Privacy Policy — The Final State

Last updated: September 2, 2026. Applies to The Final State on web and on Android (Google Play).

This Privacy Policy applies to The Final State, including the web version of the game and the Android application available through Google Play, collectively referred to as the Service.

This Privacy Policy explains what information is processed when you use the Service, how and why it is processed, and your rights in relation to such processing.

The Service is provided by Obox Systems LLC (“Obox”, “we”, “us”, “our”).

Definitions

For the purposes of this Privacy Policy:

• “Personal Data” means any information relating to an identified or identifiable natural person. A person may be identifiable directly or indirectly, including by reference to an identifier or to one or more factors specific to that person.
• “Processing” means any operation performed on Personal Data, including its collection, recording, storage, use, disclosure, transmission, restriction or deletion.
• “Controller” means the person or entity that determines the purposes and means of Processing Personal Data.
• “Processor” means a person or entity that Processes Personal Data on behalf of the Controller.
• “Consent” means a freely given, specific, informed and unambiguous indication of a person’s wishes by which they agree to the Processing of their Personal Data.
• “CCPA” means the California Consumer Privacy Act of 2018, as amended, including by the California Privacy Rights Act, together with its implementing regulations.
• “Personal Information”, for purposes of the CCPA, means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household.
• “Sensitive Personal Information” has the meaning given to that term under the CCPA.
• “Sell” or “Sale”, for purposes of the CCPA and other applicable U.S. state privacy laws, means the disclosure or transfer of Personal Information or Personal Data to another party for monetary or other valuable consideration, where such disclosure or transfer constitutes a sale under the applicable law.
• “Share”, for purposes of the CCPA, means sharing, renting, releasing, disclosing, disseminating, making available, transferring or otherwise communicating Personal Information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.
• “U.S. State Privacy Laws” means applicable comprehensive privacy laws of the United States at state level that provide privacy rights to residents or consumers, including the CCPA and other applicable state privacy laws.
• “Service” means The Final State, including its web version and Android application available through Google Play.
• “User”, “you” or “your” means a person who accesses or uses the Service.

Information We Process

The Final State does not require you to create an account or provide your name, email address, phone number, username, password or other information that directly identifies you in order to play.

The Service may process the following information.

Gameplay analytics

When you first use the Service, you may choose whether to allow gameplay analytics. No gameplay analytics described in this section are transmitted unless you select Allow.

If you allow analytics, we process:

• a random player ID, generated on your device. The identifier allows us to distinguish the same player across gameplay sessions, but it is not derived from or linked by us to your name, account, advertising identifier, device hardware identifier or other information that directly identifies you;
• a random game ID assigned to each match;
• the application version and event timestamp;
• information about game events, such as whether a match was started, completed or abandoned, or whether a rematch was selected;
• gameplay statistics, including map and game configuration, number of players or agents, rounds played, match duration, winner, end reason and information about regions, units and gold during the match.

The Service does not contain chat, username, profile or other fields in which players can enter text, upload files or provide information that directly identifies them.

Technical information

When you access the web version of the Service or otherwise connect to our infrastructure, standard technical information may be processed as part of the network connection, including IP address, request information, timestamp and user agent information.

Such information may be processed as necessary to operate, secure and maintain the Service, detect technical problems and protect our infrastructure.

Information stored on your device

The Service stores certain information locally on your device, including:

• saved games and game state;
• the random player ID;
• your analytics consent choice;
• game, interface and performance settings.

Saved games and settings remain on your device and are not automatically transmitted to us.

The player ID is transmitted together with gameplay analytics only if you have allowed analytics.

You may also manually export or import save files. Such files are handled as a result of your own action and are not automatically sent to Obox.

Information We Do Not Collect Through the Service

The Service does not request access to or collect through gameplay:

• your name, email address or phone number;
• contacts or address book;
• photos or other files stored on your device;
• camera or microphone data;
• precise or coarse device location;
• GPS data;
• advertising identifiers;
• IMEI, MAC address or similar hardware identifiers;
• Google account credentials;
• chat messages or other player entered content.

The Android application does not request permissions for location, camera, microphone, contacts or advertising identifiers.

The Service does not contain advertising SDKs or advertising networks.

Why We Process Information

Gameplay analytics are used to understand how the Service is used and to analyze and improve gameplay, game balance, performance and future versions of the Service.

Where consent is required under applicable law, the legal basis for processing gameplay analytics is your consent.

Technical connection information may be processed as necessary for the operation, security and integrity of the Service. Where the GDPR applies, such processing is based on our legitimate interests in operating and protecting the Service and our infrastructure.

Analytics and Your Choice

Gameplay analytics are optional.

When first presented with the analytics notice, you may choose Allow or No thanks. If you decline, gameplay analytics will not be transmitted and the core functionality of the game will remain available.

Your choice is stored locally on your device.

You may withdraw your consent at any time by clearing the relevant site or application data, which resets the stored consent choice. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Clearing site or application data may also delete locally stored saved games and settings.

Who Processes the Data

If you allow gameplay analytics, the analytics information described above is transmitted to PostHog, which provides analytics services to us and processes the information on our behalf.

PostHog receives the random player ID together with the relevant gameplay analytics. The player ID enables events associated with the same player to be linked across gameplay sessions, but we do not provide PostHog with your name, account information, advertising identifier, device hardware identifier or other information that directly identifies you as part of these analytics events.

For The Final State:

• automatic interaction capture is disabled;
• automatic page view tracking is disabled;
• session recording is disabled;
• device, browser, page, referrer and session properties that are not required for the analytics described above are excluded from outgoing analytics events;
• IP based geolocation is disabled.

The Service does not send gameplay analytics to advertising networks.

International Data Transfers

Obox Systems LLC is located in the United States. If you use the Service from another country, information processed in connection with the Service may be transferred to and processed in the United States.

In particular, if you consent to gameplay analytics, the analytics data described in this Privacy Policy is transmitted from your device to PostHog infrastructure located in the United States.

Where required by applicable data protection law, international transfers of Personal Data are made using an applicable lawful transfer mechanism. Depending on the jurisdiction and the recipient, this may include an adequacy decision or recognized data transfer framework, such as the EU-U.S. Data Privacy Framework, the UK-U.S. Data Bridge or the Swiss-U.S. Data Privacy Framework, or contractual safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, the UK Addendum or other locally required adaptations.

How Long We Keep Information

Gameplay analytics stored in our PostHog project do not currently have a fixed deletion period and may be retained for as long as the relevant analytics project remains active.

Technical logs and other infrastructure information are retained for as long as reasonably necessary for the relevant operational, security or technical purpose, subject to applicable legal requirements.

Information stored locally on your device remains there until deleted by you, overwritten by the Service or removed through your browser, application or device settings.

Your Rights and Options

Depending on applicable law, you may have the right to:

• obtain information about the processing of your personal data;
• access personal data relating to you;
• request correction or deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive personal data in a portable format where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data protection authority.

Requests to exercise your rights should be submitted in writing to [email protected].

The Final State does not maintain user accounts or link the random player ID to your name, email address or other information that directly identifies you. As a result, we may not be able to determine which analytics record relates to a particular person based solely on information identifying that person.

We may request information reasonably necessary to verify a request or identify the data to which the request relates.

Where applicable law does not require us to maintain, obtain or process additional information solely in order to identify a data subject, we are not required to collect additional identifying information for that purpose.

We will respond to requests within the time limits required by applicable law. Where permitted by applicable law, we may refuse to act on or charge a reasonable fee for requests that are manifestly unfounded or excessive, including because of their repetitive character.

Children and Minors

The Final State is currently made available on Google Play for a declared target audience of 13 years and older.

The Service does not require a player to provide their name, email address, date of birth or other information that directly identifies them in order to play.

Gameplay analytics are optional. Where applicable law requires parental or legal guardian consent for a user to consent to such processing, analytics should not be enabled unless the required consent has been obtained.

If we become aware that information has been processed in violation of applicable requirements concerning children or minors, we may delete the relevant data or take other measures required by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy if the Service, our processing practices or applicable legal requirements change.

The date at the beginning of this Privacy Policy identifies the current version.

Contact

If you have questions about this Privacy Policy or the processing of information in connection with The Final State, please contact us at:

Obox Systems LLC
1621 Central Ave, Cheyenne, WY 82001, United States
[email protected]