Privacy Policy

Last updated: September 29, 2026

This Privacy Notice for Nikola Dimovski (doing business as Big Bands, a product of Dimovski Studio) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://bigbands.app or any website of ours that links to this Privacy Notice
• Download and play the Big Bands mobile game on Android or iOS
• Engage with us in other related ways, including any marketing, press or partnership contact

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@bigbands.app.

Summary of Key Points

This summary provides key points from our Privacy Notice, but you can find more details about any of these topics by using the table of contents below.

What personal information do we process? When you play the game or visit the site, we may process information depending on how you interact with us: device identifiers, gameplay analytics, crash reports, ad-serving identifiers, and — if you opt in — cloud save data linked to Google Play Games or Game Center.

Do we process any sensitive personal information? No. We do not collect racial or ethnic origin, sexual orientation, religious beliefs, health data, precise geolocation, biometrics, or any other category defined as "sensitive" or "special" under applicable law.

Do we collect information from third parties? Only through the SDKs we integrate (Firebase, AdMob, ad-network mediation partners, Google Play Games, Game Center) — those SDKs may collect information as part of their normal operation. We do not receive information from brokers or purchased data lists.

How do we process your information? To provide the game, save your progress if you opt in, measure how the game is used, prevent crashes and abuse, serve advertising, and comply with legal obligations. We process your information only when we have a valid legal reason to do so.

In what situations and with which types of parties do we share personal information? With SDK providers we integrate (see Section 4), with law enforcement when legally required, and in the event of a business transfer. We do not sell your personal information.

How do we keep your information safe? TLS in transit, encryption at rest via our cloud providers, no direct database access from mobile clients. No system is 100% secure; we notify affected users of any confirmed breach in line with applicable law.

What are your rights? Depending on where you are located, you may have rights under GDPR, UK GDPR, CCPA/CPRA, or your state's privacy law. See Section 12 and 14.

How do you exercise your rights? Email hello@bigbands.app. See our Delete Account page for a step-by-step deletion process.

Table of Contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on to process your information?
4. When and with whom do we share your personal information?
5. Do we use cookies and other tracking technologies?
6. How do we handle your Google Play Games and Game Center sign-ins?
7. Is your information transferred internationally?
8. How long do we keep your information?
9. How do we keep your information safe?
10. Do we collect information from minors?
11. What are your privacy rights?
12. Controls for Do-Not-Track features
13. Do United States residents have specific privacy rights?
14. Do we make updates to this notice?
15. How can you contact us about this notice?
16. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect very little personal information you provide directly.

Big Bands does not require you to create an account, provide an email, or enter any personal information to play. The only personal information you may provide directly is:

• An in-game display name you optionally choose for leaderboard entries.
• The content of any email you send us at hello@bigbands.app (support, feedback, press, or a data request).
• If you opt in to Google Play Games (Android) or Game Center (iOS), your display name and Google/Apple account identifier as passed to us by those services.

Information automatically collected

In Short: Standard game analytics and technical data, collected automatically.

We automatically collect certain information when you use the Services. This information includes:

• Device data: device model, manufacturer, operating system version, screen resolution, language, country code, mobile carrier (if applicable), and system configuration information.
• Advertising identifiers: Google Advertising ID (Android) or Apple Identifier for Advertisers (iOS), used to serve non-repetitive advertising and measure ad performance.
• Gameplay analytics: level starts and completions, session duration, in-game currency events (Bands earned, spent), feature use (which powerups are used, which themes are selected), crash reports.
• Ad interactions: ad impressions, click events, rewarded ad completions.
• Network: IP address (truncated for analytics), coarse geographic region derived from IP.

Information we do NOT collect

• Your real name (unless you email us).
• Your phone number, physical address, or precise GPS location.
• Contacts, photos, microphone, or camera data.
• Payment card information — all in-app purchases are processed exclusively by Google Play Billing (Android) or the Apple App Store (iOS). We never see or store your payment details.
• Racial or ethnic origin, sexual orientation, religious beliefs, health data, biometrics.

2. How do we process your information?

In Short: We process your information to run the game, improve it, serve advertising, and comply with law.

• To operate the game: load levels, save progress (locally or, if you opt in, to the cloud), sync leaderboards, run achievements.
• To diagnose and prevent problems: crash reports, anti-abuse, fraud prevention.
• To improve the game: measure which features are used, tune difficulty, identify content that isn't landing.
• To serve advertising: deliver personalized or non-personalized ads through Google AdMob and its mediation partners, and measure the performance of those ads.
• To respond to inquiries: answer support emails, press requests, and data requests.
• To comply with law: respond to lawful requests from authorities, defend against legal claims, and meet accounting and tax obligations.

3. What legal bases do we rely on to process your information?

In Short: We only process your personal information when we have a valid legal reason (i.e., legal basis) to do so under applicable law.

If you are located in the EU, UK, or Switzerland (GDPR / UK GDPR)

• Consent (Article 6(1)(a)) — for personalized advertising and analytics that require consent, collected via the Google User Messaging Platform (UMP) consent screen at first launch. You can withdraw at any time from the in-app privacy settings.
• Legitimate interests (Article 6(1)(f)) — for crash reporting, security, non-personalized advertising, product improvement, and fraud prevention.
• Contract (Article 6(1)(b)) — to provide the game itself.
• Legal obligations (Article 6(1)(c)) — for record-keeping required by tax, accounting, or other law.

If you are located in Canada

We may process your information if you have given us specific permission (express consent) or in situations where your permission can be inferred (implied consent). You can withdraw consent at any time.

4. When and with whom do we share your personal information?

In Short: With SDK providers we integrate, when legally required, and if the business is sold.

We use the following processors. Each publishes its own privacy policy governing how it handles data.

• Google Firebase (Analytics, Crashlytics, Remote Config, Cloud Storage) — firebase.google.com/support/privacy
• Google AdMob and AdMob Mediation — policies.google.com/technologies/ads
• Unity Ads (via mediation) — unity.com/legal/privacy-policy
• AppLovin (via mediation) — applovin.com/privacy
• Google Play Games Services (Android cloud save, achievements, leaderboards) — policies.google.com/privacy
• Apple Game Center (iOS cloud save, achievements, leaderboards) — apple.com/legal/privacy
• Google Play Billing (Android in-app purchases) — policies.google.com/privacy
• Apple App Store In-App Purchase (iOS in-app purchases) — apple.com/legal/privacy
• Netlify (website hosting) — netlify.com/privacy

We may also share information in these situations:

• Legal obligation: when required to comply with law, respond to lawful requests, or defend against legal claims.
• Business transfers: if Dimovski Studio's assets are sold, merged, or acquired, information may transfer to the new owner subject to this Privacy Notice.

We do not sell your personal information. Certain uses of advertising identifiers by ad-network partners may constitute "sharing" under US state privacy laws; you can opt out via the in-app consent settings.

5. Do we use cookies and other tracking technologies?

In Short: The website uses minimal analytics cookies. The mobile app uses SDK-based identifiers.

The website bigbands.app uses only essential cookies required for the site to function, plus optional analytics cookies subject to your consent. No third-party ad-tracking cookies are set on the marketing website.

The mobile app uses SDK-based identifiers (Google Advertising ID / Apple Identifier for Advertisers) for advertising and analytics purposes, subject to your consent expressed through the Google User Messaging Platform (UMP) at first launch. You can change your consent at any time in the app's Settings → Privacy menu.

6. How do we handle your Google Play Games and Game Center sign-ins?

In Short: If you opt in, we receive your display name and account identifier — nothing more.

Big Bands offers optional sign-in to Google Play Games Services (Android) and Apple Game Center (iOS) to enable cloud save, cross-device sync, achievements, and named leaderboard entries. Sign-in is not required to play the game.

When you sign in, we receive:

• Your Google Play Games or Game Center display name.
• An opaque, service-specific account identifier used to attribute cloud saves and leaderboard entries to your account.

We do not receive your Google or Apple email address, your real name, your friends list, or any other profile information. You can disconnect at any time from the in-app Settings, or from your Google/Apple account settings.

7. Is your information transferred internationally?

In Short: Yes. Our processors are based primarily in the United States and the European Union.

Our servers and the servers of our processors are located in the United States and the European Union. Regardless of where you are located, your information may be transferred to, stored by, and processed in those regions and in other countries where our processors operate.

Where personal data is transferred outside the European Economic Area (EEA), we rely on the European Commission's Standard Contractual Clauses (SCCs) or an equivalent lawful transfer mechanism.

8. How long do we keep your information?

In Short: Only as long as necessary, unless a longer retention is required by law.

• Analytics data: retained up to 14 months (Firebase default).
• Crash reports: retained up to 90 days.
• Cloud save data: retained while you have Google Play Games / Game Center linked. Deleted on request.
• Support emails: retained up to 24 months.
• Financial records: retained as required by Serbian tax and accounting law (up to 10 years).

9. How do we keep your information safe?

In Short: TLS in transit, encryption at rest, no direct database access from mobile clients.

We have implemented appropriate and reasonable technical and organizational security measures. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We notify affected users of any confirmed breach in line with GDPR Article 34 and applicable US state laws.

10. Do we collect information from minors?

In Short: No. Big Bands is rated for users 18 years and older.

We do not knowingly collect, solicit data from, or market to children under 18 years of age (or the equivalent age as specified by law in your jurisdiction). If we learn that personal information from a user under 18 has been collected, we will delete it and deactivate any associated account. If you believe a child has provided us with data, email hello@bigbands.app.

11. What are your privacy rights?

In Short: Depending on where you live, you may have rights to access, correct, delete, and port your data.

If you are located in the EEA, UK, or Switzerland (GDPR / UK GDPR)

You have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email hello@bigbands.app or use the process on our Delete Account page. We respond within 30 days (may be extended to 60 days for complex requests, as permitted by law).

Withdrawing your consent

If we rely on consent to process your personal information, you can withdraw at any time by changing settings in the in-app Privacy menu or by emailing us.

12. Controls for Do-Not-Track features

Because there is no consistent industry standard for recognizing Do-Not-Track browser signals, our website does not respond to them. The mobile app respects your operating system's advertising ID reset and "Limit Ad Tracking" / "Opt Out of Ads Personalization" settings.

13. Do United States residents have specific privacy rights?

In Short: Yes, residents of many US states have expanded privacy rights.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, obtain a copy, or delete your personal information.

Categories of personal information we collect

In the past twelve (12) months, we have collected the following categories of personal information (as classified under the California Consumer Privacy Act):

• Identifiers — device identifiers, advertising IDs, IP address, in-game display name (if you provide one).
• Commercial information — purchase history for in-app items (metadata only; no card data).
• Internet or other electronic network activity — gameplay events, feature use, ad interactions.
• Geolocation data — coarse country-level location derived from IP.
• Inferences — segment membership for ad targeting, difficulty personalization signals.

We do not knowingly collect biometric information, professional or employment information, education information, sensitive personal information (as defined by California law), or any other categories not listed above.

Your rights

• Right to know whether we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies.
• Right to request deletion.
• Right to obtain a copy of the personal data you shared with us.
• Right to non-discrimination for exercising your rights.
• Right to opt out of processing your personal data for targeted advertising (or "sharing" under California law).

How to exercise your rights

Email hello@bigbands.app with the subject line "US Privacy Request" and identify the state you reside in. We will verify your identity before completing your request. If we decline to act, you may appeal by emailing the same address with subject "Privacy Appeal."

14. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. Material changes will be announced in-app.

15. How can you contact us about this notice?

If you have questions or comments about this notice, email us at hello@bigbands.app or write to:

Nikola Dimovski — dba Big Bands
Jevrejska
Novi Sad, Vojvodina 21000
Serbia

16. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we process it, correct inaccuracies, or delete your personal information. To do so, follow the process on our Delete Account page or email hello@bigbands.app.