Privacy Policy

Last Defense · Build & Prove LLC · Effective date: 25 October 2026

1. Who we are

Last Defense is a game made and run by Build & Prove LLC (“Build & Prove”, “we”, “us”). We are the operator of the game and are responsible for the information described in this policy. Our address, phone number and email are in the Operator / Contact us section.

This policy covers the game at games.buildprove.com, the game’s online service, and copies of the game we publish elsewhere. If you play a copy of the game on another website, such as a game portal, that website’s own privacy policy also applies to anything that website collects.

2. Children under 13 (kid mode)

Last Defense is a cartoon tower-defense game made for players aged 9 and up, so some of our players are under 13. This section explains how the game treats them.

The age question

The first time the game starts, on the web or in a downloaded version, it asks “What year were you born?” with a year picker that has no year chosen in advance. From the answer the game works out only whether the player is under 13 or 13 and older, and keeps only that, never the year. Because the game asks only for the year, a player who turns 13 this year is treated as under 13, to be on the safe side.

The answer is kept in a small file on the device (on the web, in this website’s storage in your browser). It is not sent to us and is not part of the cloud save. The game does not ask again; to change the answer, a grown-up opens Settings → Change Age, which is behind the parent check described below.

What we collect from players under 13

Players under 13 play as “Guest (this device)”. For them, the game uses only:

• a random device ID that the game creates itself (it is not based on the device’s hardware, the browser or anything else about the player);
• a guest account on our game server, with an account ID and a randomly generated username;
• the player’s game progress and settings (listed in section 4), saved on the device and copied to our game server (“cloud save”);
• IP addresses and similar connection details that reach our server logs when the device loads the game or connects to the game server.

We use this information only for the internal operation of the game: saving the player’s progress, keeping the service secure, and keeping the game working. We do not ask players under 13 for their name, email address, photos, location or any other contact information.

What we never do

• No ads, no analytics and no tracking.
• We do not sell or share any player’s personal information.
• No chat. Players cannot type usernames or any other text that other players can see. If we add multiplayer in the future, it will use generated names and preset messages only.
• No Google or Facebook sign-in for players under 13: the sign-in buttons are hidden, and the game does not load Google’s or Facebook’s sign-in code for them.
• No purchases. The game has none today.

The parent check

In kid mode, every link that leads out of the game (for example to this policy, the For Parents page, the data deletion page, or signing in on games.buildprove.com) first shows an “Ask a grown-up” check: a multiplication question written in words, such as “seven times eight”, answered by typing the number. After 3 wrong answers it locks for 60 seconds. Any purchase we might add in the future will be behind the same check. The Delete my account button in the game stays available to every player.

Players who are 13 or older

Players who say they are 13 or older get the full game as described in the rest of this policy, including the option to sign in with Google or Facebook. Sign-in is offered only to players who say they are 13 or older.

3. Parents’ rights

If your child is under 13, you can at any time:

• Review the information we hold about your child. Email games@buildprove.com with the account ID shown in the game’s Profile panel (there is a Copy button next to it), and we will tell you what we hold.
• Have it deleted. In the game, open Profile → Account → Delete my account and confirm; this removes the account and cloud save from our server right away. Or email us with the account ID and we will delete it. See how to delete your data.
• Refuse further collection. Delete the account as above and stop your child playing the game. If you prefer, tell us by email and we will delete the account for you.

How we check a request comes from a parent. Before we share information about a child’s account or act on a request, we take reasonable steps to confirm that it comes from the child’s parent or guardian, for example by asking for the account ID shown in the game and for details about the account. We do not ask for more information than we need to do this.

We respond to parents’ requests within 30 days, and there is no charge.

4. Information we collect

Age band

Whether the player is under 13 or 13 and older, as described in section 2. It stays on the device and is never sent to us.

Device ID

The first time you play, the game creates a random identifier for your device. It is not based on your hardware, your browser or anything else about you. The game keeps it in your game profile on your device and sends it to our game server to sign you in to your guest account.

Account ID

The first time the game connects to our game server, the server automatically creates a guest account for you. The account has an account ID, a randomly generated username, and the dates it was created and last changed. You can see your account ID in the game’s Profile panel, with a Copy button for deletion requests.

Game progress and settings

Your game profile holds:

• your XP and level;
• lifetime statistics, such as zombies defeated, waves cleared, best wave, shots fired and hit, damage dealt, structures built, games played and time survived;
• the results of your 20 most recent runs (for example the wave reached, kills and how long the run lasted);
• the base skins you own and the one you equipped;
• your daily reward and daily challenge progress;
• whether you have seen the tutorial and tips;
• your settings (sound volumes, colourblind mode, reduced motion, build bar layout);
• when the profile was created and last saved.

The game saves the profile on your device and keeps a copy on our game server (“cloud save”), so your progress is not lost and can follow you to another device when you sign in. The device ID, the age band and which sign-in you use stay on your device and are not part of the cloud copy.

If you sign in with Google or Facebook (13 and older only)

Signing in is optional, and it is offered only to players who say they are 13 or older; you can play without it. If you choose to sign in, the provider gives the game a sign-in token, which our game server uses once to confirm who you are. Our game server then stores with your account:

• Google: your Google account ID, your name, your email address and the address (URL) of your profile picture;
• Facebook: your Facebook user ID for this app, your name and the address (URL) of your profile picture. We ask Facebook only for your public profile, and we do not import your friends list.

The game also keeps your name on your device, to show which account you are signed in with.

Technical information

When your device connects to our servers to load the game or to use your account, those servers receive standard connection information, such as your IP address, your browser type and the time of the request. We use it only to deliver the game and to keep the service working and secure, and any of it that ends up in server logs is kept only as long as needed for that.

Information kept on your device

In a web browser, the game stores your profile and the age band in the browser’s storage for this website; in a downloaded version, it stores them in the game’s data folder. After you sign out or switch accounts, it also keeps a backup copy of the previous profile there. Clearing this website’s data in your browser removes it from your device, but does not delete your account on our server (see section 9).

What we do not collect

The game has no purchases, so we collect no payment information. We do not collect your precise location, contacts, photos, camera or microphone, and we use no advertising identifiers.

5. How we use your information

Only to run the game’s features:

• creating your account and signing you in;
• saving and restoring your progress (cloud save);
• for players 13 and older, letting you sign in with Google or Facebook so your progress follows you;
• keeping the service working and secure, and fixing problems;
• answering your questions and requests.

We do not show ads, we do not use analytics or tracking tools, we do not build marketing profiles, and we do not sell or share your personal information.

6. Cookies and similar technologies

We do not set cookies. The game uses your browser’s storage only to save your game and the age band, which it needs to work.

When Google or Facebook sign-in is offered (only to players who say they are 13 or older) and you open the Profile panel as a guest, the game loads Google’s and Facebook’s sign-in code from their servers so the sign-in buttons work. Your browser then connects to Google and Facebook (which lets them see information such as your IP address and browser type), and their code may set or read its own cookies under their own policies, even if you do not sign in. We ask Facebook’s code not to create its login cookie. In kid mode, this sign-in code is never loaded.

7. Where your information is stored

• Accounts and cloud saves are stored on our game server, hosted by Oracle Cloud in the United States (Phoenix, Arizona). A copy of the database is backed up every night on the same server; each backup is deleted automatically after about two weeks.
• The game files (the web pages and the game itself) are served by Amazon Web Services from the United States through its worldwide content delivery network.

If you play from outside the United States, your information is transferred to and processed in the United States.

8. Who we share information with

• Hosting providers. Amazon Web Services serves the game files and Oracle Cloud hosts our game server. They process information on our behalf to provide that hosting.
• Google and Facebook, only as described above, for players 13 and older, when sign-in is offered and when you choose to sign in. Their privacy policies: Google Privacy Policy and Meta Privacy Policy.
• When the law requires it, or when needed to protect the rights, safety or security of our players, our service or others.
• A change of ownership. If Build & Prove or the game is sold or merged, the information may pass to the new owner, who must keep honouring this policy.

We do not sell personal information, and we do not share it for advertising.

9. How long we keep it

• Your account and cloud save are kept as long as the account exists. When you use the in-game “Delete my account” button, they are removed from our game server right away; when you ask us by email, we delete them within 30 days. See how to delete your data.
• Backups: deleted information can remain in the nightly backups until those roll off, which takes at most 16 days.
• Guest accounts do not expire automatically today. If you stop playing, your guest account and its cloud save stay on our server until you or we delete them. If you clear your browser’s data, the game can no longer reach your old guest account; email us (with your account ID, if you noted it) and we will delete it. If we start removing long-inactive accounts, we will update this policy first.
• On your device, the game’s data, including the age band, stays until you clear it or remove the game.
• Server logs are kept only as long as needed to operate and secure the service.

10. Your rights and choices

Wherever you live, you can ask us to:

• access the personal information we hold about you;
• correct it if it is wrong;
• delete it (or delete it yourself in the game);
• give you a copy in a portable, machine-readable format;
• stop or limit using it, if you object to how we use it.

If you are 13 or older, you can also simply choose not to sign in with Google or Facebook. Parents of players under 13 have the rights described in section 3.

California residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to know what personal information we collect, use and disclose, the right to delete it and the right to correct it. In the past 12 months we have collected the information described in section 4: identifiers (device ID, account ID, IP address and, if you sign in, your Google or Facebook ID, name, email address and profile picture URL), internet activity limited to your connections to our servers, and your game activity. It comes from you, your device and, if you sign in, Google or Facebook. We use it only for the purposes in section 5 and disclose it only to the hosting providers in section 8. We do not sell or share personal information, we do not use sensitive personal information to infer anything about you, and we will not treat you differently for exercising your rights. You may use an authorized agent to make a request for you.

European Economic Area, United Kingdom and Switzerland

We use your information because it is needed to provide the game service you asked for (your account, cloud save and sign-in) and, for keeping the service working and secure, because of our legitimate interest in doing so. You also have the right to complain to your local data protection supervisory authority.

How to make a request

Email games@buildprove.com with your account ID (shown in the game’s Profile panel) and what you would like us to do. We may ask for information to confirm that the account is yours, or that you are the parent or guardian of the child who plays on it. We respond within 30 days, and there is no charge.

11. Security

• Every connection to the game files and to our game server uses HTTPS.
• Our database and the game server’s admin console are not reachable from the internet.
• Google and Facebook sign-in tokens are never stored: the game keeps them in memory only, sends them over HTTPS to our game server to confirm who you are, and never writes them to your device or to any log.

No system is perfectly secure, but we work to protect your information.

12. Changes to this policy

If we change this policy, we will post the new version on this page and update the effective date. If a change is significant, we will also tell you in the game or on this page before it takes effect.

13. Operator / Contact us

Last Defense is operated by:

Parents and players can contact us with any question about this policy or about a child’s information.