1. Who is responsible for your data
The game is provided by [provider name, filled in before launch], an individual developer based in Hong Kong ("we"), who is responsible for your personal data. For privacy questions or requests to access or delete data, email support@playzerobound.com (privacy contact).
2. Scope
This policy covers the game app, our web pages for the terms and account deletion, and emails you send to support.
3. What we process and why
Without the account data in section 3.2 and the technical data in section 3.3 the online game cannot work; the gameplay data in section 3.6 is optional and turning it off does not affect any game feature.
3.1 Data on your device
Your player name, settings, local progress and login credential are stored on your device so the game works and you stay logged in. They are not included in Android's cloud backup and are not copied to a new phone; on a new phone, get your account back with your transfer code (or a linked Google Play Games Services account).
3.2 Account data
The first time you connect, our server creates a guest account with a random account number and a player ID, and records the device platform, game version and when the account was created and last used. Login credentials and transfer codes are stored on the server only as hashes that cannot be reversed. Once cloud save is available, your progress, wallet history (paid and free gems kept separately), collection, decks, skins, ranks, campaign board and monthly card entitlement are also stored on the server so you can keep playing on a new phone and so the server decides all rewards. Each realm's character (character number, realm, character name and progress) is kept separately and linked to your account.
3.3 Technical data
Each time the game connects, our servers and Cloudflare receive your IP address, the address requested, the time and the game version. We use this to run the service, prevent abuse (for example limiting excessive requests), keep it secure and fix problems.
3.4 Match data
Online matches and campaign stages send your in-game commands. The server recalculates them with the same rules and compares check values to decide results and stop cheating. Other players see your player name, rank badge, level, skins and the emotes you use. Matchmaking uses your hidden skill rating and rank; some opponents may be computer-controlled.
3.5 Purchase data
When you buy through Google Play, we receive the order number, purchase token, product ID, purchase time, payment status and any refund or void status. We use them to confirm payment, deliver content, handle refunds, prevent fraud and keep accounting records. Google handles the payment; we never see your card or payment account details. We also receive the country or region of your Google Play account (to comply with local rules on paid random items): the game reads it from Google Play at sign-in and before a purchase and sends it to our server, and the country on the order takes precedence; we never use your IP address or phone language to decide your country.
3.6 Gameplay data and error reports
If you allow it (see section 13), the game sends gameplay data in batches, such as progress through the tutorial, match length, how often towers are used, frame rate, device model, OS version and memory warnings. When an error happens, it sends the error message, game version and device model. We use this only to improve balance, fix bugs and tune performance, never for advertising.
Android crash reports are collected by Google according to your Android "usage and diagnostics" setting and made available to us in Google Play Console.
3.7 Support emails
When you write to us we receive your email address, your message and any attachments. You can also send a support ticket with "Report a problem" in the game: we receive the category you chose, what you wrote, a reply email address if you choose to give one, and your player ID, realm and character, game version, device model, language and recent error codes, which the game adds; replies arrive in your in-game mailbox. A report by email is pre-filled with the same details, and you can edit or remove them before sending. We use this only to answer and investigate your request.
3.8 Features that stay on your device
Chest and gift reminders are local notifications scheduled on your device; we do not use a push service or collect a push token. Vibration and keeping the screen awake work only on the device. "Invite friends" uses the system share sheet, and we do not learn who you share with.
3.9 Later features
If you sign in with or link Google Play Games Services (when your device is signed in, the game signs in automatically when it opens), we receive its player identifier to sign you in and help you recover the account. The first time the automatic sign-in succeeds: if your current account is not linked yet and that Google Play account is not linked to another game account, we link the two automatically and show a one-line notice; if that Google Play account is already linked to another game account, we let you choose to switch to that account or keep the current one, and we never merge two accounts automatically. To fight cheating and fraud we may later use Google Play Integrity at matchmaking and purchase to check that the device and app are genuine. We will update this policy before these features launch.
3.10 Reports and enforcement
Reports you make, reports about you, and records of warnings, mutes, suspensions and forced renames are used to keep play fair and safe and to handle your appeals.
4. What we do not do
We do not collect your real name, phone number, precise location, contacts, photos, camera or microphone data, and we do not use an advertising ID. The game contains no ad SDKs and no third-party analytics SDKs. We do not sell your personal data or share it with anyone for advertising.
5. Legal bases (EEA and UK)
Providing the game, account, cloud save, purchases and support: performing our contract with you. Security, anti-cheat, fraud prevention and server logs: our legitimate interest in a fair and secure game. Accounting records: legal obligation. Gameplay data in the EEA and UK: your consent, which you can withdraw at any time.
6. Who receives your data
Only those we need to run the game: Google (Google Play payments, Play Console crash reports, and later Google Play Games Services and Play Integrity); our hosting provider (servers located in [server region, published before launch]); Cloudflare (network delivery and protection, and encrypted off-site backups); and our email provider (support emails). These providers may only process data on our instructions. Other players see the data listed in section 3.4. We may disclose data to authorities or courts where the law requires it.
7. International transfers
We operate from Hong Kong, our servers are in [server region, published before launch], and Google and Cloudflare process data around the world, so your data may be processed outside the place where you live. We require our providers by contract to protect it appropriately and handle international transfers as the applicable law requires.
8. How long we keep data
Account and game data: until you delete your account, then deleted within 30 days of the request. Login credentials: expire 365 days after last use; transfer codes: after 24 hours or one use. Server logs (including IP addresses): at most 30 days. Match commands and check values: 3 days (kept until 7 days after the case is closed, at most 30 days, when an open cheating investigation or support case needs them); your latest 50 match results until the account is deleted. Purchase records: 7 years for accounting, linked after account deletion only to the pseudonymous account number. Gameplay data and error reports: 90 days, after which only statistics that cannot identify you are kept. Support emails and in-game tickets: 2 years after the case is closed. Enforcement records: 1 year after the measure ends. Player IDs in the staff audit log: replaced with an irreversible code after 2 years. Database backups: the copies on the server are stored in the server's region ([server region, published before launch]) and normally deleted after 7 days; encrypted off-site copies are stored on Cloudflare R2 (Asia-Pacific), daily copies for 7 days and weekly copies for 4 weeks; the backup taken before test data is cleared is kept 30 days.
9. Your rights
You can ask to access, get a copy of or export your data, correct it, delete it, or stop or restrict its use, and you can withdraw consent at any time (for example by turning off gameplay data). Email support@playzerobound.com with your player ID and something that shows the account is yours (for example a Google Play order number; never email your transfer code). We answer access and copy requests within 15 days (extendable by another 15 days if needed, and we will tell you why), and complete correction and deletion requests within 30 days. These requests are free. You can also complain to a regulator, such as Hong Kong's Office of the Privacy Commissioner for Personal Data, Macao's personal data protection authority, Singapore's Personal Data Protection Commission (PDPC), Malaysia's Personal Data Protection Commissioner, the Office of the Australian Information Commissioner (OAIC), New Zealand's Office of the Privacy Commissioner, the data protection authority of your EU country or the UK Information Commissioner's Office (ICO). Data protection contact (including the data protection officer contact under Singapore's Personal Data Protection Act): support@playzerobound.com.
10. Deleting your account
Delete your account under Settings > Account > Delete account. If you can no longer open the game, request deletion at https://playzerobound.com/legal/delete-account.en.html (the page asks for your player ID and a transfer code from the last 24 hours to confirm it is you; without a code, the page explains how to ask by email). Once confirmed, the account is disabled immediately, we delete the account, every realm's character and the game data on our servers within 30 days, and the data leaves all of our backups within 30 days after that. Purchase records we must keep by law, and records needed for an open dispute or investigation, are kept as described in section 8.
11. Children and minors
The game is for players aged 13 and over and is not designed for children. Minors should play with a parent's or guardian's consent. If we learn that an account belongs to a child under 13, we delete the account and its data. We do not use minors' data for personalised advertising or marketing, and in the UK we apply higher privacy settings by default (for example, gameplay data is off).
12. Security
Connections are encrypted. Login credentials and transfer codes are stored only as hashes. Our admin console is not exposed to the internet, only authorised people can use it, and every action is logged. If a breach could affect your data, we will notify the authorities and affected players as the law requires.
13. Gameplay data settings
You can turn off gameplay data in Settings. For players in the EEA and the UK it is off by default and the game asks whether you want to turn it on; elsewhere it is on by default and you can turn it off at any time. Turning it off does not affect any game feature. Error reports are sent only while gameplay data is allowed.
14. Changes to this policy
When we change this policy we update the version and effective date and announce it in the game. We explain material changes the next time you open the game.
15. Contact us
[provider name, filled in before launch] | support@playzerobound.com | Data protection contact: support@playzerobound.com