Privacy policy

Effective date
26 September 2026
App
Rampstorm for Android (Google Play package com.rampstorm.productseal), version 1.0 and later until this policy is updated
Who is responsible
ProductSeal, a sole proprietorship based in the United States and the developer of Rampstorm. Contact: dev@productseal.com

The short version

1. Who we are and what this policy covers

Rampstorm is an arcade flight game about flying through storms, made by ProductSeal ("we", "us"), a sole proprietorship based in the United States. This policy covers the Rampstorm app for Android and this website. It explains what data is involved when you play, who handles it, and the choices you have.

For the personal data we receive ourselves (the emails you send us and the order records Google Play gives us as the seller), ProductSeal is the "controller" under data protection law. Google and Unity decide for themselves how they use the data their software collects in the game, so each of them is a separate controller of that data. We have not appointed a data protection officer. You can reach us at dev@productseal.com about anything in this policy.

2. What we collect ourselves

ProductSeal does not run a server for Rampstorm, and the game contains no analytics or crash-reporting service of ours. The game's own code does not send your gameplay, progress, settings or identity to us or to anyone else. That means we do not collect or receive:

We do receive personal data in two situations:

3. When the game uses the internet

Almost everything in Rampstorm works offline. The table lists every time the game connects to the internet in this version.

WhenWhat happensWho receives data
Every time the game startsGoogle's consent tool checks whether a consent message is needed where you are, and shows it if it is. This happens whether or not you ever watch an adGoogle
From the end of your first contract onwards (or earlier, if you open the Sponsor Kiosk), and only if consent allows ads where you areThe game starts Google's ads software and asks it to load up to two rewarded ads in the background, so one is ready if you choose to watch, and loads a new one after each is used. Loading an ad sends the data in section 5 even if you never watch itGoogle, and Unity when AdMob asks it for an ad
When you choose to watch a rewarded adThe ad plays, and Google's ads software tells the game whether you earned the rewardGoogle, and Unity when it supplies the ad
When you reach the main menu, and when you come back to the gameThe game asks Google Play for the Shop's prices and for the purchases your Google account ownsGoogle
When you buy somethingGoogle Play's checkout takes the payment. The game gives Google Play the product and a scrambled form of your Support ID (section 7)Google
When you tap Privacy policy in SettingsThis page opens in your web browserGitHub, which hosts this website (section 16)

Not used in this version: sign-in, cloud saves, online leaderboards (the rival names on the game's leaderboard are made up by the game), downloaded content updates or online challenge lists (challenges are worked out on your device), and Ghost Races (section 8). If you play offline, the game works except for ads and purchases.

4. What stays on your device

The game saves the following in its private app storage on your device, where other apps cannot read it. None of it is sent to us.

DataWhy
Your profile: career and story progress, the pilot you picked, your Coins balance and a history of Coin changes, XP and Pilot Level, medals, records and your best-run Attack ghosts, owned planes, parts, upgrades and looks, theme packs, your plane layouts and any names you give them, how many rewarded ads you have watched today, and your purchase records (see section 7)So you can carry on where you stopped, race your own best runs and apply the daily ad limit
A random code shown as your Support ID on the Account screenCreated on your device and not linked to your identity. It reaches us only if you choose to include it in an email. A scrambled form of it is passed to Google Play when you buy something (section 7)
Settings: sound, vibration, controls (including tilt calibration), storm comfort, effects, reduced motion, text size, graphics, tips and purchase confirmationSo your preferences are kept
Your Airmail inbox: messages from the game's characters and notes about purchasesSo you can read them later
Your best Attack run on each course: your control inputs, your plane's build and your timeKept for Ghost Races. They stay on your device and are not uploaded in this version (section 8)
Pictures and caches the game makes, such as story comic panels drawn on your deviceSo they do not have to be drawn again
Your ad consent status, stored by Google's consent toolTo respect your choice
Data that Google's and Unity's ads software keeps for itself, such as identifiers, settings and ads waiting to be shownTo run the ads software, under Google's and Unity's policies (section 5)

Motion sensors. If you choose Tilt control, or tilt steering in the Expanse, the game reads your device's motion sensors to steer. Those readings are used immediately and are never stored or sent. If you use Calibrate neutral pose in Settings, only the single resulting tilt angle is saved with your settings.

No names to type. You play as one of eight preset pilots, whose names and callsigns come with the game. The only thing you can type is an optional name for a saved plane layout, and it stays on your device.

No cloud backup. Rampstorm opts out of Android's automatic app-data backup, so this data is not copied to your Google account backup. Uninstalling the game deletes it. Account > Export my data copies everything the game stores about you to your device's clipboard, so you can paste it where you choose.

5. Advertising: Google AdMob, Unity Ads and consent

Rampstorm shows one kind of ad: a rewarded ad that you choose to start, usually a short video and sometimes an interactive ad, in exchange for bonus Coins. There are no ads when you open the game, between flights or during a flight. Watching ads is optional and never required to play or to finish the game.

Ads come from Google AdMob through the Google Mobile Ads SDK, made by Google LLC. Consent is handled by Google's User Messaging Platform (UMP). AdMob uses mediation: it may fill an ad request from Unity Ads (Unity Technologies), whose software is also built into the app for that purpose. When the game checks your consent status, loads an ad or shows one, Google, and Unity when AdMob uses it, may collect the data below. Google's and Unity's software may store and read information on your device, such as identifiers, to do this. The data goes to them, not to us, and each uses it under its own privacy policy as a separate controller.

Data collected by Google, and by Unity when it supplies an adWhat it is used for
Device or other identifiers: your device's advertising ID, the app set ID and identifiers the ads software createsAdvertising (choosing ads, limiting repeats, measuring results), and fraud prevention, security and compliance
IP address and approximate location worked out from it (for example your country or region). The game never asks for location permission and no precise location is collectedShowing ads that are allowed where you are, deciding which consent rules apply to you, and fraud prevention, security and compliance
App interactions with ads: that an ad was requested, loaded, shown, tapped, watched to the end or closed, and whether a reward was earnedDelivering and measuring ads, telling the game you earned a reward, and fraud prevention
Device and app information, such as device model, operating system version, language, screen size, network type and the app's name and versionMaking ads work on your device, measurement and fraud prevention
Crash logs, diagnostics and performance data from the ads softwareKeeping the ads software working (analytics), and fraud prevention, security and compliance

This data is only about ads. Nothing about how you play is collected, because Rampstorm has no gameplay analytics. The ads software encrypts what it sends over the network. The game does not give the ads software your Support ID or any other identifier of ours.

Consent where the law requires it. In the European Economic Area, the United Kingdom and Switzerland, Google's consent message appears before any ad is loaded, and the message lists the companies your choice applies to. If you agree, ads may be personalised. If you do not agree, Google may still show limited or non-personalised ads that use less data, as described in Google's policies, or no ads. Your answer never affects free play.

Extra protection in Europe. Where Google's consent tool reports that EU-style data protection law applies to you, the game also marks every ad request as coming from someone under the age of digital consent, because some countries set that age as high as 16 and the game does not ask your age. Google then turns off personalised advertising for those requests, whatever you choose in the consent message.

What kind of ads. The game limits ads to content Google rates as suitable for general audiences (rating G).

Read how Google and Unity use this data:

We do not receive your advertising ID, your IP address or your location from Google or Unity. We only see totals, such as how many ads were shown and how much they earned, in our AdMob account.

7. Purchases: Google Play Billing

Everything you can buy with real money in Rampstorm, such as coin packs, Hangar Kits, theme packs and direct unlocks, is sold through Google Play using the Google Play Billing Library. Google handles the payment. We never see or receive your card or bank details, your billing address or your name.

8. Ghost Races (switched off in this version)

Rampstorm contains code for Ghost Races, a planned online feature for racing other pilots' recorded flights through the same storm. In version 1.0 it is switched off. The Multiplayer tile shows "Coming soon", and the game makes no Ghost Races network request, so nothing is uploaded to or downloaded from a ghost server.

While Ghost Races are off, the game still keeps your best run on each Attack course on your device (your control inputs, your plane's build and your time), so that you could choose to share it once the feature exists. It stays on your device and is not sent anywhere.

Before Ghost Races are ever switched on, we will update this policy with exactly what they collect, who can see it, how long it is kept and how to delete it, and we will update the game's Google Play data safety information to match.

9. Device permissions

None of these permissions shows a pop-up asking you to allow it. They are listed so you know what the app can do.

PermissionWhy
Internet access and network stateFor the consent check, rewarded ads and purchases. Everything else works offline
VibrationHaptic feedback, such as the ramp rattle, hits and landings. You can turn vibration off or down in Settings
Google Play billing (com.android.vending.BILLING)So you can buy items through Google Play
Advertising ID (AD_ID) and Android ad services (ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS)Added by the ads software to read the advertising ID and use Android's privacy-preserving advertising features
Keep awake (WAKE_LOCK) and foreground service (FOREGROUND_SERVICE)Added by Android's WorkManager library, which the ads software uses to finish short background tasks, for example sending ad measurement data
An internal permission named after the app (DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION)Added by Android's support library so that only Rampstorm can receive its own internal messages

Rampstorm does not request location, camera, microphone, contacts, photos and files, phone or notification permissions, or permission to see all the apps installed on your device. Motion sensors do not need a permission on Android.

10. Children

Rampstorm is made for players aged 13 and over. Its target audience on Google Play is 13 and over, and it is not directed at children under 13. The game does not ask anyone's age, has no chat and gives players no way to send anything to other players.

Ads in the game are limited to content Google rates as suitable for general audiences. Wherever Google's consent tool reports that EU-style data protection law applies, such as in the European Economic Area and the United Kingdom, the game marks ad requests as coming from someone under the age of digital consent, so ads there are not personalised (section 5).

We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has sent us personal data, for example in an email, contact us at dev@productseal.com and we will delete it. To remove game data from the device, use Delete profile or clear the app's storage as described in section 11. To reset data used for ads, reset or delete the device's advertising ID as described in section 6.

11. Keeping and deleting data

To deleteDo this
Everything the game stores about you: career and story progress, Coins and their history, owned items, looks, records and purchase records, your settings, your Airmail inbox, your saved best Attack runs (ghost race data), pictures the game drew, ad counts and your Support IDIn the game, open Account, tap Delete profile and confirm twice. The game starts a new profile with a new Support ID. Hangar Kits you bought come back with Restore purchases. This cannot be undone
Your ad consent status and the ads software's own data, kept outside the game's own storage by Google's consent tool and the ads SDKsClear the app's storage in Android's app settings (Settings > Apps > Rampstorm > Storage > Clear storage; names vary by device), or uninstall the game. Delete profile does not remove these. Restore default settings in Settings resets only your settings, without erasing anything else
Your ad consent choiceSettings > Account & privacy > Privacy choices where available, or clear the app's storage
Data used for personalised adsReset or delete your advertising ID in Android settings, and use Google's controls at https://myadcenter.google.com/. To ask Google or Unity about data they hold, use the contact details in their privacy policies
Your purchase history held by GoogleKept by Google Play in your Google account. See your Google account settings and the Google Privacy Policy
Emails you sent us, or Google Play order records about youEmail dev@productseal.com. We delete emails on request. Order records we must keep for tax are deleted when that period ends

Deleting your profile or uninstalling does not remove things you bought once with real money, such as Hangar Kits, theme packs and direct unlocks. They belong to your Google account and come back when you restore purchases. Coins, including Coins from coin packs, are part of your game data on the device: they are removed if you delete your profile or uninstall, and they cannot be restored.

If you are in the European Economic Area or the United Kingdom, data protection law requires a legal basis for each use of personal data. These are ours:

UseLegal basis
Asking for and remembering your ad consent through Google's consent toolOur legal obligation to get consent where the law requires it
Storing and reading information on your device for ads, and personalised adsYour consent, which you can withdraw at any time in Privacy choices. Withdrawing it does not affect what happened before
Limited or non-personalised ads, ad measurement and preventing ad fraudLegitimate interests: funding a free game with optional ads and keeping ads honest. Google and Unity explain their own legal bases in their privacy policies
Processing purchases and giving you what you bought, including restoresPerformance of our contract with you
Passing Google Play a scrambled Support ID with a purchaseLegitimate interests: preventing purchase fraud
Keeping Google Play order and sales recordsLegal obligation (tax and accounting), and legitimate interests in handling refunds and disputes
Answering your emailsLegitimate interests in helping players, or our contract with you when it is about a purchase

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (section 13). You do not have to give us any personal data: ads and purchases are optional, and the game can be played offline. We do not make decisions about you based only on automated processing that have legal or similarly significant effects on you.

13. Your privacy rights

Depending on where you live, privacy laws give you rights over your personal data. In plain terms:

Europe and the UK (GDPR and UK GDPR)

United States: California (CCPA and CPRA) and other states

Residents of California and of other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon) may have the right to:

Notice at collection. The table sums up the personal information involved in Rampstorm in the last 12 months and going forward, including information collected by the Google and Unity ads software in the app.

CategoryExamples and sourcePurposeDisclosed to
IdentifiersAdvertising ID, app set ID and IP address, collected by the ads software; a scrambled Support ID passed to Google Play with a purchase; your email address if you email usAdvertising, fraud prevention, purchases, supportGoogle; Unity when it supplies an ad; our email provider
Commercial informationGoogle Play order and sales records for items you buy, including the buyer's approximate location (such as state or postal code) and device model, received from Google PlayProviding purchases, refunds, accounting and tax, fraud preventionGoogle (which processes the payment); where needed, tax authorities and professional advisers such as accountants
Internet or other electronic network activityInteractions with ads, and diagnostics from the ads softwareDelivering and measuring ads, fraud preventionGoogle; Unity when it supplies an ad
Geolocation (approximate only)Country or region worked out from your IP address by the ads softwareShowing ads allowed where you are, applying consent rules, fraud preventionGoogle; Unity when it supplies an ad

We do not collect sensitive personal information, and we do not sell personal information for money. The use of advertising data by Google and Unity may count as "selling" or "sharing" personal information, or as "targeted advertising", under some state laws, which is why the opt-out above exists. We have no actual knowledge of selling or sharing the personal information of consumers under 16. How long each kind of data is kept is set out in section 11.

How to use your rights

Email dev@productseal.com. We hold very little about you, so it helps to say what your request is about:

We reply to every request and answer within the time the law requires: normally one month under GDPR and UK GDPR (which can be extended by two further months for complex requests), or 45 days under US state laws (which can be extended by 45 days). We will tell you if we need more time.

14. International transfers

Google and Unity are based in the United States and process ad and payment data in the United States and other countries. They protect transfers of personal data out of the European Economic Area, the United Kingdom and Switzerland with legal safeguards such as the European Commission's standard contractual clauses and, where they take part in it, the EU-US Data Privacy Framework, as described in their privacy policies.

If you email us, your message is stored by our email provider and read by us, which may be in a country other than yours. Where the law requires it, we rely on an adequacy decision or standard contractual clauses for that transfer.

15. Security

Game data is kept in the app's private storage and protected by Android's app sandbox. The game keeps only a one-way fingerprint of Google Play's purchase tokens, not the tokens themselves. Google's and Unity's software encrypts data it sends over the network. We do not store your game data on any server, which removes a whole category of risk. No system is perfectly secure, so keep your device updated and protected with a screen lock.

16. This website

This website is plain pages with no cookies, scripts, analytics or trackers. It is hosted on GitHub Pages, and like any web host, GitHub may log your IP address and browser details when you visit, for security and to run the service. See the GitHub General Privacy Statement.

17. Changes to this policy

If Rampstorm changes what data is involved, for example by switching on Ghost Races or downloaded content updates, or by adding a new service, we will update this policy and its effective date before that version of the game is released. Important changes will also be mentioned in the game's release notes. Because the game has no accounts, we cannot contact you directly, so please check this page from time to time.

18. Contact

ProductSeal (sole proprietorship, United States)
Email: dev@productseal.com

Please do not send us passwords or payment card details. We will never ask for them.