30-second summary
- You don't need an account. We never ask for your name, email, phone, photos, contacts or precise location.
- Game progress stays on your device and is erased when you uninstall or clear the app's data.
- Some games use Google Analytics for Firebase for pseudonymous statistics.
- We only show optional, non-personalized rewarded ads from Google AdMob, when you choose to watch.
- We do not sell or rent personal data.
- This website uses no cookies, analytics or trackers.
Versão em português: Política de Privacidade. If the versions differ, the Portuguese version prevails for users in Brazil.
This policy explains what data the Bidu's Studio games and website process, why, who it is shared with and how you control it. It applies to every game listed in section 2 and to the studio.bidu.guru website.
Who is responsible
Bidu Gestao e Participacoes LTDA, CNPJ (Brazilian company ID) 63.115.879/0001-37, publishing as Bidu's Studio, is the data controller. Data protection officer (DPO): Victor Vieira, at dpo@bidu.guru, the channel for privacy matters and for exercising your rights.
Who this policy applies to
| Game | Android package | On-device data | Statistics (Firebase) | Ads (AdMob) |
|---|---|---|---|---|
| Torchbound: Dungeon Delver | guru. | Yes | Yes | Optional rewarded ads, with Google's consent form |
| CyberRunner: Data Surge | guru. | Yes | Yes | Optional rewarded ads, with Google's consent form |
| Micro Mining Express | guru. | Yes | No | Optional rewarded ads, with Google's consent form |
| Sugar Siege: Cake Defense | guru. | Yes | No | Same model, from the version with ads (none in 1.0.0) |
All our games follow the same ad model: optional rewarded ads only, never interstitials or banners, with Google's consent form on first launch where required by law.
Torchbound: Dungeon Delver
Stores progress on your device, sends pseudonymous statistics to Google Analytics for Firebase and offers optional rewarded ads from Google AdMob. Where required by law, it shows Google's consent form on first launch. You can change your choice in Settings → Ad privacy.
CyberRunner: Data Surge
Stores progress on your device, sends pseudonymous statistics to Google Analytics for Firebase and offers optional rewarded ads from Google AdMob to revive or double credits, with Google's consent form where required by law. Without internet, the game works normally.
Micro Mining Express
Keeps everything on your device and sends no usage statistics. When online, the Google AdMob SDK starts when the game opens and preloads an ad, but the ad is only shown when you tap the rewarded ad button (revive or double coins).
Sugar Siege: Cake Defense
In version 1.0.0, no data leaves your device: no statistics are sent and there is no ads module. Usage events stay in a local queue only. If ads or statistics are enabled in a future version, this policy will be updated first.
Data that stays on your device
The following is not sent to us or to anyone else: progress (in-game coins, shop items, records, local ranking), the nickname you choose for the local ranking, settings (music, sound effects, vibration, language), a random game identifier created on first launch (used only to mark your local ranking entries), and a local log of recent usage events. It is kept in the app's private storage with an integrity check, and Android auto-backup is disabled in our games.
Data collected by Google services
Usage statistics: Google Analytics for Firebase
Which games: Torchbound and CyberRunner.
Collected when online: game events (run started or finished with mode, result, score and duration; power-ups used; daily challenge; tutorial completed; screens opened; settings changed; rewarded ad offered or used), automatic events (first open, session start, engagement time, app update), and technical data (app instance ID, device model, Android version, language, approximate country and region derived from the IP address, which Analytics does not store). The advertising ID is not collected by Analytics.
Purpose: understand which parts of the game are fun or too hard, find problems and improve our games.
Legal basis: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)), using pseudonymous data only.
Retention: up to 14 months in Google Analytics reports, then deleted.
Ads: Google AdMob
Which games: all of them (Sugar Siege from the version with ads).
We only show optional rewarded ads (for example, to revive once per run or to double the coins of a win). There are no interstitials and no banners.
The AdMob SDK may collect: advertising ID, IP address and the approximate location derived from it, device and app information, ad interactions and SDK diagnostics.
Purpose: serving and measuring ads, frequency capping and fraud prevention.
Non-personalized ads, for everyone: because teenagers may play our games, we configure AdMob to show only non-personalized ads to all players, with no interest profiling or behavioral targeting, and with ad content suitable for young audiences, in line with the LGPD (art. 14) and Brazil's ECA Digital (Law 15,211/2025).
Legal basis: consent where required (for example in the EU/EEA and the UK); elsewhere, legitimate interest in keeping the game free, always with ads shown only when you choose to watch them and without personalization.
- Where consent applies, you can change your choice at any time in the game settings (in Torchbound: Settings → Ad privacy).
- You can reset or delete your advertising ID in Android Settings → Google → Ads (or Privacy → Ads, depending on the device).
- Without internet, no ads are loaded and the game still works.
Learn more: how Google uses information from sites or apps that use its services.
This website
- No cookies, no analytics tools, no ad pixels and no trackers.
- No third-party resources: fonts, images and scripts are served from our own server.
- Server access logs: like any web server, ours records IP address, date and time, requested page, browser (user agent) and response code (not the referring page). We use them only for security, abuse prevention and debugging, based on legitimate interest, and keep them for up to 180 days.
- Emails you send us are used only to reply and handle your request, and are kept as long as needed for that and to meet legal obligations. We send no marketing emails or newsletters; we only reply to people who write to us. The mailbox is hosted by a contracted provider acting as a processor.
Sharing
- Google LLC and its affiliates, as providers of the statistics (Firebase) and ads (AdMob) services, under the Google Privacy Policy.
- Infrastructure providers (website hosting and email), only as needed to run those services.
- Authorities, only when required by law or court order.
We do not sell or rent personal data.
International transfers
Google and other providers may process data on servers outside Brazil, for example in the United States, with the safeguards required by LGPD art. 33, ANPD Resolution 19/2024 and GDPR chapter V, such as the standard contractual clauses incorporated in their data processing terms [CONFIRM EACH PROVIDER'S TRANSFER MECHANISM].
Security
Data sent by the SDKs and by this website is encrypted in transit (HTTPS). On-device data is kept in the app's private storage, and the progress file has an integrity check. This website uses modern security headers and loads no third-party code. If an incident creates a relevant risk, we will notify the authorities and the people affected as required by law. Found a vulnerability? Email studio@bidu.guru.
Children
Our games are not directed to children under 13, and our declared Google Play target audience is 13+. A game's content rating (for example, “Everyone”) means its content is suitable, not that it is made for children. We do not knowingly collect data from children. If you believe a child has sent us data, contact dpo@bidu.guru and we will delete it.
Your rights
Under the LGPD (Brazil) you may request: confirmation and access, correction, anonymization, blocking or deletion, portability, information about sharing, withdrawal of consent, and objection to processing based on legitimate interest. You may also complain to the Brazilian Data Protection Authority (ANPD).
EU/EEA and UK users have equivalent rights under the GDPR/UK GDPR (access, rectification, erasure, restriction, portability, objection) and may complain to their local supervisory authority.
How to request: see Data deletion or email dpo@bidu.guru. Because there are no accounts and statistics are pseudonymous, we cannot link Google Analytics data to a person; the page explains how to unlink and erase that data yourself. We reply within 15 days.
Optional future features
Some games are prepared, with the feature turned off, for an online global leaderboard. If it is enabled in a future version, it will send an anonymous sign-in identifier, your chosen nickname, score, run duration and date, and your nickname and score will be public. Likewise, usage statistics in Micro Mining Express and Sugar Siege, and ads in Sugar Siege, will only be enabled after this policy is updated.
Changes
We may update this policy when our games or website change. The current version is always on this page with its date at the top. Valid from October 22, 2026 to October 22, 2036 (10 years), unless a new version is published on this page. Relevant changes will also be mentioned in the Google Play release notes.
Contact
Bidu Gestao e Participacoes LTDA · CNPJ 63.115.879/0001-37
Email: dpo@bidu.guru