Privacy Policy

Plumvia, the game studio of Celerora LLC (a Texas limited liability company), respects your privacy. This Privacy Policy describes how we handle personal information across our website at plumvia.com and our games (together, the "Services").

For the purposes of data protection law, Celerora LLC, operating as Plumvia, is the controller of personal information processed through the Services. You can reach us at privacy@plumvia.com.

Information you give us

• Contact form: when you message us, we collect your name, email address, and the contents of your message.
• User content: if a game lets you create or share content with others — such as a display name, profile details, or messages — we collect what you submit.

Information collected automatically

• Device & usage data: such as IP address, browser or device type, pages or screens viewed, and timestamps.
• Security signals: data needed to prevent spam and abuse, including rate-limiting and CAPTCHA checks.

Game data

• Gameplay: progress, scores, streaks, and settings needed to run a game on your device or account.
• Purchases: if you buy something, the relevant app store processes your payment. We receive confirmation of the transaction but not your full payment details.

• to provide, maintain, and improve the Services;
• to respond to your messages and support requests;
• to protect against spam, fraud, and abuse;
• to understand how the Services are used; and
• to comply with legal obligations.

Where required, our legal bases are your consent, performance of a contract, our legitimate interests in operating and securing the Services, and compliance with law.

We and our providers use cookies and similar technologies to keep the Services secure and working properly. For example, our anti-abuse provider (Cloudflare Turnstile) may set cookies to verify that requests come from real people. You can control cookies through your browser settings; disabling some may affect functionality.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only to service providers that process data on our behalf, and only as needed to run the Services:

• Vercel — website hosting and content delivery.
• Resend — delivering contact-form emails to us.
• Cloudflare — bot/spam protection (Turnstile) and network services.
• Upstash — rate limiting and storage for our forms (waitlist signups and contact submissions).
• GameAnalytics — analytics for our games. This involves app-usage and gameplay events, device and app information, and a device identifier (Android app-set ID or Apple's IDFV), used to understand how our games are played and to improve them. It is not used for cross-app tracking and does not use advertising identifiers such as IDFA. Handled under GameAnalytics' privacy policy.
• Unity LevelPlay (ironSource) and Unity Ads — serving non-personalized (contextual) ads in our games. See the Advertising section below.
• Apple App Store & Google Play — distribution and payment processing for our games, under their own privacy policies.

We may also disclose information to comply with the law, enforce our Terms, or protect the rights and safety of our users and Celerora LLC, and in connection with a merger, acquisition, or sale of assets.

Our games may show ads to support a free experience (you can remove ads through an in-app purchase). We use Unity LevelPlay (ironSource) and Unity Ads to deliver non-personalized, contextual ads — ads based on the app and general context, not on a profile of your activity across other companies' apps and sites.

• What the ad SDK collects: coarse or aggregate signals needed to serve and measure ads, such as IP address, device and app information, and ad interactions.
• No cross-app tracking: we do not use advertising identifiers (such as Apple's IDFA or Android's Advertising ID) to build profiles or track you across other companies' apps and sites. Because we don't track in that sense, our iOS apps do not display the App Tracking Transparency prompt.
• Your controls: you can reset or limit your device's advertising identifier in your device settings, or remove ads entirely through an in-app purchase.

Our Services are not directed to children under 13 (or the minimum age required by your local law), and we do not knowingly collect personal information from them. Where a specific game is intended for children, we will handle data in accordance with applicable laws such as COPPA and the GDPR. If you believe a child has provided us personal information, contact us at privacy@plumvia.com and we will delete it.

We keep personal information only as long as needed for the purposes described here, then delete or anonymize it. In general:

• Contact messages: kept while we handle your inquiry and for a reasonable follow-up period.
• Security & rate-limit logs (including IP): kept short-term to detect and prevent abuse.
• Game progress & purchase records: kept while you use the game and as needed for support, accounting, and legal obligations.
• Analytics & crash data: kept according to our providers' default retention settings.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA), among others, have specific rights, including the right not to receive discriminatory treatment for exercising them.

To make a request, email privacy@plumvia.com. We may need to verify your identity before responding.

Some browsers and devices let you send a Global Privacy Control (GPC) signal. Where required by law, we treat a GPC signal as a request to opt out of any "sale" or "sharing" of personal information — though, as noted above, our ads are non-personalized and we do not share personal information for cross-context behavioral advertising.

We operate from Texas, USA and our providers may process data in other countries. Where we transfer personal information across borders, we use appropriate safeguards as required by applicable law.

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Services may link to third-party sites and platforms (such as app stores). Their privacy practices are governed by their own policies, and we are not responsible for them.

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.

Questions or requests about your privacy? Email privacy@plumvia.com or use our contact page.