Last Updated: September 23, 2026
This policy covers one game: Asteroid Duel, on iPhone, iPad and Android. Our other apps and this website are covered by the general Illumination Development privacy policy, which does not apply here. That policy describes accounts, email addresses, reward balances and redemption records that this game does not have.
The short version
There is no account, nothing for sale, and no way to be tracked. The game never learns who is playing. Every score, ship and recorded match is written to storage on the device and stays there.
Two people can play together, and that does not change the answer. Two players share one phone, or connect two devices over your own Wi-Fi. Nothing in that connection carries a name, a profile or a device name — there is no server involved at all. It is described in full below.
Every advertisement is non-personalized, for every player, in every country. The game does not ask for Apple's advertising identifier and contains no code that could, and on Android the advertising-ID permission is stripped out of the app entirely.
What it does send is described in full below: anonymous game telemetry, crash reports, and the advertising request itself.
What stays on the device
Everything you play and everything you build. The game keeps its records in local storage on the phone or tablet:
- Your match history — the most recent hundred finished duels.
- Lifetime totals: duels played and won, asteroids destroyed, accuracy, and the rest of the flight record.
- Your best score against each pilot, and how far up the fifty-level track you have reached.
- Which of the ten badges you have earned.
- The ship you have built in the shipyard, and the upgrades you have bought with coins.
- Recorded matches — see Recorded matches below.
- Your head-to-head tally between seat one and seat two on this device.
- Your settings — sound, vibration and reduced motion.
None of it is transmitted anywhere. There is no leaderboard, no cloud save and no profile. If the device backs itself up to iCloud or to Google, that copy is governed by Apple's or Google's terms and your own backup settings, and we have no access to it.
Delete my data in Settings erases all of it permanently — twelve separate stores, including the recorded matches — clears the analytics identifiers described below, and deletes the anonymous account the game uses for telemetry. Deleting the game does the same thing to the records on the device.
Recorded matches
Every match this device plays is recorded so it can be watched back, and this is the most personal thing the game stores. A recording never leaves the device. It is not uploaded, not shared, and not visible to the other player even when two devices are connected — each device records only its own.
A recording is the positions of the ships and rocks, frame by frame. It contains no audio, no camera, no screen capture of anything outside the game, and no text. They are large, so the game keeps only the five most recent plus any you explicitly keep, and deletes the rest by itself. Delete my data erases all of them.
Playing with someone else
There are two ways, and neither involves us.
Two players, one device
Both people play on the same phone or tablet, each holding one end. Nothing is transmitted at all, because there is nothing to transmit to. The tournament mode works the same way: up to eight people pass one device around.
Two devices, over your own Wi-Fi
One player hosts and the other types a short code shown on the host's screen. The two devices then talk directly to each other across the local network you are both already on.
There is no server, no sign-in, no friend list and no matchmaking. Nothing about the connection reaches us or anybody else, because it never leaves your network. What travels between the two devices is the state of the match — where the ships and rocks are, who shot what, and the final score.
No name, no profile and no device name is sent. The game holds no identity to send. Where a player is named on screen, the name is chosen from a fixed list built into the game — there is no text field anywhere in Asteroid Duel, so there is nothing a player could type that could travel anywhere.
Connecting requires the local network permission that your phone asks for the first time you host or join. That permission is used for this and nothing else.
What the game does send
Three things leave the device, and this is all of them. None is linked to a real-world identity, because the game never collects one.
An anonymous identifier
On first launch the game signs in anonymously to Google Firebase. This produces a random identifier — not a name, not an email address, not a phone number, and nothing you typed — which exists so that a player's crash reports and gameplay statistics have a stable key from one session to the next. There is no password, nothing to sign up for, and no way to use it to find out who anyone is. Delete my data deletes it.
Gameplay analytics
The game reports what happens in it to Google Analytics: a match starting and ending, the scores and the reason it ended, a badge unlocked, a personal best, a power-up collected, which screen is open. Alongside those, Google Analytics collects its own app-instance identifier and coarse device information such as the model, the operating system version and the app version.
No free text ever reaches analytics, because the game has nowhere to type any. Every value reported is a number or the name of one of the five pilots. We use it to see which levels are too hard and which modes go unplayed, and for nothing else.
Crash and diagnostic reports
If the game crashes or hits a handled error, Google Crashlytics sends a report: the stack trace, the app version, the device model and operating system, and the anonymous identifier above. This is how bugs get found. Analytics and crash reporting are both switched off entirely in development builds.
Advertising
The game is free and carries advertising from Google AdMob and no one else. There are two placements and that is the entire inventory: a banner on the menu screens, and one full-screen advertisement on the summary after every fourth finished match. There is never an advertisement during a match, and none on the playfield at all — two people are dragging their thumbs across it.
To serve them, the Google Mobile Ads SDK contacts Google and may collect device and advertising information — device signals, coarse device and app data, and the request, impression and click itself.
Every advertisement is non-personalized
This is the part that differs from most free games, and it is deliberate. The app sets three things on every request before the first advertisement is ever asked for:
- Child-directed treatment, which tells Google to treat the audience as children and forbids personalization.
- A maximum content rating of "G", so the creatives shown are the ones Google rates suitable for general audiences.
- Non-personalized ads, set explicitly on the request as well, so that a configuration failure cannot quietly turn personalization back on.
There are no rewarded advertisements. No "watch a video for coins" ships in the game — coins are earned by playing. And there is nothing to buy: no in-app purchases of any kind are on sale, and no purchase screen is reachable.
On Android the advertising-ID permission is removed from the app. The Google Mobile Ads SDK declares it by default; this app strips it back out, so the advertising ID cannot be read at all rather than merely going unused.
Google's use of the information it collects is governed by Google's own privacy policy.
There is no tracking prompt, and that is the point
On iPhone and iPad, most free games show Apple's App Tracking Transparency prompt asking for permission to track you. Asteroid Duel does not, and cannot. The permission framework is not built into the app, there is no usage description for it in the app's configuration, and no code requests Apple's Identifier for Advertisers. Because it never asks, it never receives it, and there is nothing for anyone to decline.
If you go looking for this game under iOS Settings → Privacy & Security → Tracking, you will not find an entry for it. That is correct and not a fault.
In the EEA, the UK and Switzerland
Google's consent message is shown before any advertisement is requested, gathering consent for the storing of and access to information on the device as Google's EU user consent policy requires. The request is flagged as coming from a user below the age of consent for data processing, so the choices offered are the reduced set appropriate to that, and declining is offered as plainly as accepting.
Consenting does not turn on personalized advertising here. It cannot: the child-directed setting above overrides it, and the game asks for non-personalized advertisements regardless of the answer. Your consent decision is stored on your device by Google's consent SDK, and clearing it clears with the app's data.
What the game does not do
- No account, sign-in, username, profile or email address. It never asks who you are.
- No in-app purchases, nothing for sale, and no way to spend money. Coins are earned by playing and are worth nothing outside the game.
- No contact or support form. There is no way to send us text from inside the game.
- No text field of any kind, anywhere. Player names are picked from a built-in list.
- No chat, no voice, no leaderboard and no user-generated content.
- No online multiplayer, no matchmaking and no strangers. Two-device play works only between two devices on the same local network.
- No location collection. The game does not ask for location permission.
- No access to contacts, photos, camera, microphone, health or motion data.
- No advertising identifier requested on iPhone or iPad, and none readable on Android.
- No personalized advertising, for anyone, anywhere.
- No advertising network other than Google AdMob.
- We do not sell personal information, and we do not share it for cross-context behavioral advertising, in the specific senses the CCPA and CPRA give those terms.
Children
Asteroid Duel is rated 9+ on the App Store and Everyone by the ESRB / PEGI 3 on Google Play, for cartoon spaceship combat. It is not in Apple's Kids Category and is not enrolled in Google Play's Designed for Families program — it is a game plenty of children play, rather than a children's product, and we would rather say so than claim a badge it does not carry.
It is built to the child-directed standard anyway, because that is the protection that actually matters and it does not depend on a store category. Every advertising request is flagged child-directed and capped at the "G" content rating, no advertising identifier is requested or readable, no advertisement is ever personalized, there is nothing in the game to buy, and there is no way for a player to type anything or to reach a stranger.
The general Illumination Development policy states that our services are not intended for children under 13. That statement is about our reward apps and does not apply to this game, which is why this page exists.
We do not knowingly collect personal information from children, and the game collects no personal information from anyone. If you believe a child has somehow provided us with personal information through this game, write to privacy@illuminationdevelopment.com and we will delete it.
Your rights
Under the GDPR, the UK GDPR, the CCPA and CPRA, and comparable laws elsewhere, you have rights to access, correct, port and delete the personal information a company holds about you. We hold no name, email address or other real-world identifier from this game, so most of those rights have nothing here to be exercised against — and you can exercise the deletion right yourself, immediately and without asking us, using Delete my data in Settings.
Two things sit outside that. Information held by Google from serving advertisements, running analytics and receiving crash reports, which is subject to Google's privacy policy and the controls described above. And anything you have sent us by email, which you can have deleted by writing to privacy@illuminationdevelopment.com.
A note about this web page
The game does not display this page — tapping Privacy Policy in Settings opens it in the device's browser, and this website, unlike the game, does use Google Analytics to see which pages people find useful. That is described in the general policy, and it applies to your visit to this page, not to your use of the game.
Changes to this policy
If any of this stops being true, this page changes before the version that changes it reaches either store, and the App Store privacy label and Google Play Data safety form change with it. Revisions are posted here with an updated date.
Contact
Email: privacy@illuminationdevelopment.com
You can also reach us through our contact and support page.