Last updated: November 9, 2026
This Privacy Policy explains what personal data may be processed when using the mobile application “Tiny Harvest: Farm Tycoon” (“App”), for what purposes such data is processed, which third parties may receive data, and what rights users have regarding their personal data.
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (“GDPR”) and other applicable data protection laws is:
Mischka361 Studios
Owner: Michael Schmidt
Germany
Email: mischka361studios@gmail.com
When using the App, certain technical, device, advertising and usage data may be processed automatically. Depending on the user's device and configuration, this may include:
We generally do not require users to provide their name, postal address, telephone number or similar directly identifying personal information within the game unless such a feature is explicitly provided.
Personal data is processed only where there is an applicable legal basis. Where processing is necessary to provide the App or services requested by the user, processing may be based on Article 6(1)(b) GDPR. Where we request the user's consent, processing is based on Article 6(1)(a) GDPR. Where information is stored on or accessed from the user's device and such access is not strictly necessary, consent is required where provided for by applicable law, including Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Where processing is necessary for our legitimate interests or those of a third party, and such interests are not overridden by the user's rights and freedoms, processing may be based on Article 6(1)(f) GDPR. Legitimate interests may include App security, fraud prevention, prevention of abuse, technical error detection, App stability and contextual advertising where legally permitted. Where processing is necessary to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.
The App uses Google Firebase. For users in the European Economic Area, the relevant provider may include Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Analytics for Firebase to understand how users interact with the App and to improve the game. It may process App launches and sessions, session duration, device and operating system information, App version, approximate location, language, region, installation and App identifiers, interactions within the App, game progress and gameplay events defined by us. Depending on the configuration, advertising or device identifiers may also be processed. Data is retained according to our configuration and the retention periods provided by Google.
We use Firebase Crashlytics to detect, analyse and fix crashes and other technical problems. It may process crash and error reports, stack traces, Crashlytics Installation UUID, Firebase Installation ID, device and operating system information, App version, time of a crash, App status at the time of the crash and technical logs. Crashlytics is used for technical diagnostics and is not intended by us to directly identify individual users.
The App uses the Facebook SDK provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (“Meta”). We use it to measure App installs and App activations and to attribute and evaluate advertising campaigns for the App on Meta's platforms, including marketing tests that may be carried out by a publishing partner. The App does not ask users to log in with Facebook.
The Facebook SDK may process App events (such as App installs and activations, and automatically logged App events), the Android Advertising ID, device and operating system information, App version, language, IP address and related technical information. Meta may process this data as an independent controller or as a processor, depending on the processing activity. Meta's privacy policy is available at facebook.com/privacy/policy.
The App is financed, among other things, through advertising. We use advertising and mediation services provided by third-party companies. These services may process the Android Advertising ID, a resettable identifier provided by the Android operating system. Depending on the provider and the technical configuration, they may also process IP address, device identifiers and information, App name and version, language, region, approximate location, network information, advertising requests, impressions, clicks and interactions, installation information, fraud-prevention, frequency-capping and diagnostic information.
This information may be used to provide advertisements, measure advertising performance, prevent fraud, limit repeated advertisements and optimise campaigns. Personalised advertising is only used where legally permitted and, where required, after obtaining appropriate consent.
The App uses services provided by Unity Technologies and affiliated companies, including Unity, Unity Ads, Unity LevelPlay and ironSource. Unity LevelPlay is an advertising mediation platform: advertising requests and associated information may be forwarded to the advertising networks integrated into our mediation setup. The exact provider receiving information may depend on which network serves a particular advertisement.
Through Unity LevelPlay, the App may also work with the following advertising networks, which may process the categories of data described in section 8 for the purposes described there:
In-app purchases are processed by Google Play. We do not receive your full payment details. We receive information needed to confirm and deliver a purchase, such as the purchased product and the transaction status.
We do not sell users' personal information in the traditional sense of directly exchanging personal data for money. However, when analytics and advertising services are used, personal data and device information may be transmitted to, or collected directly by, the third-party providers described in this Privacy Policy, and their service providers and processors. Data is shared only for the purposes described in this Privacy Policy and in accordance with applicable data protection laws.
Some providers or their subprocessors may process personal data outside the European Union or European Economic Area, including in the United States. Such transfers take place in accordance with Articles 44 et seq. GDPR. Appropriate safeguards may include an adequacy decision of the European Commission, participation in the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses or other legally recognised safeguards.
Where processing is based on consent, users may withdraw their consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. Where the App provides a privacy, consent or advertising settings interface, users may use it to change their preferences. Users may also manage certain advertising settings and their Android Advertising ID in their Android device settings. Withdrawing consent for personalised advertising does not necessarily mean that no advertisements will be shown; users may instead receive contextual or non-personalised advertisements.
We and the third-party providers generally retain personal data only for as long as necessary for the purposes described here. The period may vary depending on the type of data, the purpose, the provider and legal, fraud-prevention and security requirements. Once the purpose no longer exists, personal data will generally be deleted or anonymised unless statutory retention obligations apply.
Game progress is stored on your device and is removed when you delete the App or its data. To request the deletion of personal data, send an email to mischka361studios@gmail.com with the subject “Tiny Harvest data deletion”. Because the App has no user accounts, please include any identifier you can provide, such as your Android Advertising ID, so that we can process the request. You can also reset or delete your Advertising ID in your Android device settings.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction, misuse and disclosure. Communication with third-party services generally uses industry-standard encrypted connections where supported. No transmission or storage system can be guaranteed to be completely secure.
The protection of children's personal data is particularly important. Where children form part of the audience of the App, we take applicable legal obligations and platform requirements into account. Personalised advertising, advertising identifiers and other tracking technologies will only be used in relation to children where permitted by applicable law and platform policies.
Users in the European Economic Area have the following rights under the GDPR: access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), objection (Article 21) and withdrawal of consent (Article 7(3)). Requests may be sent to mischka361studios@gmail.com.
Under Article 77 GDPR, users have the right to lodge a complaint with a competent data protection supervisory authority, generally in the EU Member State of their habitual residence, place of work or the place of the alleged infringement.
The third-party providers maintain their own privacy policies, and users are encouraged to review them. This includes Google / Firebase, Meta, Unity (including Unity Ads, Unity LevelPlay and ironSource), Liftoff Monetize / Vungle, InMobi, Chartboost and BIGO Ads. These providers may act as independent controllers or as processors depending on the processing activity.
We may update this Privacy Policy from time to time, particularly if the App is changed, SDKs or advertising providers are added or changed, our data processing changes, or applicable laws change. The current version is available at this address.
For questions about this Privacy Policy or the processing of personal data, contact: mischka361studios@gmail.com