Privacy policy

Legal review required before publication. This is a substantive draft prepared for the website, not legal advice. A qualified solicitor should review it against the game’s final data flows, advertising choices, analytics tools, store SDKs and launch territories.

Last updated: 28 July 2026 · Data controller: NNP Solutions Ltd · Contact: [email protected]

1. Scope

This policy explains how NNP Solutions Ltd (“NNP Solutions”, “we”, “us”) handles personal information when you use the CrowRush marketing website, contact us, or interact with website analytics and advertising. The privacy notices shown inside the CrowRush game or by Apple, Google Play and Steam may also apply to data processed through those products.

2. Information we collect

Information you give us

• Contact details, such as your name and email address.
• The topic and contents of messages you send through the form or by email.
• Support information you choose to provide, such as device model, operating-system version, game version and troubleshooting steps.
• Privacy-request information needed to identify you and respond securely.

Information collected automatically

• Basic technical records such as IP address, browser type, device type, timestamps, referring page and requested pages.
• Cookie or similar identifier data, preferences and interaction information where analytics or advertising tools are enabled.
• Approximate region derived from an IP address. We do not request precise location through this website.

Please do not send passwords, full payment-card details, government identifiers, health information or unnecessary information about a child.

3. Why we use information and our legal bases

• Answering enquiries and providing support: to take steps at your request and for our legitimate interests in operating player support.
• Security and reliability: for our legitimate interests in preventing abuse, diagnosing faults and protecting our services.
• Analytics: with consent where required, to understand aggregate use and improve the website.
• Advertising: with consent where required, to fund content and measure ad performance.
• Legal obligations: to keep required records and respond to lawful requests.
• Establishing legal claims: where necessary for our legitimate interests or legal rights.

Where consent is the legal basis, you may withdraw it at any time without affecting earlier lawful processing. Where we rely on legitimate interests, we balance our needs against your rights and expectations.

4. Cookies, analytics and advertising

Essential technologies may remember accessibility preferences, maintain security and deliver the site. Optional analytics may measure visits and feature use. Google AdSense or another advertising provider may use cookies or similar technologies to show and measure ads, subject to your consent and the provider’s controls.

Before optional cookies are activated in the UK, EEA or other consent jurisdictions, the production site should display a consent tool that lets visitors accept, reject or manage categories. Changing browser settings can also remove or block cookies, though essential features may be affected. Advertising placeholders on this draft do not themselves set advertising cookies.

5. Sharing information

We may share only what is necessary with hosting, security, email, analytics, advertising and technical-support suppliers working for us under appropriate terms. Apple, Google and Valve process information under their own policies when you use their stores or platforms. We may disclose information to professional advisers, courts, regulators or law-enforcement bodies where lawful, or as part of a business sale or restructuring with suitable safeguards. We do not sell personal information for money.

6. International transfers

Some suppliers may process information outside the United Kingdom or European Economic Area. Where required, we use an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful safeguard. You may contact us for information about the safeguard relevant to your data.

7. Retention and security

We keep contact and support correspondence only as long as reasonably needed to answer the enquiry, maintain useful support records, meet legal duties and resolve disputes—normally up to 24 months after closure unless a longer period is required. Server security logs are normally kept for up to 90 days. Consent records may be retained while necessary to demonstrate compliance. We then delete or anonymise information.

We use proportionate administrative and technical safeguards, including access controls, secure transport and supplier review. No online system can be guaranteed completely secure.

8. Children’s privacy

CrowRush may appeal to children, so we design this website to avoid asking for more information than needed. A child under 13 in the United States, or under the applicable digital-consent age elsewhere, should ask a parent or guardian to contact us on their behalf. The contact form is not intended to collect personal information directly from children without appropriate parental involvement.

We do not knowingly use this website to behaviourally profile children or sell/share their personal information for cross-context behavioural advertising. Production advertising and analytics must be configured for the intended audience, including child-directed treatment where applicable. If you believe a child sent us personal information without suitable consent, email us and we will investigate and delete it where required.

9. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing; receive portable data; withdraw consent; and complain to a regulator. UK residents may complain to the Information Commissioner’s Office. EEA residents may contact their local supervisory authority.

California residents may have rights to know, correct and delete personal information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service when exercising rights. We do not knowingly sell personal information. If advertising constitutes “sharing” under California law, the production consent tool should provide the required opt-out. We will not discriminate against you for exercising a right.

To make a request, email [email protected] with “Privacy request” in the subject. We may verify your identity and authority. An authorised agent may submit a request where local law permits.

10. Changes and contact

We may update this policy when our services, suppliers or legal duties change. We will post the new date here and give additional notice when a material change requires it. Questions can be sent to [email protected]. NNP Solutions Ltd is based in the United Kingdom; we intentionally do not publish a visitor address or phone number on this site.