Android app: com.funturegames.tug
Scope and controller
This policy covers the TUG Android game and related account, progress synchronisation and support services provided by Funture Games & Software. Funture Games & Software is the publisher and data controller. Contact: funturegames@gmail.com. Visitor information for the corporate website is covered separately by the website privacy policy.
Game information stored on your device
Offline play saves progress, completed levels, stars, bridge settings, your current game state, lives, language and reduced motion preference on your device. Local profile archives for different players may also be kept. Signing out or deleting a server account does not automatically remove these archives.
Using an online account or synchronisation feature sends the relevant information to the server. Local player and synchronisation identifiers are generated by the app; they are not advertising identifiers or hardware serial numbers.
Information processed by account and game services
- Account: Player ID, display name, guest/linked account status, creation information and the association with a sign-in provider.
- When email sign-in is offered: Email address, verification status and a secure password hash. Passwords are not stored in plain text. Recipient addresses and necessary codes are processed by the mail service for verification and reset messages.
- Sessions and security: Server-held hashes of session tokens, validity and revocation information, failed sign-ins and temporary lock status. The connection IP address is processed for request security and abuse prevention; technical logs may contain request and error information.
- Progress: Level and campaign, earned stars, reaching the exit, undo use, game attempts and synchronisation results. Bridge allocations are processed to validate submitted game results.
- Support: Your sender address, message and attachments you choose to share.
Sign in with Google
When you choose to continue with Google, Google provides an identity token confirming your selected account. TUG uses it to verify the sign-in and link the correct game account. We do not receive your Google password. The persistent account link stores Google's unique user identifier; your Google profile photo, profile name and email information are not imported and stored in the game account through this link.
The token, which may contain basic identity information, is processed only for authentication. TUG does not request access to Gmail messages, Drive files, your calendar or contacts. Google data is not used for advertising targeting, sale or independent profiling. Its use and transfer are limited by the Google API Services User Data Policy, including applicable Limited Use requirements.
Purposes, sharing and service providers
We process information to provide the game and accounts, synchronise progress, validate game results, investigate errors and abuse, and respond to requests. A leaderboard feature may show player ID, display name, total stars and rank to other authorised players. Email addresses, passwords and session information are not shown in leaderboards.
Server services are hosted on Hosting Dünyam infrastructure in Türkiye. Google processes Google sign-in, and Google Gmail processes support email within their respective services. Authorised operations personnel have necessary access; competent authorities may receive information where legally required. We do not sell personal data.
Google services may also process data on infrastructure outside Türkiye. Google's processing is described in its privacy policy. Reading this notice does not itself give consent to international transfers or optional processing.
Advertising, analytics and device permissions
The current TUG app has no enabled advertising, behavioural analytics or in-app purchase SDK. The game does not request location, contacts, microphone or camera access. If a future feature processes additional data, relevant notices and required choices will be provided before using that feature.
Retention, security and deletion
Communication with the server uses HTTPS. Android session information is encrypted using the device's secure key storage; server passwords and session keys are stored as hashes. Security measures have technical limitations.
Active account and progress records are kept to provide the service. Account deletion removes the active account and its linked sign-in, session and cloud progress records. Technical link records for guest accounts previously merged into it, and their old revoked sessions, may remain in separate records.
Server backups, support correspondence and security logs are not erased at the same time as an in-app deletion. There is no fixed automatic deletion period for backups and remaining historical technical records. You can request their review and deletion through the data deletion procedure. If a record must be retained, the purpose, legal reason and applicable duration will be explained in the response.
Support messages are handled for the time needed to resolve the request; security records for investigating incidents and protecting necessary rights. The expiry of a session or verification code does not mean its record is deleted at that moment. The account deletion page separately explains how to remove local device records.
Children and your rights
The game has no date-of-birth field. Where applicable law requires parent or legal guardian involvement for an online account or data processing, that assistance should be obtained. You can also contact us about a child's data.
For access, correction, deletion and other data rights, read the personal data notice or contact us. The account and data deletion procedure is available without an account. Material policy changes will be communicated on this page and, where appropriate, in the app.