Last updated: 29 September 2026
The short version. Towership has no Onela account. We never ask for your name, your email address or your phone number. What the game collects is anonymous gameplay statistics, the advertising identifier your phone gives to apps so that rewarded ads can be shown and paid for, purchase events so that we can tell which of our ads work, and — only on Android, and only if you sign in with Google Play Games — what that service needs to keep your progress safe. On iPhone, your progress stays on the device.
Towership: Zombie Survival (the “game”, package com.onelagames.towership
on Android and iOS) is published by ONELA MARKET CO., LTD.
(บริษัท โอเนล่า มาร์เก็ต จำกัด), a company registered in Thailand under number
0505568000722, trading as Onela Games. We are the data controller
for the data described below.
Registered address: 54/1 Traswong Road, Mueang Chiang Mai, Chiang Mai 50000, Thailand.
For any question about this policy or your data, write to onelamarket@gmail.com.
There is no sign-up with us and no Onela user profile. This is everything the game, and the services built into it, collect.
| What | Why | Who processes it |
|---|---|---|
| Gameplay events Runs started and finished, waves and Tiers reached, upgrades and cards obtained, Gems spent, rewards claimed, screens opened, whether you liked the game when asked, which ads were shown and what they earned. Firebase attaches them to a random identifier of this installation (and, on iOS, to the vendor identifier), with basic device information: model, operating system version, language and the country derived from your IP address. |
To understand which parts of the game are too hard, too easy or confusing, and fix them. | Google Firebase Analytics |
| Game settings and server time The game downloads a few switches (for example, whether an offer is shown) and reads the current time from a server. |
To adjust the game without an update, and to run daily and weekly events fairly. | Google Firebase Remote Config; our own time server (hosted by Vercel), which sees your IP address when it answers and keeps nothing |
| Push notification token A random token that lets a notification reach this installation. |
To send the notifications you allowed (for example, when a reward is ready). You can turn them off in your phone settings. | Google Firebase Cloud Messaging, Apple Push Notification service |
| Game account and saved progress (Android only, and only if you sign in) Your Google Play Games player ID and display name, and a copy of your saved game (with the name of the device that saved it, so that you can choose between two copies). On iPhone there is no sign-in and no cloud save: progress is kept only on the device. |
To keep your progress when you change or reinstall your phone. These stay with Google: they are never sent to us or to any other partner. | Google Play Games Services (saved games) |
| Advertising identifier, device data and approximate location Your device's resettable advertising ID (on iOS, only if you allow tracking), IP address and the approximate location (country, region) derived from it, device model, operating system version, language, and which ads were shown and what they earned. |
To show rewarded video ads, to avoid showing you the same ad repeatedly, to prevent ad fraud, and to measure what an ad earned. | Unity LevelPlay (ironSource), and through it Unity Ads, Google AdMob and Meta Audience Network |
| Purchases and app installs Which product was bought, the price and currency your store displayed, the order number, and that the app was installed or opened. |
To grant what you paid for, and to measure which of our Facebook and Instagram ads brought players to the game. | Apple App Store, Google Play (we never see your card details); Meta (Facebook SDK); Google Firebase Analytics |
| Crash and performance diagnostics Technical reports produced by the advertising SDKs when they fail or run slowly. |
To keep ads working and the game stable. | Unity LevelPlay (ironSource), Unity Ads, Google AdMob, Meta Audience Network |
| Feedback and bug reports you choose to send The text you type in the in-game feedback form or in “Report a problem”, with the game version, platform, language, your progress (Tier, best wave, number of runs) and a random identifier drawn by the game at installation. A bug report can also carry technical details — device model and system version (as reported by the game's web view), screen size, the screen you were on and the time — unless you untick “Attach technical info”. These forms never ask for your email address and send no screenshot. Our server also sees your IP address, which it uses only to limit abuse. |
To read and answer your feedback, fix the bug you reported, and tell two messages from the same installation apart. | Our own server (games.onelamarket.com) |
We do not collect your name, email address, phone number, contacts, photos, files, microphone, camera or precise GPS location. The game asks for no such permission, and you can verify that in the permission list on its store page. If you write to us by email, we receive your email address and use it only to answer you.
The game shows rewarded video ads only — the kind you choose to watch in exchange for something. There are no banners and no ads that interrupt play. You never have to watch one.
Ads are supplied through Unity LevelPlay, which requests them from ironSource, Unity Ads, Google AdMob and Meta Audience Network. These partners use the advertising identifier to select ads and to count them. Meta also receives install, open and purchase events so that we can measure our own advertising on Facebook and Instagram. Their own privacy policies apply to that processing:
On iPhone, the game asks your permission before any of this starts. The “Allow tracking” prompt (App Tracking Transparency) is shown before the advertising and Meta SDKs are started. If you choose “Ask App Not to Track”, your advertising identifier is not shared with anyone.
You can switch personalised advertising off at any time, from your phone.
Ads still appear after you opt out — they are simply less relevant to you.
We process gameplay statistics, game settings, push tokens, diagnostics and feedback on the basis of our legitimate interest in running, fixing and improving the game, and purchases on the basis of the contract you enter into when you buy something. On iPhone, personalised advertising and advertising measurement rely on the consent you give, or refuse, in the “Allow tracking” prompt, and you can withdraw it at any time in the device settings above. On Android the game does not currently show a consent screen of its own: there, advertising and advertising measurement rely on our legitimate interest in keeping the game free and measuring our own advertising, and you can object at any time by deleting your advertising ID as described above or by writing to us. Cloud saves (Android only) are processed only when you choose to sign in.
We do not sell personal information for money. Sharing the advertising identifier and ad events with advertising partners may count as “sharing” for cross-context behavioural advertising under the CCPA/CPRA. You can opt out by deleting or resetting your advertising ID (Android) or by turning tracking off (iOS), as described above, or by writing to us. We will not treat you differently for exercising your rights.
This game is not directed at children under 13 (or the higher age of digital consent in your country), and we do not knowingly collect personal information from them, in line with the US Children's Online Privacy Protection Act (COPPA) and the GDPR. If you believe a child has provided us with data, write to us at the address above and we will delete it.
The services above may process data on servers outside your country, including in the United States, under the safeguards they describe in their own policies (such as the European Commission's standard contractual clauses). Firebase Analytics data is retained for 14 months before being deleted automatically. On Android, saved games stay in your Google Play Games account until you delete them there; on iPhone, progress is stored only on the device. Feedback messages and bug reports are kept as long as they are useful to improve the game, and deleted on request. Advertising and measurement partners retain data according to their own policies, linked above. All data travels over encrypted connections (HTTPS).
Depending on where you live, you may have the right to access the data held about you, to have it corrected or erased, to object to or restrict its processing, to withdraw consent, and to complain to your data protection authority. Because the game holds no Onela account, the practical way to exercise these rights is:
If you would like us to act on a request directly — for example to delete feedback you sent us or to ask Firebase to delete analytics data linked to your installation — write to onelamarket@gmail.com and we will answer within 30 days.
If we change what the game collects, we will update this page and change the date at the top. The date is the honest test: if it has not moved, nothing has changed.