Plain-language summary: 12 Towers Interactive makes cozy mobile games and this website. We collect as little personal data as we can, we don’t sell it, and we only use it to run our games, answer your messages, and keep things working. This policy follows India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
01 Who we are
12 Towers Interactive (“12 Towers”, “we”, “us”, or “our”) is an independent studio incorporated in India that designs and publishes 2D mobile games and operates this website. This Privacy Policy explains how we handle personal data across our websites, games, and related services (together, our “Services”).
This policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under it, and other applicable Indian law. Under the DPDP Act, 12 Towers acts as a Data Fiduciary (the entity that decides how and why your personal data is processed), and you, the individual, are the Data Principal.
02 Information we collect
Information you give us
- Contact details — when you email us or use a contact form, we receive your name, email address, and whatever you choose to write to us.
- Career enquiries — if you apply for a role, any details you send us (CV, portfolio links, etc.).
Information we collect automatically
- Device & usage data — when you use our games or site, we may receive device type and operating system, app version, language and region, and basic interaction or performance data.
- Gameplay data — in-game progress, settings, and similar information needed to run the game and save your progress.
- Diagnostics — crash reports and performance logs that help us fix bugs and improve stability.
- Identifiers — where used, mobile advertising identifiers and similar IDs (you can usually reset or limit these in your device settings).
We try to minimise what we collect, and several of our games can be played without you giving us any personal information at all.
03 How we use your information
- To provide, operate, and maintain our games and website.
- To save your progress and remember your preferences.
- To respond to your messages, support requests, and job applications.
- To understand how our Services are used so we can improve them.
- To diagnose problems, prevent fraud or abuse, and keep our Services secure.
- To comply with our legal obligations.
We do not sell your personal information.
04 Our legal basis
Under the DPDP Act, we process your personal data on the basis of your consent, or for certain legitimate uses permitted by the Act — for example, where you voluntarily provide data for a specified purpose (such as emailing us), or to comply with a legal obligation.
When we rely on consent, we ask for it through a clear request, you may withdraw it at any time (which is as easy as giving it), and withdrawing it does not affect processing already carried out. Where you provide personal data on behalf of another person, you confirm you are authorised to do so.
05 Who we share information with
We share personal information only as needed to run our Services, and we ask our partners to protect it:
- Service providers — hosting, analytics, crash reporting, and customer-support tools that process data on our behalf.
- Platform & store providers — the app stores and platforms that distribute our games operate under their own privacy policies.
- Advertising partners — where a game shows ads, ad providers may process limited data to deliver and measure them.
- Legal & safety — authorities or advisors where we’re required by law, or to protect our rights, users, or the public.
- Business transfers — if our business is reorganised, merged, or acquired, information may transfer as part of that deal.
06 How long we keep it
We keep personal information only for as long as we need it for the purposes described above, or as required by law. When we no longer need it, we delete or anonymise it. For example, we keep contact-form messages for as long as needed to handle your enquiry and any follow-up.
07 Your rights as a Data Principal
Subject to the DPDP Act, you have the right to:
- Access a summary of the personal data we process about you and how we process it.
- Correction, completion, and updating of your personal data, and erasure where it is no longer needed for the purpose it was collected.
- Grievance redressal — raise a complaint with us about how we handle your data.
- Nominate another person to exercise your rights in the event of your death or incapacity.
- Withdraw consent at any time where our processing is based on consent.
To exercise any of these rights, email us at studio.12towersinteractive@gmail.com. We will respond within the time required by law. If you are not satisfied with how we handle your grievance, you may approach the Data Protection Board of India. You are also expected to provide accurate information and not impersonate others when exercising these rights, as required by the DPDP Act.
08 Children’s privacy
Under the DPDP Act, a child is anyone under 18 years of age. Where we knowingly process a child’s personal data, we will obtain verifiable consent from a parent or legal guardian, and we will not carry out tracking, behavioural monitoring, or targeted advertising directed at children, or any processing likely to cause harm to a child. Some of our games are designed to be friendly and welcoming and may appeal to younger players, so we limit the data we collect accordingly. If you believe a child has provided us personal data without the required consent, please contact us and we will take steps to delete it.
09 Security
We take reasonable security safeguards — technical and organisational — to protect personal data against loss, misuse, and unauthorised access, in line with the DPDP Act and the reasonable-security-practices expectations under the Information Technology Act, 2000. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by law. No method of transmission or storage is ever completely secure, however, so we cannot guarantee absolute security.
10 International transfers
We and our service providers may process personal data outside India. Where we transfer personal data across borders, we do so in accordance with the DPDP Act, including any restrictions the Government of India may notify on transfers to certain countries, and we take steps to ensure your data remains protected.
11 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above and, where appropriate, let you know through our Services. Please review it periodically.
Contact & Grievance Officer
For any questions about this policy, your personal data, or to exercise your rights or raise a grievance under the DPDP Act, you can reach our Grievance Officer:
Email studio.12towersinteractive@gmail.com
We aim to acknowledge and address grievances within the timelines prescribed under applicable Indian law.