Hit Me — a mobile game by Raviach Studios
This privacy policy applies to the Hit Me app for mobile devices (com.raviachstudios.hitme), together with any related services operated by Maor Raviach, trading as Raviach Studios (referred to here as the "Service Provider"). It explains what information the Application collects, why, how it's used, and the choices you have.
The Application collects different information depending on whether you play as a guest or sign in with Google.
| Category | Examples | When |
|---|---|---|
| Account data | Email address, unique user ID and display name, via Firebase Authentication and Google Sign-In | Only if you sign in — a guest has none of this |
| Gameplay data | High scores, coin balance, daily-reward streak and daily spins, owned skins and power-ups, achievements and lifetime stats, the remove-ads entitlement | Signed-in players (synced via Firestore); guests keep progress on-device only |
| Purchase data | Purchase tokens and product IDs handled by Google Play Billing — the Application never sees or stores your payment card details | If you buy coins or the one-time remove-ads upgrade |
| Settings | Sound and music preferences | All players — stored on your device |
| App usage & device data (analytics) | First app open, sessions and engagement time, game-start / level-complete / game-over / rewarded-video events, app updates, device model, OS version, app version, language, approximate location derived from IP address, and a Firebase app-instance ID. Not your name, email, user ID or advertising ID | All players, via Google Analytics for Firebase — see Analytics |
| Advertising data | Advertising ID, app set ID and ad-interaction events, used to show and measure ads. Shared with Unity Technologies (Unity LevelPlay) and the advertising networks it mediates | Where ads are shown, via Unity LevelPlay — see Advertising & ad mediation |
Hit Me has leaderboards that are, by design, visible to other players. If you sign in, your display name and score may be shown to other players on the all-time board and on the daily board, and on results screens. Nothing else about your account is published — not your email address, not your purchases. Don't use your real full name as your display name if you'd rather keep it private; a nickname works just as well.
The Application shows ads to keep the game free to play. Ads are served through Unity LevelPlay (formerly ironSource), an ad mediation platform operated by Unity Technologies. Mediation means LevelPlay runs an auction across several advertising networks for each ad shown, and the winning network supplies the ad. Your data is therefore shared not only with Unity Technologies but also with the advertising networks participating in that auction.
The networks currently integrated into the Application through LevelPlay are ironSource (Unity's own ad network), Unity Ads (Unity Technologies) and Meta Audience Network (Meta Platforms).
To select and measure ads, LevelPlay and the networks it mediates may collect and process your device's advertising ID (Google Advertising ID) and app set ID, IP address, device and OS information, and ad-interaction events such as which ads were shown, watched, or clicked. Each of these parties acts as an independent controller of that data. See the Unity Game Player and App User Privacy Policy, which covers Unity LevelPlay, ironSource and Unity Ads, and the Meta Privacy Policy for Meta Audience Network.
The networks currently enabled for this Application are listed in the Application's app-ads.txt file, which is the authoritative and up-to-date list of who is authorised to supply and sell ads in the Application.
Two kinds of ad appear: full-screen ads shown at the end of some runs (currently after every third completed game), and optional "watch a video" ads that you choose to start in exchange for an in-game reward — the daily prize-wheel spin, or tripling the coins earned from a run. The reward is only given once the video has been watched. A one-time in-app purchase is available to remove the full-screen ads; the optional reward videos remain available, because you choose whether to start them.
Personalized ads are only shown where you have agreed to them. Where consent is legally required — in the EEA and the UK — the Application asks before any ad is requested, and refusing is exactly as easy as accepting. If you decline, you will still see ads, but they will be contextual (non-personalized) and your advertising ID will not be used to profile you.
You can opt out of personalized advertising at any time at the device level, which the Application and its ad partners honour:
You can also email the Service Provider at raviachstudios@gmail.com and your opt-out request will be actioned.
The Application uses Google Analytics for Firebase, a service provided by Google, to understand how Hit Me is used and to improve it. In plain terms, it tells the Service Provider things like how many people actually open the game after installing it, how many start a game, how far they get, and whether the app is working well — counted across all players, not to follow any one person.
| Category | Examples |
|---|---|
| Automatic app events | The first time the app is opened after installing it (first_open), the start of each session (session_start), time spent engaged with the app (user_engagement), app updates (app_update), screen views, and similar app-lifecycle events the Firebase SDK records on its own. If you make an in-app purchase through Google Play, the SDK may also record it, with the product ID and price |
| Gameplay events sent by Hit Me | The app finished starting (hitme_app_started); a game started (game_started); a level was cleared (level_completed, with the level number); a game ended (game_over, with the score and number of levels cleared); a reward video was watched to the end and its reward earned (rewarded_ad_completed). Gameplay events also record which in-game skin was in use |
| Device & app information | Device model and brand, operating system version, app version, language setting, and similar technical information |
| Approximate location | Google derives an approximate location (such as country, region or city) from your device's IP address. Precise (GPS) location is never collected — the Application has no location permission |
| Identifiers | An app-instance ID and a Firebase installation ID, random identifiers generated by the Firebase SDK for this installation of the app. They let Analytics count users and sessions; they are reset if you uninstall and reinstall the app or clear its data |
Google processes Analytics data on the Service Provider's behalf, under the Firebase data processing terms; see also Privacy and Security in Firebase and How Google uses information from apps that use its services. Event-level Analytics data is kept no longer than the retention period configured in Google Analytics (at most 14 months); aggregated reports, which do not identify you, may be kept longer. Data is encrypted in transit.
Because Analytics data is tied only to a random app-instance ID and not to your account, uninstalling the app (or clearing its data) starts a new, unlinked app-instance ID. You can also ask the Service Provider at raviachstudios@gmail.com to delete Analytics data; where the data can be identified as yours, it will be deleted using Google's deletion tools.
The Application utilizes third-party services that have their own privacy policies about handling data:
Analytics data is sent to Google as described under Analytics; it is not linked to your account. The Service Provider may disclose information:
You may request access to, correction of, or deletion of your personal data held by the Service Provider. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal. To exercise these rights, contact the Service Provider at raviachstudios@gmail.com.
You can have your Hit Me account (published by Raviach Studios) and the data associated with it deleted at any time.
Email the Service Provider using the button below, ideally from the email address associated with your account so the request can be verified:
Requests are processed within 30 days.
If you only want to stop using your account on a device, sign out in the app. That leaves your account and its data intact — use the request above to have them deleted.
| Deleted | Kept, and for how long |
|---|---|
|
|
See Data retention for the full retention schedule. If you only want to remove some of your data and keep playing, see Delete specific data below.
Uninstalling the Application stops further data collection from your device, but does not by itself delete data already transmitted to the Service Provider or third parties — use the request above for that.
You do not have to close your Hit Me account to have data removed. You can ask Raviach Studios to delete particular items while your account stays active.
Advertising data is handled separately: to stop your advertising ID being used for personalised ads, use the device-level controls described under Advertising.
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell your personal information for money. However, showing personalized ads involves sharing your advertising ID with Unity LevelPlay and the ad networks it mediates for cross-context behavioral advertising, which California and several other US state privacy laws treat as "sharing". You can opt out of that at any time using the device-level controls described under Advertising, or by emailing the Service Provider. To exercise your other CCPA/CPRA rights, contact the Service Provider at raviachstudios@gmail.com.
For a better experience while using the Application, the Service Provider may require certain personally identifiable information, including but not limited to a user ID. This information is retained and used as described in this policy, and may be used to send important notices and, where permitted by law, marketing communications.
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, including:
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
The Service Provider retains personal data based on its necessity for the stated purposes:
You may request deletion of your personal data at any time — see Delete your account & data — subject to any legal obligation to retain it. Some data may be required for the Application to function properly.
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them, and does not knowingly collect personally identifiable information from children under 16 in violation of applicable law.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. If the Service Provider discovers that a child has provided personal information, it will be deleted from the Service Provider's servers immediately. If you are a parent or guardian and believe your child has provided personal information, please contact the Service Provider at raviachstudios@gmail.com so appropriate action can be taken.
The Service Provider safeguards the confidentiality of your information using physical, electronic, and procedural measures appropriate to the data processed.
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, information about the nature of the breach and the steps being taken to address it.
The Service Provider may update this Privacy Policy from time to time. Material changes will be posted here with an updated effective date, and where required by law, consent will be sought before they take effect. Previous versions are available on request by contacting raviachstudios@gmail.com.
If you have any questions about this policy or your data, contact the Service Provider at raviachstudios@gmail.com.