(Revised as of May 26, 2026)
This Privacy Policy sets out the commitments that CUBIC GAMES LIMITED promises to follow when collecting, using, sharing, and protecting your personal data. It explains:
We strive to comply with applicable data protection laws, including but not limited to the GDPR (European Union), LGPD (Brazil), PIPA (Korea), and the CCPA/CPRA (California). Where local laws grant you specific rights, these are outlined in the section "How Can You Control Your Data?" and in any additional regional notices, as applicable.
CUBIC GAMES LIMITED is an international game development company. This Privacy Policy explains how we collect, use, and protect your personal data when you play Pixel Gun 2 (the "Project").
If you are not an adult, please obtain permission from your legal guardian before using the Project. For any questions or concerns, please contact us via the “Help and Support” section in the Project or by email at:
Email: support.tos@cubicgames.com
If, under applicable law (e.g., GDPR), we are required to appoint a Data Protection Officer (DPO) or a similar representative (e.g., “Encarregado” under LGPD), we will provide the relevant contact information upon request.
For the purposes of the GDPR and other applicable data protection laws, the Data Controller is:
We consider any information that can identify you, directly or indirectly, as personal data. We collect and process different categories of data to provide you with a full gaming experience, to operate essential features, to keep the Project secure, and to improve our services.
Where we rely on your consent as the legal basis for processing, we do not rely on that consent indefinitely. As a general rule, we consider your consent to remain valid for no longer than five (5) years from your last relevant interaction with the Project or our communications, unless you withdraw it earlier or a shorter period is required by applicable law.
| Data Processing Purpose | Legal Basis | Data Categories | Retention Period | Additional Information |
| Gaming process and core feature availability | Contract | Account information; gameplay and feature interaction (session/gameplay logs, use of in-game functions, events and items); game progress and related in-Project history. | For the duration of the account; typically removed or anonymized within 30 days after deletion request. | Essential for accessing and using the core features of the Project. |
| Account Creation & Management | Contract | Account information (username, display name, account ID, account creation date; email address if you choose to provide it). | For the duration of the account; typically removed or anonymized within 30 days after deletion request | Essential for accessing and using the Project. |
| Platform account sign-in and secure local storage (mobile) | Contract / Legitimate Interest | Platform account identifiers and authentication tokens as provided by the platform; device identifiers; login events and timestamps; locally stored authentication data in secure storage on your device (where supported). | Stored locally until you sign out, remove the app, or clear local storage; server-side security logs retained as necessary for security and troubleshooting. | Enables automatic sign-in, account continuity, and secure authentication on mobile devices. |
| CubicID cross-platform account (optional) - creation and authentication | Contract / Legitimate Interest | Email address (if you choose to provide it, including where shared by your chosen sign-in provider subject to your permissions and provider settings); CubicID account ID; authentication and security metadata (e.g., login events, timestamps, verification attempt logs); technical identifiers (e.g., IP address, device identifiers). | For the duration of the account; security logs retained as necessary for security and fraud prevention. | Enables you (if you choose) to use a unified account across devices/platforms and to secure account access. CubicID is optional; you can play without creating it. Availability may vary by platform and region. |
| Account linking and cross-platform progress synchronization (CubicID) | Contract | CubicID account ID; platform account identifiers; device identifiers; game progress and gameplay state; achievement and progression data; purchase/entitlement information necessary to restore or synchronize your purchases across platforms (e.g., entitlement status, transaction/receipt identifiers, platform purchase identifiers, restore events); conflict-resolution metadata (e.g., which profile/progress to keep when multiple states exist); authentication and security logs. | For the duration of the account; typically removed or anonymized within 30 days after deletion request. | Used to link accounts you choose to connect, synchronize/restore progress across devices/platforms, and enable account recovery. If linked accounts have different progress, we may ask you to choose which progress to keep. |
| Associated web services authentication (CubicID, where available) | Contract / Legitimate Interest | CubicID account ID; authentication tokens; login events; technical identifiers (e.g., IP address, device identifiers) as needed to secure access and prevent fraud. | For the duration of the account; security logs retained as necessary for security and fraud prevention. | Enables you to sign in to our associated web services (for example, an account portal or web shop) using CubicID, where available. |
| Cross-title social features (optional, where available) | Contract / Consent (where required) | Friend identifiers within our services; import/invite status; timestamps; minimal technical logs necessary to deliver the feature. | For the duration of the account or until you disable/unlink the feature; typically removed or anonymized within 30 days after deletion request. | If you choose to use cross-title features (e.g., importing friends), we may use CubicID to identify eligible connections. Social lists may remain independent after import. |
| Rewards and entitlement management (including linking rewards, where available) | Contract / Legitimate Interest | Account IDs; reward eligibility flags; entitlement and inventory records; linking status; timestamps; limited logs to prevent abuse. | For the duration of the account; entitlement records may be retained longer where required for dispute resolution or legal obligations. | Used to grant and maintain in-game rewards or benefits tied to your actions (for example, linking accounts) and to prevent fraud. This may also include maintaining and restoring your entitlements across devices/platforms when you link accounts or use Cubic ID. |
| User Verification & Security | Legitimate Interest / Legal Obligation (where applicable) | IP address; unique device IDs (device ID, advertising ID, Android ID, etc.); broad location data (e.g., country code); security events; anti-cheat and fraud signals. | For the duration of account activity or until you successfully object, unless we must retain certain records to comply with legal obligations. | Used for anti-cheat measures, fraud prevention, and protecting user accounts and the Project. |
| In-Project Transactions | Contract / Legal Obligation | Transaction details (amount, currency, date/time, voucher codes, order IDs, entitlement status). | Retained for up to 7 years (or as required by tax and legal obligations) | Payment data (e.g., credit card numbers) is processed directly by the app store or payment provider and is not stored by us. |
| Email registration, community surveys, and service communications | Contract / Consent (depending on context) | Email address and related information you provide via in-game forms or community surveys; preferences; communication logs (e.g., delivery status). | Retained as long as the account is active or until consent is withdrawn (as applicable). | Used for account-related communications (including verification codes and important security notifications) and for surveys or feedback you choose to complete. |
| Marketing communications and newsletters (optional) | Consent (or Legitimate Interest where permitted by law) | Email address and associated account ID; preferences; engagement metrics (e.g., opens/clicks) where enabled by our email systems. | Until you withdraw consent or up to 5 years from your last interaction with our marketing communications (whichever occurs earlier), plus up to 30 days for system synchronization. | Used to send newsletters, updates, and promotional communications. You can unsubscribe at any time via the link in each message. |
| Advertising & Analytics | Consent / Legitimate Interest | Advertising identifiers (e.g., IDFA/GAID); usage logs; device information; crash logs; performance metrics; approximate location (country/region). | For up to 5 years from your last in-Project activity or until you opt out of such processing, whichever occurs first. Aggregated or anonymized data may be stored longer. | Used to understand how the Project is used and, where applicable, to deliver relevant advertising (subject to consent where required). |
| Chat messaging, moderation, and on-demand translation (where available) | Contract / Legitimate Interest / Legal Obligation (where applicable) | Message content (text); translated text (if you use translation); source and target languages; reports and moderation metadata; minimal technical logs. | Typically retained for up to 3 years for moderation and safety purposes; we may delete sooner where feasible or as required by law. | Used to deliver chat features, prevent abuse, investigate reports, and (where available) provide translation. Please do not share sensitive personal information in chats. |
| Customer Support | Contract / Legitimate Interest | Data you provide when contacting support (e.g., email, screenshots, device details) | For the duration of the support case or as required by applicable law | Used solely to resolve support requests and to ensure customer service quality. |
| Improvement and development of the Project (including product experiments and test servers) | Contract / Legitimate Interest | Account and gameplay data (e.g., account ID, region/server, platform, test/control group); gameplay metrics (FTUE completion, use of key mechanics, conversions, early retention); technical data (device/OS info, performance and crash data); limited in-game video fragments (engine-rendered only). | For the duration of the experiment, typically retained up to 12 months for validation and aggregated reporting. Aggregated or anonymized data may be kept longer. | Used to test and improve early-game experience, mechanics, and Project performance. For CubicID, this may include analytics of onboarding and linking flows. |
| Technical & Diagnostic Data | Legitimate Interest | Crash logs, error reports, device specifications, in-Project usage statistics, and diagnostic data | For the duration of account activity; aggregated or anonymized data may be retained indefinitely | Helps us monitor, diagnose, and resolve technical issues and improve Project performance. |
| Contests and promotions (only if you choose to participate) | Contract (contest rules) / Legitimate Interest / Legal Obligation | Contact data (name/nickname, email, region/country); player ID; submitted content (screenshots, photos, videos) where applicable; shipping address and tax information only if needed to award prizes and comply with law. | Up to 12 months after the contest ends or longer if required by law. | Used to verify eligibility, administer contests, notify winners, deliver prizes, and prevent fraud. |
The Project may include in-game chats that enable players to communicate. To support a safe and reliable experience, we process chat data to deliver chat functionality, to enforce our rules and prevent abuse, and (where available) to provide optional on-demand translation.
We process message content (the text you send via in-game chats) and limited related technical data needed to deliver the chat service. If you choose to use an on-demand translation feature, we also process the translated text and the selected languages.
Please do not share sensitive personal information in chats. If you choose to do so, such information will be processed as part of your message.
We may use automated tools and, in limited cases, human review to detect and address spam, threats, hate speech, and other policy violations. If a message or account is reported, we may review and temporarily retain relevant chat content and logs to investigate and to comply with legal obligations.
We share chat data only as described in this Policy. This may include sharing limited data with service providers that help us operate chat features and (where available) deliver translation, acting under our instructions and subject to confidentiality and data protection obligations.
If you subscribe to newsletters or other marketing communications, we may process your email address, associated account ID, preferences, and (where enabled) engagement metrics such as message opens or clicks. We use this data to deliver messages, measure delivery performance, and improve relevance.
We send marketing emails only where you have opted in, or where "soft opt-in" is permitted by applicable law. You can unsubscribe at any time via the link in each message. Changes to subscription status may take up to 30 days to synchronize across systems.
From time to time, we may run contests, promotions, or community events. Participation is optional. If you choose to participate, we process the data necessary to administer the activity, verify eligibility, deliver prizes, and meet legal requirements.
If a contest includes physical prizes, we may request a shipping address. If required by applicable law, we may also collect limited tax information to report prize fulfillment.
Use of your email provided during registration.
When you provide your email address (for example, to register, to create an optional CubicID account, or to take part in community surveys), we process that email in accordance with this Policy and applicable law. Depending on context, we may use your email for:
You can manage marketing email preferences through your privacy settings (where available) or by using the unsubscribe link in each marketing email.
We may share your email address with selected partners for advertising and analytics purposes, but only if you have given additional consent for such sharing. Where appropriate, this may include uploading email addresses in a privacy-safe format (e.g., hashed) to create custom audiences or similar targeting features.
You can withdraw this consent at any time via your privacy or account settings (where available).
We may offer an optional account feature (“CubicID”) that allows you to use a unified account across devices and platforms and to synchronize your progress. CubicID does not replace platform login; it complements it by linking your platform-authorized account(s) (and, where available, accounts in our other games) to your CubicID. Availability may vary by platform and region.
In some cases, you may be able to unlink a device or a linked account from your CubicID. Unlinking may reset the local state on that device, while your CubicID-stored progress may remain available for future restoration. Deleting your account is different and will result in deletion of account data as described in this Policy.
To streamline account management and enhance your social experience, we may offer an optional Facebook integration.
If you choose to verify your account via Facebook or enable social features (such as sharing achievements or inviting friends), you will be redirected to Facebook and asked to grant permission for the Project to access specific data from your Facebook account.
You may revoke your consent at any time via your account settings (where available) or via the Facebook interface. Once revoked, we will cease processing data obtained from Facebook for these purposes.
We process your personal data only when necessary for providing access to and improving the Project, and only where we have a valid legal basis under applicable law. Our legal bases may include:
We do not sell your personal data. However, to provide you with our services, we may share your data under the following circumstances:
We may share personal data with third-party service providers that process data on our behalf under our instructions and subject to contractual obligations on confidentiality and data protection. These may include:
We maintain an up-to-date list of third-party partners in the Project, on our official websites (where available), or upon request. The list typically includes partner names and the nature of services they provide.
We may share data within our corporate group. Data may also be transferred in connection with mergers, acquisitions, reorganizations, or asset sales, subject to appropriate confidentiality and security measures.
We may disclose data to comply with legal obligations, respond to lawful requests, or protect the rights, property, or safety of our users or the public.
If personal data is transferred outside the European Economic Area (EEA) or other regions with data transfer restrictions, we use appropriate safeguards (such as Standard Contractual Clauses or other lawful mechanisms) to ensure lawful transfers and adequate protection.
We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy or as required by law. For example:
Once the purpose for which data is processed has been fulfilled, personal data is securely deleted or anonymized.
Depending on your location and applicable law, you may have the following rights regarding your personal data:
Additional rights may apply in certain regions, such as data portability (GDPR) or the right to lodge a complaint with a supervisory authority.
If you use CubicID, the Project may provide options to link or unlink accounts. Unlinking may reset local state on a device, while your CubicID-stored progress may remain available for restoration. You can also request deletion of your account data as described above.
To exercise your rights, please contact us via the in-game “Help” section or by email:
Email: support.tos@cubicgames.com
We may require you to verify your identity before processing your request. We will typically respond within 30 days, unless a longer period is permitted by law due to request complexity or volume.
We implement technical and organizational measures designed to protect your data against unauthorized access, alteration, disclosure, or loss. Our security measures may include:
Despite these measures, no method of transmission or storage is completely secure. Please keep your account credentials secure and do not share them with others. If you suspect a security incident, contact us immediately at support.tos@cubicgames.com.
Pixel Gun 2 is not directed to children under the age of 16 (or under the minimum digital age in your jurisdiction, if higher). We do not knowingly collect personal data from children below the applicable age without verifiable parental consent.
If we discover that we have inadvertently collected personal data from a child without proper consent, we will promptly delete or anonymize that data.
Any data processed in connection with children’s activity is minimized to what is strictly necessary to provide the Project. We do not use children’s personal data for behavioral advertising or other purposes not permitted by law.
Parents or legal guardians may request to review, delete, or prevent further collection of their child’s personal data. If you believe we have collected information from a child contrary to applicable law, contact us at support.tos@cubicgames.com.
If you are a California resident, additional rights may be available under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
To exercise these rights, please contact: support.tos@cubicgames.com.
We reserve the right to modify or update this Privacy Policy at any time. If we make significant changes, we will notify you via the Project or other appropriate channels. Your continued use of the Project after the effective date of an updated Policy constitutes acceptance of the revised Policy, to the extent permitted by applicable law.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:
This Policy is written in English. In the event of any discrepancies between translations, the English version shall prevail.