Nebulons Privacy Policy

Last updated: 25 October 2026

Nebulons, formerly called Rockit, is a game provided by Boo & Moo, France. This policy explains how information is handled when you use Nebulons and its connected services.

For privacy questions or requests, contact boo.tmkhael@gmail.com. Please identify Nebulons in your message. Never send a password, account recovery code, or full payment-card details.

Game accounts and progress

The connected game creates a backend account using an Android device identifier. The backend stores an assigned player identifier, display name, game progress, inventory, currency balances, purchases and rewards, achievements, event and leaderboard participation, and multiplayer results. These records let us operate the game, restore progress, grant rewards once, and prevent abuse.

If you choose to link or restore an account with Google, Google supplies an identity token and account identifiers for authentication. We do not receive your Google password. Google linking is optional. Unlinking Google removes that login method; it does not delete your game account or progress.

You can create an account recovery code. The backend stores a derived identifier rather than the recovery code itself. Copying a code places it on your device's clipboard. Anyone with your recovery code may be able to access your account.

Display names, scores and ranks can be visible to other players in multiplayer sessions, event rankings and leaderboards.

Purchases and rewarded videos

Google Play processes purchases. The game sends purchase receipts, product identifiers and the game account identifier to the backend for validation and reward delivery. We retain transaction and grant records to identify purchases, prevent duplicate grants and handle purchase recovery. We do not receive your payment-card details.

Rewarded advertising is optional and disabled by default in the game. If you enable it, Google's User Messaging Platform checks which privacy choices are required. Google Mobile Ads requests rewarded videos only when that platform permits it and you choose a video offer. The game does not show automatic interstitial ads.

Google and its advertising partners may process device or advertising identifiers, IP/network information, consent choices and ad interactions under their settings and policies. The game associates a reward request with your game account, and account/reward-request identifiers may be supplied to Google for reward verification. When the advertising SDK reports completion, the backend checks and grants the corresponding game reward, subject to its limits. A completed video does not authorize a payment.

Settings provides a game ads switch and Google's privacy-options form. Turning the game ads switch off prevents new ad requests. You can review Google's privacy choices through the privacy-options form when available.

Development builds can save an AdMob test-device hash in private local settings. That setting is excluded from cloud backup and device transfer and is not added to player state or gameplay analytics.

Optional gameplay analytics

Gameplay analytics is disabled by default. If you enable it in Settings, the app sends gameplay events to Firebase Analytics and the game backend. These may include sessions, screens, levels and runs, hero selection, in-game positions and deaths, pickups and power use, upgrades, shop and ad activity, achievements, errors, build/configuration versions, wallet changes and event results. In-game positions describe the game world, not your physical GPS location. Backend events can be associated with your player identifier and may be sampled.

Turning analytics off stops new optional analytics collection, clears the app's queued gameplay events, resets Firebase Analytics data on the device and sends the withdrawal state to the backend. It does not automatically erase data already received by the backend or Google.

Crash reports and technical information

The Android app uses Firebase Crashlytics to diagnose crashes. Reports may include stack traces, device and app information, installation identifiers and app-state labels such as the current screen or game mode. Crash reporting is separate from the optional gameplay-analytics switch. These reports are not described as anonymous.

Our hosting and service providers may also handle IP addresses, connection information and technical logs needed to deliver and secure their services.

Providers and disclosure

We use the game backend based on Heroic Labs Nakama, hosting infrastructure, Google Sign-In, Google Play Billing, Firebase Analytics, Firebase Crashlytics, Google Mobile Ads and User Messaging Platform. Relevant information is disclosed to these providers to authenticate accounts, operate the game, validate purchases and rewards, provide optional analytics and advertising, diagnose faults and prevent abuse. Providers may process information outside your country.

Google describes its processing in its Privacy Policy. You can also review Google's advertising controls.

We may disclose information when required by law or when necessary to protect accounts, address fraud, investigate abuse or enforce the game's rules. We do not operate a business selling player account records.

Retention, requests and your choices

Game progress and account records are stored to support your account and its recovery. Purchase, reward and anti-abuse records may need to be retained for transaction integrity, disputes or legal obligations. Technical, crash and analytics records follow the applicable backend and provider retention and deletion processes; withdrawing consent stops future optional collection but does not by itself remove previously received records.

You can contact boo.tmkhael@gmail.com to request access, correction or deletion of your game account and associated information, or to raise a privacy concern. We may need to verify that you control the account. Some records may need to be retained to meet legal obligations, resolve disputes or prevent fraud. The current game settings do not provide a dedicated account-deletion button. Uninstalling the app or unlinking Google does not delete server-side records.

Depending on your location and the circumstances, you may have additional rights to withdraw consent, object to or restrict processing, or request a portable copy of your information. You can also raise concerns with your local data-protection authority, including France's CNIL.

If you believe a child has supplied information that should not have been collected, contact us using the privacy address above so the situation can be reviewed.

Changes

We may update this policy when the game, its providers or its data handling changes. The date above identifies the latest version. Material changes will be communicated through the game or the channels used to distribute it.