Effective date: 17 August 2026
This Privacy Policy applies specifically to MergeShot (bundle ID net.nuvugames.mergeshot), a mobile game published by Nuvugames. It supplements the general Nuvugames Privacy Policy. Where the two differ in respect of MergeShot, this page prevails.
The data controller is Márk Dávid Bíró, a sole proprietor (egyéni vállalkozó) operating under Hungarian law („Nuvugames”, „we”, „us”, „our”). Registered seat: 5462 Cibakháza, Öregszőlő I. út 21., Hungary. Tax number (adószám): 55615910-2-36. EU VAT number: HU55615910. Contact: support@nuvugames.net.
MergeShot does not require you to create an account or sign in, and never asks for your name or email address. Your game progress, settings, statistics, in-game currency balances and unlocked items are stored locally on your own device. There is no cloud save and we do not copy your progress to any server.
The game does contact one server we operate, for a single purpose: confirming that a rewarded ad was genuinely watched before the reward is granted, so that rewards cannot be claimed fraudulently. On first launch the game generates a random identifier, stores it on your device, and exchanges it for a pseudonymous player ID. That server holds the player ID and the reward transactions attached to it, and nothing else about you. The identifier is randomly generated, not derived from any hardware or Apple account identifier.
MergeShot displays third-party advertising supplied by Google AdMob (Google Ireland Limited), including rewarded video ads you may choose to watch in exchange for in-game rewards, and interstitial ads shown between runs. To serve and measure these ads, the AdMob SDK may collect and process device and usage information, such as: a non-permanent device identifier, IP address, coarse location derived from IP address, device model, operating system version, language, and ad interaction events (impressions, clicks, completions).
You decide whether we may track you. The first time you tap PLAY, and before any ad is loaded, MergeShot shows Google’s consent form where required and then Apple’s App Tracking Transparency prompt. If you allow tracking, Google may use the Apple Identifier for Advertisers (IDFA) to combine what you do in MergeShot with data from other companies’ apps and websites, so the ads you see are personalised and their effectiveness can be measured. If you decline, no such identifier is used and the ads are non-personalised, selected from general, contextual signals only. Declining costs you nothing in the game: every feature, reward and ad remains available either way. You can change your answer at any time in iOS Settings > Privacy & Security > Tracking.
Google acts as an independent controller for this processing. Its practices are described in the Google Privacy & Terms and in the AdMob documentation. Legal basis: your consent (Art. 6(1)(a) GDPR) where you allow tracking and for the storing of information on your device by the ad SDK; our legitimate interest in funding a free-to-play game (Art. 6(1)(f) GDPR) for non-personalised advertising. You may withdraw consent at any time through the iOS Tracking setting.
If you purchase the Remove Ads in-app product, advertising is disabled in the game.
MergeShot offers optional in-app purchases (in-game currency packs, a starter pack and an ad-removal product). All payments are processed by Apple through the App Store. We never see or store your payment card details, billing address or Apple ID password.
We use RevenueCat, Inc. as a processor to validate purchase receipts and restore your entitlements across reinstalls. For this purpose RevenueCat processes a pseudonymous app-generated user identifier, your purchase and subscription events, the store receipt, country, and basic device/app version information. RevenueCat’s privacy notice is available at revenuecat.com/privacy. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
We do not sell your personal data. We run no analytics of our own, we do not build advertising profiles ourselves, and we do not ask for your name, email address, phone number, contacts, photos, microphone or precise location anywhere in the game. Our server exists only for the reward verification described in Section 2.
If you email support@nuvugames.net, we process your email address and whatever you choose to tell us, solely to answer you. These messages are kept only as long as reasonably necessary to resolve your request and for a limited period afterwards for record-keeping.
Google and RevenueCat may process data outside the European Economic Area. Such transfers rely on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
Game data lives only on your device and is erased when you delete the game or clear its data. The pseudonymous player ID and reward transactions on our verification server are kept only as long as needed to prevent duplicate or fraudulent reward claims. Advertising and purchase data are retained by Google and RevenueCat respectively, according to their own published retention periods.
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time without affecting past processing. To exercise these rights, contact support@nuvugames.net; we respond within one month. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, „NAIH”), or with the supervisory authority of your country of residence.
MergeShot is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children. The tracking permission described in Section 3 is only ever requested from the person using the device, and if it is declined, or not shown because the device settings do not allow it, the advertising stays non-personalised. If a parent or guardian believes their child has sent us personal data, contact support@nuvugames.net and we will delete it.
We may update this Policy as the game evolves. Material changes will be announced in the app or on this page before they take effect.
Márk Dávid Bíró (Nuvugames), 5462 Cibakháza, Öregszőlő I. út 21., Hungary. Email: support@nuvugames.net.