Privacy policy

What this notice covers

This notice covers the Outslide Coming soon website and authorized pre-release testing. Outslide is not publicly released. This website does not offer account registration, checkout, advertising or a newsletter signup. Features described below process data only when they are offered and enabled in a test version. We will update this notice for the verified public release.

Who is responsible

Bending X - FZE operates Outslide. Our address is Dubai Silicon Oasis, Dubai, United Arab Emirates. For privacy, parental requests or account deletion, email support@bending-x.com and identify your request as concerning Outslide.

Visiting this website

Google Cloud serves the pages and their images. Requests can produce operational logs containing your IP address, requested URL, time, browser and connection information. We use these to deliver and secure the website. Our pages set no cookies, contain no analytics or advertising scripts, collect no form submissions and embed no third-party media. Following an external link is subject to that service’s privacy practices.

Playing and testing Outslide

Local play

Level progress, settings, saved board, lives and resources can stay on your device to run and resume the game.

Installation and account services

When a test enables our cloud service, it can register a random installation identifier, platform, app version, language and service timestamps. Optional Apple or Google login provides the identifiers and any name or email the provider supplies. Explicit account linking associates the same Outslide account across platforms; matching emails alone do not merge accounts.

Cloud progress and inventory

Enabled services process verified level completions, resource balances, rewards, spending and account/installation associations. These support continuity and prevent duplicate credit or spending. Game Center and Play Games statistics are not our consumable ledger.

Purchases

Apple or Google handles checkout. Enabled purchase verification processes the store, product, quantity, transaction reference or purchase token, refund state and related app/service metadata. Unity IAP also supplies purchasing services. Outslide does not ask for card or bank details. Test purchases must be distinguished from real purchases.

Push and newsletters

An enabled notification service can process a device push token and its account or installation association. OS notification permission is separate from marketing consent. A newsletter preference initially set to enabled is a product preference, not permission to send marketing. No public newsletter or marketing campaign is launched.

Advertising and diagnostics

There is no advertising on this website. Earlier private test builds use direct Google AdMob. From private build 27, players who explicitly select an adult age can use Appodeal mediation with AdMob, BidMachine and Meta adapters; child or unknown-age sessions use direct Google AdMob without initializing Appodeal. Requests retain non-personalized advertising, child/under-age safeguards and a maximum G rating on Google ads. Precise location and advertising-ID access are not requested. Verified reward callbacks use an environment-specific opaque account identifier, reward type, impression reference and time; they do not include the player’s email. Enabled advertising services may process IP-derived approximate location, device/app identifiers, impressions, interactions, diagnostics, consent choices and reward-verification records. Optional first-party analytics and crash sharing are off by default; purchasing, authentication, attestation and advertising SDKs can still process necessary service data. Non-personalized advertising does not mean no data collection.

Children and choices

The planned puzzle audience includes children under 13 and older players. Public online account and advertising services have not launched; online testing is restricted to authorized adult testers. A store content rating is not parental consent or permission to pay. The current private test build asks neutrally for an age before optional login and notification permission. The numeric entry is used on the device to choose a broad age group; we do not save or upload the exact age or date of birth. Players who indicate an age below 18, or skip the question, can play as guests; the app does not offer them optional Apple/Google login or request notification permission. This self-declared age choice is not verified parental consent. Required parental notices and consent, account eligibility and actual child/unknown-age SDK behavior must still be verified before public online release. We do not treat unknown age, login, an OS permission or a default preference as adult or parental authorization.

Where offered, privacy controls change optional app analytics and crash sharing. Device Settings control notification permission. Disabling a newsletter preference revokes its delivery eligibility; enabling it again does not revive an earlier approval. Accepting terms or signing in does not authorize marketing.

Purposes and providers

We process necessary website, requested account, gameplay and purchase data to provide the service, answer support requests and protect against fraud and technical abuse. Optional analytics and marketing require the applicable consent. Children’s data requires the applicable parental safeguards. Where applicable law requires a legal basis, requested service processing relies on performance of the service agreement, necessary security on the relevant legitimate interest, and legally required records on legal obligations.

Google Cloud hosts the website and prepared server services. Enabled test services may use Google Identity Platform/Firebase Authentication, App Check and Messaging; Apple and Google provide their authentication and store services; Unity IAP supports purchasing. Private build 27 adds Appodeal, BidMachine and Meta to adult advertising; earlier builds and child or unknown-age sessions use direct Google AdMob. Bidon is an iOS adapter dependency whose mediation route is disabled. Provider notices are available from Appodeal, BidMachine, Meta and Google. Service providers can process data outside your country. Final provider routing and applicable transfer safeguards must be reconciled before public online release. Firebase Analytics collection is disabled in the current native configuration.

Retention and data minimization

Device data

Local saves remain until cleared through available app controls or device app-data deletion. Removing the app does not delete a separate cloud account.

Website logs

Regular operational logs routed to the project’s default Cloud Logging bucket have a configured 30-day retention. This is not a promise about every provider’s security or audit logs.

Active test accounts

Account, progress and inventory data supports the enabled service while the account is used. You can request deletion at any time. Profile/game data and push credentials are handled separately from purchase and security evidence.

Relevant financial records

For real transactions, relevant accounting records must be kept for at least seven years after the end of the fiscal period. Bending X’s fiscal year ends on 31 December. For example, a relevant 2026 record is retained through 31 December 2033, unless another obligation requires longer. This requirement does not apply automatically to every gameplay action or make a Sandbox test order a real financial transaction.

Closed-account records

Cleanup can replace detailed consumption history with totals and remove raw profile information from retained financial records. Hashed or random identifiers remain personal data while linkable. Necessary purchase/refund and duplicate-delivery evidence remains separate for its justified legal or security purpose and is not used for marketing. Merely closing an account is not proof that identity revocation, all cleanup phases or provider backups have completed.

Requests and deletion

You may have rights to access, correct, delete or obtain your data, restrict or object to processing, withdraw consent and complain to a supervisory authority, depending on your location. Parents can ask about their child’s data. Use our Outslide account and data deletion page or email support@bending-x.com. We verify ownership proportionately and confirm the request’s scope and outcome. Do not send passwords, complete payment-card details or private device credentials.

Logout, clearing local saves and deleting a cloud account are different actions. Deletion can remove progress and remaining resources and does not automatically request an Apple or Google refund. Any necessary retained records and incomplete provider cleanup are explained when handling the request. Automated completion of the final app deletion flow remains under testing; the public contact route does not represent that a deletion has already completed.

Security and updates

We use HTTPS and access controls and verify protected server operations instead of trusting a client balance. No system is completely secure. We date material changes and provide additional notice or obtain consent where required. The public app’s data declarations and this notice must match its enabled services before launch.

Provider information

Firebase privacy · Google Privacy Policy · Apple Privacy · Unity Privacy Policy