Privacy Policy
Effective date: 29 October 2026 · Last updated: 13 November 2026
The short version. Citadel Nights has no accounts and does not ask for your name, email, contacts, photos or location. Your progress is saved only on your device. The game shows an ad only when you choose to watch one for a bonus, and never during a game played together. Ads are provided by Google AdMob, which collects some device data to show and measure ads. In the EU, EEA, UK and Switzerland, you are asked for consent before any personalised ads, and you can change that choice at any time in the game's settings. On iPhone and iPad, the Game also asks Apple's permission before any tracking (see section 2.7).
1. Who we are
This policy covers the mobile game Citadel Nights – City Defense (the "Game") and this page. The Game is developed and published by Sico Studios, an independent developer based in the Netherlands ("we", "us"). We are the data controller for the limited processing described here. You can reach us at sicogamingstudio@gmail.com.
2. Information we collect
2.1 Game progress (stays on your device)
The Game saves your stars per city, coins, the number of attackers you have defeated, the towers you have opened, the cities you own, and settings such as brightness, music and sound volume in a file on your device. This data is not sent to us or to anyone else. It is deleted when you uninstall the Game or clear its storage.
2.2 Playing together on the same Wi-Fi
When you choose "Play together", the Game connects directly to other phones or tablets on the same local network. To let others find a game, a hosting device sends a short announcement on that network with the host's player name and the number of players. While you play together, game moves are sent directly between the devices; your device's local IP address is visible to the other devices in that game. Nothing of this passes through our servers, and we do not store it.
2.3 Information we do not collect
We do not ask for or collect your name, email address, phone number, contacts, photos, precise location or any account details. The Game does not use analytics or crash-reporting services of its own.
2.4 Information collected by our advertising partner
The Game includes the Google Mobile Ads SDK (Google AdMob). AdMob is used only when you choose to watch a rewarded ad, for example for extra gold at the start, a second chance or double coins. Ads are never offered during a game played together. To deliver, measure and protect ads, and to prevent fraud, Google may collect and process:
- device identifiers, such as the Android advertising ID and app set ID, or on iPhone and iPad Apple's advertising identifier (IDFA, only if you allow tracking) and identifier for vendors;
- your IP address, which can indicate an approximate location;
- device and app information, such as model, operating system version, language and app version;
- ad interaction data, such as which ads were shown and whether they were watched or tapped;
- diagnostic information, such as performance data and crash logs of the ad SDK.
Google processes this data under its own privacy policy. See Google's Privacy Policy and How Google uses information from sites or apps that use its services.
2.5 Purchases
The Game may offer optional in-app purchases, such as bonus cities. They are processed by Google Play on Android and by Apple's App Store on iPhone and iPad. We never see your card or payment details. We receive only the information needed to deliver and restore what you bought, such as a product ID, an order ID and a purchase token. Google handles your payment under the Google Payments Privacy Notice, and Apple under the Apple Privacy Policy.
2.6 Emails you send us
If you email us, we use your email address and message only to reply to you. We keep that correspondence only as long as needed to handle your request, and for at most 2 years.
2.7 iPhone and iPad
The iPhone and iPad version of the Game, available on Apple's App Store, works the same way: rewarded ads through Google AdMob as described in section 2.4, and optional purchases through Apple as described in section 2.5. Before any tracking, the Game shows Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", Google does not receive your advertising identifier (IDFA) and you still get ads, just not personalised ones. You can change this at any time in Settings › Privacy & Security › Tracking. The first time you use "Play together", iOS asks whether the Game may find devices on your local network; the Game uses this only for playing together (section 2.2).
3. Why we use this information, and our legal bases
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Save your progress on your device | Game progress | Not personal data shared with us. Needed to provide the Game. |
| Play together on the same Wi-Fi | Player name, local IP address, game moves (section 2.2) | Performance of our agreement with you (Art. 6(1)(b)), only when you choose to play together |
| Show a rewarded ad you asked for, and give you the reward | AdMob data (section 2.4) | Performance of our agreement with you (Art. 6(1)(b)) |
| Personalised ads | AdMob data (section 2.4) | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Non-personalised ads, ad measurement and fraud prevention | AdMob data (section 2.4) | Our legitimate interest in funding a free game and keeping ads safe (Art. 6(1)(f)), and your consent where the law requires it for storing or reading information on your device |
| Deliver and restore purchases | Purchase details (section 2.5) | Performance of a contract (Art. 6(1)(b)), and legal obligations such as tax records (Art. 6(1)(c)) |
| Answer your emails | Your email and message | Our legitimate interest in supporting players (Art. 6(1)(f)) |
4. Your choices about ads
- You decide when to watch. The Game has no banner ads and no forced ads. An ad plays only when you tap a button that offers a reward.
- Consent. In the EEA, the UK and Switzerland, the Game shows Google's consent message the first time it starts. You can accept or refuse personalised ads, and change your choice later under Settings › Ad choices.
- Advertising ID. On Android you can reset or delete your advertising ID in Settings › Privacy › Ads (the name varies by device). After that, apps cannot use it for personalised ads. On iPhone and iPad, turn off tracking for the Game in Settings › Privacy & Security › Tracking.
5. Sharing
We do not sell your personal information, and we do not share it except as described here: with Google, as our advertising partner and as the operator of Google Play; with Apple, as the operator of the App Store; with the other players in a game you choose to play together (section 2.2); or where the law requires it. Google may transfer data outside your country, including to the United States. For transfers from the EEA or UK, Google relies on the EU-US Data Privacy Framework and on the European Commission's Standard Contractual Clauses.
6. How long data is kept
Game progress stays on your device until you uninstall the Game or clear its data. Google keeps advertising data according to its own retention policies. Emails are kept for at most 2 years. Purchase records are kept for as long as tax and accounting law requires.
7. Children
The Game is made for players aged 13 and over and is not directed at children under 13. In the EEA it is not directed at children below the age of digital consent in their country, which is between 13 and 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
8. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. Because we do not hold game data on our servers, most requests can be met by uninstalling the Game, resetting your advertising ID, or changing your ad choices in the Game. For anything else, email us at sicogamingstudio@gmail.com and we will answer within one month. You also have the right to complain to your local data protection authority.
California residents: we do not sell personal information. Google's ad services may count as "sharing" for cross-context behavioural advertising under the CCPA/CPRA. You can opt out by deleting your advertising ID or by refusing personalised ads in the Game.
9. Security
Your progress is stored in the Game's private storage on your device, where other apps cannot read it. Data sent by the ad SDK is encrypted in transit by Google.
10. Changes to this policy
If we change this policy, we will update the effective date above. If the change is significant, we will also announce it in the Game or on this page.
Credits
- Music and sound: Powered by Stability AI.
- Map data © OpenStreetMap contributors, available under the Open Database License (ODbL).
- Made with the Godot Engine (MIT licence).
Contact
Sico Studios
Den Haag, the Netherlands
Email: sicogamingstudio@gmail.com