What we measure. What you choose.

Privacy choices

Drop Dungeon always collects gameplay statistics, in the browser game and in the iOS and Android apps, to run and improve the game. Google Analytics on this website is optional and stays off unless you allow it; your Google Analytics choice applies to this browser on this site. Ad measurement is explained below: Meta in the apps and on the website, and AppsFlyer in the apps. In the apps it is on unless you switch it off, except in the EU, EEA, UK and Switzerland, where the app asks first; on iPhone, Meta measurement also needs Apple's tracking permission; on the website it stays off unless you allow it.

Gameplay statistics

Ludoitte, the maker of Drop Dungeon, collects gameplay statistics for every player of the browser game and the iOS and Android apps, from the moment the game first starts. They are:

• Sessions: when a session starts and ends, and a heartbeat every 30 seconds while you play. If you leave the game for 30 seconds or more, a new session starts when you come back.
• Progress: tutorial steps, runs, stages cleared, upgrades, achievements and other game milestones.
• In-game economy: currency earned and spent, offers shown, rewarded ads and purchases.
• Technical data: the platform (iOS, Android or web), the app version, a device performance class, the game language, notification settings, sign-in and cloud-save results, performance samples and error reports.
• Identifiers: an installation identifier created by the game and your player account identifier.
• Approximate location: the country, city and approximate coordinates that our server works out from your connection’s IP address, using a local copy of the MaxMind GeoLite2 database. The IP address itself is not stored with your gameplay statistics and is not sent to MaxMind.
• Ad-campaign tags, on the web: the source, campaign, ad, ad group and placement named in the link that brought you to the game. Your browser keeps the first tags it sees for seven days, and the game adds them to its sessions so we can count new players and returns by ad. Sessions without tags have no ad source.

Gameplay statistics do not include your email address or payment card details.

We use gameplay statistics to run the game, fix problems, and understand which features and ad campaigns bring players and keep them playing. Our legal basis is Ludoitte’s legitimate interest in operating and improving the game.

On iPhone, open Settings > Account > Gameplay statistics in the game and switch it off to stop gameplay statistics from that device. The game keeps working, and our servers still keep what they need to run your account, cloud saves and purchases. On Android and on the web, gameplay statistics are always on. On every platform, you can delete your account in Settings > Account > Delete account.

Statistics events are kept for 30 days (loading, performance, error and detailed in-run data), 400 days (sessions, progress, runs, offers and ads) or 3 years (currency, purchase and permission records). Session records are kept until the account is deleted. Deleting your account also deletes the gameplay statistics linked to it.

Optional Google Analytics on this website

If you allow it, we use Google Analytics to understand visits to the public website and the browser game page: page views, navigation sections, play and store links, game loading and the first game interaction. Google also measures browser and device information, approximate geography and visit engagement. Google Analytics is separate from gameplay statistics, so declining it does not switch gameplay statistics off.

We send fixed page names and categories, and only eligible campaign source, campaign and creative tags. We remove raw query strings, URL fragments and referrers from the page information we send. We do not send your email, account or player ID, game-save contents, payment details, advertising click identifiers, or authentication tokens to Google Analytics.

We do not load the Google Analytics script until you allow it. Advertising storage, advertising personalization and Google signals are disabled by this integration. We do not use Google Analytics on admin or checkout pages.

Change your Google Analytics choice at any time

Use Manage Google Analytics on this page, or Privacy choices on the website, then Withdraw Google Analytics. The floating button is hidden in the browser game to keep the play area clear. This stops Google Analytics in this browser and removes this integration’s Google Analytics cookies. It does not erase data already received by Google.

We remember your choice for up to 180 days using browser storage and an essential preference cookie. Google Analytics cookies also expire after 180 days without renewal. Clearing browser storage may ask you again.

Withdrawing Google Analytics also turns Meta measurement off in this browser. It does not stop gameplay statistics and does not remove saved ad-campaign tags, which expire after seven days.

Meta ad measurement

Drop Dungeon uses Meta ad measurement to learn which of our ads on Facebook and Instagram bring new players. It is separate from gameplay statistics and from Google Analytics. When it is on, Drop Dungeon shares with Meta: gameplay session, tutorial and run milestones; app or browser information; an app-specific pseudonymous identifier; in the apps, your device's advertising identifier (the Android advertising ID, or on iPhone the advertising identifier only if you allow tracking); and, for a new Android installation from Google Play, an app-install event with Meta-related Play install referral information, sent when the app first opens. On the website, Meta matching cookies and the current Meta ad-click identifier may also be used. We do not send your email, payment details, game-save contents, precise location or authentication tokens through this integration.

In the iOS and Android apps, Meta ad measurement is on unless you switch it off, for players outside the EU, the EEA, the UK and Switzerland; our server decides this from the country of your connection. In the EU, the EEA, the UK and Switzerland, or when the country cannot be determined, the app asks you when you first open it and measurement stays off unless you allow it. On iPhone, the app also shows Apple's tracking permission when you first open it, and Meta measurement never runs unless you allow tracking there. On Android, if you delete or reset your advertising ID in the device settings, the app does not send it. On the website, Meta measurement stays off unless you allow it, and Google Analytics must also be allowed.

Until 25 September 2026, the Android app also sent your device's advertising ID once to our game server for our own Unity install attribution. That has stopped: our server no longer stores anything these older app versions send, and Unity now learns which of its ads brought an installation through AppsFlyer (below). The records our server kept, which hold only a one-way hash of the ID, and our hosting provider's request logs of Unity's ad-tap notifications are deleted by 26 October 2026.

In the apps and the browser game, open Settings > Account > Ad measurement (Meta ad measurement in the browser game and in older versions of the apps) to switch it off or on at any time; in the apps this one setting covers Meta and AppsFlyer. You can keep playing either way, and nothing in the game depends on your choice.

Withdrawing Meta sharing stops new capture and discards events still queued on the device. The game synchronizes the withdrawal with its server, which checks the current permission again before sending. A disconnected device sends the withdrawal when it reconnects. Withdrawing Google Analytics on the website also disables Meta measurement in that browser. Data already received by Meta is governed by Meta's privacy policy.

Meta matching cookies expire after 90 days. Unsent server events expire within 24 hours; the server deletes event contents after delivery or suppression and keeps pseudonymous delivery receipts for up to 30 days to prevent duplicate submissions. No historical sessions are uploaded when you opt in.

AppsFlyer ad measurement in the apps

In the iOS and Android apps, Drop Dungeon uses AppsFlyer to learn which of our ads on Google, Meta (Facebook and Instagram) and Unity Ads bring new players, and to keep that measurement free of fraud. AppsFlyer processes this data on Ludoitte’s behalf. It follows the same setting and the same rule as Meta ad measurement: outside the EU, the EEA, the UK and Switzerland it is on unless you switch it off; inside them, or when the country cannot be determined, it stays off unless you allow it when the app asks. On iPhone it does not need Apple's tracking permission, but the advertising identifier is included only if you allow tracking.

When it is on, the AppsFlyer software in the app sends AppsFlyer:

• an installation identifier that AppsFlyer creates;
• your device's advertising identifier (the Android advertising ID, or on iPhone the advertising identifier only if you allow tracking), and on iPhone the identifier Apple gives our apps on your device;
• device and network information such as the device model, operating system version, language and IP address, from which AppsFlyer works out an approximate location;
• on Android, Google Play's install referral information;
• when the app opens and when you complete the tutorial.

Our game server sends AppsFlyer each purchase and refund: the product, amount, currency and time, the AppsFlyer installation identifier, the operating system version, on iPhone the identifier Apple gives our apps on your device, and the IP address of the purchase request. On iPhone, AppsFlyer also receives copies of Apple's anonymous ad attribution reports (SKAdNetwork and AdAttributionKit), which contain no identifier.

AppsFlyer checks new installations with Google and Meta to learn whether one of their ads brought them, and passes installs and these events to Google, Meta and, in the Android app, Unity, which use them to measure and improve our ad campaigns. We do not send your email, payment details, game-save contents or precise location to AppsFlyer.

Switching ad measurement off stops the AppsFlyer software in the app. Our server keeps the AppsFlyer installation identifier only while ad measurement stays on, and deletes it when you switch measurement off or delete your account. It keeps the IP address of a purchase request for 15 minutes at most, a sent purchase event for 30 days, and a record of a sent purchase without any identifier for up to 180 days so that a later refund can be reported. Data received by AppsFlyer is governed by AppsFlyer's privacy policy, and data received by Unity by Unity's privacy policy. We rely on your consent where the app asks, and otherwise on our legitimate interest in measuring our own advertising; you can object at any time with the switch.

Optional rewarded ads

Optional rewarded ads in the browser game use Google H5 Games Ads when available. Each ad offers a stated in-game reward and starts only after you choose to watch. Declining an ad does not stop you playing. Google receives advertising and device information according to your ad privacy choices; these choices are separate from website analytics.

The game asks for your ad preference before loading the ad service. Where required, Google's consent message also asks for your choices before an ad can be offered. Use Ad privacy in the game page to reopen Google's choices. Withdrawing ad consent stops further rewarded-ad requests.

Accounts, saves and purchases

The game’s servers keep what they need to run your account, cloud saves and purchases, whatever you choose about Google Analytics, Meta or AppsFlyer. Allowing Google Analytics does not enable personalized ads.

See Ludoitte’s privacy policy and Google’s privacy policy for more information, including how to make other requests about your data.