Privacy Policy for Citadel Clash

Summary

Citadel Clash has no accounts, no sign-in, no advertising, no analytics and no in-app purchases. We do not collect your name, e-mail address, phone number, contacts, location, photos or files, and we do not use advertising identifiers.

The Game works fully offline in single-player mode. The only feature that sends anything off your device is the optional online multiplayer battle, and even then the Game transmits nothing but a randomly generated player ID, an automatically generated nickname and the moves you make on the board.

1. Information we do not collect

We do not collect, request, access or transmit any of the following:

• Personal identifiers — name, e-mail address, postal address, phone number, date of birth
• Account credentials or passwords (the Game has no user accounts)
• Contacts, calendar entries, call logs or SMS messages
• Precise or approximate location data
• Photos, videos, audio recordings, or files stored on your device
• Advertising identifiers (Google Advertising ID / IDFA), IMEI, MAC address or other persistent device identifiers
• Payment or financial information (the Game contains no purchases)
• Health, fitness or biometric data
• Analytics, telemetry, behavioural profiling or crash-report data

The Game contains no third-party advertising SDKs, no analytics SDKs, no crash reporting SDKs and no social-network SDKs.

2. Information stored on your device only

The Game saves your preferences locally in its own private application storage (user://player.json on Android, the app's user defaults on iOS). This data never leaves your device except as described in section 3, is not readable by other apps, and is not accessible to us:

The multiplayer identity is generated at random on your device the first time you play online. It is not derived from any hardware, account or advertising identifier, and it cannot be used to identify you as a person.

Deleting this data: uninstalling the Game removes all of it. The Android build is configured not to retain application data after uninstall. You can also clear it at any time via your system settings ("Clear storage" / "Clear data" for Citadel Clash on Android; deleting the app on iOS).

3. Online multiplayer

Online multiplayer is optional and only active while you choose to open the multiplayer lobby and play a match against another human player. Single-player battles against the computer never send any data.

What is transmitted

To pair you with an opponent and keep both devices in sync, the Game writes the following to our matchmaking service:

• Your randomly generated player ID (UUID) and auto-generated nickname
• The unit types in your selected deck
• Server timestamps used to detect when a player is still present
• A match identifier, the board identifier and the random seed of the battle
• Your in-game commands during the match (unit orders, reinforcement choices) — the moves you make on the board

Your opponent sees only your auto-generated nickname and your moves.

What is not transmitted

The Game has no chat, no messaging, no voice communication and no free-text input of any kind. There is no way to send user-generated content to another player, and no way to enter your own name or any other personal detail.

Service provider

Matchmaking and match synchronisation use Google Firebase Realtime Database, operated by Google, with the database located in the European Union (europe-west1, Belgium). All communication takes place over HTTPS/TLS.

As part of any internet connection, Google's servers necessarily process your device's IP address in order to route the traffic. We do not store, log or have access to IP addresses, and we do not combine them with any other data. Google's handling of such data is governed by the Google Privacy Policy and the Firebase Privacy and Security documentation.

We do not sell, rent or share any data with any other third party. We do not transfer data to advertisers, data brokers or analytics providers.

4. Data retention and deletion

• Lobby entries are deleted as soon as you leave the lobby, and are removed automatically within about 60 seconds if your device stops responding.
• Match records (the identifiers, deck and moves listed above) exist for the duration of a battle and are deleted periodically once matches are over. They contain no information that identifies you as a person.
• Local preferences remain on your device until you uninstall the Game or clear its storage.

If you would like us to delete any record associated with your randomly generated player ID, write to marcin.zmigrodzki@octigo.pl. You can find that ID on the multiplayer lobby screen. Because the ID is the only link to the data, please include it in your request; without it we have no way of locating the records.

5. Permissions the Game requests

The Game requests no other permissions. It does not access the camera, microphone, location services, contacts, storage outside its own sandbox, or any other sensitive device feature.

6. Security

Data sent during online multiplayer is encrypted in transit using HTTPS/TLS. Because the Game deliberately collects no personal data, there is no personal data store to breach: the information handled by the matchmaking service consists of random identifiers, deck compositions and game moves.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we limit risk by keeping the amount of transmitted data to the minimum needed to run a match.

7. Children's privacy

Citadel Clash is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. Since the Game collects no personal information from any user, no such information about a child can be collected through it. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Your rights

Octigo is established in the European Union, and we process the limited data described above in accordance with the General Data Protection Regulation (GDPR). Where the data described in section 3 is considered personal data, our legal basis is the performance of the service you requested (Article 6(1)(b) GDPR): without exchanging a player ID and game moves, a multiplayer match cannot work.

Subject to applicable law, you have the right to request access to, correction of, deletion of, or restriction of the processing of your data, and the right to lodge a complaint with your national data protection authority. To exercise these rights, contact marcin.zmigrodzki@octigo.pl; see section 4 regarding the player ID we need in order to locate your records.

You can stop all data transmission at any time by not using the online multiplayer mode; the rest of the Game will continue to work.

9. Changes to this policy

We may update this Privacy Policy, for example if a future version of the Game introduces new features. The revised policy will be posted at this address with a new "Last updated" date. Material changes will additionally be announced in the Game's store listing. Continued use of the Game after a change takes effect constitutes acceptance of the updated policy.

10. Contact

Octigo
E-mail: marcin.zmigrodzki@octigo.pl

If you have any question about this policy or about how Citadel Clash handles data, please write to us; we aim to respond within 30 days.