Privacy Policy

Version of 2026-10-07. This is a translation; if it differs from the Russian version, the Russian version prevails.

This policy explains what data the game Evertech Sandbox (Android, iOS, Windows/Steam) and its online services — the build gallery, the portal publish.evertechsandbox.com, the mod and map catalogs, multiplayer (the "Service") — collect, why, where it is kept and how to delete it. The data controller is Individual Entrepreneur Vitalii Andreevich Sumin, INN 701771626908, OGRNIP 318703100073617, Tomsk, Russia. Contact for data questions: vitaly.sumin+sandbox@gmail.com.

1. Without an account

You can play, browse and download builds without an account; then we don't know who you are. Services built into the game (ads, analytics, crash reports, multiplayer) receive technical data — see section 5. Your answer to the game's age question stays on your device and is never sent to us.

2. Gallery and portal account

Accounts are for players aged 14 and older. Before you sign in on the portal we ask for your month and year of birth, only to check your age; the answer is not stored. If you are not 14 yet, your browser remembers the refusal for a day. When you sign in with VK ID, Google, Google Play Games or Apple, that service gives us your account id, name, e-mail address (if it shares it; Apple lets you hide it) and avatar link. We never receive or store passwords. We also keep:

• your nickname, if you set one;
• the game installation's technical id, IP address, browser details, date and time of sign-ins — for security and abuse prevention;
• your publications (builds, screenshots, titles, descriptions, tags), comments, likes, reports and notification settings;
• records of your consents (which document, when, from where).

The legal basis is your consent to processing. Other players see your nickname, publications and an "online now" mark under a separate consent to distribution; any publication can be made anonymous.

3. Where data is kept

Account and publication data is kept on servers in the Russian Federation. Only the controller and the moderators they appoint can access it, to the extent moderation needs.

Publications (builds, screenshots, descriptions, comments) and the text of reports may be translated into the game's languages and checked during moderation with AI services whose servers may be outside Russia (OpenRouter, Anthropic). These services receive only the content of publications and reports and the author's name as other players see it: the nickname, or, if none is set, the name in Latin letters. Your e-mail address, IP addresses and other account data are not passed to them.

4. How long

For as long as the account exists. Publications removed by moderators are deleted with their files. Deleting the account deletes all its data: publications, screenshots, comments, likes, reports, the sign-in and consent log; for Sign in with Apple, the token issued to us is revoked.

5. Third-party services in the game

The game uses services that process data under their own policies: ad networks through the Clever Ads Solutions mediator (for example Google AdMob), Firebase Analytics and Crashlytics (Google), AppMetrica (Yandex), Photon Engine (multiplayer and chat), Bunny.net (file delivery). They may receive the device advertising id, IP address, device details and game events; some process data outside Russia. For players under 13, ads are not personalized and ad personalization in analytics is turned off. The Steam version has no ads.

6. Children

The game is for a general audience, including children. Gallery accounts start at 14; younger players use the gallery without an account. If you are a parent and believe a child under 14 has created an account, write to vitaly.sumin+sandbox@gmail.com and we will delete it.

7. Your rights

• learn what data of yours we process and get a copy;
• correct inaccurate data (the nickname — in the settings);
• delete your account and all data: in the game (Gallery → My → Delete account) or on the portal (Settings → Delete account);
• withdraw your consents — by deleting the account or by writing to vitaly.sumin+sandbox@gmail.com;
• complain to Roskomnadzor or to the data protection authority of your country if you believe your rights were violated.

We answer requests within 10 business days.

8. Security

Connections to the Service are encrypted (HTTPS). Access to data is restricted. In case of a data breach we notify the authorities and affected users within the time the law sets.

9. Changes

When the policy changes, we publish the new version on this page and, if the consent terms change, ask you to accept them again.

Documents: Terms of Use · Consent to processing of personal data · Consent to distribution of personal data · Privacy Policy ·