Privacy Policy

Midnight Labs LLC(“Midnight Labs,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we handle personal information across our website at midnightlabs.app and our games, including Zombie Invasion Idle RPG(together, the “Services”). By using our Services, you agree to this policy.

1. Who we are

The business responsible for your personal information (the “controller”) is Midnight Labs LLC, a Wyoming limited liability company located at 30 N Gould St, Ste R, Sheridan, WY 82801, USA. For any privacy question or request, contact us at contact@midnightlabs.app.

2. Scope of this policy

This policy is the overarching privacy policy for Midnight Labs and applies to our website and to our games generally. An individual game may provide a supplemental privacy notice describing practices specific to that game (for example, the exact advertising or analytics partners it uses). Where a supplemental notice exists, it applies in addition to this policy for that game; if there is a conflict, the game-specific notice controls for that game. This policy does not cover third-party services we do not operate, which are governed by their own privacy policies.

3. Information we collect

Information you provide

• Account & profile data — if a game offers an account or profile (for example, a display name or cloud save), the information you choose to provide.
• Support & communications — the contents of messages you send us and your contact details when you email or call support or join a mailing list.

Information collected automatically

• Device & advertising identifiers — such as the Apple Identifier for Advertisers (IDFA), Google Advertising ID (GAID), and similar identifiers.
• Device & technical data — device model, operating system, language, app version, and IP address (from which we infer only approximate, city- or region-level location).
• Gameplay & usage data — in-game progress, events, features used, and similar analytics about how the Services are used.
• Diagnostics — crash logs and performance data that help us fix bugs.

Purchase data

When you make an in-app purchase, the App Store or Google Play processes your payment. We do not receive your full payment-card details — we receive a confirmation and limited transaction information needed to deliver your purchase and prevent fraud.

We do not collect precise (GPS) location, and we do not knowingly collect special categories of sensitive personal information.

4. Cookies & local storage

On our website, we and our providers use cookies and similar technologies (such as local storage and server logs) to operate the site, remember your preferences, keep it secure, and understand aggregate usage. Our games use device storage and the identifiers described above rather than browser cookies. You can control cookies through your browser settings; blocking some may affect how parts of the website work.

Do Not Track.Because there is no common industry standard for responding to browser “Do Not Track” signals, we do not respond to them. However, we do honor the Global Privacy Control (GPC) signal as described below.

5. How we use information

We use personal information to:

• Provide, operate, and maintain the Services and your game progress;
• Process in-app purchases and deliver what you bought;
• Provide customer support and respond to your requests;
• Measure and improve performance, fix bugs, and develop new features;
• Personalize your experience and remember your preferences;
• Show and measure advertising, where applicable;
• Protect against fraud, abuse, and security risks, and enforce our terms; and
• Comply with legal obligations and exercise or defend legal claims.

For users in the EEA/UK, our legal bases under the GDPR are: performance of a contract (to run the Services and process purchases); our legitimate interests (to secure, analyze, and improve the Services, and for non-personalized advertising); consent (for personalized advertising and any optional tracking, which you can withdraw at any time); and compliance with legal obligations.

6. Advertising, analytics & your choices

Our games may be supported by advertising and use analytics. Advertising and analytics partners may use device and advertising identifiers and usage data to deliver and measure ads and understand engagement.

• Apple devices:we will request your permission through Apple’s App Tracking Transparency prompt before any tracking that uses the IDFA. You can also manage this in Settings → Privacy & Security → Tracking.
• Android devices: you can reset or delete your advertising ID and opt out of ad personalization in Settings → Privacy → Ads.
• We honor the Global Privacy Control (GPC)signal on our website as a valid opt-out of “sale” or “sharing” of personal information.

“Sale” and “sharing.”We do not sell personal information for money. However, when advertising or analytics partners use identifiers for cross-context behavioral advertising, this may be considered a “sale” or “sharing” under California and other US state laws. You can opt out at any time using the device controls above, the GPC signal, or by emailing contact@midnightlabs.appwith the subject “Do Not Sell or Share My Personal Information.”

7. How we share information

We share personal information only as described here:

• Service providers who process data on our behalf, in categories including: cloud hosting and infrastructure, analytics, advertising and attribution, crash and performance reporting, and customer-support tooling.
• App stores & payment processors (Apple and Google) to process purchases and subscriptions.
• Legal & safety — to comply with law, enforce our terms, or protect rights, property, and safety.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
• With your consent — for any other purpose we describe to you.

A current list of the specific third-party service providers and SDKs used in a given game is available on request by emailing contact@midnightlabs.app.

8. How long we keep information

We keep personal information only as long as we need it for the purposes above:

• Account & gameplay data — for as long as your account is active, and then deleted within a reasonable period (typically up to 24 months) after the account becomes inactive. When you ask us to delete your data, we complete deletion within 30 days, as described on our Delete Account & Data page.
• Support communications — typically up to 24 months after your issue is resolved.
• Transaction records — for the period required by tax, accounting, and fraud-prevention laws (generally up to 7 years).
• Analytics & diagnostics — kept in identifiable form for up to 14 months, then deleted or aggregated/de-identified.

9. Your privacy rights

Depending on where you live, you may have some or all of the following rights: to access the personal information we hold about you; to correct it; to delete it; to restrict or object to certain processing; to data portability; and to withdraw consent at any time.

EEA/UK users additionally have the right to lodge a complaint with their local data protection authority.

To exercise any right, email contact@midnightlabs.app or use our data deletion page. We will verify your request (which may require confirming the email or account tied to your data) and respond within the time the law requires. You may use an authorized agent where permitted. We will not discriminate against you for exercising your rights.

10. US state privacy rights

If you are a resident of California, Virginia, Colorado, Connecticut, Texas, Oregon, or another US state with a privacy law, you have the rights to know/access, delete, and correct your personal information, to opt out of “sale”/“sharing” and targeted advertising, and to be free from discrimination for exercising these rights. Where applicable, you may also limit the use of sensitive personal information — though we do not use sensitive personal information for purposes that require such a control.

We honor recognized universal opt-out mechanisms, including Global Privacy Control. To exercise these rights, use the methods in Section 9. If we deny a request, you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency or Attorney General.

11. Deleting your data

You can request deletion of your account and personal data at any time. Full instructions, including in-app deletion where a game supports accounts, are on our Delete Account & Data page.

12. Children’s privacy

Our Services are intended for a general audience and are not directed to children under 13 (or under the equivalent minimum age in your country). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact contact@midnightlabs.app and we will delete it.

13. International users & transfers

We are based in the United States and process information there. If you use our Services from outside the US, you understand your information will be transferred to and processed in the US. Where we transfer personal data from the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

If you are in the EEA or UK and we are required to designate a representative under Article 27 of the GDPR, you may reach that representative by emailing contact@midnightlabs.app, and we will provide their current details.

14. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide a more prominent notice (such as in-app or by email). Your continued use of the Services after an update means you accept the revised policy.

16. Contact us

Questions or requests? Email contact@midnightlabs.app or write to us:

Midnight Labs LLC
30 N Gould St, Ste R
Sheridan, WY 82801
United States