The short version. We collect as little as we can get away with, and we do not sell your personal information or share it with data brokers. Dungeon Tycoon has no ads. Bakery Merge offers optional rewarded ads (you choose to watch one for a reward), and its ad partners only use your advertising identifier for personalized ads if you allow it. If you join a waitlist we keep your email so we can tell you when the game launches, and nothing else.
Contents
1. Who we are
Oakspire Studios ("Oakspire", "we", "us", "our") is an independent mobile game studio based in North Carolina, United States. This policy explains how we handle personal information across:
- our website at oakspirestudios.com, including the waitlist and contact form;
- the Dungeon Tycoon: Master of the Depths wiki at dtmotd-wiki.oakspirestudios.com; and
- the mobile game Dungeon Tycoon: Master of the Depths once it is released on iOS and Android; and
- the mobile game Bakery Merge: Sweet Restore on iOS and Android, including its test versions on TestFlight and Google Play testing.
We refer to all of these together as the "Services". For the purposes of the UK and EU General Data Protection Regulation, Oakspire Studios is the data controller.
2. Information we collect
Information you give us
| What | When | Why |
|---|---|---|
| Email address | You join the launch waitlist | To email you when the game launches and about beta access |
| Name, email, reason and message | You submit the contact form | To read and reply to your message |
| Anything you choose to tell us | You email us directly | To provide support or respond |
Information collected automatically on the website
If you consent to analytics cookies, Google Analytics records standard web analytics data: pages viewed, approximate location derived from IP address (city level, not precise), device and browser type, referring website, and interactions such as clicking a waitlist button or opening a screenshot. If you decline, no analytics cookies are set and this data is not collected.
Our hosting provider also keeps standard server logs, including IP addresses, for security and to keep the site running.
Information collected in Dungeon Tycoon
Once Dungeon Tycoon is released, the game will collect:
- Gameplay and progress data — your dungeon layout, currency, upgrades, research and similar, so your progress is saved.
- Device information — device model, operating system version, language and a device or advertising identifier used to link your progress to your device.
- Crash and diagnostic reports — technical details about what the game was doing when something went wrong.
- Purchase records — a record that a purchase was made and what it unlocked. We never receive your card number or billing details. Payments are processed entirely by Apple or Google.
Dungeon Tycoon has no ads and uses no advertising SDKs, so no ad network collects anything through it.
Information collected in Bakery Merge: Sweet Restore
- An anonymous player account — created with Unity Gaming Services the first time you play. It has a random player ID, not your name or email, and links your progress and online features to you.
- Game Center or Google Play Games — if you're signed in to Game Center (iPhone) or Google Play Games (Android), your player account is linked to that service's player ID, so you can get your bakery back on a new device. We receive that ID and your nickname there (shown only to you, in Settings), not your email or contacts. If you tap Find on the Friends screen and allow it, we check which of your friends there also play Bakery Merge so you can add them; their IDs are used for that check and not stored.
- Gameplay and progress data — your bakery, board, items, currencies, level, decorations and settings, saved on your device and in the cloud so you can keep playing after reinstalling.
- Your bakery name and avatar — the name you choose (or the random one we suggest) and a character portrait. They are shown to other players on leaderboards, in races and to your friends. Names pass a word filter. You can hide from leaderboards and races in Settings → Global boards.
- Friends and social activity — if you add friends by friend code, the game publishes a small record with your bakery name, avatar, friend code, bakery look, and the gifts, likes, help requests and preset reactions you send, so your friends can see your bakery and collect what you sent. There are no free-text messages. You can turn off friend requests and bakery visits in Settings.
- Friend invites — if you join through a friend's invite link, or add a friend by code soon after you start, we record whose invite it was (their player ID) so we can give you both the invite reward when you reach level 5. Invite links and QR codes contain the inviting player's friend code and player ID.
- Usage data (analytics) — events such as levels reached, orders served, sessions and tutorial progress, with device model, operating system, language and country, so we can balance and improve the game. These events include your friend code, so we can find your game if you contact us for help. In the EU, UK and Switzerland this is off until you agree; elsewhere you can turn it off in Settings → Share usage data.
- Advertising data — the game offers optional rewarded ads, served through Unity LevelPlay and the ad networks it works with. They may collect your device's advertising identifier, IP address, approximate location worked out from the IP address (never your precise location), device information and how you interact with ads, to choose and measure ads and to prevent ad fraud. On iOS the advertising identifier is only shared if you allow tracking when asked; personalized ads need your consent where the law requires it, and you can turn them off in Settings → Personalized ads. Players with the Ad-Free Pass see no ads.
- Crash and diagnostic reports — technical details about what the game was doing when something went wrong.
- Purchase records — a record that a purchase was made and what it unlocked. We never receive your card number or billing details. Payments are processed entirely by Apple or Google.
What we don't collect. In any of our games or on this website, we do not collect your precise location, and we do not read your contacts, photos, files, camera or microphone.
3. How we use information
- To operate the Services and save your game progress.
- To send you launch news and beta invitations, if you asked us to.
- To reply to your support, press or business enquiries.
- To understand which parts of the site and game people use, so we can improve them.
- To diagnose crashes, fix bugs and improve performance.
- To detect and prevent cheating, fraud and abuse.
- To comply with legal obligations.
We do not use your information to make automated decisions that produce legal or similarly significant effects about you.
4. Legal bases for processing
If you are in the UK, the EU or another region with similar law, we rely on the following legal bases:
- Consent — for analytics cookies and for marketing emails. You can withdraw consent at any time.
- Contract — to provide the game and save your progress, and to deliver purchases you make.
- Legitimate interests — to keep the Services secure, prevent abuse, fix bugs, and answer messages you send us.
- Legal obligation — where we must retain records or respond to lawful requests.
7. How long we keep information
- Waitlist emails — until you unsubscribe, or until eighteen months after launch if you never open anything we send.
- Contact form messages — up to twenty-four months, so we have context if you write again.
- Analytics data — fourteen months, then automatically deleted.
- Game progress — for as long as you play, and for a reasonable period afterwards so you can return to your dungeon or bakery. Deleted on request.
- Bakery Merge account, friend record and in-game analytics — until you delete them in the game (Settings → Your data → Delete) or ask us to.
- Bakery Merge leaderboard scores — weekly league and race results are archived when each week ends; mini-game best scores stay on their boards. Both are removed when you ask us to delete your data.
- Purchase records — as long as required for tax and accounting law.
8. Security
We use HTTPS across the Services, limit access to personal information to people who need it, and rely on established providers who maintain their own security programmes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any relevant regulator as required by law.
9. Your privacy rights
Everyone
Whatever jurisdiction you are in, you can ask us to access, correct or delete the personal information we hold about you, and you can unsubscribe from our emails at any time using the link in any email we send. Email support@oakspirestudios.com and we will respond within thirty days.
In Bakery Merge you can also do this yourself: Settings → Your data → Delete erases your analytics data, cloud save, friend record, leaderboard scores, invite record and player account, and starts a fresh game. The privacy switches in Settings (usage data, personalized ads, global boards, friend requests and bakery visits) can be changed at any time.
California residents (CCPA / CPRA)
You have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of sale (we don't sell) or sharing (turn off Personalized ads in Bakery Merge), to limit use of sensitive personal information (we do not collect any), and not to be discriminated against for exercising these rights. You may use an authorised agent to make a request on your behalf.
Other US states
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights to access, correct, delete and obtain a portable copy of their personal information, and to appeal a refused request. To appeal, reply to our decision and we will review it.
UK and EU residents (GDPR)
You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting processing that already happened. You also have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.
We will never charge you for making a request or treat you differently for making one. We may need to verify your identity before acting, usually by confirming you control the email address involved.
10. Children's privacy
The Services are made for a general audience and are not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. A game's store age rating (such as 9+ or "Everyone") describes its content, not who it is made for. If you believe a child under 13 has given us personal information, email support@oakspirestudios.com and we will delete it promptly.
If you are in the EU or UK, the minimum age may be higher in your country — between 13 and 16 depending on national law — and you should only use the Services if you meet it.
11. International transfers
We are based in the United States and our service providers are primarily located there. If you use the Services from outside the United States, your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism operated by our providers.
12. Changes to this policy
We will update this policy as our games develop — most obviously when Dungeon Tycoon launches and its section becomes live rather than forward-looking. When we make a material change we will update the date at the top of this page and, if you are on the waitlist, tell you by email. Continuing to use the Services after a change means you accept the updated policy.
13. Contact us
Questions, requests or complaints about privacy:
Oakspire Studios
North Carolina, United States
support@oakspirestudios.com
We read everything and aim to reply within a few business days, and always within thirty days for formal privacy requests.
← Back to Oakspire Studios