Westi Games Privacy Policy
This policy explains what our games collect, why, how long we keep it, and the choices you have. It covers every game Westi Games publishes. Today that is one game, Brawl Cars (“the game”). When there are more, this policy will say by name where a game does something the others don’t.
Westi Games (“we”, “us”) is responsible for your data. Our address is Raoul Wallenberg 2, Rehovot, Israel. For any question about your data, write to supportwestigames@gmail.com.
In short
- We ask your date of birth once, keep only an age band, and never keep the date itself.
- Your progress is saved to the cloud under an anonymous account. Players 13 and over can link Google Play Games to keep it on a new phone.
- We record how the game is played, so we can balance it, and receive crash reports, so we can fix it. We only do this where the law and your choices allow, and never for players under 13.
- The game shows ads from Google AdMob. On Android, for players 18 and over, Google may use your phone’s advertising ID to personalise and measure ads, where the law and your choices allow. Players under 18 never get personalised ads, and players under 13 only see ads suitable for children. We don’t sell your data.
- When you buy something, we keep a record of the purchase, even after you delete your data, because the law and refunds require it.
- You can switch off usage data and crash reports, or delete your data, from the game’s Settings.
1. Your age
The first time you open the game, we ask for your date of birth. We work out your age on the day we ask, and keep only the band it falls in: under 13, 13 to 15, 16 to 17, or 18 and over. The date itself is never saved or sent anywhere. Your age band decides what the game may collect from you, as described below.
2. What we collect, and why
2.1 Your game progress
The game saves your progress on your phone and backs it up to Google Cloud Firestore, part of Google Firebase. We store:
- Your save: your player name; your coins, gems and other in-game items; your cars, cards, car levels and paint; your level, experience, league and trophies; your chests, keys, packs and map progress; your game settings; the date you first played; and which game-settings group you’re in (see 2.3).
- Technical details: the app version, the platform, when the save was last written, and an identifier for your phone, so that your progress is played on one phone at a time.
- An anonymous account ID, created by Firebase Authentication the first time the game runs. It isn’t linked to your name, email address or phone number.
- Google Play Games, for players 13 and over: you can link your Google Play Games profile in Settings ▸ Google Play, so your progress follows you to another phone or a new install. Once linked, the game signs you in to Play Games when it starts, and on a new install that brings your progress back. We then store your Google Play Games player ID, and Firebase Authentication keeps the account details Google provides for that sign-in. Players under 13 are never offered this, and the game never signs them in.
Why: to keep and restore your progress, which is part of providing the game.
2.2 Your purchases
When you buy something in the game, the store (Google Play or the App Store) takes the payment. We never see your card or payment details. We keep a record of each purchase: what you bought, the store, the price and currency, the store’s order number and purchase token, the app version and your phone’s identifier, what we gave you for it, and when each step happened.
Why: to deliver what you paid for, to restore it if something goes wrong, to handle refunds and disputes, to prevent fraud, and to keep the records that tax and consumer law require. We rely on our legal obligations and on our legitimate interest in handling purchases correctly. These records are kept even if you delete your data (see section 8), for the time shown in section 6.
2.3 Game settings from the internet
The game downloads its settings, such as prices, rewards, odds and difficulty, from Firebase Remote Config, so we can improve the game without an app update. Different groups of players can get different settings. For example, we may test whether a change makes the game more fun. To decide which settings you get:
- Firebase uses an installation ID, a random identifier for this copy of the app;
- the game sends your level, your league, and how many days ago you installed it;
- for players 13 and over, the game also sends how many cars you own and your player ID.
Why: to deliver and improve the game’s settings, which is part of providing the game.
2.4 How hard your races are
The game chooses each race, and how strong your rivals are, from your recent results and how long you’ve played. New players get races they can win more often. After the first few weeks, wins come less easily, so upgrading your car matters more. Players returning after a long break get a few easier races. This happens on your phone, from your save, and uses no data beyond what section 2.1 describes. It has no legal or similar effect on you.
2.5 How the game is played (Google Analytics for Firebase)
To balance the game, for example to find a race that’s too hard or a reward that’s too generous, we record what happens in it:
- Races: the result, your place, the distance, the time, the rewards and the car you used, and what happened on the way, such as boosts, lane changes, hazards hit and bumps;
- Coins, gems and items: what you earned, spent and bought, and where;
- Progress: levels, leagues, cars unlocked and upgraded, and chests and packs opened;
- The app: screens you visit, settings you change, ads offered and watched, and which game settings you received.
We also record some details about you as a player, so that groups of players can be compared: your level, league, number of cars and gems, the week you installed the game, and which game-settings group you’re in. Google Analytics automatically adds an app-instance ID; your device model, operating system, language and app version; your approximate location (country, region and city), worked out from your IP address, which Google Analytics doesn’t store; and when and for how long you play. Where usage data is fully on, we also attach your anonymous account ID, so your events can be linked across sessions.
| Your age band | Usage data |
|---|---|
| 16 and over | Collected, unless you live where the law requires your consent (the European Economic Area, the UK and Switzerland) and you haven’t given it on Google’s consent form. |
| 13 to 15 | Collected only where the law doesn’t require consent. Nothing is collected in the European Economic Area, the UK or Switzerland. |
| Under 13 | Not collected. |
Anyone can switch this off at any time in Settings ▸ Share usage data. Nothing is collected until you’ve finished the screens shown when you first open the game.
Why: to understand and improve the game. Where the law requires consent, we rely on your consent; elsewhere, on our legitimate interest in improving the game.
2.6 Crash reports (Firebase Crashlytics)
When the game crashes, or hits an error it can carry on from, it sends a report to Firebase Crashlytics so we can find the fault and fix it. A report holds where in the game’s code it went wrong and what the game was doing (the screen, the level and the last few things that happened); your device’s model and operating system, its screen orientation, how much memory and storage were free, and whether it has been modified (“rooted” or “jailbroken”); the app version; a random ID Crashlytics gives this copy of the app and the Firebase installation ID; and, for players 13 and over, your player ID, so that we can find your reports if you write to us.
Crash reports follow the same rules as usage data: the same age bands, the same regions, and the same switch, Settings ▸ Share usage data. A report written while reports are off is deleted, not sent later.
Why: to keep the game working. Where the law requires consent, we rely on your consent; elsewhere, on our legitimate interest in fixing faults.
2.7 Ads (Google AdMob)
The game shows two kinds of full-screen ads, and no banners:
- a video you choose to watch for a reward, such as doubling what you just earned. If you close it before the end, there’s no reward, and nothing else happens;
- an ad after a race, once you’ve played a few races. Players who have bought anything in the game, and club members, don’t get these.
The ads come from Google AdMob. When the game asks for an ad, Google’s ads software collects your IP address, which can be used to estimate your general location; how you use the ads and the app, such as taps on an ad and videos watched; how well the app and the ads software are running; and the app set ID, an identifier Android gives this app on your phone. Google uses it to choose and show ads, measure them, and prevent fraud.
Your advertising ID (Android, 18 and over). For players 18 and over, Google’s ads software may also read your phone’s advertising ID, a resettable identifier Android provides for ads, and use it to personalise ads, to limit how often you see the same ad, and to measure ads. In the European Economic Area, the UK and Switzerland this happens only if you agree on Google’s consent form. In US states with privacy laws, you can opt out in Settings ▸ Privacy. Anywhere, you can reset or delete your advertising ID, or turn off personalised ads, in your phone’s settings. For players under 18, we tell Google that the player is under 18, and Google doesn’t use their data to personalise ads. On iPhone and iPad, the game never uses the advertising identifier and never asks to track you.
| Your age band | Ads |
|---|---|
| 18 and over | In the European Economic Area, the UK and Switzerland, Google’s consent form asks whether ads may be personalised and whether your phone may be read for ads. If you say no, you still see ads, but they aren’t personalised. You can change your answer at any time in Settings ▸ Privacy. In US states with privacy laws, Settings ▸ Privacy lets you opt out of ads based on your activity. Elsewhere, Google may personalise ads, using your advertising ID on Android, under its own policies. |
| 16 to 17 | We tell Google the player is under 18: ads aren’t personalised, and only ads rated for teens are shown. In the European Economic Area, the UK and Switzerland, Google’s consent form is shown, as for adults, but the ads stay unpersonalised whatever the answer. |
| 13 to 15 | We tell Google the player is under 18: ads aren’t personalised, and only ads rated for teens are shown. Google’s consent form isn’t shown. |
| Under 13 | Ads are marked as requested for a child. Google doesn’t personalise them or use them to build a profile, the advertising ID isn’t sent, and only ads suitable for all ages are shown. |
Why: the ads pay for the game, so it can be free. Google AdMob decides how it uses the data it collects, under its own privacy policy. Where the law requires consent for personalised ads, we rely on your consent.
2.8 Downloading game content (Cloudflare)
After you install the game, it downloads new levels and other game content from Cloudflare. To deliver the files, Cloudflare receives your IP address and the details of each request: the file, the time, and the app’s version and platform. Cloudflare handles this on our behalf, to deliver the files, keep the service secure, and give us traffic totals that don’t identify anyone.
Why: to deliver the game, which is part of providing it.
2.9 Writing to us
If you write to us, we receive your email address and whatever you include, such as your player ID. We use it only to answer you and to keep a record of your request.
2.10 What we don’t collect
- Your advertising ID, except for ads to players 18 and over on Android (section 2.7). Usage data and crash reports never include it.
- Your phone’s Android ID.
- Your precise location, contacts, photos, microphone or camera.
- Your card or payment details. The store handles payment.
3. Children
Brawl Cars is for everyone, including children. For players who tell us they’re under 13, the game collects only what it needs to run and to keep their progress:
- their age band;
- their game save and the anonymous account ID behind it (section 2.1). The game gives them a player name, so a child can’t type their own;
- the installation ID, level, league and days since installing, which decide the game’s settings (section 2.3);
- a record of anything bought (section 2.2);
- the request details Cloudflare receives to deliver game content (section 2.8);
- what Google’s ads software collects when the game asks for an ad (section 2.7).
We use this only to run the game, keep their progress, handle purchases and show ads suitable for children. We don’t collect usage data or crash reports from players under 13, never sign them in to Google Play Games, and never use their data to build a profile. Their ads aren’t personalised, and their advertising ID isn’t sent with ad requests. Because their progress isn’t linked to an account, it stays on their phone: reinstalling the game, clearing its data, or moving to a new phone starts again from the beginning.
Purchases are made with the store account on the phone. Parents can require their approval for purchases with the store’s parental controls (Google Play’s purchase approval, or Apple’s Ask to Buy).
Parents and guardians can see or delete their child’s data, or stop us collecting more, by writing to supportwestigames@gmail.com with the player ID shown on the child’s profile. They can also delete it straight away in the game, from Settings ▸ Delete My Data.
4. Who else handles your data
- Google, on our behalf and following our instructions: Firebase (Authentication, Cloud Firestore, Remote Config, Google Analytics, Crashlytics and Hosting), Google Play Games Services, and Google’s consent form.
- Cloudflare, on our behalf and following our instructions, to deliver game content (section 2.8).
- Google AdMob, which decides for itself how it uses the data it collects to show ads (section 2.7). See Google’s privacy policy and how Google uses data from apps that use its services.
- Google Play and the App Store, which handle payments under their own terms and privacy policies.
We don’t sell your personal data. Apart from what Google AdMob collects to show ads, we share it only if the law requires us to, to protect our rights or someone’s safety, or with a new owner if the game or the studio is sold. A new owner would have to keep to this policy.
5. Where your data is kept
We are based in Israel, which the European Union and the UK recognise as giving data adequate protection. Google and Cloudflare may process data in the United States and in other countries. When data from the European Economic Area, the UK or Switzerland goes there, it’s protected by the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified under it, and by the European Commission’s Standard Contractual Clauses.
6. How long we keep it
| Data | How long |
|---|---|
| Your cloud save and anonymous account | Until you delete them (section 8). |
| Purchase records | 7 years from the purchase, as Israeli tax law requires, then deleted. Deleting your data doesn’t delete them. |
| Usage data | Details of individual events: 2 months. After that we keep only totals that can’t identify anyone. |
| Crash reports | 90 days. |
| Your age band and your acceptance of this policy and the terms | In your save, for as long as the save exists. |
| Emails you send us | As long as we need to answer you and keep a record of your request: no more than 2 years after we close it. |
| What Google AdMob collects | Google keeps it under its own policies. See how long Google keeps data. |
7. Your choices and rights
In the game’s Settings:
- Share usage data switches usage data and crash reports off or on.
- Privacy opens this policy. Where Google’s consent form applies, it lets you open the form again and change your answers, including whether ads may be personalised.
- Google Play (13 and over) links your progress to Google Play Games.
- Delete My Data deletes your data (section 8).
Depending on where you live, you may have the right to see your data, correct it, delete it, get a copy of it, object to or limit how it’s used, and withdraw your consent at any time, without affecting what we did before.
- The European Economic Area, the UK and Switzerland: you can also complain to your data protection authority.
- US states with privacy laws, including California: you can ask what we collect, and ask us to delete or correct it. We don’t sell personal data. Google’s use of data for personalised ads, including your advertising ID, may count as “sharing” under some of these laws; you can opt out in Settings ▸ Privacy. We won’t treat you differently for using these rights.
- Israel: you can ask to see and correct your data, and complain to the Privacy Protection Authority.
To make a request, write to supportwestigames@gmail.com with the player ID shown on your profile. Your account is anonymous, so your player ID is how we find your data, and we may ask for more to confirm the data is yours. We’ll reply within 30 days.
8. Deleting your data
- In the game: Settings ▸ Delete My Data deletes your cloud save and your account, resets the analytics identifiers on your phone, deletes any crash report still waiting on it, and starts the game again from the beginning. Your phone must be online: if it isn’t, nothing is deleted, so a deleted save can’t come back from the cloud later. Try again when you’re online.
- By email: write to us with your player ID, and we’ll delete your data within 30 days.
- What stays: purchase records, for the time in section 6; usage data already collected, until it expires (2 months); and what Google AdMob collected, under Google’s policies. Uninstalling the game doesn’t delete your cloud save.
9. Security
Your data is encrypted when it’s sent. Firestore’s security rules let only your own account read and write your save, and nobody can change or delete a purchase record once it’s written. No system is perfectly secure, so if something goes wrong that affects your data, we’ll tell you and the authorities where the law requires it.
10. Changes to this policy
If this policy changes in a way that matters, the game shows you the new version and asks you to accept it before you carry on. The version number and the date it took effect are at the top of this page.
11. Contact
Westi Games, Raoul Wallenberg 2, Rehovot, Israel · supportwestigames@gmail.com
See also our Terms of Service.