a transfer safeguard — for example standard contractual clauses for data leaving the EEA or UK — we rely on the mechanism our provider has in place. Crash reporting is hosted in the EU.

Changes

If we change what GRIM collects or who processes it, we will update this page and move the "last updated" date at the top. For material changes we will also give notice in the game before the change takes effect.

Contact

PIXAMENTORY ONLINE SERVICES (OPC) PRIVATE LIMITED
235, Sanganer Bazar, Airport Road Sanganer, Raghunath Puri 2, Sanganer, Jaipur, Rajasthan, India - 302029
hello@pixamentory.io

For data-protection questions or complaints under India's DPDP Act, write to the same address marked for the attention of the Grievance Officer.