This is a translation, provided for convenience. If there is any difference, the Portuguese version prevails.

Privacy Policy — XP Monster

Effective as of October 24, 2026

1. Data that stays only on your device

The game stores some information in the device's local storage (localStorage), only so you don't lose your progress and preferences:

• Progress — gold, zone, defeated monsters, helpers and upgrades bought, XP level, Plays, achievements and the stats on the Records screen.
• Boosts — the time left on the boosts you activated.
• Preferences — sound, music, vibration, language and whether you have seen the tutorial.
• Purchases — which purchases you made (such as "No ads", "Gold x2", "24 h idle", "Style pack" and "Starter pack") and the bought gold bags not yet moved to the inventory, so everything works even offline.
• Inventory and style — "Skip Ad" vouchers and stored gold bags, the idle earnings limit and the chosen looks.
• Clock — the date and time of the last launch and the time since the device was turned on, used only to notice if the device date or time was changed (see the Terms of Use). None of it leaves the device.

This information is never transmitted: there is no server, account or sync behind the game. It is deleted when you uninstall the app or clear its data in the Android settings.

2. Data collected by third parties (ads)

The app shows a Google AdMob banner and, only when you tap to watch, rewarded videos that give in-game boosts. To deliver and measure these ads, Google's own SDK collects, directly on your device:

This data goes directly to Google, which acts as an independent controller of it — PlayDude Inc does not receive, see or store any of it.

More details: Google Privacy Policy and how Google uses data in AdMob.

In-app purchases (Google Play)

All purchases are optional and processed entirely by Google Play Billing: "No ads", "Gold x2", "24 h idle", "Style pack", "Starter pack" and the gold bags. Payment happens on the Google Play screen: PlayDude does not receive, see or store payment data. The app only receives from Google Play the confirmation that your Google account made the purchase, to unlock it and, for one-time purchases, restore it on another device.

Whoever buys No ads (alone or in the Starter pack) stops seeing the banner and gets the boosts without videos: the game no longer starts the AdMob SDK and the advertising identifier is not used.

Other Google Play services

The game uses Google Play's in-app review prompt (In-App Review) and new-version notice (In-App Updates). They are shown by Google Play itself, which handles data under Google's policy; the game receives nothing from them beyond "there is a new version or not".

3. What the app does not do

• No login; it does not ask for email, phone or any sign-up.
• It does not access contacts, photos, files, microphone, camera or location.
• It does not sell or share data with data brokers.
• No purchase is required to play: all purchases are optional.
• No full-screen ad unless you ask for it: the only automatic ad is the banner; videos only appear when you tap to get a reward and confirm with "Watch video".

4. Consent (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows the Google User Messaging Platform (UMP) consent form before loading any ad, so you can choose between personalized and non-personalized ads.

Your choice is stored on the device and can be changed at any time under Settings → Privacy options, inside the game.

5. How to limit personalized advertising

In any region, you can manage the device's advertising identifier in Android Settings → Google → Ads, where you can reset or delete it (the exact path may vary with the Android version).

If you delete the identifier, you still see ads — just not personalized ones.

6. Children

XP Monster is not directed at children: the target audience declared on Google Play is 13 years or older. We do not knowingly collect data from children under 13.

Parents and guardians with any concern can write to lgpd@playdude.com.br.

7. Your rights

Since there is no server or database with user information, there is nothing in our custody to export or delete — everything the game stores stays on your device, and uninstalling the app removes it all.

For the data handled by Google AdMob (section 2), rights are exercised with Google, which controls it:

• Manage or delete the advertising identifier: Android Settings → Google → Ads;
• Google Privacy Center: myaccount.google.com/data-and-privacy.

This covers the rights under the LGPD (Brazilian Law 13,709/2018), the GDPR and the CCPA/CPRA. Any question about the game itself can be sent to the contact in section 10.

8. Security

The app works offline. Its only network traffic is from Google services: the AdMob SDK's ad requests and, in the store, the conversation with Google Play to show the price, buy and restore the purchase — all sent over HTTPS.

9. Changes to this policy

If this policy is updated, the effective date at the top of the page is updated too, and the new version applies from its publication at this same URL. We recommend reviewing this page from time to time.

10. Contact