Hakai - Privacy Policy

Effective date: 21 October 2026

Applies to: the Hakai game (Android, package com.studio5pts.hakai; iOS later) and its online features.

The short version

  • You never have to sign in. Your progress is saved on your phone.
  • When you are online, the game also keeps a copy of your save and your purchase records in a cloud save run for us by Unity - for every player, under an account it creates for you automatically (no name, email or password). When you are signed in to Google Play Games - by the game itself if Google Play Games on your phone signs you in to games automatically, or by you from the game - that account is linked to your Play Games account, so you can get your game back on a new phone.
  • The game shows ads and uses analytics and ad measurement partners. In the EU, UK and other places where the law requires it, we ask first, and you can change your answer any time in Settings > Privacy Choices.
  • Google Play handles payments. We never see your card or bank details.
  • We do not sell your personal information for money. Where US state law counts sharing an advertising ID with ad partners as "selling" or "sharing", you can opt out (section 9).
  • You can delete everything we hold about you: in the game at Settings > Cloud Save > Delete cloud data (which deletes almost all of it - section 7 lists what it cannot reach), or by email to contact@5ptsgames.com (https://5ptsgames.com/hakai/delete-data.html explains both). Deleting your data is not a refund; what you bought with money that Google keeps a record of comes back with Restore Purchases (section 7).

1. Who we are

5PTS Games LLC ("5PTS", "we", "us"), a California limited liability company, makes Hakai and is the controller of the personal data described here, except where a partner below acts as a controller in its own right.

5PTS Games LLC, 2108 N St, Ste N, Sacramento, CA 95816, United States - contact@5ptsgames.com - https://5ptsgames.com

2. What we collect, and why

2.1 Data the game keeps on your phone

  • Your save (profile.json and its backup copies): progress, coins, gems, cars, skins, upgrades, the battle pass, rentals, settings, a random save ID (a code the game makes up; it identifies your save, and is the Player ID shown in Settings > Support), which version of the Terms you accepted and when, and a ledger of your real-money purchases (the store's purchase token and order number, the product, what was delivered, and when).
  • Saved games set aside: when the game loads your cloud save over the save on your phone, or you choose between two copies of your game, the save it replaced is kept beside it as a file (profile.json.aside-...), whole - with its purchase ledger - so nothing is lost by the choice. These files stay until you clear the game's data or uninstall it; deleting your cloud data does not remove them.
  • The cloud save's bookkeeping: which cloud copy this installation last matched, and a random ID for the installation. It is left out of Android's backup and device transfer on purpose.
  • Settings such as language and frame rate, and the sign-in session Unity's software keeps so the game does not have to make a new account every time it starts, in the game's preferences.
  • Crash diagnostic files written by the game stay on your phone; they are never uploaded and leave it only if you send one to us.

Your save leaves your device as the cloud save copy (2.3) - which the game keeps whether or not you sign in - and through your phone's own Android backup, which copies it, and the saved games set aside beside it, to your Google account under Google's terms.

2.2 Data partners' software in the game collects

The game includes software from the partners in section 4. Depending on your choices and where you live, it collects:

DataExamplesCollected byWhy
Device and advertising identifiersAndroid Advertising ID, App Set ID, partner-generated install IDsAd networks, Singular, GameAnalyticsShowing and measuring ads, limiting how often an ad repeats, attributing installs, analytics, fraud prevention
Device informationModel, OS version, language, screen, network type, app versionAll partnersMaking ads and the game work on your device; analytics; diagnostics
Approximate locationCountry or city, worked out from your IP address. Never GPS or precise locationAd networks, Singular, GameAnalytics, InMobi Choice, UnityWhich privacy law applies to you; ad selection; analytics; fraud prevention
Game activityRuns started and finished, level and distance, coins and gems earned and spent, screens and shop pages opened, settings changed, whether the phone is held upright or sideways, the cloud save's steps (backed up, loaded, a choice between two games, deleted), whether you have bought anything, milestonesGameAnalytics (and Singular for a few milestones)Understanding how the game is played so we can improve it
Ad interactionsAds shown, watched, clicked; rewards given; what an ad earnedAd networks, Singular, GameAnalyticsShowing ads, paying for them, measuring them
Purchase informationThe product, its price and currency, a transaction ID, and that a purchase happened. Not your card or nameGoogle Play (payment); Unity In-App Purchasing (the purchase events it reports to Unity); Singular and GameAnalytics (revenue figures, for new purchases only)Delivering what you bought; measuring revenue
Sign-in eventEach time the game signs in to its cloud save: the Unity installation ID and player ID, device information, the install time, and a consent state the game gives Unity from your privacy choices. Never the advertising ID: the game always tells Unity's setting "no" for advertising, so it is not sentUnity In-App Purchasing (it sends this by itself once Unity's sign-in is in the game)Unity's purchase analytics
DiagnosticsCrash and error reports (including the text of errors the game logs), performanceGameAnalytics, ad networksFixing problems
Your privacy choicesYour consent answers (TCF and US GPP strings)InMobi Choice; read by the other partnersRecording and respecting your choices

2.3 Data we keep in the cloud save

When you are online, once the game has started its online services (straight away, or after your privacy choices where they are asked), it signs in to Unity's Authentication service - creating an anonymous account for you the first time - and keeps your cloud save under that account with Unity's Cloud Save service. This happens for every player, whether or not you sign in with Google Play Games, and whatever you answered to the privacy choices, because it is how the game keeps your purchases and progress safe (section 3). If Google Play Games on your phone signs you in to games automatically, the game signs in with it at the same moment and links that account to your Play Games account by itself, sending your Play Games player ID to Unity; otherwise that happens only if you sign in from the game. What is kept:

  • Account identifiers: a Unity player ID, and - once you are signed in to Google Play Games - your Play Games player ID (Google may also show the game your gamer name and avatar; the game does not read or keep them). We do not receive your email address, your real name or your Google password.
  • Your cloud save: a copy of the save described in 2.1, including the purchase ledger, with its save ID, a version number, the time it was saved and the random ID of the installation that saved it. It is updated straight away after a money purchase, and otherwise within minutes of a change and when you leave the game.
  • Saved games set aside: when two copies of your game have each been played further than the other, the game asks you which to keep; the one you do not keep is stored as a separate copy under your account (as well as on your phone, 2.1), so our support team can look at it if something went wrong. A damaged copy found in the cloud is set aside the same way. They are kept until you delete your cloud data (and section 6's clean-up of unused accounts).
  • Support grants: if our support team gives you items (for example after a lost purchase), a note of the grant is kept under your account where the game can read it but not change it.
  • Technical data Unity's servers see and log when the game connects (IP address, time, device and app information).
  • Purchases: when you buy with real money, the store sends the game a purchase token and order number, which go into the ledger. With each purchase the game also gives Google a one-way scrambled code made from your save ID (obfuscatedAccountId), so a refunded purchase can be traced to the right save. It contains nothing personal.

2.4 Data you send us

If you email us, we receive your email address, what you write, and anything you attach (for example your Player ID, an order number or a screenshot). We use it only to answer you and fix the problem.

2.5 What we do not collect

No precise location, contacts, photos, microphone, camera, files, browsing history, health data, or payment card details. The game has no chat, friends list, leaderboards or user-generated content.

3. Legal bases (EU and UK)

PurposeWhat is sent, and whenLegal basis
Personalised ads, storing or reading identifiers on your device for ads, ad measurement beyond what is strictly neededIdentifiers, device data and ad interactions, while you playYour consent (asked by InMobi Choice; change it any time in Settings > Privacy Choices)
Product analytics (GameAnalytics)Game activity and diagnostics, while you playYour consent - GameAnalytics does not start in the EU/UK until you allow it
Non-personalised ads, frequency capping, fraud checks, and install measurement with data sharing limited (Singular), when you have not consentedWhat the networks' "limited ads" modes use, and what Singular measures with data sharing limitedOur legitimate interest in funding a free game
Delivering purchases, restoring themThe purchase token and order number (Google Play to the game)Performance of our contract with you
Cloud save accounts (Unity Authentication)A Unity player ID, the session kept on your phone, your Play Games player ID if you sign in, your IP address - at each start of the game online, after the privacy choicesPerformance of our contract with you (keeping your game and purchases safe and restoring them); storing the session on your phone is strictly necessary for that
Cloud save (Unity Cloud Save)A copy of your save with its purchase ledger, saved games kept aside, support grants - when your save changes, and when you leave the gamePerformance of our contract with you; for the purchase ledger also our legitimate interest in checking that a purchase is genuine and not delivered twice
Unity In-App Purchasing's purchase eventsThe product, price, currency, transaction ID, Unity installation ID and device information - at each purchasePerformance of our contract with you (processing the purchase you asked for)
Unity In-App Purchasing's sign-in event (2.2)The Unity installation and player IDs, device information, install time, consent state - at each cloud-save sign-in, whatever the privacy choicesOur legitimate interest in selling purchases through Unity's purchasing service, which sends it
Detecting fraud and abuse of purchases and rewardsPurchase records and the scrambled account codeOur legitimate interest in preventing fraud
Answering your emailsWhat you send usOur legitimate interest in helping you, and the contract

4. Our partners

We share data only with these service providers and partners, and only for the purposes above.

PartnerWhat it does in HakaiRoleIts privacy policy
Google (Google Play, Google Play Games Services, Android backup)Payments, refunds and order records, sign-in, the app's own backupController for its own serviceshttps://policies.google.com/privacy
Unity Technologies - Gaming Services (Authentication, Cloud Save)Cloud save accounts and the cloud saveOur processorhttps://unity.com/legal/privacy-policy
Unity Technologies - In-App PurchasingConnects the game to Google Play's billing; reports purchase events and a sign-in event to Unity (2.2)Our processor for the purchase, sign-in and session data it sends to Unity; Unity is an independent controller of the transaction and billing records it uses for its own purposes (reconciling fees, financial reporting and audit, legal compliance, security and fraud prevention)https://unity.com/legal/game-player-and-app-user-privacy-policy
Unity Technologies - LevelPlay (ironSource mediation) and Unity AdsChooses and shows ads, measures themUnity describes itself as a controller for LevelPlay data (since 4 Dec 2024)https://unity.com/legal/game-player-and-app-user-privacy-policy
Liftoff (Vungle)Shows adsControllerhttps://liftoff.ai/privacy-policy/
Pangle (TikTok's ad network, run by Bytedance Pte. Ltd., Singapore)Shows adsUses the data under its own privacy policy for people who see its adshttps://www.pangleglobal.com/privacy/enduser-en
InMobi ChoiceThe consent form; stores your choices. The consent data goes to InMobi, a third party, which also uses it for its own purposes, including advertising and building audience profilesIndependent controller (InMobi's CMP data protection agreement); InMobi uses the consent data under its own privacy policyhttps://advertising.inmobi.com/privacy-policy (EEA: https://advertising.inmobi.com/privacy-policy-for-eea/)
SingularAd and install measurement, revenue measurementOur processor (service provider): it processes the data only on our instructionshttps://www.singular.net/privacy-policy/
GameAnalyticsProduct analytics, error reportsOur processor for player data (GameAnalytics' Data Processing Addendum); it is a controller only of its own account, billing and security data and may use aggregated, de-identified statisticshttps://www.gameanalytics.com/trust/privacy-notice

We may also disclose data if the law requires it, to protect players or the game from fraud, or to a buyer if 5PTS or the game is sold (they would be bound by this policy).

5. Your choices

  • Privacy Choices (in Settings, shown wherever a consent law applies): re-opens the consent form so you can change or withdraw consent. A change reaches every partner straight away. (Singular then measures installs with data sharing limited.)
  • Your advertising ID: Android Settings > Google > Ads > "Delete advertising ID". Without it, ads cannot be personalised to you across apps.
  • No Ads removes the ad breaks between runs; it does not by itself stop ad partners' measurement of the rewarded videos you choose to watch where the game still shows them.
  • Google Play Games: if Google Play Games on your phone signs you in to games automatically, the game uses that sign-in and links your cloud save to it; Google Play Games' own settings decide whether it does. If it does not, signing in is up to you, from the game. Without it the cloud save still works, but only this installation of the game can find it.
  • Delete your cloud data in Settings > Cloud Save > Delete cloud data, or by email (section 7). The cloud save then stays off on that device until you turn it back on - which is also how to stop it.
  • Remove everything on your phone by clearing the game's storage or uninstalling it.

6. How long we keep data

  • On your phone: until you clear the game's data or uninstall it (and in your Android backup for as long as Google keeps it).
  • Cloud save, saved games kept aside, support grants and the cloud account: until you delete them - in the game, or by asking us - and no longer. One exception: a cloud account that has not been used for 24 months and has never made a purchase with real money may be deleted, with everything in it. An account that has made such a purchase is never deleted for being unused.
  • Purchase records (token, order number, product, dates, delivery state, and the scrambled account code): only in your save - on your phone until you uninstall the game or clear its data, and in the cloud save until you delete it. We keep no other copy of our own. Google keeps its own record of your orders as the seller of record for Google Play purchases, under Google's own policy; Unity In-App Purchasing's purchase and sign-in events (2.2) are kept by Unity under its terms (section 4), and where Unity holds them for us, we ask Unity to delete them when you ask us by email to delete your data.
  • Support emails: kept for 12 months after the matter is closed, then deleted. When you ask us to delete your data, we delete our correspondence with you too, except your request and our reply, which we keep for 12 months to show the deletion was done, and then delete.
  • Partners: each keeps data under its own policy (section 4).

7. Deleting your data

  • In the game: Settings > Cloud Save > Delete cloud data, then confirm. It is there whether or not you signed in with Google Play Games, and you need to be online. It deletes, straight away, your cloud save (with the purchase records in it), the saved games set aside in the cloud, and your cloud account, and turns the cloud save off on that device. It does not touch the save on your phone or the saved games set aside beside it (2.1).
  • What the game cannot delete itself: a note of items our support team gave you, and the purchase and sign-in records Unity In-App Purchasing keeps for us (2.2). Email us and we delete the note and ask Unity to delete those records; we also remove any note we find left behind by an account deleted in the game.
  • By email, without the game: write to contact@5ptsgames.com with the subject "Data Deletion Request". Your Cloud player ID (in the game, Settings > Support) is the surest way to find your account. Your Google Play Games gamer name if you signed in, a Google Play order number for Hakai (from Google's receipt email), or writing from the email address of the Google account you used can help us look, but may not be enough on their own. We delete everything we hold for the account we find, within 30 days, and confirm by email (we keep only your request and our reply, for 12 months, to show it was done). If we cannot find an account from what you give us, we tell you so.
  • An older cloud account: if the game's data was cleared, or it was reinstalled, while you were not signed in to Google Play Games, the game made a new cloud account, and the one before it - with the copy of your game and the purchase records it held - is out of the game's reach: Delete cloud data deletes only the account the game is using now. Email us anything that leads to the older one (its Cloud player ID above all) and we delete it. If nothing you can give us leads to it, we cannot find it either.
  • How it works step by step: https://5ptsgames.com/hakai/delete-data.html
  • Deleting is not a refund. Cars, skin bundles and No Ads bought with money come back with Settings > Restore Purchases, because Google keeps a record of them (with the gems that come in the No Ads + Gems bundle). Gem packs, coins, progress and anything bought with gems do not come back once both the cloud copy and the save on your phone are gone.
  • Another device: if the game is installed on another device signed in to the same Google Play Games account, that device backs its own save up again the next time it is online, unless you delete there too or uninstall it.
  • Partners' data: reset your advertising ID (section 5), and use each partner's own route in section 4. Where you ask, we pass your request on to them.
  • Google's data: your Google Play orders, your Play Games profile and the data Google keeps about your games are Google's; manage or delete them in your Google Account and your Play Games profile.

8. Children

Hakai is meant for adults (18+). It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has used the game, contact us and we will delete any data we hold and ask our partners to do the same.

9. Your rights

Depending on where you live you have rights to: access your data and get a copy; correct it; delete it; restrict or object to its use (including objecting to processing based on legitimate interests); withdraw consent at any time without affecting what was done before; data portability; and to complain to a data protection authority (in the EU, the authority where you live; in the UK, the ICO).

US state privacy laws (California, Virginia, Colorado, Connecticut, Texas and others) give you the right to know, access, correct and delete, and to opt out of the sale or sharing of personal information and of targeted advertising. Sharing an advertising ID with ad networks may count as "sharing" or "selling" under those laws. To opt out, use Settings > Privacy Choices (shown where these laws apply) or reset or delete your advertising ID. The game is an app, not a browser, so it receives no Global Privacy Control or Do Not Track signal; use Privacy Choices or your advertising ID setting instead. We do not discriminate against you for using your rights.

We honour these requests wherever you live. Email contact@5ptsgames.com; we may ask for your Player ID or Cloud player ID to find your data, and we answer within 30 days (45 under US state laws). You may use an authorised agent where your law allows. A copy of your cloud save is sent by email on request.

10. Security

We collect as little as we can, use established platform services, and every partner sends data encrypted in transit (HTTPS/TLS). The cloud save is reachable only by the player's own account and by us. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

11. International transfers

5PTS is in the United States, and our partners process data in the US and other countries. Where data from the EU, UK or Switzerland is transferred, the partners rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

12. Changes to this policy

We will update this page and its effective date before a change takes effect. For a change that matters - for example a new partner or a new kind of data - we also say so on the game's store listing and in the notes of the update that brings it.

13. Contact

5PTS Games LLC - 2108 N St, Ste N, Sacramento, CA 95816, United States - contact@5ptsgames.com - https://5ptsgames.com