ODD LITTLE FACTORY / PRIVACY
Privacy policy.
Effective date: 27 October 2026
This Privacy Policy explains how PeakCloud Gameworks processes personal data in connection with Odd Little Factory, its online game services and player support. It describes the information we process, purposes and legal grounds, recipients, retention, and the choices and rights available to players and their parents or guardians.
The studio website has a separate Website Privacy Notice. App stores and advertising providers also process information under their own notices.
1. Controller and contact details
The controller responsible for the processing described as our own is PeakCloud Gameworks sp. z o.o., ul. Ligocka 103/1C, lok. 307, 40-568 Katowice, Poland. The Android application identifier is com.peakcloudgameworks.oddlittlefactory.
Contact contact@peakcloudgameworks.com for privacy questions or requests. Identify Odd Little Factory in your message. Do not send passwords, authentication codes, payment-card details or complete game-save files.
No player registration, name, email address or telephone number is required to begin playing. Random identifiers, activity records and device information can nevertheless constitute personal data.
2. Gameplay and online services
Local progress and preferences
The main factory save, settings and local recovery copies are stored on your device. They include progress, virtual resources, upgrades, achievements and privacy preferences. Local information is also used to select gameplay guidance and offers. A short production assist may speed play up for an adult who has enabled gameplay statistics; the game never slows play down. These records are distinct from information transmitted for the services below. Gameplay statistics are not a cloud backup of your factory.
Reminders
If you allow notifications, the game schedules a few reminders on your device, such as when your daily gift is ready. They are created and delivered by your device's operating system, not sent from our servers, and they carry no information about you. You can turn them off in the game's settings or in your device's notification settings.
Online team contracts
When you use online team contracts, our services process a random gameplay identifier, team membership, contract identifiers and timing, production contributions, progress and reward or claim information. Private teams also use invitation codes. This enables shared progress, consistent rewards and protection against duplicate or invalid actions.
Other members can see the game labels and contribution information presented in the team interface. There is no free-text player chat. An invitation code or member label is not proof of authority to request deletion of another player's records.
Team processing is separate from optional gameplay statistics. Turning off statistics does not itself disable online gameplay. A feature requiring shared server state necessarily transmits the information needed to provide it.
Technical connections
Online requests may include the game version, requested resource, time, status and security information. Servers and hosting providers receive connection metadata, including IP addresses. This can occur when obtaining configuration or using online features even if optional statistics are disabled.
3. Gameplay statistics and adjustments
When gameplay statistics are enabled, selected events are sent to our own analytics service hosted on Google Cloud. They include installation-related pseudonymous identifiers, session and event identifiers, timestamps, game and configuration versions, and events concerning progression, production, rewards, advertising interactions, purchase state and gameplay experiments.
These records can relate activity from the same installation over time; they are pseudonymous, rather than anonymous. We use them to understand usage, diagnose issues, balance the game and assess changes. Local gameplay information may influence guidance, offers, rewards and pacing. Enabled statistics allow relevant measurements and experiment assignments to be sent to our service.
The gameplay-statistics control is available in the game's privacy settings. Statistics are disabled by default in the EEA and United Kingdom until enabled. Elsewhere the initial setting may be enabled, subject to age and privacy choices. Children and players of unknown age do not participate in optional gameplay statistics. The US Do Not Sell choice also disables this collection.
Disabling statistics stops new uploads, clears queued events and requests deletion of the statistics associated with that installation. An offline request is retained for retry. This does not remove separate team records, store transactions or information independently held by advertising providers.
4. Advertising
The game uses optional rewarded-video advertising. A player chooses whether to start a video for the offered reward. Once advertising is permitted, advertising software may initialise and fetch videos in advance; collection is not limited to videos actually watched.
Depending on the settings and provider, processing includes device and advertising identifiers, IP address and approximate location derived from it, device and application information, privacy signals, advertising interactions and technical diagnostics. Providers may also process purchase-related or usage information described in their disclosures. We do not request precise GPS location for advertising.
Advertising services include Unity LevelPlay and ironSource Ads, Unity Ads, and Google AdMob. Their notices are available through Unity's Game Player and App User Privacy Policy and Google's partner-services information. Providers may involve the partners identified in their notices and the applicable consent interface.
These services deliver and measure adverts, limit repetition, maintain security and prevent fraud and, where permitted, personalise advertising. Applicable consent and opt-out choices are passed to supported providers. Advertising choices are separate from permission for our optional gameplay statistics.
Where available, reopen the advertising privacy interface through Settings → Privacy → Ad privacy options. Android also provides advertising-identifier controls. Refusing personalisation does not necessarily prevent all advertising processing: permitted contextual or limited advertising may still require technical information.
5. Purchases and support
Google Play processes purchases made through the Android store. Purchase processing involves product identifiers, transaction or purchase-token information, purchase status and entitlements, including subscription status where offered. We use this information to provide purchased content, handle restoration and support, and prevent duplicate or invalid claims. We do not receive your full payment-card details from Google Play.
If you contact us, we process your email address, message and information you choose to provide, such as a technical-problem description. Include only relevant information. We may ask for proportionate additional information to locate records and verify your authority before fulfilling a privacy request.
6. Purposes and legal grounds
Where the GDPR or comparable rules apply, our grounds depend on the processing:
Requested gameplay, online features and purchased content
Performance of the applicable contract where necessary to provide the requested service; legitimate interests in reliable and secure operation for associated technical processing
Optional gameplay statistics
Consent in the EEA and United Kingdom; elsewhere, applicable consent requirements or legitimate interests in understanding and improving the game, subject to opt-out and age controls
Advertising
Consent for personalisation and device access where required; otherwise, where permitted, legitimate interests in funding the game, delivering and measuring advertising, and preventing fraud
Privacy and age-related choices
Compliance with applicable obligations and implementation of the player's choices and protections
Support
Contract where the request concerns that contract; otherwise legitimate interests in answering enquiries and resolving problems
Security, disputes and required records
Legitimate interests in protecting the service and establishing or defending claims, or compliance with a specific legal obligation
Legitimate interests do not override a consent requirement. Withdrawing consent does not affect prior lawful processing. You may object to legitimate-interest processing as described below. Declining information necessary for a requested online feature may prevent that feature from operating; declining optional statistics does not prevent core play.
7. Children, teenagers and parents
Odd Little Factory is intended for players aged nine and older, including children, teenagers and adults. Intended audience and store content ratings are distinct from the age at which someone may independently consent to personal-data processing.
The age screen uses the year of birth to apply protections. An unanswered age is treated as a child for those protections. The game's classification uses a threshold of 16 in the EEA and United Kingdom and 13 elsewhere, calculated conservatively from the year supplied. These are product safeguards, not a claim that every country's legal threshold is identical. The year is stored locally; relevant protection signals may be passed to providers.
Personalised advertising and optional gameplay statistics are disabled for children and unknown-age players. In the release configuration covered by this draft, children's advertising is disabled entirely. Additional personalised-advertising restrictions apply to known US players under 18.
These controls do not mean that all connections stop. Technical connections and enabled online gameplay features can involve the operational information described in section 2. That processing is separate from advertising and optional analytics.
Parents or guardians may contact us regarding their child's information and applicable rights. We may need proportionate proof of authority and information to identify the records. Purchase approval and store parental controls are managed through the applicable Google account and device settings.
8. Recipients and international processing
Google Cloud hosts our own analytics and online game services on our behalf. This is separate from Google's roles in advertising, consent management and Google Play. We also use providers for communications and operational support. Advertising providers may act as independent controllers for their own purposes under the linked notices. Google Play operates under its own terms and privacy information.
Relevant information may be disclosed where legally required, in response to a lawful authority request, or where necessary to establish, exercise or defend claims. Team members receive the limited information described in section 2.
European hosting resources do not guarantee that all technical records, support or provider operations remain in one country. Providers can process data elsewhere, including in the United States. Where a transfer legally requires safeguards, these must apply, such as an applicable adequacy decision or contractual safeguards. Contact us for information about safeguards applicable to your data and how to obtain a copy, subject to necessary confidentiality protections.
9. Retention and deletion
Retention depends on the information and its purpose:
Main save, local recovery copies and preferences
On the device until removed through applicable game or application-data controls. Some platform and consent settings are managed separately
Raw gameplay-statistics objects
Scheduled for expiry after 90 days, or earlier through an applicable deletion request
Derived gameplay-statistics objects
Scheduled for expiry after 395 days, or earlier through an applicable deletion request
Minimal statistics-revocation information
Kept separately to prevent delayed submissions from recreating deleted history; it is not a retained copy of that history
Online team and associated technical records
Determined by operation of the feature, completion and reward reconciliation, security and dispute needs, and applicable erasure rights. Statistical-object periods do not apply to every team or technical record
Hosting and security logs
Under the applicable logging category and security requirements; standard and mandatory audit logs can have different periods
Support and records needed for legal obligations or claims
For the period needed to resolve the matter and meet the relevant obligation or limitation period
Information independently held by advertising providers or Google Play
Under that provider's retention rules and applicable law
Scheduled expiry is not an exact-time deletion guarantee. Different records and recipients can have different schedules.
Local deletion. Delete my data removes the main local save and recovery copies and initiates statistics deletion. It does not automatically erase separate online team records or records independently held by advertising providers or Google Play. Google's stored consent choices are managed through advertising privacy options rather than reset by local deletion.
Server-side requests. Contact contact@peakcloudgameworks.com, identify the game and describe your request. We may need information to locate records and verify authority. Resetting or uninstalling can remove local identifiers and make association with server records harder. We will explain any identification limitation or applicable retention exception. Do not email authentication credentials or a complete save.
Uninstalling does not itself send deletion requests to every recipient. Use the relevant provider's channels for information independently held by advertising providers or Google Play.
10. Privacy rights
Depending on applicable law, you may request access, correction, erasure, restriction of processing and a portable copy of eligible data. You may withdraw consent or object to processing based on legitimate interests. An objection to direct marketing also covers related profiling.
Contact us at the address above. Requests are handled within the applicable legal period; under the GDPR this is normally one month, with a permitted extension where necessary, of which you will be informed. Proportionate verification may be required. We will explain any applicable statutory conditions or exceptions.
You may complain to the competent supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO). Where applicable, you may instead contact the authority competent for your habitual residence, workplace or the alleged infringement. See uodo.gov.pl.
11. US residents
We do not sell personal information for money. Disclosures for cross-context behavioural advertising may constitute sale, sharing or targeted advertising under applicable state laws. Rights may include access, correction, deletion, a copy of information and opting out, without unlawful discrimination for exercising those rights.
Use the game's privacy choices, including Do Not Sell where available, or contact us. The additional protections for known US players under 18 are described above. An authorised agent may submit a request where permitted; proportionate evidence of authority and verification may be required.
12. Security and policy changes
We use technical and organisational measures appropriate to the processing, including encrypted connections and access controls for our services. No system guarantees absolute security. Do not disclose game credentials or sensitive payment information in support messages.
We will update this policy when relevant practices change and identify the revised effective date. Applicable notice and renewed-consent requirements will be followed. Privacy contact: contact@peakcloudgameworks.com.