1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("BBF," "we," "us," or "our"), operates the Evil Larry Escape mobile application ("App"). This policy covers local gameplay and the connected features available only after a player says they are 18 or older: pseudonymous connected gameplay, notifications, contextual advertising, a one-time remove-ads purchase, analytics, and diagnostics.This Privacy Policy describes the personal information we collect, where it comes from, why we use it, when we disclose it, and the choices available to you.Controller and contact: Built by Foundry, Inc. (f/k/a Playpen Games, Inc.), 2261 Market Street, Suite 86046, San Francisco, California 94114, United States. For privacy requests, email privacy@builtbyfoundry.io. For general questions: support@builtbyfoundry.io2. Information We Collect
2.1 Gameplay and Connected Data
Age band, a pseudonymous user identifier, progress, scores, achievements, and settings. The App converts the age entered during onboarding into an age band rather than storing a birth date. This release does not expose social sign-in or collect your name or email address. If you use a sticker or sharing feature, the receiving service handles what you choose to share.2.2 Advertising and Purchases
For players who say they are 18 or older, Google AdMob may process contextual ad requests, impressions and interactions, approximate location inferred from IP address, diagnostic information, and app-scoped device identifiers for ad delivery, measurement, frequency controls, and fraud prevention. The App requests non-personalized ads and is configured not to request Apple's IDFA or the Android advertising ID. RevenueCat and the applicable app store process the optional one-time remove-pop-up-ads purchase, restoration, and entitlement status. We do not receive your full payment-card number.2.3 Usage and Diagnostics
For players who say they are 18 or older, this may include an app identifier, device and app details, screens and touches, app lifecycle, gameplay and progression events, notification subscriptions and interactions, masked session replay, network and console-error telemetry, crash reports, performance data, and other diagnostics. Session replay masks text inputs, images, and sandboxed views.2.4 Players Under 18
Before the age band is known, and for players under 18, the App keeps gameplay local and does not initialize AdMob, PostHog, RevenueCat, Supabase, or Sentry. Connected advertising, analytics, account sync, purchases, and diagnostics are therefore unavailable in that mode.Sources of information: We receive information from you, automatically from your device and use of the App, and from any sign-in provider, marketplace, or other service you choose to connect, including the app store. The categories above describe what we collected during the preceding 12 months; we do not collect a category unless the App uses the related feature.3. How We Use Your Information
• Save gameplay and deliver game features
• Show and measure contextual, non-personalized ads for eligible adult players
• Manage the optional one-time remove-ads purchase, restoration, connected gameplay, and notifications
• Prevent abuse, diagnose failures, and improve the game4. Third-Party Service Providers
We disclose only the information reasonably needed to service providers and contractors that host, secure, analyze, support, or process purchases for the App. They process information under their agreements with us and their own legal obligations.Connected Gameplay and Storage: Supabase creates a pseudonymous session for eligible adult players and supports connected progress. This release does not expose Apple or Google sign-in.Contextual Advertising: For eligible adult players, Google AdMob processes non-personalized ad requests, impressions and interactions, approximate location inferred from IP, diagnostics, and app-scoped identifiers for contextual delivery, measurement, frequency controls, and fraud prevention.Purchases: RevenueCat and the applicable app store process product availability, the optional one-time purchase, restoration, receipts, and entitlement status.Crash Diagnostics: For eligible adult players, Sentry processes crash, error, device, app, and sampled performance information without default personally identifying information.Analytics and Diagnostics: PostHog processes product events, device and app details, masked session replay where enabled, and error telemetry so we can understand use and diagnose failures.Distribution: Apple App Store, Google Play, and Expo distribute the App and may process device, installation, update, and purchase information under their own policies.No sale or behavioral-advertising sharing: We do not sell personal information for money or share it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We may disclose information if required by law, to protect people or the App, or as part of a merger, financing, or sale of the business, subject to appropriate safeguards.5. International Data Transfers
BBF is based in the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live.EEA/UK/Swiss users: Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism. You can ask about safeguards for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We keep personal information only as long as reasonably needed for the purposes described here, including to provide the App, maintain security, resolve disputes, and meet legal or accounting duties. Retention depends on the type of information, whether your account is active, and applicable law. When it is no longer needed, we delete or de-identify it. Copies may remain temporarily in backups or where law requires retention.Local data remains on your device until you clear it or uninstall the App. Connected account and content data is kept while your account is active and then deleted or de-identified after a verified deletion request, subject to backups, fraud prevention, and legal retention duties. Analytics and diagnostics are kept only as reasonably needed for product improvement and security.7. Your Privacy Rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier processing.Legal bases for processing
Legal bases: We process information as needed to provide the App and perform our contract with you; for legitimate interests such as security, support, product improvement, and fraud prevention; with consent where required; and to comply with law.EEA, UK, and Swiss users
You may also have rights to data portability and to complain to your local data protection authority. We may ask for information necessary to verify and complete your request.United States state privacy rights
Residents of California and certain other states may have rights to know, access, correct, delete, or obtain personal information and to receive information about categories of recipients. We do not discriminate against you for exercising a privacy right. Where applicable, you may use an authorized agent and may appeal our response by replying to it.How to Exercise Rights
Email privacy@builtbyfoundry.io with the App name, the email or account identifier you used (if any), and your request. You may also use an account-deletion control where the App provides that control. We will verify requests as reasonably necessary and respond within the time required by applicable law.Some information may be exempt from a request or retained where permitted by law. We may charge a reasonable fee or decline requests only where applicable law allows it.8. Children's Privacy
Evil Larry Escape is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We will investigate and delete the information when required.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
We maintain an incident-response process. If a security incident affects personal information, we will investigate, contain, and provide notices to regulators or affected people when and as required by applicable law.Report security concerns: privacy@builtbyfoundry.io10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and protections offered by our hosting and authentication providers. No method of storage or transmission is completely secure.You should: Protect your device, credentials, and connected accounts and tell us promptly if you suspect unauthorized access.11. Privacy and Advertising Choices
Evil Larry Escape does not request App Tracking Transparency permission or access Apple's IDFA, and ad requests are contextual and non-personalized. Google Mobile Ads may still process app- or developer-bounded device identifiers and declares Device ID as tracking-capable under Apple's App Privacy framework, which we disclose in the App Store. Eligible adult players can reopen Google's privacy-options form from Settings where that control is available. Rewarded ads are optional, and the App offers a one-time purchase that removes forced pop-up ads while leaving optional rewarded ads available by choice.12. Updates to This Policy
We may update this policy as the App or law changes. The Last Updated date shows when it was revised. If a change materially affects how we use personal information, we will provide notice in the App, by email when available, or by another reasonable method before the change takes effect where required.