Who is responsible for your data
The data controller is Jan Wilczura, the developer of Blade Singularity. The game is made by
one person. For anything related to your data, write to [email protected].
What the game server stores
- Device ID. A random string created on first launch. It is not your phone number, advertising ID
or Google account. The game also creates a random device key; the server keeps only its hash, so nobody can
submit results in your name.
- Player name that you choose.
- Game progress: zone, Ascensions, currencies, upgrades, talent tree, skills, weapons, skins, results
against bosses, in dungeons, the Colossus, the Rift and the Arena, playtime. The game sends this state every
dozen or so seconds of play.
- In-game event log: what you buy, forge and equip, how fights end. Used to balance difficulty and
to detect cheating.
- A copy of your save and your save code, so you can get your progress back on a new phone.
- Guilds: membership, guild chat messages (the server keeps only the latest messages and deletes
older ones on its own), message reports, gifts and boss contribution.
- Profile card and Arena: name, weapon, skins and hero stats that other players see on your card
and fight in the Arena.
- Bug reports that you send from the game: your description plus phone model, OS version, language,
screen resolution, graphics chip, frame rate and the end of the game log.
- Invite codes and reward codes: a salted hash of the system device identifier (the original cannot
be recovered from it), so one person cannot claim the same reward many times.
- Purchases: product ID, order number and purchase token from Google Play, needed to verify that a
purchase is genuine and to handle refunds. I never see your card or payment account; Google handles payment.
- Platform and game version.
- IP address is read only in the moment, to protect the server from request floods. It is not stored
in the game database.
The game does not collect your name, e-mail address, phone number, contacts, location, photos
or recordings. In-game notifications are created on the phone and send nothing.
Third-party services
- Google AdMob shows rewarded ads, only when you choose to watch one. AdMob may collect the
advertising ID, IP address, device data and how you interact with the ad. In the European Economic Area,
the UK and Switzerland, the game asks for consent to personalised ads on first launch. You can change your
choice at any time in Options, under “Ad privacy”. Details: how
Google uses information from partner apps.
- Google Play handles downloads and payments, and Google Play Games keeps a copy of your save
on your Play Games account if you use it. Google holds that data under the
Google Privacy Policy.
- OVH hosts the game server in the European Union.
- Cloudflare forwards traffic to the server and protects it from attacks, processing IP addresses
and basic connection data.
Google and Cloudflare may process data outside the European Economic Area, under the European
Commission's Standard Contractual Clauses or the Data Privacy Framework.
Why, and on what legal basis
- To run the game: leaderboards, guilds, Arena, save backup, purchases. Basis: performance of a contract,
that is providing the game to you (Art. 6(1)(b) GDPR).
- To balance difficulty, fix bugs and detect cheating. Basis: the developer's legitimate interest
(Art. 6(1)(f) GDPR).
- Personalised ads in the EEA: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any
time in Options.
I do not sell your data and do not share it with anyone other than the companies listed above.
What others can see
Publicly, in the game and on the game website: your player name, leaderboard results, profile
card and guild name. Guild chat messages are visible to members of that guild. Everything else is used only to
run and analyse the game.
How long
Data is kept while the game is running or until you ask for it to be deleted. The server
deletes older guild chat messages on its own. Payment history is kept by Google Play under its own rules.
Deleting your data
- E-mail [email protected] with the subject “Delete my data”.
- Include your player name and, if you can, the save code from the game's Options. It is the surest way for
me to find your device.
- Within 30 days I delete all data of that device from the game server (progress, save copy, event log,
leaderboard, guild, Arena, invite, reward code and purchase entries) and reply to confirm.
Data on your phone is removed by uninstalling the game. Your Google Play Games save is removed
in Google Play Games settings, and Google ad data in your Google account settings.
Your rights
You have the right to access your data and get a copy, to rectify it, erase it, restrict
processing, port it, object to processing based on legitimate interest, and to withdraw consent at any time.
Write to [email protected]. You can also lodge a complaint with a data protection authority, in Poland the President of the
Personal Data Protection Office (UODO, uodo.gov.pl), or the authority in
your country.
Children
The game is meant for players aged 13 and over. If you are under 16 (or the age of digital
consent in your country), a parent or guardian should give consent to personalised ads. If you decline, you
will still see ads, but not personalised ones. Player names are filtered automatically, and you can report a
chat message or name that breaks the rules in the game or by e-mail.
Security and changes
Connections to the server are encrypted (HTTPS), and only the developer has access to the
database. If this policy changes, the new version will appear on this page with a new date, and important
changes will be announced in the game.