Français · English · Español · Deutsch · Italiano · Português · Português (Brasil)
Privacy policy — Brume
Last updated: November 8, 2026
Brume is a memory and maze game for iOS and Android, published by Microbiso Studio, an independent studio. This policy explains what data the game processes, why, who it is shared with, and what your rights are. The French version is the reference version.
In short
- Brume does not need your name, email address or phone number.
- Your progress is stored on your device and, if you sign in, backed up online so you can get it back on another device.
- Leaderboards only show the nickname you choose and your results.
- The game shows ads (unless you buy the “No ads” option) and measures its audience in aggregate.
- Purchases go through Google Play or the App Store: we never see your payment details.
- You can delete your account and your data at any time.
1. Data controller
Microbiso Studio, trade name of Pierre Ghazal EI (sole proprietorship, France).
Contact: microbiso.studio@gmail.com
2. Data processed and purposes
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Game progress: level reached, stars, best times, coins, upgrades bought, coins already collected, settings (theme, sounds, vibration), purchases made | Run the game and keep your progress | Performance of the contract (providing the game) |
| Player account: technical identifier assigned by Firebase and, if you use it, the identifier of your Google Play Games or Game Center account. We never receive your email or real name. | Back up your progress online and restore it on another device; identify you in leaderboards | Performance of the contract |
| Nickname you choose in the game | Show you in leaderboards | Performance of the contract |
| Leaderboard results: level, stars, time and falls in the Daily challenge, date | Overall and daily leaderboards, visible to other players | Performance of the contract |
| Audience measurement (Google Analytics for Firebase): game events (level started, won, power used, purchase…), app instance identifier, device model, OS version, language, approximate country | Understand how the game is used and improve it | Legitimate interest (improving the game); consent for personalised advertising |
| Crash reports (Firebase Crashlytics): error trace, app state at the time of the crash, device model, OS and game version, Crashlytics installation identifier | Detect and fix crashes and errors in the game | Legitimate interest (keeping the game working) |
| Advertising (Google AdMob and its partners): the device advertising identifier (GAID on Android, IDFA on iOS) only if you allow it, IP address, technical device data, interactions with ads | Fund the game through ads; limit ad repetition; measure delivery | Consent (personalised ads); legitimate interest (non-personalised ads and measurement) |
| In-app purchases: purchased product identifier, date, transaction token provided by Google Play or the App Store | Unlock what you bought and restore it on your devices | Performance of the contract |
Brume does not access your contacts, photos, precise location or microphone.
3. Advertising and choices
- On first launch in the European Union, a consent window (Google User Messaging Platform) asks whether you accept personalised ads. You can refuse: you will then see non-personalised ads.
- On iOS, the system also asks for tracking permission (App Tracking Transparency). If you refuse, the advertising identifier is not used.
- You can change your choices at any time from the in-game Shop, with the button “Gérer mes choix publicitaires” (Manage my ad choices).
- The “No ads” purchase permanently removes banners and ads between levels. Rewarded videos remain available, only if you choose to watch them.
4. Who the data is shared with
We do not sell your data. It is processed by the following providers, on our behalf or as joint controllers depending on the case:
- Google LLC — Firebase (authentication, Firestore database, Analytics, Crashlytics): hosting of the online save, leaderboards audience measurement and crash reports. Google Privacy Policy
- Google LLC — AdMob and its advertising partners: ad delivery. Google advertising partners
- Google Play Games (Google) and Game Center (Apple): sign-in with your player account, depending on the platform.
- Google Play and the App Store: in-app purchases and purchase restoration.
These providers may process data outside the European Union, notably in the United States. Google and Apple rely on the mechanisms provided by the GDPR (EU–US Data Privacy Framework adequacy decision, standard contractual clauses).
5. Retention
- Progress and account: as long as your account exists. If you delete your account, the online save and your leaderboard entries are erased immediately; local progress is removed by uninstalling the app.
- Audience measurement: user-level data kept for at most 14 months by Google Analytics for Firebase, then aggregated.
- Crash reports: kept for 90 days by Firebase Crashlytics.
- Advertising: according to the retention periods of Google AdMob and its partners, stated in their policies.
- Purchases: as long as needed to restore your purchases and meet accounting obligations.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.
- Delete your account and online data: in the game, Paramètres › Supprimer mon compte (Settings › Delete my account; see the steps), or by writing to microbiso.studio@gmail.com with your nickname.
- Change your ad choices: Shop › Gérer mes choix publicitaires, and in your device settings (Android: Privacy › Ads; iOS: Privacy & Security › Tracking).
- For any other request: microbiso.studio@gmail.com. We reply within one month.
You can also lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.
7. Children
Brume is rated for all ages but is not intended for children under 13, and we do not knowingly collect their data. In France, a minor under 15 needs a parent's agreement to consent to data processing. If you believe a child has sent us data, write to us and we will delete it.
8. Security
Online data is stored on Google Firebase infrastructure, encrypted in transit and at rest, and protected by access rules: each player can only read and modify their own save; leaderboards are publicly readable and writable only by the player concerned.
9. Changes
This policy may change, for example if the game adds features. The update date is shown at the top; in case of a significant change, the game will let you know.
10. Contact
Microbiso Studio — microbiso.studio@gmail.com