Information we collect
When cloud save is enabled for the first time, the game automatically creates a guest account. The server stores a random account identifier, a one-way hash of the guest identity, one-way hashes of session secrets, language and accessibility preferences, game progress, the in-game wallet, and transaction records. You can optionally link the account with Google OAuth. During Google sign-in, the ID token may contain a Google account identifier (sub), name, and email claims. The API verifies the token, uses only sub from its account claims, and stores that identifier for the active account link; it does not store the ID token, name, or email on the server. A non-reversible hash of the token may contribute to the operation request hash so a lost response can be retried safely. To retry an incomplete Google sign-in, the app temporarily keeps the ID token in encrypted device storage protected by Android Keystore. Name and email are not extracted or stored as separate fields, but may be present inside that temporary token. The record is cleared after successful completion, on specific final outcomes such as an identity conflict or expired operation, on sign-out or account deletion, and when app data is cleared. Cargo Town never receives your Google password.
The local prototype save remains on the device. It is removed when app data is cleared or the app is uninstalled.
How we use it
We use this information to provide and synchronize cloud saves, recover an account, protect the game economy, verify rewards, prevent abuse, and provide support.
Advertising and age group
Cargo Town may use Google Mobile Ads (AdMob) for rewarded ads and full-screen ads at appropriate natural breaks. Google User Messaging Platform (UMP) is used to collect advertising privacy and consent choices where required in your region. The selected age group is stored on the device. Personalised ads are disabled and content is limited to G for child and teen profiles. Google may process an IP address, app interactions, diagnostics, and limited device-related identifiers under its own policies to serve and measure ads, provide security, and diagnose problems.
Purchases
The “Remove Ads” purchase is processed by Google Play. Cerit Apps does not receive payment card details. Product, purchase token, verification state, and transaction time may be retained to provide the entitlement and handle refunds and reconciliation.
Sharing and infrastructure
Data may be processed as necessary by Google Play, Google Mobile Ads, and hosting or security providers to operate the service. This static website uses no analytics code or cookies; hosting infrastructure may retain limited access logs for security.
Retention and deletion
Account and game data is retained while the account is active. You can permanently delete the account in Settings → Account / Cloud Save. Sign-in links, sessions, preferences, cloud progress, wallet data, and ad reward records are removed. An account-free one-way operation hash may be kept for up to 30 days so a lost deletion response can be retried safely.
Google Play purchase records may be retained only as needed for refunds, fraud prevention, and financial reconciliation. The sign-in identity is deleted; a one-way restoration hash may be retained with the purchase solely to verify the same linked Google identity. A verified “Remove Ads” purchase on the same Google Play and linked Google account can be restored to a new Cargo Town game account; deleted progress, wallet data, and old sign-in links are not restored. See the account and data deletion page for instructions.
Children
Cargo Town is designed for users aged 7 and older. We do not ask for unnecessary personal information. Google account linking and sign-in are available only to players who select age 18 or older; younger players and those who do not select an age can use guest cloud save. A parent or guardian can contact us about a child’s data at the support address.
Contact
Data controller and publisher: Cerit Apps
Privacy and support: [email protected]