Orbitail Privacy Policy

Effective date: September 13, 2026

This policy explains the information Orbitail (the “App”) collects, why it is used, and the choices you have. Orbitail is an arcade game with optional online and asynchronous multiplayer, optional rewarded advertising, in-app purchases, privacy-focused analytics, and optional Game Center features. The App does not require your name, email address, or a Naniba Studios account. Naniba Studios does not sell personal information.

Information We Collect

Local game progress

Scores, achievements, ship colors, Daily streaks, settings, locally saved Rival Orbit challenges, and purchase unlocks are stored on your device. Deleting the App, or using its reset control where available, removes local game data.

Firebase online-play data

When online features are available, the App automatically creates an anonymous Firebase user identifier. No email address, password, or public real-world identity is required. We use Firebase Authentication, Realtime Database, and Cloud Firestore to provide Online Duel, Recent Rivals, automatically generated callsigns, match history, presence and disconnect handling, friend rooms, and Rival Orbit invitation links.

Online-play data may include an anonymous Firebase identifier; callsign; match, room, and opaque invitation identifiers; ready and connection state; course seed; score, elapsed time, phase, and movement state needed for live synchronization; match result; recent-rival statistics; and challenge data needed to reproduce a Rival Orbit ghost course. Rival Orbit invitation records expire after 30 days.

Analytics

We use TelemetryDeck to understand aggregate App use and improve gameplay, retention, and reliability. Our analytics events use a persistent anonymous App-generated installation identifier and session identifier, together with event names and non-identifying gameplay or reliability values such as run starts and completions, score ranges, mode use, achievements, streaks, feature interactions, and technical events. We do not send the iOS advertising identifier to TelemetryDeck for these analytics events.

Advertising and consent

Google AdMob may provide optional rewarded advertising. Where required, the App uses Google’s consent flow before making ad requests and provides a privacy-options entry point when the consent flow requires one. After the applicable consent step, the App requests Apple’s App Tracking Transparency permission before starting Google Mobile Ads. The App requests General-audience rewarded-ad inventory.

Depending on your consent, Apple’s tracking permission, your settings, and Google’s processing, Google may process an advertising identifier, approximate location inferred from an IP address, ad views and interactions, device information, and diagnostic information. Non-personalized ads can still use limited contextual and technical information. This is governed by Google’s Privacy Policy.

Purchases

Apple StoreKit processes Skip Ad and Remove Ads purchases. Naniba Studios does not receive payment-card details. We receive only the product and transaction confirmation needed to unlock the purchased feature.

Game Center

If you use a Game Center feature when it is available in your installed version, Apple may process the player authentication, alias, scores, achievements, and feature-related information needed to provide that feature under Apple’s privacy practices.

How Online-Play Data Is Used

Realtime Database is used for time-sensitive multiplayer state such as matchmaking, friend rooms, server-time countdowns, live player state, presence, rematch handshakes, and disconnect verification. Cloud Firestore is used for durable social information such as anonymous player profiles, completed duel history, Recent Rivals, and challenge invitations. Rival Orbit invitation links contain only an opaque invitation identifier; the authenticated App resolves the underlying course and ghost payload.

Children’s Privacy

Orbitail is not directed at children under 13, or the relevant age of digital consent in their region, and we do not knowingly collect personal information from children.

Your Rights and Deletion Requests

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain uses of information. Local game data can be removed using the App’s reset control where available or by deleting the App. Because online play uses an anonymous Firebase identity, deleting the App does not necessarily remove server-side multiplayer records immediately.

To request deletion of server-side Orbitail online-play data associated with your anonymous Firebase identity, contact contact@nanibastudios.com. We will provide reasonable verification steps so that a request is applied to the correct anonymous record.

Data Retention

Local game data persists until you reset it or delete the App. Rival Orbit invitation records expire after 30 days. Anonymous player profiles, match history, recent-rival statistics, and operational multiplayer records may persist while needed to provide, secure, troubleshoot, and improve the service, or until removed through maintenance or a verified deletion request. Analytics, advertising, purchase, and Game Center information is retained by the applicable provider under its own policy.

Third-Party Services Used by Orbitail

Changes to This Policy

If this policy changes, we will update the effective date above. Material changes may also be communicated in the App or on the Naniba Studios website.

Contact Us

Questions about this policy or your data can be sent to contact@nanibastudios.com.