Privacy Policy

Midnight Labs (“Midnight Labs,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we handle personal information across our website and our games, including Zombie Invasion Idle RPG(together, the “Services”). By using our Services, you agree to this policy.

1. Who we are

The business responsible for your personal information (the “controller”) is Midnight Labs, located at 30 N Gould St, Ste R, Sheridan, WY 82801, USA. For any privacy question or request, contact us at privacy@midnightlabs.app.

2. Information we collect

Information you provide

• Account & profile data — if a game offers an account or profile (for example, a display name or cloud save), the information you choose to provide.
• Support & communications — the contents of messages you send us and your contact details when you email or call support or join a mailing list.

Information collected automatically

• Device & advertising identifiers — such as the Apple Identifier for Advertisers (IDFA), Google Advertising ID (GAID), and similar identifiers.
• Device & technical data — device model, operating system, language, app version, and IP address (from which we infer only approximate, city- or region-level location).
• Gameplay & usage data — in-game progress, events, features used, and similar analytics about how the Services are used.
• Diagnostics — crash logs and performance data that help us fix bugs.

Purchase data

When you make an in-app purchase, the App Store or Google Play processes your payment. We do not receive your full payment-card details — we receive a confirmation and limited transaction information needed to deliver your purchase and prevent fraud.

We do not collect precise (GPS) location, and we do not knowingly collect special categories of sensitive personal information.

3. How we use information

We use personal information to:

• Provide, operate, and maintain the Services and your game progress;
• Process in-app purchases and deliver what you bought;
• Provide customer support and respond to your requests;
• Measure and improve performance, fix bugs, and develop new features;
• Show and measure advertising, where applicable;
• Protect against fraud, abuse, and security risks; and
• Comply with legal obligations.

For users in the EEA/UK, our legal bases under the GDPR are: performance of a contract (to run the Services and process purchases); our legitimate interests (to secure, analyze, and improve the Services, and for non-personalized advertising); consent (for personalized advertising and any optional tracking, which you can withdraw at any time); and compliance with legal obligations.

4. Advertising, analytics & your choices

Our games may be supported by advertising and use analytics. Advertising and analytics partners may use device and advertising identifiers and usage data to deliver and measure ads and understand engagement.

• Apple devices:we will request your permission through Apple’s App Tracking Transparency prompt before any tracking that uses the IDFA. You can also manage this in Settings → Privacy & Security → Tracking.
• Android devices: you can reset or delete your advertising ID and opt out of ad personalization in Settings → Privacy → Ads.
• We honor the Global Privacy Control (GPC)signal on our website as a valid opt-out of “sale” or “sharing” of personal information.

“Sale” and “sharing.”We do not sell personal information for money. However, when advertising or analytics partners use identifiers for cross-context behavioral advertising, this may be considered a “sale” or “sharing” under California and other US state laws. You can opt out at any time using the device controls above, the GPC signal, or by emailing privacy@midnightlabs.appwith the subject “Do Not Sell or Share My Personal Information.”

5. How we share information

We share personal information only as described here:

• Service providers who process data on our behalf, in categories including: cloud hosting and infrastructure, analytics, advertising and attribution, crash and performance reporting, and customer-support tooling.
• App stores & payment processors (Apple and Google) to process purchases and subscriptions.
• Legal & safety — to comply with law, enforce our terms, or protect rights, property, and safety.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your consent — for any other purpose we describe to you.

A current list of the specific third-party service providers and SDKs used in a given game is available on request by emailing privacy@midnightlabs.app.

6. How long we keep information

We keep personal information only as long as we need it for the purposes above:

• Account & gameplay data — for as long as your account is active, and then deleted within a reasonable period (typically up to 24 months) after the account becomes inactive or you ask us to delete it.
• Support communications — typically up to 24 months after your issue is resolved.
• Transaction records — for the period required by tax, accounting, and fraud-prevention laws (generally up to 7 years).
• Analytics & diagnostics — kept in identifiable form only as long as needed, then deleted or aggregated/de-identified.

7. Your privacy rights

Depending on where you live, you may have some or all of the following rights: to access the personal information we hold about you; to correct it; to delete it; to restrict or object to certain processing; to data portability; and to withdraw consent at any time.

EEA/UK users additionally have the right to lodge a complaint with their local data protection authority.

To exercise any right, email privacy@midnightlabs.app or use our data deletion page. We will verify your request (which may require confirming the email or account tied to your data) and respond within the time the law requires. You may use an authorized agent where permitted. We will not discriminate against you for exercising your rights.

8. US state privacy rights

If you are a resident of California, Virginia, Colorado, Connecticut, Texas, Oregon, or another US state with a privacy law, you have the rights to know/access, delete, and correct your personal information, to opt out of “sale”/“sharing” and targeted advertising, and to be free from discrimination for exercising these rights. Where applicable, you may also limit the use of sensitive personal information — though we do not use sensitive personal information for purposes that require such a control.

We honor recognized universal opt-out mechanisms, including Global Privacy Control. To exercise these rights, use the methods in Section 7. If we deny a request, you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency or Attorney General.

9. Deleting your data

You can request deletion of your account and personal data at any time. Full instructions, including in-app deletion where a game supports accounts, are on our Delete Account & Data page.

10. Children’s privacy

Our Services are intended for a general audience and are not directed to children under 13 (or under the equivalent minimum age in your country). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy@midnightlabs.app and we will delete it.

11. International users & transfers

We are based in the United States and process information there. If you use our Services from outside the US, you understand your information will be transferred to and processed in the US. Where we transfer personal data from the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

If you are in the EEA or UK and we are required to designate a representative under Article 27 of the GDPR, you may reach that representative by emailing privacy@midnightlabs.app, and we will provide their current details.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide a more prominent notice (such as in-app or by email). Your continued use of the Services after an update means you accept the revised policy.

14. Contact us

Questions or requests? Email privacy@midnightlabs.app or write to us:

Midnight Labs
30 N Gould St, Ste R
Sheridan, WY 82801
United States