Privacy Policy for Redvance
Effective date: 23 September 2026
Last updated: 15 October 2026
This Privacy Policy explains how Octigo ("we", "us") handles information in the mobile game Redvance (Android package com.octigo.citadelclash, iOS bundle com.octigo.Citadel-Clash), referred to below as "the Game".
Please read it before installing or playing. By using the Game you agree to the practices described here.
Contact:marcin.zmigrodzki@octigo.pl
Summary
Redvance has no accounts, no sign-in and no advertising. We do not collect your name, e-mail address, phone number, contacts, precise location, photos or files.
The Game works fully offline in single-player mode. Two things can send data off your device:
- The Android version from Google Play uses Google Analytics for Firebase to count players and see how the Game is used. It sends a random app-instance ID, device and app details, a coarse location that Google derives from your IP address, and app events such as sessions, updates and purchases — and your device's Advertising ID only if you allow it (see section 3). The iOS version contains no analytics.
- The optional online multiplayer battle sends a randomly generated player ID, an automatically generated nickname and the moves you make on the board (see section 4).
The Game offers one optional in-app purchase, which is paid for and processed entirely by Google Play or the Apple App Store (see section 10).
1. Information we do not collect
We do not collect, request, access or transmit any of the following:
- Personal identifiers — name, e-mail address, postal address, phone number, date of birth
- Account credentials or passwords (the Game has no user accounts)
- Contacts, calendar entries, call logs or SMS messages
- Precise location (GPS or Wi-Fi positioning) — the Game never asks for access to location services; the coarse location described in section 3 is estimated by Google from the IP address
- Photos, videos, audio recordings, or files stored on your device
- IMEI, MAC address, serial number or other hardware identifiers, and on iOS the advertising identifier (IDFA); the Android Advertising ID is covered in section 3
- Payment or financial information (the optional purchase is paid through Google Play or the Apple App Store; your payment details never reach the Game or us — see section 10)
- Health, fitness or biometric data
- Crash reports or crash logs
- Game content for analytics — battle results, decks, moves, your multiplayer identity or nickname are never sent to Google Analytics
The Game contains no advertising SDKs, no crash-reporting SDKs and no social-network SDKs. Its only analytics SDK is Google Analytics for Firebase, in the Android version distributed through Google Play (section 3).
2. Information stored on your device only
The Game saves your preferences locally in its own private application storage (user://player.json on Android, the app's user defaults on iOS). This data never leaves your device except as described in section 4 and in the device backup note below, is not readable by other apps, and is not accessible to us:
| Stored item | Purpose |
|---|---|
| Selected squad deck | Reopen the deck screen with your last line-up |
| Selected board | Remember your last chosen map |
| Campaign progress (stars per mission) and battle settings | Keep your progress and choices between sessions |
| Whether the optional purchase has been made (a yes/no flag) | Keep the purchased content unlocked when you play offline |
| Interface language | Keep your language choice between sessions |
| Your answer to the advertising ID question (Android version from Google Play) | Remember your choice and apply it again, also after the Game is restored from a backup |
| Multiplayer identity: a random UUID and an auto-generated nickname (e.g. "Player-4F2A") | Keep the same opponent-facing identity across multiplayer sessions |
The multiplayer identity is generated at random on your device the first time you play online. It is not derived from any hardware, account or advertising identifier, and it cannot be used to identify you as a person.
In the Android version from Google Play, Google Analytics also keeps its app-instance ID and the events it has not sent yet in the Game's private storage (see section 3).
Device backup (Android): if backup is turned on in your phone's system settings, Android includes player.json in the backup it keeps in your own Google account, so that your progress returns after you reinstall the Game or move to a new phone. The backup is made and stored by Android and Google, not by us; we cannot read it. You can turn it off or delete it in your phone's backup settings.
Deleting this data: uninstalling the Game removes all of it from your device. The Android build is configured not to retain application data after uninstall; a copy in your Android device backup, if you use one, stays until you delete the backup or turn it off. You can also clear it at any time via your system settings ("Clear storage" / "Clear data" for Redvance on Android; deleting the app on iOS).
3. Usage statistics (Android version from Google Play)
The Android version distributed through Google Play includes Google Analytics for Firebase, a statistics service provided by Google. It tells us how many people play, on which devices and Android versions, and whether the Game keeps working after an update. The iOS version and builds not distributed through Google Play do not include it.
What is collected
Without any action on your part, Google Analytics records:
- An app-instance ID — a random identifier that Analytics creates for this installation of the Game. It is not linked to your name or Google account.
- The Android Advertising ID of your device — only if you allow it (see "Your choices" below).
- Device and app details — device brand and model, Android version, interface language, screen resolution, the Game's version and the store it was installed from.
- Coarse location — country, region and city, which Google estimates from a masked version of your IP address.
- App lifecycle events — first launch, sessions, how long the Game is open in the foreground, screen views, updates of the Game and of Android, clearing the Game's data, and uninstalling.
- How the Game was installed — the Google Play install referrer, which shows, for example, whether the Game was found through a store search or a link.
- Purchase events — when the optional purchase (section 10) is completed or refunded: the product ID, product name, price and currency. Payment details are never included.
The Game does not send any events or content of its own to Analytics.
How we use it
We use these statistics only in aggregated form, to understand how many people play, how the Game is used and which devices it must support. The Game shows no advertising, and we do not use Analytics data to target advertising or sell it to anyone.
Provider
Google processes this data on our behalf under the Google Analytics Terms of Service and its data processing terms. Data may be processed on Google's servers outside the European Union, including in the United States, under the safeguards set out in those terms. How Google itself handles the data is described in How Google uses information from sites or apps that use our services and the Google Privacy Policy.
When it is sent
Analytics stores events on your device and sends them in batches whenever the device has an internet connection, also while you play single-player. If the device stays offline, nothing is sent until it is online again.
Your choices
- Advertising ID: on first launch the Game asks whether the statistics may include your device's Advertising ID. Until you answer, and if you choose "Don't allow", it is not collected. You can change your answer at any time in the Game's Settings (the gear on the home screen) › "Advertising ID". You can also delete or reset the Advertising ID in Android settings (on most phones under Settings › Google › Ads, or Settings › Privacy › Ads); once it is deleted, Analytics receives no Advertising ID from your device. Versions of the Game released before 15 October 2026 (Google Play version code 20 and older) did not ask and included the Advertising ID by default; updating the Game adds the question.
- App-instance ID: clearing the Game's data or reinstalling it makes Analytics create a new ID, so new statistics are no longer connected with the old ones. Clearing data also removes your progress unless it returns from an Android backup.
- Objecting: the Game does not yet have an in-game switch for statistics. If you object to them, write to us (section 9), or play the Game with the internet connection turned off.
4. Online multiplayer
Online multiplayer is optional and only active while you choose to open the multiplayer lobby and play a match against another human player. Single-player battles against the computer send no game data; the Android usage statistics in section 3 are separate from this.
What is transmitted
To pair you with an opponent and keep both devices in sync, the Game writes the following to our matchmaking service:
- Your randomly generated player ID (UUID) and auto-generated nickname
- The unit types in your selected deck
- Server timestamps used to detect when a player is still present
- A match identifier, the board identifier and the random seed of the battle
- Your in-game commands during the match (unit orders, reinforcement choices) — the moves you make on the board
Your opponent sees only your auto-generated nickname and your moves.
What is not transmitted
The Game has no chat, no messaging, no voice communication and no free-text input of any kind. There is no way to send user-generated content to another player, and no way to enter your own name or any other personal detail.
Service provider
Matchmaking and match synchronisation use Google Firebase Realtime Database, operated by Google, with the database located in the European Union (europe-west1, Belgium). All communication takes place over HTTPS/TLS.
As part of any internet connection, Google's servers necessarily process your device's IP address in order to route the traffic. We do not store, log or have access to IP addresses, and we do not combine them with any other data. Google's handling of such data is governed by the Google Privacy Policy and the Firebase Privacy and Security documentation.
Apart from Google, as described in this section and in section 3, we do not share data with any third party, and we never sell or rent it to advertisers or data brokers.
5. Data retention and deletion
- Lobby entries are deleted as soon as you leave the lobby, and are removed automatically within about 60 seconds if your device stops responding.
- Match records (the identifiers, deck and moves listed above) exist for the duration of a battle and are deleted periodically once matches are over. They contain no information that identifies you as a person.
- Usage statistics (section 3) are kept by Google Analytics at event level for no longer than 14 months; after that only aggregated reports remain.
- Local preferences remain on your device until you uninstall the Game or clear its storage.
If you would like us to delete any record associated with your randomly generated player ID, write to marcin.zmigrodzki@octigo.pl. You can find that ID on the multiplayer lobby screen. Because the ID is the only link to the data, please include it in your request; without it we have no way of locating the records.
6. Permissions the Game requests
| Permission | Why it is needed |
|---|---|
INTERNET | Online multiplayer matches, the optional purchase, and (Google Play version) sending the usage statistics in section 3 |
ACCESS_NETWORK_STATE | Lets Google Analytics wait until the device is online before sending statistics |
VIBRATE | Haptic feedback during gameplay |
com.android.vending.BILLING | Lets the Game open the Google Play purchase window and ask Google Play whether the optional purchase has been made |
WAKE_LOCK | Lets Google Analytics finish sending a batch of statistics in the background |
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE | Lets Google Analytics read the Google Play install referrer (section 3) |
com.google.android.gms.permission.AD_ID | Lets Google Analytics read the Android Advertising ID, which it does only if you allow it (section 3) |
ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION | Android Privacy Sandbox interfaces for the advertising ID and install attribution, declared by Google Analytics (section 3) |
com.octigo.citadelclash.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | An internal permission the Android support library defines for the Game itself, so that system messages meant for the Game stay private; it gives no access to anything on the device |
All permissions except INTERNET, VIBRATE and BILLING are added by Google Analytics and are present only in the version from Google Play. The Game requests no other permissions. It does not access the camera, microphone, location services, contacts, storage outside its own sandbox, or any other sensitive device feature.
7. Security
All data the Game sends — multiplayer data and usage statistics — is encrypted in transit using HTTPS/TLS. We keep it to a minimum: the matchmaking service holds random identifiers, deck compositions and game moves, and the usage statistics in section 3 contain no name, contact details or account information.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we limit risk by keeping the amount of transmitted data to the minimum needed to run the Game.
8. Children's privacy
Redvance is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. The Game never asks for personal details; the only data that leaves the device is described in sections 3 and 4. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Your rights
Octigo is established in the European Union, and we process the limited data described above in accordance with the General Data Protection Regulation (GDPR). Where this data is considered personal data, our legal bases are:
- for online multiplayer (section 4): the performance of the service you requested (Article 6(1)(b) GDPR) — without exchanging a player ID and game moves, a multiplayer match cannot work;
- for usage statistics (section 3): our legitimate interest (Article 6(1)(f) GDPR) in knowing how many people play and keeping the Game working on their devices. You have the right to object to this processing at any time;
- for including the Advertising ID in those statistics: your consent (Article 6(1)(a) GDPR), given in the Game's question on first launch. You can withdraw it at any time in the Game's Settings; withdrawing does not affect processing that took place before.
Subject to applicable law, you have the right to request access to, correction of, deletion of, or restriction of the processing of your data, and the right to lodge a complaint with your national data protection authority. To exercise these rights, contact marcin.zmigrodzki@octigo.pl; see section 5 regarding the player ID we need in order to locate your multiplayer records. Usage statistics are tied only to the random app-instance ID, which the Game does not display; see "Your choices" in section 3 for how to reset it.
In the iOS version, nothing is sent unless you play online. In the Android version from Google Play, usage statistics are also sent whenever the device is online. Turning off the internet connection stops all transmission, and the rest of the Game keeps working offline.
10. In-app purchase
The Game is free to play. It offers one optional, one-time purchase, "The whole arsenal", which unlocks every unit, the full deck and all game modes without playing through the campaign. Nothing else is sold, and the Game works without it.
The purchase is made in the purchase window of the store you installed the Game from — Google Play on Android, the Apple App Store on iOS — and is processed entirely by that store. Your payment method, billing details and store account are handled by Google under the Google Privacy Policy or by Apple under the Apple Privacy Policy; the Game never receives them and neither do we.
The only thing the Game learns from the store is whether the product has been bought with the store account used on your device. It asks the store for this when it starts and keeps the answer as a yes/no flag in the local storage described in section 2. The Game itself does not send this flag anywhere; in the Android version from Google Play, Google Analytics separately records the purchase event described in section 3. If the store reports that the purchase was refunded or cancelled, the Game removes the flag.
Like every developer selling through Google Play or the App Store, we can see the sales records that the store provides for accounting and refunds, such as the date, product and price (on Google Play also the order number). We use them only for those purposes.
11. Changes to this policy
We may update this Privacy Policy, for example if a future version of the Game introduces new features. The revised policy will be posted at this address with a new "Last updated" date. Material changes will additionally be announced in the Game's store listing. Continued use of the Game after a change takes effect constitutes acceptance of the updated policy.
12. Contact
Octigo
E-mail: marcin.zmigrodzki@octigo.pl
If you have any question about this policy or about how Redvance handles data, please write to us; we aim to respond within 30 days.

