Last updated: 2026-11-08
Trenchline: Zombie Defense ("Trenchline", "the game", "we", "us") is a mobile game operated by Keyao Zhu, an individual (not a company), based in Vancouver, British Columbia, Canada. This policy covers the Trenchline app on iOS and Android. Contact: worldtab.app@gmail.com.
| Data | What it is | Where it goes |
|---|---|---|
| Game progress and settings | Your current wave, gold, buildings, Armory upgrades, Ordnance Points, language, graphics and sound settings | On your device. From version 1.0.1 the lasting progress (for example Armory upgrades, Ordnance Points, achievements, Endless records, lifetime statistics, tutorial progress, daily rewards and missions, packs bought) is also backed up to your own iCloud key-value storage (iOS) or Google Play Games saved games (Android, only when you're signed in to Play Games); a run in progress and your settings stay on the device. We never receive any of it. Your phone's own backup (Android Backup, iCloud Backup) may also include it, under your device's settings. |
| Crash and diagnostic data | When the game crashes or hits an error: the error and where in the code it happened, the game's last technical log messages before it, device model, operating-system version, app version, and a random identifier for the installation (not linked to you). Each time the game starts: a session record (when it started and ended, whether it crashed) with the same identifier. | Sent to Sentry (see §5) so we can find and fix bugs and see how stable the game is |
| Leaderboard scores and achievements | Your best wave on each map and the achievements you unlock — only if you're signed in to Game Center (iOS) or Google Play Games (Android) | Sent to Apple's or Google's service, which shows them with your Game Center / Play Games nickname and picture according to your privacy settings there. We never receive your account details. If you're not signed in, nothing is sent. On Android, the Google Play Games software built into the game also sends Google basic diagnostic and usage information about itself (for example, whether sign-in worked), and keeps the cloud backup described above, under Google's privacy policy. |
| Purchase information | When you buy Gold, Ordnance Points, the Starter Pack or the Commander Pack, Apple or Google processes the payment and gives the game a receipt so it can deliver what you bought | Checked on your device. We never see your payment details (card number, billing address) — those stay with Apple or Google. Which item you bought (and its price) is also part of the gameplay statistics below. |
| Gameplay statistics (version 1.0.2 and later) | Events from playing, for example: maps started, resumed, won and lost, waves cleared, tutorial steps done or skipped and how long they took, revive offers, Armory upgrades (and, when the device clock was moved ahead while the game was in the background, by how much and how many upgrades finished early because of it), the shop, ad and share buttons shown or tapped (and, where your phone reports it, which app a battle report was shared to), purchases started, completed or failed (the item and its price), daily rewards, missions and achievements, and cloud restores. Along with them, what Google Analytics for Firebase records itself: a random identifier for the app installation, app version, device model, operating-system version, language, approximate country and region (derived from the IP address, which isn't stored), when the app was first opened and used, in-app purchases (item, price and currency), and how the app was installed (for example from the link in a shared battle report). Never the advertising ID. | Sent to Google Analytics for Firebase (see §5), only to see how the game is played and where players get stuck. Where consent is asked for (EU, UK, Switzerland), nothing is sent unless you've consented to storing information on your device and to measurement. Anywhere, nothing is sent once you've switched off Settings > Anonymous statistics in the game. |
| Invite information (version 1.0.5 and later) | Only if you open Invite Friends or enter a friend's code: a random account ID made by Firebase Authentication (anonymous — no name, email, phone number or contacts), your invite code, the friend's code you entered, whether you've reached wave 10 since, and when each of these happened. The game keeps the account's sign-in token on your device. | Stored with Google Cloud Firestore through Firebase (see §5), only to give you and your friend the invite reward. The player whose code you entered can see how many of their invited friends have reached wave 10 — never who they are. |
| Battle report picture | When you tap Share battle report: a picture of your battle with the map and the wave you reached | Made on your device and handed to your phone's share sheet; where it goes is your choice. We never receive it. On iOS, choosing Save Image asks for permission to add the picture to Photos; the game never reads your photo library. |
| Advertising data (version 1.0.1 and later) | When an ad is loaded (once the game has started and, where consent is asked for, the consent flow allows it — so one is ready when you want it; never for Commander Pack owners) and when one is shown: on Android the device's advertising ID; on iOS the identifier for vendor (IDFV) instead (the advertising identifier isn't available, since we never ask for tracking permission); IP address and the approximate location derived from it; device model, operating-system version and app version; and whether an ad was loaded, shown, watched or tapped. Your consent choice, where one is asked for, is stored on your device. | Collected directly by Google AdMob (see §5) to load and show the ads you choose to watch, measure them, and prevent fraud and abuse — and, only if you've consented where consent is required, to personalize ads. We don't receive this data, only an anonymous confirmation that the video was watched so the game can give you the reward. |
We do not collect: your name, email address, phone number, contacts, photos, precise location, or browsing history.
We do not sell your data, and we do not share it with data brokers. Our only advertising partner is Google AdMob, which collects the data described in §3 directly when an ad is loaded or shown.
Our providers (§5) process data in the United States and other countries. Where data from the EU, UK or Switzerland is transferred, they rely on the safeguards the law provides for this (such as adequacy decisions and the European Commission's standard contractual clauses).
| Provider | What it does for us | Their privacy policy |
|---|---|---|
| Sentry (Functional Software, Inc.) | Receives crash and error reports | https://sentry.io/privacy/ |
| Unity Technologies | The game is built with the Unity engine, which may collect limited technical information about your device (such as device model and operating-system version) as described in Unity's own policy | https://unity.com/legal/game-player-and-app-user-privacy-policy |
| Apple (App Store) / Google (Google Play) | Distribute the app and process in-app purchases | https://www.apple.com/legal/privacy/ · https://policies.google.com/privacy |
| Google AdMob (Google LLC), with Google's User Messaging Platform | Serves the optional rewarded video ads (version 1.0.1 and later) and, where required, asks for and stores your ad consent | https://policies.google.com/privacy · how Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites |
| Google Analytics for Firebase (Google LLC) | Receives the gameplay statistics (version 1.0.2 and later) | https://policies.google.com/privacy · https://firebase.google.com/support/privacy |
| Google Firebase Authentication and Cloud Firestore (Google LLC) | Hold the anonymous invite account and the invite records (version 1.0.5 and later) | https://policies.google.com/privacy · https://firebase.google.com/support/privacy |
| Apple Game Center / Google Play Games Services | Run the optional per-map leaderboards; your sign-in, nickname, picture and who can see your scores are managed in their settings, not by us | https://www.apple.com/legal/privacy/ · https://policies.google.com/privacy |
Trenchline is not directed at children under 13, and we don't knowingly collect personal information from children. The game contains cartoon violence against zombies. The optional video ads are limited to content rated for teens. Because the game has no accounts and we collect no personal information ourselves, there is nothing tied to a child's identity for us to hold; if you believe otherwise, contact us and we'll look into it.
Depending on where you live (for example under the GDPR in the EU/UK, the CCPA in California, or PIPEDA in Canada), you may have the right to access, correct, delete or receive a copy of personal information about you, to object to or restrict its processing, and to withdraw consent you've given (for ads and gameplay statistics, under Settings > Privacy in the game, where consent is asked for). Anywhere, Settings > Anonymous statistics in the game switches the gameplay statistics off. Your progress is on your device and in your own iCloud or Google account, so you hold it yourself; the data our providers keep (crash reports, gameplay statistics, advertising data) is described in §7. For any other request, email worldtab.app@gmail.com and we'll respond within 30 days. You also have the right to complain to your data-protection authority.
If we change this policy, we'll update the "Last updated" date above. If a change affects what data we collect, we'll also mention it in the app's update notes.