Endless Defense TD · Last updated October 26, 2026
Endless Defense TD is developed by Curtis Hendrick and published on the App Store by Curtis Hendrick and on Google Play by Merit Digital Group, LLC, listed there as Merit Games ("we", "us"). This policy covers both the iPhone and the Android versions. It explains what the app collects, why, who it is shared with, and how to switch it off or delete it.
| Data | When | Why |
|---|---|---|
| Game ID and device key | On first launch. The game ID is random; the device key is a signing key created on your phone (its private half never leaves the phone's secure hardware). At the same time the phone asks Apple (App Attest) or Google (Play Integrity) to confirm it is running an unmodified copy of the game, and we keep that answer with the kind of device (such as “iPhone” or “Android tablet”), the app version and the IP address the device first connected from. | To know which saved game is yours, that requests really come from your device, and to limit abuse. Neither the game ID nor the device key is your phone's hardware or advertising identifier. |
| Game progress (saved game data) |
Backed up automatically while you play, for every player. It includes your progress, your run history and your total time played. Earlier versions are kept for up to 30 days, and a game you replace or move away from is kept for 90 days, so either can be brought back. | So your progress survives reinstalls and a lost phone, and follows you to a new device. |
| Time zone (the offset from UTC only, such as UTC−7) |
Each time the game opens and connects. Not the name of your time zone or your location. Kept with your game and deleted with it. | So we can see what time of day new players start and play, and plan events and messages for a sensible hour. |
| Player name and results | A name is made up for you when your game is created; you can change it. Your results are sent when you finish a run while online. | For the leaderboards, Peers (weekly leagues), weekly rewards and the Proving Grounds. Other players can see them — see “What other players can see” below. |
| Sign-in (Apple, Google, Game Center, Google Play Games) |
Apple and Google: only if you choose them. Game Center (iPhone) and Google Play Games (Android): if you are already signed in to them on your phone, the game links them to your game automatically when it starts, as a quick way back to it. | To get your game back on another device. We keep only the account identifier the provider gives us for this app — not your name, not your email address, not your contacts. With Sign in with Apple we ask for neither your name nor your email; we also keep Apple's sign-in token, encrypted, only so we can revoke the game's access to your Apple Account when you delete your game. |
| Email address | Only if you choose to save your game with an email address. | To send you a one-time sign-in code (sent through Amazon's email service). We store a one-way fingerprint
(hash) of the address, not the address itself, plus a masked form (like c•••s@gmail.com)
to show you which address it is. |
| Recovery key | Created for a game that has no Apple, Google or email sign-in, and kept in your iCloud Keychain (iPhone) or Google's Block Store (Android). | So a new phone signed in to the same Apple or Google account can offer to continue your game. We store only a one-way hash of it. |
| Gems, Platinum and rewards | Whenever Gems or Platinum are earned, spent or given to you (rewards, gifts, rune summons, purchases, refunds). | Our servers keep the record of these two currencies and of the rewards we send, so each is counted exactly once on every device and can be checked if something goes wrong. |
| Purchase history | When you buy or restore something in the game. | To give you what you bought on every device, to know which items sell, and to support you if a purchase goes wrong. |
| Fair-play checks | While you play online. | To keep the leaderboards and rewards fair. We compare each run's result with how long it took, and saved games and currency with our records; the game also tells us if it notices its clock running fast, its save file being altered or its memory being changed; and players can report a player name. These are signals for a person to review (see our Terms of Use). |
| Gameplay analytics | On by default; switchable off in Settings › Privacy (“Share gameplay stats”). | To see which parts of the game people enjoy, where they get stuck, and what to fix. |
| Install identifier | Generated on first launch and stored only in the app. | To group one device's analytics events together so they mean anything. It is separate from your game ID; we never send your game ID, player name or sign-ins to the analytics service. |
| Apple Ads attribution (iPhone only) |
Once per install, unless gameplay analytics is switched off. | Apple tells us whether the install came from one of our Apple Ads campaigns and, if so, which campaign, ad group, keyword and country. The game asks Apple's AdServices service directly; this needs no tracking permission and involves no device identifier. The answer is kept with the gameplay analytics above. |
| Crash and error reports | When the game hits an error or shuts down unexpectedly. | To find and fix bugs. |
| Support messages (what you write, any pictures you attach, and game and device details) |
Only if you contact us from the game's Help & Support screen. | To answer you and fix the problem. The details (app version; device model, OS, graphics chip, memory and screen size; language and time zone; game progress, currency balances and number of purchases; which kinds of sign-in your game has and its backup state; your notification, tracking, ad-consent and analytics settings; and the last few screens you visited) are listed under “What we send with it” before you send, and never include a device identifier. Pictures are ones you choose: up to three per message from your photos (you pick them in your phone's own photo picker; the game gets only those pictures and never browses your photo library), or, from Report a problem during a run, a picture of the game's own board, which you can remove before sending. Pictures are shrunk and saved again on your device, which leaves out camera details such as location. |
| Messages from us | When we post news in the game's inbox, or send you a message or a reward there. | To tell you about updates and events, answer you, and give you rewards. Messages sent to you are kept with your game and deleted with it. |
| Advertising data (collected by Google AdMob) |
When a rewarded ad is loaded or shown. | To serve and measure the optional rewarded ads. Includes ad views and taps, an approximate region derived from your IP address, and your device's advertising identifier: on iPhone (IDFA) only if you allowed tracking; on Android (the Android advertising ID) unless you have deleted it or opted out in your device settings. |
On purchase history specifically: we record which item was bought, its displayed price and currency (and our US list price for it), whether it was your first purchase, and whether it was a store test purchase. The App Store and Google Play also send us a signed record of each purchase, refund and cancellation, which we check and keep with your game, so purchases follow it to a new device and a refund is reflected in it. When you restore purchases, the game sends the store's signed proof so your game can be credited. We never see or store your payment method, card number or billing address — Apple (App Store) or Google (Google Play) handles the transaction end to end.
Your player name, your rank on the leaderboards, and your player card: when you started, when you last played, how many runs you have played, your best tier and wave, your lifetime waves, your best Proving Grounds score and the layout behind it, and — for players in your weekly Peers league — your waves this week. Other players never see your sign-ins, email address, device or location. A name that three different players report is hidden until we review it. Pick a name you are happy for others to see; you can change it on the Account page.
Analytics events record what happened in the game — a run started, a wave was reached, currency was earned or spent, a screen was opened, an ad was watched (with the amount Google reported it earned), a purchase was made. Each event carries the install identifier, the app version, your device model and OS version, and settings such as whether you allowed tracking or notifications. They carry no name, email address, game ID or device identifier.
Crash and error reports carry the error message, a stack trace, your device model and OS version, the app version, the screen you were on, your tier and wave, and a list of recent event names without their values. The device hostname is deliberately suppressed because on iOS it often contains the owner's name. Each distinct error is reported at most once per app version; the copy of each error that goes with the gameplay analytics carries only a one-way hash of the message.
Switching “Share gameplay stats” off in Settings › Privacy stops gameplay analytics (including Apple Ads attribution) and discards anything still waiting to be sent. Crash and error reports are not covered by that switch, because we need them to fix bugs.
The game can remind you when your Treasure Trove vault fills, when research finishes, when a new day's missions are ready, and once if you have been away for three days. These are local notifications: the game schedules them on your phone, nothing is sent from our servers, and no push token or device identifier is registered anywhere. The game asks before turning them on (never at first launch), and you can switch them off in Settings › Notifications or in your phone's settings.
Rewarded ads are always optional: an ad plays only when you tap a button offering a reward for watching one. Ads are provided by Google AdMob, which acts as an independent controller of the data it collects under Google's privacy policy (see also how Google uses data from partner apps). Players in the UK, EEA and Switzerland are shown Google's consent form before any ad is requested. On iPhone the game never asks for tracking at launch: after your first finished run it shows a short explanation, then Apple's “Allow tracking?” prompt. If you decline Apple's tracking prompt (iPhone) or opt out of ad personalization (Android), Google may still show non-personalized ads. Buying the VIP Pass removes the ad from the daily gem claim.
We do not sell, rent or trade your data. Apart from the ad data Google collects directly (above), we do not share it for advertising. We use a small number of service providers to run the game; they process data on our instructions only:
Other players see your player name and results as described above. We may also disclose data where the law requires it.
Open Settings › Account › Manage › Delete game in the app. A game that isn't saved with Apple, Google or email is deleted at once — from your phone and from our servers (Game Center or Google Play Games on their own don't count). A game saved with Apple, Google or email is deleted 14 days later (the app shows the date); signing in again within those 14 days lets you restore it. Deletion removes the saved game, its backups, its Gems and Platinum record, its leaderboard entries, its support messages, its sign-ins and its recovery key. If you used Sign in with Apple, we also revoke the app's access to your Apple Account. Purchases stay with your Apple or Google account: Settings › Purchases › Restore brings back the VIP Pass and premium tracks in a new game. Analytics and crash data are not linked to your game, so they expire as described above. You can also email us at the address below and we will do it for you.
Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to object to certain processing. California residents have these rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell personal information. Letting Google personalize ads may count as “sharing” for cross-context behavioural advertising under California law; you can opt out by declining (or later turning off) tracking for this app in iOS Settings › Privacy & Security › Tracking, or on Android by deleting your advertising ID or opting out of ad personalization in Settings › Privacy › Ads. Residents of the UK, EEA and Switzerland have equivalent rights under the UK GDPR and GDPR. To exercise any of them, email us — the in-app deletion above is the fastest route for deletion.
Endless Defense TD is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.
If you are using Endless Defense TD through Apple TestFlight, Apple additionally collects installation and crash information and shares it with us, and your Apple ID email is visible to us as a tester. That is governed by Apple's privacy policy. Pre-release builds may be less stable and their data may be reset between builds. If you test the Android version through a Google Play testing track, Google shares installation and crash information with us under Google's privacy policy, and your Google account email is visible to us as a tester.
If we change this policy we will update the date at the top of this page, and we will tell you in the app before any materially different collection begins.
Questions, requests or complaints: Support@MeritDigitalGroup.com · By mail: Curtis Hendrick / Merit Digital Group, LLC, 2108 N St, Ste N, Sacramento, CA 95816, USA.