Applies to the mobile game Boomstack
(io.nestengineering.boomstack) on Android and iOS.
Last updated 29 August 2026.
Boomstack has no accounts and no sign-up. We never ask for your name, your email address, your phone number or your location. What the game does send is listed below in full.
Boomstack is made by Nest Engineering, the data controller for the purposes of the GDPR. For any privacy question, or to exercise any of the rights described below, write to support@nestengineering.io.
The save file itself never leaves your device. Your progress — levels cleared, stars, coins, boosters, settings and language — is written to the app’s own storage. There is no cloud save, we hold no copy, and we cannot restore it for you. Deleting the app deletes it permanently.
That is not the same as saying none of those numbers are ever sent. The analytics events described below carry some of the same values — how far you have unlocked, your coin balance after a change, the stars and coins from a level you just finished. They travel as individual events tied to a random installation identifier, not as a copy of your save, and they cannot be turned back into one. We would rather say this plainly than let “stored only on your device” do work it cannot do.
| Data | Why | Who receives it |
|---|---|---|
| Gameplay events App launches and session length, levels started, won and failed, stars earned, shots taken, your coin balance and what changed it, how far you have unlocked, whether you have removed ads, shop and ad interactions, app version, platform (Android/iOS), the game’s language, and your device’s regional locale (for example en_GB), which indicates your country. Your IP
address is not recorded and is explicitly discarded, so nothing is
located more precisely than that. |
To understand which levels are too hard, where players stop playing, and whether a change made the game better or worse. | Mixpanel |
| An installation identifier A random string the app generates the first time it runs, stored with your saved game. |
To tell one player’s events apart from another’s without knowing who either of them is. The same identifier is attached to crash reports, so a crash can be matched to the session it happened in. | Mixpanel and Sentry |
| Crash and performance reports The error, a stack trace, device model, OS version, app version, your language setting, and the installation identifier above. The app’s own log file is attached to every report, along with the level you were playing and a short trail of the levels you started, won or failed just before it happened. That log records what the game did, not what you typed or who you are. No name, no email, and no IP address — the SDK’s personal-data option is left off. |
To find and fix crashes, and to see how many players one crash affects. | Sentry |
| Advertising data Handled by Google’s ad SDK. May include your device’s advertising identifier, IP address, device and OS information, and which ads you were shown — subject to your consent choices, see below. The game also asks for your year of birth once, and sends Google a yes/no age category derived from it (whether you are below the age of consent for advertising). The year itself is never stored or sent — only the yes/no. |
To show ads, to cap how often you see them, and to measure them. | Google AdMob |
| Purchase events Which product, the price as your store displays it, whether the purchase completed, failed or was restored, the reason for a failure, and the store’s transaction id. Attempts that fail or that you cancel are recorded too. Never your card number, billing address or store account. |
To deliver what you bought, and to find out where purchases break. | Apple / Google, and Mixpanel |
It is a random value created by the app itself on first launch and kept inside the game’s own save file. It is not your device’s advertising ID, not a hardware serial, and not shared with any other app. Uninstalling Boomstack destroys it; reinstalling produces a new, unrelated one.
Boomstack shows ads between some levels, and optional ads you choose to watch in exchange for a reward. Ads are served by Google AdMob.
Google’s handling of this data is governed by the Google Privacy Policy and how Google uses data from apps that use its services.
All payments are taken by Apple or Google. We never see or receive your card number, your billing address or your store account details — those never reach us or the game. What we do record is listed in the table above: the product, the displayed price, the outcome, and the store’s transaction id, including for attempts that fail.
Being precise about analytics, because it would be easy to imply otherwise: analytics and crash reporting begin at first launch and are not currently behind the advertising consent form, so declining that form does not switch them off. You can object to this processing at any time under Art. 21 by writing to us, and uninstalling the game stops it outright.
Analytics events are retained by Mixpanel for up to 12 months. Crash reports are retained by Sentry for up to 90 days. Advertising data is retained by Google under Google’s own retention policy. Data on your device is kept until you delete the app.
If you are in the EEA, the UK, Switzerland, California or another region with comparable law, you have the right to access, correct, delete, restrict, port or object to the processing of your personal data, and to withdraw consent at any time.
To exercise any of these, email support@nestengineering.io and tell us your device model and roughly when you installed the game. We respond within 30 days. You also have the right to complain to your local data protection authority.
Please understand the limit this creates. We hold no account for you and the installation identifier exists only inside the app on your device, so we have no reliable way to match a request by email to a particular set of analytics events. This is a consequence of collecting as little as we do, not an evasion — and it is why the most complete deletion available to you is to uninstall the game. Doing that destroys the saved game, the installation identifier and every link between you and anything already collected.
Boomstack is not directed to children under 13 (or the equivalent minimum age in your country), and it is not enrolled in Google Play’s Designed for Families programme.
On first launch the game asks for your year of birth. If the answer puts you below the age of consent, personalised advertising is switched off for you and Google is told to treat the request as child-directed.
What that answer does not currently do is stop the analytics and crash reporting described above. Those start with the app and are not wired to the age answer, so a player who tells us they are under 13 still has gameplay events and the installation identifier collected. We would rather write that down than claim a protection the app does not yet implement. If you are a parent and want a child’s data removed, email support@nestengineering.io; deleting the app stops the collection immediately.
Our service providers process data in the United States and the European Union. Where data leaves the EEA it is transferred under the European Commission’s Standard Contractual Clauses or an adequacy decision.
If we change what the game collects, we will update this page and change the date at the top. Material changes will also be announced in the app.