Privacy Policy

This Privacy Policy explains what information Ashfall Kingdoms ("the Game", "we", "us") collects when you play — in a web browser or through our mobile apps — and how that information is used. We built the Game to need as little of your data as possible: it is fully playable as a guest, with no account required.

1. Information we collect

Played as a guest (default):

• Game progress — your company, heroes, items, currencies, and match history are stored locally on your device. A randomly generated player identifier (not tied to your identity) may be sent to our servers to power optional social features below.
• Leaderboard & matchmaking data — if you play ranked, your chosen company name, rating (Elo), and a snapshot of your in-game team are stored on our servers so other players can be matched against them and see them on the ladder.
• Alliance data — if you create or join an alliance, its name and your contribution points are stored on our servers.
• Technical diagnostics — anonymous error reports (what went wrong in the code, game version, and coarse device type) and anonymous gameplay milestones (for example, "tutorial completed") used solely to fix bugs and improve the first-time experience. These contain no personal information.
• Gameplay analytics — tied to the same random player identifier, we record when you play and for roughly how long (session heartbeats), purchases and rewarded-ad views inside the Game, and — the first time you ever open the Game — which link brought you here (for example a campaign tag in the link, a friend's referral code, or the referring website). We use this to understand how the Game is doing and where players come from. It is never sold, and it is never used to track you anywhere outside the Game.

If you sign in (optional):

• Account details — when you sign in with Google, Apple, or Facebook (or register with an email and password), we receive your email address and display name from that provider. We use these to identify your account, sync your cloud save across devices, and send service emails where necessary (for example a purchase receipt or an account-security notice). We may occasionally send game news or offers to account holders — every such email will have a working unsubscribe link, and saying no never affects your game. We request only your basic profile, email, and birthday, and we never post anything on your behalf or access any other data in your Google, Apple, or Facebook account.
• Birthday — imported from Facebook (if you grant it) or entered by you in Settings, and used for exactly two purposes: to give you a birthday gift in the game each year, and to confirm you meet our 13+ age requirement. We store the month and day (for the gift) and the year (only to check age). We never display it, share or sell it, or use it for advertising, ad targeting, analytics, or profiling. It is deleted when you delete your account.

On mobile devices:

• Local notifications — daily-reward reminders are scheduled entirely on your device. They involve no server, and you can disable them any time in Settings → Sound & Alerts (or in your device's notification settings).

2. Advertising and purchases

The Game offers optional rewarded advertisements and optional in-app purchases.

• Advertising — rewarded ads (watch-to-earn) may be served by an advertising partner: Google AdMob in the mobile apps (see Google's Privacy Policy), or a rewarded-video provider in the web version. These partners may collect device identifiers and ad-interaction data to serve and measure ads. Where required (for example, in the EEA/UK), you will be asked for consent before any personalized advertising is shown, and you may choose non-personalized ads. Watching ads is always optional.
• Marketing measurement — when we advertise the Game elsewhere (for example a social-media ad), we count which campaign a new player arrived from using a tag in the link itself, as described above.
  
  The web version of the Game and this website also use two advertising measurement pixels: the Meta Pixel (see Meta's Privacy Policy) and the TikTok Pixel (see TikTok's Privacy Policy). These report that a page was viewed and that certain milestones happened — creating an account, finishing the tutorial, and completing a purchase (including its value) — so we can tell which advertising actually brings players who enjoy the Game. To do this, those companies may set their own cookies and receive your IP address and browser details, and they may use that information to measure and target advertising on their own services. Where required (for example in the EEA/UK), you will be asked for consent before these are used for personalized advertising.
  
  These pixels run on the web version only. The Android and iOS apps do not contain them.
• Purchases — payments are processed entirely by a dedicated payment provider: Stripe when you buy in the web version, or the platform store (Google Play / Apple App Store) in the mobile apps. We never see or store your card number or payment credentials; we receive only a confirmation that a purchase completed — what was bought, when, and for how much — so we can deliver the item and keep required accounting records.
• Purchase validation — in the mobile apps we use RevenueCat to verify with the platform store that a purchase really completed, and to make what you bought available on every device you sign in on. It receives your in-game player id and the details of the purchase (what, when, how much). It does not receive your payment credentials.
• Subscriptions — if you take an optional subscription (such as the Warlord's Pact), it is billed by the same providers under the same rules; you can cancel any time through the provider you subscribed with, and access simply runs out at the end of the paid period.

3. What we do NOT collect

• No precise location data.
• No contacts, photos, files, microphone, or camera access.
• No selling of personal data to third parties — ever.
• We do not ourselves follow you around other companies' apps or websites. Our advertising partners may, within their own services — see the advertising and marketing-measurement sections above for AdMob, the Meta Pixel and the TikTok Pixel, and what each one does.

4. How we use information

• To operate the Game's social features (ladder, matchmaking snapshots, alliances, referrals).
• To sync your progress across devices when you sign in.
• To find and fix crashes and bugs, and to understand where new players get stuck.
• To prevent cheating and abuse of leaderboards and rewards.

5. Data retention & deletion

• Local game data stays on your device until you delete the app or use Settings → Account → New Campaign.
• Cloud saves and account data are kept while your account is active. To delete your account and all associated server data (cloud save, leaderboard entries, snapshots, alliance membership), email us at [email protected] from the signed-in address and we will complete the deletion within 30 days. See our Account Deletion page for step-by-step instructions and exactly what is deleted or kept.
• Anonymous diagnostics are retained for up to 12 months, then deleted.
• Purchase records are retained as long as accounting and tax law require. Gameplay analytics are deleted on account deletion along with everything else.

6. Children

The Game is not directed at children under 13 (or the minimum age required in your jurisdiction), and we enforce this with an age check: when a date of birth is provided — imported from Facebook or entered in Settings — a player under 13 is blocked from playing. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

7. Your rights (GDPR / CCPA and similar laws)

Depending on where you live, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to or restrict certain processing. Signing in and playing ranked are both optional, so the simplest control is playing as a guest. To exercise any right, email [email protected]. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA.

8. This website

The marketing site and the Game use the Meta Pixel, an analytics tool from Meta (Facebook). It sets a cookie and sends Meta a limited set of events — such as page views and account sign-ups — so we can measure traffic, understand our audience in aggregate (for example the broad age and region mix of our visitors), and gauge how our ads perform. We use this only in aggregate for marketing analytics; we do not use it to identify you personally. You can learn how Meta uses this data, and adjust your ad preferences, in Meta's Privacy Policy and ad settings, and you can block it with your browser's tracking-prevention settings or an ad blocker.

The site and the Game also load fonts from Google Fonts, which involves your browser requesting the font files from Google's servers (transmitting your IP address, as any web request does). The Game stores your save and settings in your browser's local storage — that data never leaves your device unless you sign in and sync a cloud save.

9. Security

Server data is transmitted over HTTPS and stored on access-controlled infrastructure with daily backups. No method of transmission or storage is 100% secure, but we minimize what we collect so there is little to lose.

10. Changes to this policy

We will post any changes on this page and update the date above. Material changes will also be announced in the Game.

11. Contact

Questions, requests, or complaints: [email protected]