ONE MORE FLOOR: privacy policy

Last updated: 7 November 2026 · Italiano

This is the privacy policy of the game ONE MORE FLOOR for Android (Google Play, com.davide6414.onemorefloor), of its test builds and of the site playonemorefloor.com. The data controller is Davide Crupi, an independent developer: for any question or request about your data write to playonemorefloor@gmail.com.

One More Floor sends anonymous play statistics to its server. We do not ask who you are: the data carry neither your name nor any fixed code that identifies you or the phone (no device, account or advertising ID), and we do not use them to recognise a phone. They travel encrypted (HTTPS).

What the game sends

• runs and stops: which floor, how precise, the coins, the power-ups used, how the run ended;
• progress and wallet: coins, tokens, record, floors built, workers, upgrades, number of runs and play time;
• in-game purchases with coins and tokens and those of the Cassa (videos, packs, exchange); for purchases with real money the pack, the price, how many purchases you have made so far and how much you have spent in the game in total, with your progress at that moment;
• the game's settings (sounds, music, vibration, language…);
• how the game runs on the phone while you play: its smoothness (frames per second), how hard the processor and the memory work, the number of processor cores and the screen's refresh rate, the battery's state (level, consumption, temperature, whether it is charging), the phone's heat and the screen brightness;
• the phone model, the language and the country, taken from the phone's region setting (not from its location);
• the date and time of each event, how long play sessions last and how much time passes between them;
• the game version, the day you first opened it and the days since then;
• the program's errors, to fix them.

Test builds (for testers and for development) also send the reports of the BUG key, with their screenshots and the text written, and once a day a copy of the game's save (progress, collection, orders, settings and totals), without any name or code. We look at the reports and the copies one by one, to find and fix problems and to tune the game: with the copy we put that phone's game back on our computer as it was.

Each upload holds the data of one phone only, and counters such as the number of runs make it possible to line up the data coming from the same phone. Apart from the reports and the copies of the save, we use them only for overall statistics; and never, not even those, to look for who is playing. When there are few players, as with the testers, the phone model can be enough to tell one phone from the others.

What it never sends

The game never sends to its server: name, email, account (Google or other), advertising ID, location, or any fixed code of the phone. The advertising ID is used only by Google's library for the advertising videos (below, "Advertising"). Of real-money purchases never the order number nor the payment details: those stay with Google Play.

The only place where you give us an email or a social account is the testers' form on the site (below, "Becoming a tester and a resident"), which we never link to the game's statistics.

The IP address: the game's server necessarily receives it, to answer. It keeps it only in memory, for little more than a minute after the last request, to stop clients sending too many requests; for the daily limits it keeps only a fingerprint of the address, made with a random key that changes every day, and drops it at midnight UTC. It never stores or logs it. Railway, the service that hosts the server, may record the technical data of connections (IP address included) in its network logs, for a limited time. The site, which the building's residents come from and which holds the testers' page (below), does log it.

The building's residents

The game's building is home to drawn characters made from real people: the followers who win with a comment under our videos and the testers who ask for it on the form (below, "Becoming a tester and a resident"). As a tester you become a resident only if you ask for it: after signing up, in the form's second step, you write the name of your social account and tick the box saying you are at least 18. That is your consent. Those who win with a comment give us theirs by answering our message. Without consent we do nothing. Residents must be at least 18.

Then we take your profile picture by hand. If your account is private, the game's account (@play_onemorefloor on Instagram, @playonemorefloor on TikTok) sends it a follow request, only to see the picture: you can turn it down, and remove us from your followers whenever you like. Instagram and TikTok see the link between the two accounts and handle it as independent controllers (below, "Who handles the data"); it may also show in the list of the accounts we follow. We look at the picture, also with an artificial intelligence assistant (Claude, by Anthropic), only to pick hair, clothes, accessories and colours from a collection of drawn parts: no face recognition. If the picture does not show you, your pet or a drawing of yours, we do not use it: you can send us another one in a message. We keep it only on the developer's computer, outside the code repository, and we do not publish it, except in the video of those who win with a comment and in that of a tester who allows it separately (just below). We delete the picture, with the crops and comparisons we make from it, when it is no longer needed (for a tester when their character goes into the game, or when the video of their arrival is ready if they allowed us to show it; for a comment winner when the video of their arrival is ready), within 60 days at most, and with it the conversations with the assistant where it appears. Of the picture of a comment winner, or of a tester who allowed it, only the video of their arrival remains, which shows it.

Before a tester's character goes into the game and into the site's building, we send the drawing to the account written on the form, with a message: "here's your character; if it wasn't you who signed up, reply and it will be removed". That way, if someone wrote an account that is not theirs, its owner can tell us. If you do not want the character, or it was not you who signed up, we use nothing and delete everything we have of your account: the @handle, the picture and the drawing. If you tell us when the character is already in the game, we take it down as for a TRASLOCO (just below).

A tester's character lives in the game, on every phone, and in the site's building, without a name, also after the test ends. We do not publish your @handle: if one day we want to show it, on the site or in a video, we will ask you separately, and without your permission it does not happen. On the day a tester's character goes into the game, a short video of its arrival may come out on our accounts (YouTube, Instagram, TikTok, Facebook), with the character without a name and without the picture: the @handle and the profile picture appear only if the tester allows it separately, by replying to the message with the drawing. If you don't want it, just tell us, also by replying NO VIDEO to the message with the drawing: you stay in the game anyway. Those who win with a comment are in the game without a name. With their permission they appear with their @handle on the site, above their character, and in the video of their arrival on Instagram, TikTok, YouTube and Facebook, which shows their comment with their profile picture.

We keep your @handle and your consent (for a tester, the day of the form's second step and the version of the texts they accepted) as proof. For testers, in a record on the developer's computer, outside the code repository: in the repository and in the game their character has only a code (for instance res_bt001). For those who win with a comment, in our private repository on GitHub. A tester's @handle leaves the game's server as soon as the character goes into the game.

To get the residents, the game contacts the site playonemorefloor.com (hosted by Railway, behind Cloudflare) every time you open it, and when you come back to it if at least 10 minutes have passed since its last successful check; then at the end of every run, when you go back to the menu and when it leaves the foreground (another app, the screen turned off, the notifications pulled down), if at least 3 hours have passed since its last successful check, or sooner if it lost some of what it had downloaded (if a check fails, it tries again after about 10 minutes). Never during a run, and even with the "Stats" lever off. It downloads the list of residents and the new drawings. It sends no play data: only the requests, with the game's version. The IP address necessarily reaches Cloudflare and Railway, and stays in the site's access logs, with the time and the game's version, for as long as Railway keeps them.

The resident's consent is separate from the test: you can withdraw it at any time by writing TRASLOCO (or MOVE OUT) to playonemorefloor@gmail.com or to the game's account, and you stay in the test. We take your character off the site and out of new videos, and we delete the video of your arrival, if there is one, and the @handle and the consent we keep. The videos already published after your arrival may still show the building with your character, without a name: if you ask us, we take those down too. Your character disappears from each phone at its next check (with the game open and online) and from the next versions of the game. A phone that stays offline keeps what it had until it reconnects. We cannot remove the copies saved by others (of a video, for instance) nor, for those who came with a comment, the history of our repository on GitHub.

Why

To improve the game: difficulty, tutorial, prices, errors, and how much battery and heat it costs the phone. And to compute the "better than X%" share and the TOP bands: how many players reached each floor.

How long

The game's data are kept for 2 years, then deleted. Only total counts stay, such as how many players have their record on each floor.

The testers' form requests: 30 days from their last change, 60 while your resident is not in the game yet, and all of them at the end of the test. The testers' group: within 30 days of the end of the test. A resident's profile picture: 60 days at most (a comment winner's, after that, only inside the video of their arrival). The character, the @handle and the consent: until you write TRASLOCO. The testers' page counts: 2 years.

If we turn on Railway's automatic backup copies of the database, deleted data stay there until the copy expires: 3 months at most.

How to stop it

In the game's engine room (floor −3) there is the "Stats" lever: off, your play data stay on the phone. What the game writes while it is off never goes, not even after you switch it back on. Even off, the game downloads the floors table for the "better than X%" share and the building's residents, without sending any data.

Advertising

From version 0.3.13 the game shows advertising videos from Google AdMob, only when you choose to watch one for a reward: a second chance, a refill, an order's ×2, some of the Cassa's coins. No banners and no video that starts by itself. To choose and show the ads, count them and stop fraud, Google's library in the game collects from the phone the advertising ID, the IP address, data about the device (model, system, language) and about how you use the ads, and sends them to Google, which handles them as an independent controller under its own policy (policies.google.com/technologies/partner-sites). In the European Economic Area, the UK and Switzerland, Google asks for your consent to personalised ads at the first launch: you can change it at any time from the game's engine room (floor −3), with the "Ad privacy" key of its card. You can also reset or delete the advertising ID in Android's settings (Google, Ads). Our server never receives the advertising ID.

Purchases

Purchases with real money are not active yet. When they are, they will go through Google Play, which handles the payment under its own privacy policy, and this page will say so before the version of the game that brings them.

Becoming a tester and a resident

Before its release the game is tried in a closed test on Google Play. At playonemorefloor.com/beta/ you can ask us to join. The form sends us the email of your phone's Play Store Google account and then, only if you ask for your character, in a second step, the social network and the name of your account. With them come the language, the day, where you came from (for instance our Instagram story), the version of the texts you accepted and the date of this policy; for the character also the day, the version of the texts and the policy date of the second step, which is tied to your request by a one-time code kept only in the server's memory for 15 minutes. We ask for neither your name nor a picture.

No cookies, and the page stores nothing in your browser. The game's server does not keep your IP address: it holds it only in memory, as for the game, and Railway may record it in its network logs (above, "What it never sends"). The page itself comes from the site (Railway, behind Cloudflare), which logs the IP as for every visit. If you open it inside Instagram, the browser is Instagram's (Meta's), under its own policy. The page also sends the game's server counts with no identifier: how many times each step is taken (the page opened, the form opened, the email's confirmation and its correction, yes or no to the character), by day, language and source (the correction, yes and no only by week, with no language or source); the server counts new requests, @handles sent and invited testers the same way. They store nothing in your browser and we never link them to the requests. We keep them for 2 years, like the game's statistics.

The game's server (Railway) keeps the form's data, in a table apart from the statistics and never linked to them. Only the developer reads them.

The game in the test is a test build: besides the statistics it sends the reports of the BUG key and a copy of the save once a day (above, "What the game sends"). Those too stay apart from the form's data.

With your email we invite you to the Google group "ONE MORE FLOOR Tester" (onemorefloor-testers@googlegroups.com): you join if you tap “Join group” (after signing up the page has a key for it) or if you accept the invitation, which still goes to whoever has not joined yet. You can also join without the form, with your Play Store account. From the group you get the test's link, our messages about the test (new versions, reminders) and those of the other testers. You can post in the group too: your message reaches all the members, also by email, and shows them your email address; the copies stay in their inboxes. If you do not want to show it, write to playonemorefloor@gmail.com. Only the group's managers, that is the developer, see the member list. The email also goes through Google Groups and Google Play, which handle it under their own policies. We use it for nothing else and give it to nobody. The @handle is used only to see your profile picture and to send you the drawing (above, "The building's residents").

We delete the request 30 days after its last change, or 60 if you asked to become a resident and your character is not in the game yet, and all of them at the end of the test. From then on your email stays only in Google Groups: in the group if you are a member, or in the pending invitation, and in the messages you posted in the group. We delete the group, with its invitations and its messages, within 30 days of the end of the test. The opinions and reports you send us by email are kept only as long as we need them to answer you and to improve the game.

Basis: your request to join the test (Article 6(1)(b) of the GDPR). For the resident, your consent (point (a)): the form's second step, with the name of your account and the 18+ box ticked. The form is for people aged 14 or over, or older if their country asks more for a Google account of their own; the resident for people aged 18 or over.

You can leave the test whenever you like: the group or Google Play. To delete your request too, write CANCELLA (or DELETE) to playonemorefloor@gmail.com: we delete it and remove you from the group, or cancel the invitation. Otherwise the request is deleted by itself at the deadlines above. The test and the resident are separate: leaving the test does not remove your resident, and a TRASLOCO does not remove you from the test.

Who handles the data

Only the developer looks at the data, sometimes with an artificial intelligence assistant (just below, Anthropic). Providers host them on our behalf: Railway (the game's server, its database and the site), Cloudflare (the network in front of the site) and GitHub (the code's private repository, with the @handle and the consent of those who became residents with a comment). They may handle them outside the European Union too, for instance in the United States, with the GDPR's safeguards (such as the standard contractual clauses).

Others handle them on their own account (as independent controllers), under their own policies:

• Google: the game is downloaded from Google Play, the testers' group is on Google Groups, emails with us go through Gmail, and the data for the ads are collected by Google AdMob itself (above, "Advertising"). The site asks nothing of Google: its fonts too are on the site itself.
• Instagram and Facebook (Meta), TikTok and YouTube: the messages we exchange there, such as the drawing we send you; the follow request the game's account sends if your account is private, and the link between the two accounts if you accept it; the building's videos we publish there. The browser inside Instagram is Meta's too.
• Anthropic: with its assistant Claude we work on the game. Claude reads the play data and the reports of the BUG key when we look for a problem or tune the game, and the residents' @handle and consent (and the comment of those who win) when we make their characters and the videos; it also looks at their profile pictures. We use it under its terms for individual users, not under a contract on our behalf, and with training turned off: Anthropic does not use the conversations to train its models, except those it flags for a safety review. It keeps them for up to 30 days after we delete them, longer only in the cases of its policy (anthropic.com/legal/privacy), such as a breach of its rules. In Europe the controller is Anthropic Ireland, and the data may go to the United States, under the standard contractual clauses.

We do not sell the data and give them to nobody for advertising.

Legal basis

Our legitimate interest in running and improving the game (Article 6(1)(f) of the GDPR), with data that carry no name: you can object at any time with the "Stats" lever. For personalised ads, your consent, asked by Google; without it Google shows non-personalised ads. For the testers' form and the closed test, your request to join the test (point (b)): you can leave whenever you like, the group or the test. For residents, their consent (point (a)): for a tester the form's second step, with the name of their account and the 18+ box ticked; for a comment winner, the answer to our message. The consent also covers their drawn portrait, is separate from the test and can be withdrawn at any time, with TRASLOCO, from then on.

Security

The data travel encrypted (HTTPS) and on the server only the developer can read them, with a key only he holds.

Your rights

You can ask to see, correct or delete your data, to restrict their use or to object, and to get those of the form and of the residents in a file (portability), by writing to playonemorefloor@gmail.com. The data carry neither a name nor a code of the phone, so we usually cannot tell which are yours: tell us what you know (the phone model, the days you played, the text of a report) and we will do our best to find them. For the testers' form and the residents, tell us your email or your account's name: then we find them at once. Uninstalling the game also deletes what it keeps on the phone. You also have the right to lodge a complaint with a data protection authority (in Italy the Garante per la protezione dei dati personali, garanteprivacy.it).

Children

The game is not directed at children under 13 and does not knowingly collect personal data from children. The testers' form is for people aged 14 or over: children's Google accounts (Family Link) cannot join the group. Residents must be at least 18, and we never draw a child. If you think a child has sent us personal data, for instance in a report or on the form, write to us and we will delete it.

Changes

If this policy changes, the new version is on this page, with its date at the top; an important change (purchases, for instance) comes here before the version of the game that brings it.

Contact

Questions about this page or about your data: playonemorefloor@gmail.com