Privacy policy

1. What we collect

• Account: hero nickname, email address, hero gender, profile name (optional), chosen language.
• Your password — only as a one-way hash; we never store or see the password itself.
• Game content: your hero, items, crowns, experience, fights and their logs, rating, clan, friends, «About me», clan crest.
• Messages in the in-game chats: World, clan and private.
• Reports and moderation: who reported what, moderator decisions, bans and mutes.
• Technical data: IP address, browser or device and request times — for sign-in, protection against password guessing and spam, and bug fixing. Server logs are kept briefly (about 30 days).
• A sign-in cookie so you stay signed in. In the iPhone app, the same inside the app.
• Push notifications (app only, and only if you allowed them): your Apple device token.
• Meta advertising cookies (Facebook/Instagram pixel) — website only, and only if you pressed «Accept» in the cookie notice. The iPhone app has none of this.
• Payments — website only: amount, item and payment status. Card details are handled by the payment provider Stripe and never reach us. The iPhone app has no payments.

2. Why we use it and on what basis

• To let you play: sign-in, saving your hero, fights, chats, clans, ratings (performance of a contract — the terms of use).
• To protect the Game and its players from hacking, bots, spam and abuse, to handle reports and to ban offenders (legitimate interests).
• To deliver purchases and resolve a disputed payment; to keep payment records as the law requires (contract and legal obligation).
• To use advertising cookies and send notifications — only with your consent, which you can withdraw.
• To answer your support request.

3. Who we share it with

We do not sell your data and we do not track you across other companies’ apps and websites. Only services the Game cannot run without receive it, plus — with your consent on the website — the Meta ad network:

• The hosting provider that runs the Game server (VDSina) — everything stored in the Game.
• Stripe — payments on the website (under its own privacy policy).
• Yandex.Speller — spell check in the chat: while you type a message, its text (without your name or email) is sent to check typos and keyboard layout (under its own privacy policy).
• Discord — when you contact support or report a player: your nickname, your message and, for a report, the message or text you reported.
• Apple — delivering notifications to your device (if you turned them on) and distributing the app.
• Meta Platforms — website only, and only if you accepted advertising cookies: the fact that you signed up, a one-way hash of your email, IP address and browser.
• Authorities — only on a lawful request.

4. What other players see

Nickname, level, look, worn items, wins and losses, «About me», clan, online status and messages you write in the world or clan chat. Only the other person sees a private message. Other players never see your email, password, crowns or bag.

5. How long we keep it

• For as long as your account exists.
• When you delete your account, everything listed in section 6 is deleted at once. Copies in the server’s backup archives are overwritten automatically within 14 days.
• Payment records (amount, date, payment ID) remain without your name or email: the law requires us to keep them for accounting (in the UK, up to 6 years).
• Reports about you are deleted with the account; if you were banned, the reason is kept while the account exists.

6. How to delete your account and data

In the Game open «More → Settings → Delete account» and enter your password and nickname. The account and all its data are deleted at once: hero, items, progress, card and «About me», fights, messages (including private ones), friends, mentoring, clan membership, reports, notification tokens, and sign-in on every device. If you lead a clan, leadership passes to a deputy or the most experienced member, and an empty clan is disbanded. A wallet balance in $ (if any) is lost; wait for an unfinished payment, a fight or a tournament to end.

If you cannot sign in, contact us through our Discord (the «Discord» button at the bottom of the page and in the game) or the in-game «Help → Contact support» form — we will delete the account after checking that it is yours.

7. Your rights (UK GDPR and GDPR)

To use your rights, write to us (contacts at the bottom of the page). We reply within one month.

• Get a copy of the data we hold about you (access).
• Correct inaccurate data — email and nickname can be changed in «Settings».
• Erase your data («right to be forgotten») — with the «Delete account» button.
• Restrict or object to processing that rests on our legitimate interests.
• Receive your data in a portable format.
• Withdraw consent: turn notifications off in your phone settings; advertising cookies — by clearing the site cookies.
• Complain to a supervisory authority: in the UK the Information Commissioner’s Office (ico.org.uk), in the EU the authority of your country.

8. Transfers outside the UK and the EU

Some services (Stripe, Discord, Apple, Meta, Yandex, hosting) may process data outside the UK and the EEA. Where required we rely on the safeguards the law provides — standard contractual clauses or the UK international data transfer agreement.

9. Children

The Game is not meant for children and is not in the kids sections of any store: its age rating is 12+ for stylised violence and chat between players. You may sign up from the age of 13; where your country sets a higher age of digital consent (up to 16 in the EU), a parent’s consent is needed. If you learn that a child signed up without it, tell us and we will delete the account.

10. Player content and moderation

Messages, «About me», nicknames and clan crests are seen by other players, so we moderate them: any message, profile or crest can be reported (the ⚑ icon on a message, «Report» on a player or clan card), and a player can be blocked, after which their messages disappear. A moderator reads the reports; offenders are muted or banned. See the terms and community rules.

11. Security

Connections to the Game are encrypted, passwords are stored only as hashes, access to the server and database is restricted. No system is perfectly secure, but we take every reasonable step to keep your data safe.

12. Changes

We may update this policy. The date of the latest version is shown at the top; important changes are announced in the game or on Discord.