2026 © NuvuGames I Terms of Service I Privacy Policy I Cookie Policy
Effective date: 17 August 2026
The data controller responsible for your personal data is Márk Dávid Bíró, a sole proprietor (egyéni vállalkozó) operating under Hungarian law („Nuvugames”, „we”, „us”, „our”). Registered seat: 5462 Cibakháza, Öregszőlő I. út 21., Hungary. Tax number (adószám): 55615910-2-36. EU VAT number (közösségi adószám): HU55615910. Contact: support@nuvugames.net. For any privacy-related question or to exercise your rights under this Policy, contact us at support@nuvugames.net.
This Privacy Policy explains what personal data we collect through the Nuvugames website and the mobile games we publish (currently SweetDefenders and MergeShot, with further titles to follow — collectively the „Service”), why we collect it, how long we keep it, who we share it with, and what rights you have under the EU General Data Protection Regulation („GDPR”) and applicable Hungarian data protection law.
Our games do not require you to create an account and do not ask you to sign in, and we never ask for your name, email address, phone number, contacts, photos or precise location inside a game. Game progress, settings, and statistics (for example, completed levels) are stored locally on your own device. Games that show rewarded advertising additionally use a randomly generated, pseudonymous player identifier so that a reward can be verified before it is granted; see Section 5. Where a game includes advertising or in-app purchases, the third-party providers named in Section 5 also process technical data about your device and your interaction with the ads. Support communications: if you contact us at support@nuvugames.net, we process the email address and any information you choose to share with us, solely to respond to your message. We do not knowingly collect special categories of data (e.g. health, religion, political opinions), and there is no free-text field in our games where such data could be entered.
To respond to support requests you send us (legitimate interest / performance of a pre-contractual request, Art. 6(1)(f) / (b) GDPR). To comply with legal and accounting obligations, where applicable (legal obligation, Art. 6(1)(c) GDPR).
This varies by title, so always check the privacy page of the specific game. SweetDefenders and MergeShot both include advertising and in-app purchases; SweetDefenders has its own, more detailed privacy page at nuvugames.net/sweetdefenders/privacy, and MergeShot has one at nuvugames.net/mergeshot/privacy.
Advertising. Where a game shows ads, they are supplied by Google AdMob (Google Ireland Limited), which processes technical data such as a device identifier, IP address, coarse location derived from that IP address, device model, operating system version and ad interaction events in order to serve and measure the ads. Whether those ads are personalised is your choice. Where a game requests it, Apple’s App Tracking Transparency prompt is shown before any ad is loaded, alongside Google’s consent form where that is required. If you allow tracking, Google may use the Apple Identifier for Advertisers to combine your activity in the game with data from other companies’ apps and websites. If you decline, no such identifier is used and the ads are non-personalised. Declining never removes a game feature or a reward. You can change your answer at any time in iOS Settings > Privacy & Security > Tracking.
Rewarded ad verification. To stop rewards being claimed fraudulently, a game that offers rewarded ads sends a randomly generated, pseudonymous player identifier to a verification server we operate, and Google confirms to that server that the ad was genuinely watched. That server holds the identifier and the reward transactions, nothing else about you. The identifier is created on your device on first launch and is not derived from any hardware or account identifier.
In-app purchases. Payments are processed entirely by Apple through the App Store; we never see or store your payment card details, billing address or Apple ID password. We use RevenueCat, Inc. as a processor to validate purchase receipts and restore entitlements across reinstalls, which involves a pseudonymous app-generated identifier, your purchase events, the store receipt, country and basic device and app version information. Legal basis: performance of a contract, Art. 6(1)(b) GDPR, for purchases; our legitimate interest in funding free-to-play games, Art. 6(1)(f) GDPR, for non-personalised advertising.
All game progress lives exclusively on your device’s local storage and is deleted if you uninstall the game or clear the app’s data. We do not operate a cloud save, and we do not copy your progress to any server. The only server-side records we hold about players are the pseudonymous identifiers and reward transactions described in Section 5, on a server hosted in the European Union. The only personal data we hold ourselves is the content of support emails you send us, kept in our email inbox. Our website (nuvugames.net) is hosted with a standard WordPress hosting provider; see our Cookie Policy for details on the technical data processed to serve the website itself.
We do not sell your personal data. We do not share it with any third party, except: our email, hosting and backend providers, acting as data processors, solely to operate our support inbox, website and the reward verification server; Google and RevenueCat, in the roles described in Section 5, in those games that include advertising or in-app purchases; and authorities, where required by law or to protect our legal rights.
Where any service provider referenced in this Policy stores or processes data outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
Since game progress never reaches us, there is nothing for us to retain on our servers in that respect. Support emails are kept only as long as reasonably necessary to resolve your request and for a limited period afterward for quality and record-keeping purposes, unless a longer period is required by law.
We apply technical and organizational measures appropriate to the risk to protect the limited data we do process (e.g. support emails), including access controls. No system is completely secure, and we cannot guarantee absolute security.
Under the GDPR, you have the right to: access your personal data; rectify inaccurate data; request erasure („right to be forgotten”); restrict processing; receive your data in a portable format; object to processing based on legitimate interest; and withdraw consent at any time without affecting past processing. To exercise any of these rights, contact support@nuvugames.net. We will respond within one month, as required by the GDPR. You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, „NAIH”), or with the supervisory authority of your own EU country of residence.
Our games are designed for a general audience and are not directed at children under 13, and they do not require any account or personal data to play. We do not knowingly collect personal data from children. Where a game shows advertising, that advertising is non-personalised, as described in Section 5. If a parent or guardian believes their child has otherwise sent us personal data (e.g. via a support email), please contact support@nuvugames.net and we will delete it.
We may update this Privacy Policy from time to time, in particular as we add new features, in-app purchases, or advertising/analytics integrations (see Section 5) or publish new games. Material changes will be communicated via the app, our website, or by email before they take effect.
For any question about this Privacy Policy or to exercise your rights, contact support@nuvugames.net.
2026 © NuvuGames I Terms of Service I Privacy Policy I Cookie Policy