Privacy Policy
Last updated October 9, 2026
This policy explains what Insoola Information Technology Solutions ("Insoola", "we", "us") collects when you use our websites, games and apps, including insoola.org, Country Simulator, Countryballs, Countryball Defenders, Time Crush and Lorica (together, the "Services"), why we collect it, and the choices you have. A Service may show its own notice for something specific to it; that notice adds to this policy.
What we collect
- Game and account data. Your player id, the name you choose, your progress, items, scores, ranks and settings, kept on our servers so your game is the same on every device.
- Google sign-in. Signing in with Google is optional. When you use it, Google sends us a signed token with your Google account id and, depending on the Service, your name, email address and profile picture. We use it only to link and restore your save. Some Services store just a one-way hash of your Google account id, not your email.
- Purchases. Payments are handled by Xsolla, our payment partner. We receive an order id, the item, the amount and its status so we can deliver what you bought. We never see or store your card or bank details.
- Things you write. Names, chat messages, stories and other text you enter, so the Service can show and use them. In AI features (such as Lorica), the text you write is sent to an AI model provider to produce a reply.
- Technical data. IP address, browser and device type, language, the page that sent you, play sessions, taps that matter to the game, and error reports. We use these to keep the Services secure, stop cheating and abuse, limit spam, fix bugs and count how the Services are used. We count usage on our own servers; we do not use third-party ad trackers.
- On your device. We use local storage and similar browser storage to keep your sign-in token, your save and settings, and to let games work offline. We do not use advertising cookies.
How we use it
- To run the Services: save progress, sync devices, deliver purchases, show leaderboards and respond to you.
- To keep them fair and safe: detect cheating, fraud and abuse, and enforce our Terms.
- To improve them: understand which features work, fix errors and balance games.
- To meet legal and tax duties.
We do not sell your personal data, and we do not share it for advertising.
Who we share it with
Only with service providers that help us run the Services, under their own privacy and security commitments:
- Cloudflare, which hosts our servers and databases.
- Google, for optional sign-in.
- Xsolla, for payments and order support.
- AI model providers, for AI features that need them.
We may also disclose data when the law requires it, to protect players or the Services, or as part of a merger or sale of the business, in which case this policy keeps applying to your data.
Where it is kept and for how long
Our providers may store and process data outside your country, including in the United States. We keep game data while your account is active. Guest saves that are not played for a long time may be removed. Purchase records are kept as long as tax and accounting laws require. Security logs are kept for a short time.
Your choices and rights
- You can play as a guest without signing in to Google.
- You can unlink Google by removing Insoola access at myaccount.google.com/permissions.
- You can ask us for a copy of your data, to correct it, or to delete your account and data by emailing ben@insoola.org. Tell us which Service and include your player name or id. We reply within 30 days.
- Under the Philippine Data Privacy Act of 2012 and similar laws where you live (such as the GDPR or CCPA), you may also object to processing or complain to your data protection authority, such as the National Privacy Commission in the Philippines.
Children
Our Services are for a general audience and are not directed at children under 13. We do not knowingly collect personal data from children under 13 without a parent's consent. If you believe a child has given us personal data, email us and we will delete it.
Security
We use HTTPS everywhere, store sign-in tokens hashed, and limit who can access data. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you as the law requires.
Changes
We may update this policy. We will change the date above and, for important changes, tell you in the Services.
Contact
Insoola Information Technology Solutions, Pasay City, Metro Manila, Philippines. Email ben@insoola.org.