Privacy Policy
Office Defense · Last updated 14 August 2026
Office Defense ("the app", "the game", "we") is a single-developer tower defense game. This policy explains, in plain language, exactly what the app does and does not do with data. It is short because the app does very little, and it is written to be checkable: everything below describes behaviour you can observe.
The short version
- No account you create. You never enter an email, a password, a username or any personal detail to play. Versus, the optional online mode, does use an anonymous player ID issued automatically by Unity. It is described under "Versus" below and it is not tied to you.
- No ads. The app contains no advertising SDKs of any kind.
- No third-party analytics. No Firebase, no Google Analytics, no AppsFlyer, no Adjust, no Facebook SDK, no crash reporting service. None.
- No tracking across apps or websites. The app does not use the Advertising Identifier (IDFA), does not build an advertising profile, and does not share data with data brokers.
- No personal data collection. We do not collect your name, email, contacts, photos, location, or any other personal information.
- One optional purchase, handled entirely by Apple. Apple processes it. We never see your payment details.
What happens at launch
The campaign and Endless modes are fully offline. They need no network connection and transmit nothing.
The app does make one routine request every time it starts, and it is worth naming rather than leaving as a surprise: it asks the App Store for the current price of its in-app purchase, so the price shown on the button is the price your own store will actually charge. That request goes to Apple, not to us. It carries nothing about you or about your progress, and we never see it or its result.
Versus, the optional online mode
Versus is a live 1 versus 1 match between two devices. To broker that connection it uses Unity Gaming Services, operated by Unity Technologies: Unity Authentication, Unity Relay, and Unity QoS, which Relay uses to pick a nearby server. These are contacted only when you start a Versus match.
- Anonymous player identifier. Unity Authentication issues an anonymous player ID so the two devices can be paired. It is created for you automatically, it is not tied to your name, email, Apple ID or any real-world identity, and we never ask you for one. It does persist on the device between matches.
- Connection data. Standard networking data (your IP address, a Relay join code, and basic connection metadata) is processed by Unity to route match packets between the two players. Unity QoS sees your IP address and network latency in order to choose a region. This is the ordinary technical data any online connection requires.
- Which maps you own. The handshake tells the other player which maps you have unlocked, as a small set of yes or no flags, so the match can pick a board you both have. It carries no other information about you.
This data is used solely to establish and run the multiplayer match. We do not use it to identify you, advertise to you, or track you across other apps.
On encryption. Match traffic prefers an encrypted DTLS relay channel and uses it whenever the relay offers one. If no DTLS endpoint is offered for an allocation, the connection falls back to plain UDP. We would rather state this precisely than promise encryption without qualification.
Unity's handling of this data is governed by Unity's own privacy policy: unity.com/legal/privacy-policy.
Data stored on your device
Your campaign progress, Endless best-wave checkpoints and settings are saved locally on your device. Deleting the app removes them. We operate no server and no account system, so there is nowhere for us to upload them to, and we do not.
Two honest qualifications to the word "only", because an absolute claim should survive scrutiny:
- During a Versus match, the set of maps you have unlocked is sent to your opponent through Unity Relay, as described above.
- Your saved game is stored in the app's normal document area, which means your own iCloud or iTunes backup includes it if you have device backup switched on. That copy is yours and Apple's. It is not ours, and we cannot read it.
Children
The app asks nobody for personal details, and there is no chat, no user-generated content, and no advertising. The one exception is the anonymous Versus identifier described above, which is issued by Unity, is not linked to a real-world identity, and only exists if the player starts an online match.
The app does contain one optional in-app purchase. It is a single one-time unlock, it is billed by Apple, and it is subject to whatever Screen Time, Ask to Buy or in-app-purchase restrictions the device's parent or guardian has set. The app never asks a player for payment details itself.
In-app purchases and payments
The app contains one in-app purchase. There are no subscriptions, no consumable items, no in-game currency, no loot boxes, and no second invoice.
- What it is. A single non-consumable that unlocks the four additional campaign maps: Corporate Tower, Tech Campus, Co-Working Hub and Headquarters. The first map, Startup Loft, with its full 15-level campaign plus that map's Endless and Versus modes, is free and stays free.
- Who takes the money. Apple, through the App Store. Payment happens inside Apple's own purchase sheet using the Apple ID already on the device. We never see, receive or store your card number, billing address, Apple ID, or any other payment or financial detail, and the app contains no field that asks you for one.
- What we keep. Nothing. No record of your purchase is uploaded to us, because there is nowhere to upload it to. Whether this device has bought the unlock is worked out on the device from the App Store's own signed receipt.
- The offline note. So that a purchase still works with no network, the app writes a small note on the device recording that a valid receipt was seen here. That note is sealed using the device's vendor identifier (IDFV), a value Apple gives to apps from the same developer, which changes when you uninstall the app. It never leaves the device, it is not the advertising identifier, and it is used for nothing else.
- Restoring it. If you reinstall the app, or move to another device on the same Apple ID, "Restore a prior purchase" in Settings re-checks that record with Apple and re-applies the unlock. It costs nothing and sends no personal data to us.
- Refunds are handled by Apple, not by us, through Apple's normal "Report a Problem" process.
Changes to this policy
If this policy changes, the "Last updated" date above will change and the revised policy will be posted at the same address.
Contact
Questions about this policy or the app's data practices:
Jeffery Ng, jeffrey.ng.op@gmail.com