Privacy Policy

This policy explains what personal data TIDEFALL ("the game", "we", "us") collects when you play, why we collect it, and the choices you have. TIDEFALL is operated by [OPERATOR NAME], the data controller under the UK General Data Protection Regulation (UK GDPR).

1. Data we collect

Type	What it includes
Account	Username and display name, and, if you register or link one, your email address. Passwords are stored only as a secure one-way hash; we never see or store your actual password.
Guest	If you play as a guest, a device identifier keeps your progress linked to your device.
Gameplay	Your monsters, runes, currencies, items, story and tower progress, battle results, arena rating, guild membership and friends list.
Messages	Messages you send in global chat, guild chat and private messages, and player reports you submit or that are made about you.
Purchases	The item, price, store order or transaction ID and date. Payments are handled entirely by Google Play or the Apple App Store; we never receive your card or bank details.
Technical	IP address, device type and app version, login and session times, and server logs used for security and troubleshooting.

2. How we use your data

• To run the game: creating your account, saving progress, running battles, and delivering rewards and purchases.
• To keep the game fair and safe: detecting cheating, fraud and abuse, and moderating chat.
• To support you: investigating problems and answering support requests.
• To meet legal obligations: such as keeping purchase records for tax and accounting.

3. Lawful bases

We process your data because it is necessary to provide the game you asked to play (contract), for our legitimate interests in keeping the game secure, fair and working well, and where required by law (legal obligation).

4. Who we share data with

We do not sell your personal data. We share it only with service providers who help us run the game:

• Our server hosting provider, which stores the game database.
• Cloudflare, which provides our domain name services.
• Google Play and the Apple App Store, to process and verify purchases.

We may also disclose data where required by law or to protect the safety of players.

5. How long we keep data

• Account and gameplay data: for as long as your account exists.
• Deleted accounts: after a deletion request, a 30-day grace period applies, then the account and its gameplay data are permanently erased.
• Server logs: typically around 14 days.
• Chat: only a limited recent history is kept; older messages are removed automatically.
• Purchase records: kept after deletion where needed for legal, tax and fraud-prevention purposes, without your gameplay data.
• Security records: kept for a limited period and anonymised when an account is deleted.

6. Security

Connections between the game and our servers are encrypted. Passwords are hashed with modern algorithms, and access to administrative tools is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Children

TIDEFALL is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

8. Your rights

Under UK data protection law you can access, correct, delete or restrict the use of your personal data, object to certain processing, and receive a copy of your data. You can delete your account at any time. See Delete Account.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

9. Changes

We may update this policy. We will change the date above and, for significant changes, let players know in the game.

10. Contact

Privacy questions: [SUPPORT EMAIL – coming soon]