Cannon Clash — Privacy Policy
Last updated: October 29, 2026 · Applies to Cannon Clash: Tiny Worlds (com.nomadarcade.cannonClash on the App Store, com.nomadarcade.cannonclash on Google Play)
The short version. You can play the whole game without an account and without giving us anything. If you choose to sign in, we store your game progress so it follows you to a new phone. From version 1.9.0 Cannon Clash shows ads from Google AdMob: a banner below the game, a short ad between some levels, and ads you can choose to watch for a reward. From version 1.10.0 four more ad networks can supply those ads through AdMob, and No ads in the shop turns off the banner and the short ads. We do not sell your data. From version 1.10.0 the iPhone version asks you once whether it may track you for ads, and the game plays the same if you say no. The iPhone version tells Meta when it is installed, when you reach a few steps in the game and when you buy something, so we can measure our own Facebook and Instagram ads (see Advertising).
From version 1.11.0 you can turn on the Nomad Passport, one level across our games that pays rewards in Cannon Clash. It is optional and works without an account (see Nomad Passport).
Who we are
Cannon Clash is published by Alden Morris Enterprises LLC, a New York limited liability company trading as Nomad Arcade ("we," "us"). For anything in this policy, write to support@get-creative.co, or by post to Alden Morris Enterprises LLC, 4465 E. Genesee St, Dewitt, NY 13214, United States.
Playing without an account
By default the game has no account. Your progress (levels, stars, coins, diamonds, cannons, upgrades and settings) is saved only on your phone. We cannot see it, and it is deleted when you delete the game.
If you choose to sign in
Signing in is optional and lives in Settings → Cloud save. It exists for one reason: so your progress survives a lost or replaced phone. You can play forever without it.
| What | Why |
|---|---|
| Your Google account ID, name and email address (through Google Sign-In), or on iPhone your Apple ID (through Sign in with Apple). If you choose Apple's "Hide My Email", we only ever see the private relay address | To recognize you when you sign in on another phone |
| Your game progress: levels, stars, best times, coins, diamonds, unlocked cannons, drones and abilities, achievements, settings, the daily crates and orders in Supplies, and a record of purchases already delivered, No ads and the starter pack included | So it can be restored on a new phone |
Progress is stored in Google Cloud Firestore in the United States (region us-central1, Iowa). Security rules restrict each record so that it can only be read or written by the signed-in account it belongs to.
Nomad Passport
From version 1.11.0, Cannon Clash has the Nomad Passport: one level across Nomad Arcade's games that pays fixed rewards in Cannon Clash (coins, diamonds and three cannon skins) as it grows. It is optional and stays off until you turn it on in Settings → Nomad Passport, and it works without signing in. How it works and every reward are at nomadarcade.com/passport.
| What | Why |
|---|---|
| A random account ID made when you turn the Passport on, and the short Passport number worked out from it | To keep your level |
| For each round or level played to the end, win, boss beaten, achievement unlocked and the day's first finished round: what kind of event it was, which game, the day it happened, when it reached us and a random ID for the event. Never your score, your device or your location | To add up your XP so that no event counts twice. Events are deleted after 30 days |
| Your XP, which of our games the Passport is turned on in, the XP each game gave each day, and which rewards each game has given | To work out your level and give each reward once |
| Each time the game signs in to the Passport: the time, your network (IP) address, and the names and versions of the app and phone system that asked | To keep the Passport's sign-in secure |
| If you sign in with Apple or Google while the Passport is on: that account's ID and the email address it shares, and from Google also your name and profile picture link. If you choose Apple's "Hide My Email", we only see the private relay address | To bring the same Passport to another phone |
Before the Passport turns on, the game asks the year you were born (and the month, only if the year leaves it unclear) to check that you are 13 or older. Neither is sent or stored: Cannon Clash keeps only whether the Passport may be used on this phone.
The Passport is stored on a server we run, rented from Hetzner in Ashburn, Virginia, in the United States. On iPhone its sign-in is kept in the phone's keychain, where our other games on the same phone can read it, so they share one Passport. On Android each game keeps its own until you sign in. The Passport is never shared with advertising networks.
Analytics and crash reports
| Service | What it receives |
|---|---|
| Google Analytics for Firebase (Google) | How the game is played: which screen you are on and for how long, when you open and leave the game, the tutorial, a level started, finished or failed with its number, length, stars, coins and the game's frame rate, continues and power-ups used, playing again, reaching a new level, unlocking or upgrading cannons, drones, abilities and worlds, achievements, opening the diamond shop, which diamond pack you started to buy and whether the purchase went through, and from 1.9.0 when an ad between levels played and whether you watched an optional ad to the end. From 1.10.0 it also receives how close a lost run came, the coins and diamonds you earn and spend, the new features you see and use (such as Supplies and the upgrade card), which item you started to buy and whether the purchase went through or was restored, whether you own No ads, when an optional ad is offered, which ad network showed each ad and what it earned us, when the game asks for a rating, your side of each split test, where you tap, and what you do in More games (see Our other games). Google also works out a rough location (country or city) from your IP address. If you are signed in, these are linked to your account identifier |
| Firebase Remote Config (Google), from 1.10.0 | The game's settings, such as how often ads may show, which new features are on and how many players are on each side of a split test. To fetch them, the game sends an identifier Firebase makes for this install. The settings hold nothing about you |
| Firebase Crashlytics (Google) | Crash and error reports, with the device model, operating system version and the state of the game when it crashed |
Where you tap. From 1.10.0, when you tap anywhere outside a level, Analytics receives the screen's name, the button you tapped or that the tap hit no button, and which box of a 10 by 20 grid over the screen it landed in. During a level it receives the box of one touch in ten. It never receives the exact spot or anything you type.
Split tests. From 1.10.0 we try some changes on part of our players, such as no banner during play. The game makes a random number for this install and keeps it on your phone. It never sends that number. From it the game puts you on side a or b of each test, and your side goes to Analytics with the events above.
We use these to find levels that are unfairly hard, to see where new players get stuck, to test changes and to fix crashes. None of it is sold to anyone. On iPhone, Firebase receives Apple's advertising identifier only if you allow tracking (from version 1.10.0, see Advertising). On Android, Firebase may use the phone's advertising ID. Google AdMob's use of identifiers is described under Advertising.
Advertising
From version 1.9.0 Cannon Clash shows ads served by Google AdMob. A banner sits below the game while you play. A full-screen ad can play after you clear a level, just before or after the level-complete screen, or after some lost runs. It never plays during a level or before level 4, and plays at most every 45 seconds. In some of those breaks the game shows one of our other games instead (see Our other games). Ads you choose to watch let you continue a run or double a level's coins, and from version 1.10.0 also get a free upgrade or double the day's crate. The ads are capped at Google's PG content rating. Versions 1.8.3 and earlier show no ads.
No ads. From version 1.10.0 the shop sells No ads. It turns off the banner and the full-screen ads, and the ads you choose to watch stay. While we test changes, some players see no banner during play or no full-screen ad after a lost run.
To choose, show and count ads, and to stop fraud, Google receives information about your phone and how you use the game: device model and settings, an approximate location worked out from your IP address, the ads shown and how you interact with them, and diagnostic data. On iPhone, from version 1.10.0, the game asks you once whether it may track you (Apple's App Tracking Transparency prompt). Only if you allow it does Google receive Apple's advertising identifier (IDFA), which it uses to show you ads that suit you better and to measure them. Earlier versions never ask, and Google gets no IDFA from them. You can change your answer at any time in the iPhone's Settings → Privacy & Security → Tracking. On Android, Google may use the phone's advertising ID, which you can reset or delete in Android's settings. In the EEA and the UK, Google asks for your consent before personalized ads are shown; you can change your choice in Settings → About & credits → Ad privacy choices. Google handles this data under its own privacy policy.
Other ad networks. From version 1.10.0, AppLovin, Unity Ads, Liftoff and Mintegral can also bid through AdMob to show an ad in Cannon Clash. When one of them bids for or shows an ad, it receives the same kinds of information as Google: device model and settings, an approximate location worked out from your IP address, the ads shown and how you interact with them, and diagnostic data. On iPhone it receives Apple's advertising identifier only if you allowed tracking, and on Android it may use the phone's advertising ID. Each handles this data under its own privacy policy: AppLovin, Unity, Liftoff and Mintegral.
We also advertise Cannon Clash itself on Facebook and Instagram. To learn which of those adverts lead to installs and to players who keep playing, the iPhone version (from version 1.8.1) includes Meta's app events SDK. It tells Meta when the app is installed and opened and when you buy something (which item and its price, never your payment details), and (from version 1.8.2) a few steps in the game: starting and finishing the tutorial, the first game, the end of a run and playing again, reaching a new level, opening the diamond shop and starting a purchase. It does not tell Meta about the ads in the game. These go together with basic device information (such as model, iOS version, language and time zone) and an identifier the SDK generates for this install. If you allow tracking (from version 1.10.0, see above), Meta also receives Apple's advertising identifier (IDFA) with these events, so it can tell us which of our ads brought you to the game. If you do not, or on an earlier version, Meta gets no IDFA and reports these results to us only in aggregate. Meta handles this data under its own privacy policy.
The Android version does not send anything to Meta.
Our other games
From version 1.10.0, Settings → More games lists our other games. Tapping one opens its page in the App Store inside the game, or its Google Play page on Android. Apple or Google is told which of our games sent you there, so we can count the installs each game brings. We see only those totals. More games can also play a short demo of another of our games. The demo is part of Cannon Clash and loads nothing from the internet. In some full-screen ad breaks the game may show one of our other games instead, marked "Ad", with a close button. Nothing is given for opening, playing or installing any of them, and the game never checks which of our games you have.
Analytics receives when you open More games, which game you tapped and whether its store page opened, and how you used a demo or one of these ads: when it opened, each run and how long it lasted, whether you tapped Get, and when you closed it. None of this goes to Meta.
Purchases
Cannon Clash sells optional packs of diamonds, an in-game currency, and from version 1.10.0 two things you buy once: No ads, and the starter pack (diamonds, coins and Admiral Paint, a paint for every cannon). Coins and diamonds are also earned by playing. Payment is handled entirely by Apple (App Store) or Google (Google Play): we never see your card or payment details.
| What | Why |
|---|---|
| A record of which purchases have already been delivered, and whether you own No ads and the starter pack, kept on your phone and, if you are signed in, in your cloud save | So a purchase is credited exactly once, and can be restored if you reinstall |
| Analytics events naming the item you started to buy and whether the purchase went through or was restored, and whether you own No ads (no payment data) | To understand which items players find useful |
| On iPhone, Meta's SDK records the purchase: which item and its price (no payment data) | To measure our own Facebook and Instagram ads (see Advertising) |
Refunds are handled by Apple or Google under their own policies.
Children
Cannon Clash is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has signed in, contact us and we will delete the account and its data.
From version 1.11.0, the Nomad Passport asks the year you were born and stays off for anyone under 13.
Deleting your data
You are in control of all of it:
- Delete your account and cloud save: Settings → Cloud save → Delete account and cloud save. After you confirm with Apple or Google, this removes your stored progress and your account from our systems and, if you signed in with Apple, revokes the game's Sign in with Apple authorization. The progress already on your phone is kept so you can carry on playing.
- Sign out: Settings → Cloud save → Sign out. Nothing further is uploaded; the copy on your phone is untouched.
- Remove everything on your phone: delete the game.
- Delete your Nomad Passport (from version 1.11.0): Settings → Nomad Passport → Delete Passport, or see nomadarcade.com/passport/delete. This deletes the Passport, its level, its play history and its sign-in from our server, for every one of our games, unless another of our apps also uses that sign-in. What it already gave you in Cannon Clash stays.
- Ask us: email support@get-creative.co and we will delete your data.
More detail is on the Data Deletion page.
How long we keep it
Cloud saves are kept while your account exists, and deleted when you delete it. The Nomad Passport is kept until you delete it, and its play events are deleted after 30 days. Analytics data is retained by Google for up to 14 months and crash reports for up to 90 days, then removed automatically.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete the data we hold, and to object to how we use it. Email support@get-creative.co and we will respond within 30 days. You may also complain to your local data protection authority.
Who else sees your data
We do not sell your data. It is processed on our behalf by Google (Firebase Authentication, Cloud Firestore, Analytics, Crashlytics, from 1.9.0 AdMob and from 1.10.0 Remote Config), by Apple for Sign in with Apple if you use it, by Apple or Google Play for payments and, on iPhone, by Meta to measure our own ad campaigns (see Advertising). From 1.10.0, AppLovin, Unity, Liftoff and Mintegral receive data when they bid for or show an ad through AdMob. Those companies are bound by their own privacy terms. From 1.11.0, Hetzner hosts the Nomad Passport's server for us.
Changes
If this policy changes in a way that affects what we collect, we will update the date at the top and, where the change is significant, tell you in the game.