World Owner

Privacy policy

Effective date: 12 October 2026

Who we are

World Owner is made by LGR Labs Ltd (“we”, “us”), a company registered in England and Wales with company number 17511153, who decides how the data described here is used.

Contact: enquiries@lgrlabs.com

In short

• You can play as a guest with no account. Your city is saved on your device.
• If you choose to sign in, your city is also kept online so it is safe and you can play it on another device. You can delete your account at any time in Settings → Account.
• Usage statistics and personalised ads are off unless you turn them on in Settings → Privacy, and you can turn them off again at any time.
• We don’t sell personal data.

What we process, and why

• On your device: your city (the save), your settings and privacy choices, the display name you choose, and generated sound files. As a guest, these don’t leave your device. Uninstalling the app deletes them.
• A time check: when the game starts or comes back to the foreground, it asks our website (world-owner.web.app) for the current time, so that offline earnings and daily quests are fair. The request contains no identifier. Like any web request, our hosting provider (Google Firebase Hosting) sees your IP address in its logs. Legal basis: legitimate interests (fair play and security).
• Usage statistics (optional, off by default): only if you turn on “Share anonymous usage statistics”. We use Google Firebase Analytics, which records app events, device and system type, app version, an app-instance identifier and an approximate country. It does not collect your advertising ID. Legal basis: consent. Turning the switch off stops collection.
• Purchases: payments are handled by Google Play or the App Store. We receive a purchase record (order number, product and date). When you are signed in, our server checks each purchase with the store and keeps that record with your account ID, so that what you bought is delivered exactly once and cannot be claimed twice. We never receive your card details. Legal basis: contract.
• Ads (only when you choose to watch one): a rewarded ad plays only when you tap “Watch an ad”, and nothing is sent to ad services before that. Ads are served by Google AdMob. The first time, where the law requires it (for example in the UK and the EU), Google asks for your consent. To show an ad, count it and prevent fraud, Google’s ad software collects your device’s advertising ID, your IP address, device and app information and how you interact with the ad. Ads are chosen using data about you only if you allow it in Google’s consent form and turn on “Personalised ads” in Settings → Privacy; otherwise they are non-personalised. You can change your choices at any time in Settings → Privacy → Ad privacy choices, and reset your advertising ID in your phone’s settings. See how Google uses this data: policies.google.com/technologies/partner-sites. Legal basis: consent where the law requires it; otherwise legitimate interests (offering free rewards).
• Sign-in and cloud save (optional): if you sign in with Google, Facebook, Google Play Games or Apple, we receive from that provider a user ID and, depending on the provider and what you allow, your name, email address and a link to your profile picture. If you sign in with an email and password, we keep your email address (the password is stored only in a protected, scrambled form by Firebase Authentication; we never see it) and send you emails to confirm the address or reset the password when you ask. If you sign in with your phone number, it is sent to Google, who text you the code and also use the number to prevent spam and abuse across their services. We use these details only to identify your account and show who is signed in. Your city (the save, including the display name you chose) is then copied to our cloud database (Google Cloud Firestore, stored in London, UK), updated while you play, so that it is safe if you lose your device and you can play it on another one. Legal basis: contract.

Who we share it with

Service providers acting for us: Google (Firebase Hosting; Firebase Authentication, Cloud Firestore and Cloud Functions, only if you sign in; Firebase Analytics, only if you opt in; Google Play billing) and Apple (App Store billing). When you sign in, the provider you choose (Google, Meta for Facebook, or Apple) also knows you used it to sign in to World Owner, under its own privacy policy. Codes for phone sign-in and emails for email sign-in are sent by Google (Firebase Authentication). When you choose to watch an ad, Google AdMob receives the data described under “Ads”. Meta’s Facebook SDK starts only when you choose to sign in with Facebook, and we turn off its automatic app events and advertising-ID collection. We don’t sell personal data.

How long we keep it

• Device data: until you delete the app.
• Your account and cloud save: until you delete your account (Settings → Account → Delete account) or ask us to. Deleting removes the sign-in, the profile, the cloud save and the link between you and your purchases straight away.
• Usage statistics: for the retention period set in Firebase Analytics.
• Hosting logs: as kept by Google Firebase Hosting.
• Purchase records: as long as the law requires for tax and accounting. After an account is deleted we keep only a record that a purchase was redeemed, with no account ID, so it cannot be claimed again.

International transfers

The cloud save is stored in the UK (London). Google, Meta and Apple may process data outside the UK and EU. They rely on adequacy decisions or standard contractual clauses.

Your rights

Depending on where you live (for example the UK or EU), you can ask to access, correct or delete your data, object to processing or restrict it, and withdraw consent at any time. Withdrawing consent doesn’t affect processing that already happened. Contact us at the email above. You can also complain to your data protection authority (in the UK, the ICO). See also data deletion.

Children

World Owner is not intended for children under the age of digital consent in their country (13 to 16 in the UK and EU). We don’t knowingly collect data from them.

Changes

We’ll update this page when what we do changes, and show the new effective date.

Contact

Email: enquiries@lgrlabs.com. Post: LGR Labs Ltd, 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.