Privacy Policy
This policy explains what personal data the game Crown Strike collects, why, how long we keep it, and the choices you have. It applies to the game on Android and iOS and to the game servers it connects to.
1. Who we are
Crown Strike (the “Game”) is developed and operated by Titanix, a limited liability company registered in the Kingdom of Saudi Arabia (“Titanix”, “we”, “us”). [Commercial registration number and registered address – to be added.] Titanix is the controller of the personal data described in this policy, within the meaning of the Saudi Personal Data Protection Law (“PDPL”) and, where they apply to you, other data protection laws.
2. What we collect
We collect only what the Game needs to run an online multiplayer game. We do not sell personal data and we do not use it for targeted advertising.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Your player id (a random identifier we create), in-game name, the time you created the account, signed in and were last online. If you register or link a sign-in method: your email address and a one-way hash of your password (we never store the password itself), or the account identifier and email address that Apple or Google gives us when you use Sign in with Apple or Sign in with Google. If you use “Hide My Email”, we receive Apple’s relay address instead of your real one. | You, Apple, Google |
| Device identifier | A random identifier that the Game creates on your device the first time you play as a guest, so you can return to your guest account. It is not your phone’s hardware id or advertising id. | The Game on your device |
| Gameplay | Your cloud save (your city, buildings, research, heroes, items and settings), your castle’s position on the world map, marches, battles and battle reports, alliance membership and rank, rankings and event scores, Diplomacy and Shadow War activity, in-game mail and rewards. | Your play |
| Communications | Messages you write in world, kingdom, language and alliance chat, private messages, mail you send, alliance notices, rumours and similar in-game text, and the players you block. | You |
| Purchases | For in-app purchases: the store (Google Play or the App Store), the product, the store’s receipt or signed transaction (which contains an order or transaction id, the purchase time and the app’s identifier), whether it was verified and granted, and the record of in-game currency added to or spent from your account. We do not receive your card or bank details; payment is handled entirely by Google or Apple. | The store, via the Game |
| Technical and security data | Your IP address, the Game version, and the time and outcome of requests to our servers. We use the IP address while your request is handled (for example to limit abuse) and do not store it in our game database. Our server logs record each request (time, the server path, the result and your player id) and can contain the email address you enter when you ask for a verification code. | Your device, automatically |
Usage data and crash reports
The Game sends us usage data and crash reports to our own servers. We do not use third-party analytics, advertising or crash-reporting services, and the Game contains no third-party analytics or advertising SDK. [To be confirmed before publication: whether the game engine itself sends any diagnostics of its own (for example Unity Analytics, which should be turned off in the release build).]
- Usage data: in-game events with their time – when you start and end a play session (and how long it lasted), first opening the Game, each step of the tutorial you complete or skip, building upgrades, player level-ups, which in-game offers were shown to you, and which packs you bought (the product, how it was paid and its list price). Each event carries the Game version, your platform (Android or iOS), and either your player id or, before you sign in, a random install id that the Game creates on first launch (not your phone’s hardware or advertising id).
- Crash reports: when the Game hits an error, the error message and the technical stack trace, the Game version, the device model, the operating system version and the game screen it happened on. Identical crashes are merged into one record with a count and the first and last time seen.
What we do not collect in usage data or crash reports: your email address, password, chat or messages, location, contacts, or advertising id. We do not store your IP address with them. Before storing, our server removes anything in the text that looks like an email address, IP address or sign-in token, and folder names from file paths.
Why: to find and fix bugs and crashes, to see where new players get stuck in the tutorial, and to understand which features and offers work so we can improve and balance the Game. We look at it in aggregate (for example daily active players or how many players finished a tutorial step) – our legitimate interest in running and improving the Game. We never sell this data and do not use it for advertising or share it with advertisers.
How long: usage events and crash reports are deleted automatically after 90 days. Usage events linked to your player id are deleted when you delete your account.
Your choice: you can turn this off at any time in Settings → Account → Share usage data. When it is off the Game sends no usage data or crash reports, and anything not yet sent is discarded.
We do not ask for, and ask you not to share in chat, sensitive personal data (for example health, religion or government identifiers).
3. Why we use it (and our legal bases)
- To provide the Game (account, cloud save, multiplayer world, alliances, chat, events, rankings, customer support) – necessary to perform our contract with you (the Terms of Service).
- To process purchases – verifying receipts with Google or Apple, delivering what you bought, preventing a purchase from being used twice, and handling refunds and disputes – contract and our legal obligations (including accounting and tax records).
- To keep the Game fair and safe – detecting cheating, fraud and abuse, enforcing the Terms, filtering offensive words, rate limiting, and investigating reports – our legitimate interest in a fair and secure game, and to comply with law.
- To run and improve the service – monitoring server health and performance, fixing bugs and crashes, and balancing the game using aggregated data, including the usage data and crash reports described in section 2 (which you can turn off in Settings) – our legitimate interest.
- To communicate with you – in-game mail and announcements, verification codes, and replies to your support requests – contract and legitimate interest.
- To comply with law – responding to lawful requests from authorities and meeting our legal obligations.
Where the law requires your consent for a particular use, we will ask for it first, and you may withdraw it at any time.
4. Who we share it with
- Service providers who host and operate our servers and backups on our behalf (currently Amazon Web Services), under contracts that require them to protect the data and use it only on our instructions.
- Google and Apple, to sign you in (if you choose their sign-in) and to verify and process in-app purchases and refunds. Their handling of your data is governed by their own privacy policies.
- Our game development partners, where they need access to fix or improve the Game, under confidentiality and data protection obligations.
- Authorities, when the law requires it, or where needed to protect the rights, property or safety of our players, Titanix or others.
- A successor, if Titanix is involved in a merger, acquisition or sale of assets; we will tell you before your data becomes subject to a different policy.
5. What other players can see
The Game is multiplayer. Other players can see your in-game name, castle and its position on the map, power and rankings, alliance and rank, the cosmetic items you show, battle results that involve them, and everything you write in public, kingdom, language or alliance chat. Private messages and mail are visible to their recipients. Please do not share personal information about yourself or others in the Game.
6. How long we keep it
| Data | Kept |
|---|---|
| Account, cloud save and gameplay data | While your account exists. When you delete your account, it is deleted or anonymised straight away (see section 8). |
| World, kingdom and language chat | The most recent 300 lines of each channel; older lines are deleted automatically. |
| Alliance chat | The most recent lines of each alliance’s chat; older lines are deleted automatically, and all of it when the alliance is disbanded or you delete your account. |
| Private messages | 30 days. |
| Until it expires (up to 30 days) or you delete it. | |
| Battle and scouting reports | 14 days. |
| Event scores | 14 days after the event day. |
| Purchase and currency records | As long as required for accounting, tax, refund and fraud purposes [retention period to be confirmed – commonly up to 10 years], also after account deletion, linked only to an anonymous id. |
| Usage data and crash reports | 90 days, then deleted automatically; usage events linked to your player id are also deleted when you delete your account. |
| Server logs | Rotated automatically and kept for a short period, normally no more than 30 days. |
| Backups | Backups of the game database are kept for up to 8 weeks and then overwritten; data you deleted disappears from backups when they expire. |
7. Your rights and choices
Subject to the PDPL and other applicable law, you have the right to:
- be informed about how your personal data is processed (this policy);
- access your personal data and receive a copy of it;
- ask us to correct incomplete, inaccurate or outdated data (you can change your in-game name in the Game);
- ask us to delete your personal data when it is no longer needed (you can delete your account yourself, see below);
- withdraw consent where we rely on it;
- object to or ask us to restrict certain processing, and to data portability, where the law that applies to you gives these rights.
To make a request, write to support@playcrownstrike.com from the email linked to your account, or include your player id (shown in the Game’s settings). We may need to confirm that the account is yours. We answer within the period the law sets (under the PDPL, normally 30 days). If you are not satisfied with our answer you may complain to the Saudi Data & Artificial Intelligence Authority (SDAIA) or the data protection authority where you live.
You can also block other players, leave an alliance, and stop playing at any time.
8. Deleting your account
You can delete your account from inside the Game: Settings → Account → Delete account. You can also ask us at support@playcrownstrike.com. Deletion is permanent and cannot be undone. When you delete your account we:
- end all your sessions and remove your email address, password hash, device identifier, Apple or Google sign-in link and in-game name;
- delete your cloud save, city, items and currencies, your castle from the world map, your rankings and event scores, your mail, private messages, chat lines, blocks and the other in-game content you wrote;
- remove you from your alliance (another member becomes leader, or the alliance is disbanded if you were its last member);
- keep purchase and currency records, linked only to an anonymous id, for the period in section 6;
- leave shared game history that other players hold (for example a battle report in their mailbox) under the name “Deleted player” until it expires.
Deleting your account does not cancel or refund purchases; see the Terms for refunds. Uninstalling the Game does not delete your account.
9. Children
The Game is intended for players aged 13 and over. We do not knowingly collect personal data from children under 13. If you are under the age of majority where you live, please get your parent or guardian’s permission before playing or buying anything. If you believe a child under 13 has given us personal data, contact us and we will delete the account.
10. Security
Connections between the Game and our servers are encrypted (HTTPS). Passwords are stored only as salted one-way hashes. Access to servers and data is limited to people who need it. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.
11. Where your data is processed
Our game servers are hosted with Amazon Web Services [region to be confirmed, e.g. Asia Pacific (Mumbai)], which may be outside the Kingdom of Saudi Arabia and outside your country. When personal data is transferred outside the Kingdom we do so as the PDPL and its regulations on transfers allow, with appropriate safeguards. Apple and Google process sign-in and purchase data in their own systems worldwide.
12. Changes to this policy
We may update this policy as the Game changes or the law requires. We will post the new version here with a new date and, for important changes, tell you in the Game before they apply.
13. Contact
Titanix – privacy: support@playcrownstrike.com
[Registered address – to be added]