This policy covers the Battle of Myths game for iPhone and Android ("the game") and the website battleofmyths.com ("the website"). In short: we collect only what the game needs to work, we don't sell or share anything about you for advertising, and there are no ads, analytics or tracking.
Who is responsible
The controller of your data is the independent developer of Battle of Myths (Serbia), "we" in this policy. Contact for anything about your data: [email protected].
What the game stores
- Your account: a random account id, the player name you choose, and a secret key kept on your phone so it can sign in. We store only a scrambled (hashed) form of that key.
- Sign in with Apple or Google, if you link it: the account id Apple or Google gives us for you, so you can get your account back on another phone. We don't receive your password, and we don't keep your name or email.
- Your progress: heroes, ranks, rating, currencies, items bought or earned in the game, settings and match results (placement, pantheon, rating change), so the game can show your history and the leaderboards. Other players see your player name, avatar, rank and match results.
- Invites and videos, if you use them: who invited whom, and the links to videos you send us for a reward.
- Technical data: the server keeps short-lived logs with IP addresses and errors, to keep the game running and stop cheating and abuse.
Purchases are processed by Apple or Google. We never see your card or bank details; we receive only what was bought, so we can deliver it.
What the website stores
If you leave your email for the launch or the beta, we store that address, whether your browser looked like Android or iPhone (to send the right store link) and the date. We use it only to write to you about the launch or the beta.
The website sets no cookies and uses no analytics, ads, trackers or third-party fonts, so it doesn't ask for cookie consent. Like every website, its host receives your IP address and browser details to deliver the pages.
We use Google Search Console to see how the website appears in Google Search (which searches show it, how often it is clicked, and indexing errors). It adds no code or cookies to this website and gives us only totals, never data about you. Your searches on Google are covered by Google's privacy policy.
Why we may use it (legal basis)
- To provide the game you asked to play, including your account, progress, purchases and matches: performance of our contract with you.
- To keep the game fair, secure and working (anti-cheat, abuse prevention, error logs) and to understand how the website appears in search: our legitimate interests. You can object to this at any time.
- Launch and beta emails: your consent, which you can withdraw at any time.
- Keeping purchase records as tax and accounting law requires: a legal obligation.
We make no decisions about you by automated means that have legal or similarly significant effects. Matchmaking and rating are only the rules of the game.
Who processes it for us
We share data only with service providers who process it on our instructions: DigitalOcean (game server and database, in the EU), Cloudflare (website hosting and delivery), and Apple and Google for sign-in and purchases, under their own terms. Some of these companies are based in the United States; transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We may also disclose data when the law requires it, or to a company that takes over the game, which would then be bound by this policy.
How long we keep it
Account data until you delete your account. Purchase records as long as tax law requires. Launch-list emails until the launch email is sent or you ask us to remove them. Server logs only briefly; they are rotated automatically.
Your rights
You can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw consent. Delete your account in the game (Settings → Account → Delete account) or write to [email protected]. We answer within one month. You may complain to the Commissioner for Information of Public Importance and Personal Data Protection of Serbia (poverenik.rs) or to the data protection authority where you live.
Security
Connections are encrypted (HTTPS), secrets are stored hashed and access to the server is restricted. No system is perfectly secure; if a breach puts your data at risk we will tell you and the authorities as the law requires.
Children
The game and the website are for people aged 16 and over. We don't knowingly collect data from anyone younger. If you think a child has given us data, write to us and we'll delete it.
Changes
If this policy changes, we'll update the date at the top. Important changes will also be shown in the game.