Privacy Policy: CryptoPumpGame
Last updated: 9 November 2026
CryptoPumpGame (Crypto Pump Game on Google Play) is a trading simulation game made by SemBricks. It uses fake money and fake tokens only. This policy explains which data the game uses, why, and what your rights are.
1. Who is responsible
CryptoPumpGame is made by SemBricks, a company based in the Netherlands. Privacy contact: privacy@sembricks.com.
2. What our server stores
You don't need an account. We never ask for your name, e-mail address or phone number. When you first open the game, it creates a random player ID and registers it with our server. With that ID, our server stores:
- when you started playing and when the app last contacted us;
- your device type (Android or iOS), the app version and the app language;
- your game wallet: a generated address and its encrypted key. It only exists inside the game and never holds real crypto;
- your game activity: fake balances, trades, holdings, liquidity positions, fees received, tokens you created, pump timers, badges and hourly portfolio values for the rankings;
- records of rewarded ads you watched, so a reward is paid only once, including how many ads you watched and, from app version 0.3.0, what Google reports each ad earned;
- if you allow notifications: a push token, so we can reach your device;
- if you buy something: the product, the order ID, the purchase date and a scrambled (hashed) copy of Google Play's purchase token.
We need this data to run the game for you (performance of our agreement with you). The player ID is random. It is not your phone's advertising ID or hardware ID.
Connecting a Google account (optional). From app version 0.4.0 you can connect a Google account under Settings, so you can continue your game on another phone. You choose the account in Google's own sign-in screen. Our server then receives a one-time sign-in token from Google, checks it, and stores only your Google account ID (a number Google uses for your account) and the date you connected it. We don't store your name, e-mail address or profile picture. If that Google account already has a game, the phone switches to that game and the game that was on the phone is deleted. We use the Google account ID only to recognise your game (performance of our agreement with you). It is removed when you delete your data.
From app version 0.3.0, the app also sends your device's Android ID (on iOS: the ID for this app's vendor) when it creates a player. Our server doesn't store that ID, only a scrambled (hashed) copy of it, with the date it was first and last used and how many players were started on it. We use it only so that each device gets the starting balance once, also after a reinstall or after deleting your data, which prevents abuse of the game (our legitimate interest). We keep it for as long as the game runs, and for at most 2 years after the last player was started on that device.
Our server is in the EU (Germany). Like any web server, it keeps a technical access log with IP addresses for security, based on our legitimate interest. That log is deleted automatically after 14 days. We don't link it to your player ID, except to investigate abuse of the game.
The app doesn't access your location, contacts, photos or files. We have no analytics of our own and we don't sell your data.
3. What other players see
The rankings show a shortened version of your game address, your portfolio value and your gain. Tokens you create are public, including the name and symbol you type, so never use personal details there. Each token's trade history is public too, without any address or name. The rankings may include simulated traders, and the market includes simulated activity, to improve gameplay.
4. Advertising (Google AdMob)
The game shows rewarded ads through Google AdMob, only when you choose to watch one. To show and count ads and to prevent fraud, Google's software collects your IP address (which can indicate your general location), your interactions with ads, diagnostic information and device identifiers, including the advertising ID. Google can use this data to personalise ads.
In the European Economic Area, the United Kingdom and Switzerland, the game first asks for your consent through Google's consent form. Where that form applies, you can change your choice under Settings → Ad privacy choices. You can also reset or delete your advertising ID in your Android device settings.
Google processes this data under its own responsibility. More information: How Google uses information from sites or apps that use its services and the Google Privacy Policy.
5. Other services we use
- Google Play handles payments. We never see your card or bank details.
- Google Sign-In, only if you connect a Google account: Google shows the sign-in screen and confirms your account to us. See the Google Privacy Policy.
- Expo and Firebase Cloud Messaging (Google) deliver notifications. They receive your push token and the message text. You can turn notifications off in your device settings.
These companies may process data outside the EU, under the safeguards the law requires, such as the European Commission's standard contractual clauses.
6. Your rights
You can ask to see, correct or receive the data that belongs to your player ID, and you can object to how we use it. Questions or complaints can go to privacy@sembricks.com or to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We keep your data until you delete it. Hourly portfolio values are removed after about a month.
Delete your data
You can delete your data in two ways:
- In the app: open Wallet → Settings → Delete my data and confirm. This takes effect immediately.
- By e-mail: send your player ID to privacy@sembricks.com. The ID is shown under Wallet → Settings. We delete your data within 30 days and confirm by e-mail.
This removes your player ID, the link to your Google account, game wallet, balances, holdings, liquidity positions, income, badges, ad records, push token, portfolio history and purchase record from our server. It can't be undone and doesn't refund a purchase.
Some things stay, with nothing linking them to you: tokens you created stay on the market because other players hold them, and your past trades stay in those tokens' public history. Server access logs disappear within 14 days. The hashed device ID from section 2 also stays, so a new player on the same device doesn't get another starting balance; it can't be traced back to your deleted player. Google keeps its own records of ads and purchases.
Uninstalling the app doesn't delete your data from our server. Delete it first in the app, or e-mail us.
7. Age
CryptoPumpGame is meant for players aged 18 and older. It isn't directed at children. If you believe a child has used the game, contact privacy@sembricks.com and we'll delete the data.
8. Changes to this policy
When this policy changes, we update the "Last updated" date at the top of this page.
9. Contact
SemBricks
privacy@sembricks.com
sembricks.com