Privacy Policy

1. Who we are

Chainsworn is operated by “Hypeform” Ltd („Хайпформ“ ЕООД), a company registered in Bulgaria under UIC/EIK 206467190, with its registered seat at Mladost 4, bl. 480, entr. 1, fl. 1, apt. 3, 1715 Sofia, Bulgaria. We are the “controller” of your personal data under the EU General Data Protection Regulation (GDPR).

For anything about your data, including requests to see or delete it, write to support@ampstack.dev.

2. What this policy covers

This policy covers Chainsworn on the web at chainsworngame.com, the iOS app (from the App Store, or TestFlight for testers) and the Android app (from Google Play). The same rules apply everywhere.

Chainsworn is free to play, with optional purchases (see section 9). The apps also offer an optional advert you can watch for energy (see section 8); the website shows none.

3. Your account and signing in

No sign-up to start. When you create your first character, the game creates an anonymous account for you. It is just a random identifier: no email address and no name.

An unsecured character lives on one device. Until you secure your account, your character is tied to the device and browser you play on. If you lose the device or clear your browser data, the character is lost, and we may not be able to recover it.

Securing your account (optional). You can later link:

• Google. We receive your Google account’s email address and, as Google provides it, your name and profile picture. We use these only to sign you in.
• An email address, which you confirm by clicking a link we send you, and optionally a password. Your password is stored only as a hash by our authentication provider; nobody can read it back.
• Apple (in the iOS app). Apple may give us a private relay email address instead of your real one. As with Google, we use what Apple gives us only to sign you in.

4. Game data we keep

To run the game, we keep:

• your character name, which you choose. Please don’t use your real name: other players can see it;
• your character’s appearance, gear, progress, rating, titles and cosmetics;
• your time zone, so your game day resets at your own midnight;
• whether the account is a child’s account (see section 10);
• a record of the fights other players fought against your character, so we can show you your defence notices.
• your notification settings (which reminders you want, and whether at night), so a new phone finds them as you left them;
• your friends: your account’s friend code, your friends and friend requests, the friendly bouts fought between you, and who invited you, if anyone did.

Reminders in the apps (“Your five fights are back”, “Energy full”) are scheduled by your phone itself, from the game it already has, and only if you allow notifications. Nothing is sent to us or anyone else for them. If the apps one day send notifications from our server (for example, when a friend challenges you), we keep your phone’s push token (an address Apple or Google gives the app on your phone, saying nothing about you) with your account, and Apple’s or Google’s push service carries the notification. The token is deleted when you sign out on that phone, when Apple or Google say it no longer works, or with your account. A child’s account is never sent marketing.

5. What other players can see

• When another player fights your character, or looks at the ladder, they can see its name, level, appearance, gear, rating and titles.
• The public ladder shows name, level and rating.
• When you fight another player’s character, your character’s name appears in that player’s defence notices. A notice is removed once they have seen it; if you delete your character first, a notice they have not yet seen may still show its name.

• Your friends see your character’s name, level, title, tier and rating, and roughly how many days ago you last played. Only someone you have accepted, or who has your friend code to send you a request, can find you this way.

Other players never see your email address, your sign-in details or your time zone.

6. Logs and technical data

• Game actions. Each action you take in the game (a fight, opening a chest, buying, selling or equipping an in-game item, and so on) is recorded with the time and your account. We use this to help you (for example, to restore a lost item), to catch cheating, and to see how the game is played. These records are kept for 30 days, or deleted sooner with your account. We may keep aggregated counts for longer, but without anything that identifies you.
• Errors. When something goes wrong on our server or in the game on your browser or app, we record the error with your account, what you were doing, the browser or app version, and a shortened IP address with the last part removed (for example, 203.0.113.0). Kept for 30 days; when you delete your account, the errors stay but no longer point to you.
• Frame times. Only if we switch it on for your account (we ask testers first), the app sends us how smoothly each fight ran: its frame timings, and what your device is (its model and screen size, system and web view version). Nothing that names you. Kept for 30 days, or deleted sooner with your account. Never for a child’s account.
• Rate limiting. Your IP address is used briefly in memory to stop any one source from flooding the game with requests. The game does not store it.
• Web server logs. Our web server keeps standard access logs, which include your full IP address. They are rotated weekly and deleted after about five weeks.

7. Cookies and local storage

Chainsworn sets no cookies of its own and uses no analytics services. The website uses no advertising identifiers; in the apps, Google’s advertising software may use them once you choose to watch an advert (see section 8).

Only if you open the checkout to buy something on the website, Stripe’s payment form sets its own cookies to prevent fraud, which the payment needs (see section 9).

The game saves your session (so you stay signed in) and your settings (sound, haptics and the like) in your device’s local storage. This is strictly necessary for the game to work, so we don’t ask for consent for it. Clearing it signs you out, and on an unsecured account it loses your character (see section 3).

8. Advertising in the apps

The iOS and Android apps offer an optional rewarded advert: if you choose to watch one, you get energy in the game. An advert is only shown when you tap to watch one. The website shows no adverts, and a child’s account is never offered one (see section 10).

The adverts come from Google AdMob (Google Ireland Limited). Google’s advertising software in the app starts only when you first tap to watch an advert. From then on, Google may collect:

• device identifiers: your phone’s advertising identifier (on iPhone, only if you allow tracking) and identifiers Google sets for the app;
• your IP address, from which Google estimates a general location (such as the country or city, not your exact position);
• the adverts you see and how you interact with them, and technical data such as crashes and how the advert performed.

Google uses this to show adverts, measure them and prevent fraud, as a separate controller under its own policies: see how Google uses information from sites or apps that use its services.

Your choice. Where the law requires it (the EU/EEA, the UK, Switzerland and some US states), Google’s consent form asks you before the first advert whether your data may be used for personalised adverts. You can refuse; adverts may then be non-personalised, limited or unavailable. On iPhone, the app also asks whether it may track you: if you decline, Google does not get your advertising identifier and adverts are not personalised. You can change your answer at any time in the game’s Settings → Privacy choices (shown where Google’s form applies), and on iPhone in iOS Settings → Privacy & Security → Tracking.

What we receive and keep. With each advert we give Google only your character’s random identifier and a one-time code, never your name, email or anything else about you. When you have watched an advert to the end, Google tells our server so, and we give you the energy. We keep the transaction numbers of your last ten adverts with your character (so that none is paid twice), and each advert appears in your game history, which is kept 30 days (section 6).

9. Purchases

You can buy a season pass, a supporter pack and cosmetics. A child’s account is never offered any of them (section 10).

• Who takes your payment. In the iOS app, Apple; in the Android app, Google Play; on the website, Stripe, through RevenueCat’s checkout. Each handles your payment details under its own privacy policy. We never see or store your card or bank details.
• RevenueCat (RevenueCat Inc., USA) keeps track of purchases for us. It receives your account’s random identifier, and from the store or Stripe the record of each purchase: what was bought, the price and currency, the date, the store and its transaction number, and your store’s country. It tells our server about each purchase and refund, so we can give you what you bought.
• On the website, the checkout asks for your email address and payment details, which go to Stripe and RevenueCat (not to us) for the payment, the receipt and fraud prevention.
• What we keep. A record of each purchase with your account: the product, the store, the price and currency, the date, the transaction numbers, and what it gave your account (or took back, after a refund). When you delete your account, the records stay without anything that links them to you (see section 15).

10. Children

When you create a character, we ask whether you are 16 or over. If you are under 16, your account becomes a child’s account. A child’s account:

• never asks for an email address;
• never offers Google or Apple sign-in to the child;
• never shows an advert, and never starts Google’s advertising software;
• never sells anything.

Everything else in the game is the same.

A parent or guardian can secure a child’s character with their own Google account or email address. In that case we process the parent’s address, with the parent’s consent, only to sign in.

If we learn that a child’s account was created as an adult account, we switch it to a child’s account. A parent or guardian can ask us to delete a child’s data at any time by writing to support@ampstack.dev.

11. Why we use your data (legal bases)

• Running the game and your account (your characters, fights, ladder, signing in, account emails): performance of our contract with you, that is, providing the game you asked to play.
• Logs, anti-cheat, security, rate limiting and backups: our legitimate interests in keeping the game fair, secure and working, and in being able to help players and recover from failures.
• Support emails: to answer what you ask us, as part of providing the game (contract) and in our legitimate interest in helping players.
• Child accounts secured by a parent: the parent’s consent. The parent can withdraw it at any time by writing to us.
• Adverts in the apps (section 8): your consent, where the law requires it, given in Google’s consent form and withdrawn at any time in Settings → Privacy choices; otherwise our legitimate interest in offering an optional advert you ask to see. Paying the energy for an advert you watched is part of providing the game (contract).
• Notifications (section 4): only once you allow them on your phone, which you can undo there or in Settings at any time; sending them is part of providing the game (contract). Purchases (section 9): performance of our contract with you, that is, giving you what you bought; and our legal obligations to keep records of sales.

We never sell your data, and we never give your game data to advertisers.

12. Who helps us run the game

We use these providers:

• Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg): the game server and our nightly database backups run on its servers in Ireland.
• Supabase (Supabase Inc., USA): our database and authentication. Your data is stored in the EU, in Ireland (AWS eu-west-1).
• Resend (Resend Inc., USA): sends account emails such as email confirmation and password reset. It sends from its EU region (Ireland).
• Cloudflare (USA): DNS for our domain, and forwarding of emails sent to our support address.
• Google: if you choose to sign in with Google, and for the adverts you choose to watch in the apps (AdMob, section 8). For both, Google is a separate controller under its own privacy policy. Google Play also distributes the Android app and sells purchases made in it.
• Apple: Sign in with Apple, and the App Store and TestFlight, which distribute the iOS app and sell purchases made in it (as a separate controller).
• RevenueCat (RevenueCat Inc., USA): keeps track of purchases and tells our server about them (section 9).
• Stripe (Stripe Payments Europe Ltd, Ireland): takes payments made on the website.
• Apple Push Notification service and Firebase Cloud Messaging (Google): if the apps send notifications from our server, they deliver them to your phone (see section 4). Not in use yet.

13. Transfers outside the EU

Some of the providers above are US companies. Where personal data leaves the EU/EEA, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified under it, and/or by the European Commission’s Standard Contractual Clauses.

14. How long we keep data

• Game data: until you delete the character or your account.
• Deleting is self-serve and immediate (in Settings, see section 15). Deleting a character deletes it; deleting your account deletes everything on it.
• Backups: we keep nightly copies for 7 days, and our database provider keeps its own daily backups for 7 days. So any copies left in backups disappear within 7 days of deletion.
• Game action logs and error logs: 30 days.
• Push tokens: until you sign out on that phone, the token stops working, or you delete your account.
• Purchase records: with your account until you delete it; after that, without anything that links them to you, for as long as tax and accounting law requires us to keep them. Apple, Google and Stripe keep their own records of payments.
• Web server access logs: about five weeks.
• Support emails: as long as we need them to handle your request.

15. Deleting your account

In the game: Settings → Delete account, then type DELETE to confirm. If you have no character in play (for example, after the preseason ended and yours were archived), the button is at the bottom of the screen where you make a character. It works the same for a child’s account.

Your account is deleted at once, with:

• your sign-in (Google, Apple, or email and password);
• every character on the account, archived ones included;
• what the account holds: cosmetics, titles, and what you bought with it. Purchases made in the App Store or Google Play can be restored on a new account with Restore purchases;
• your friends, requests and invitations, notification settings and push tokens, game history and frame times;
• the record RevenueCat keeps of your account.

What stays: purchase records without anything that links them to you (section 9), error logs that no longer point to you (30 days), copies in backups (gone within 7 days), and your character’s name in a defence notice another player has not yet seen (section 5).

Without the game: write to support@ampstack.dev. The steps are on chainsworngame.com/delete.

16. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectification: correct it (for example, to rename a character, write to us);
• erasure: delete it, which you can do yourself in Settings;
• restriction of processing;
• object to processing based on our legitimate interests;
• portability: receive your data in a portable format (ask us by email);
• withdraw consent where we rely on it, without affecting what happened before;
• complain to a supervisory authority: in Bulgaria, the Commission for Personal Data Protection (CPDP, cpdp.bg), or the data protection authority where you live in the EU.

To use any of these rights, write to support@ampstack.dev. We answer within one month.

An anonymous account has no name or email to check, so to show that a character is yours, write from Settings → Contact support on the device you play on: the message then carries your character’s name and your account’s id.

17. Security

• Every connection uses HTTPS.
• The game server owns all game logic. The app cannot edit its own save, so nobody can change a character by tampering with the app.
• Only our server holds the credentials to the database. The key built into the app can read nothing but the public ladder.
• The site uses a strict content security policy and rate limits.
• Access to our admin tools is limited to named staff accounts.

18. Changes to this policy

When we change this policy, we will post the new version here and update the “Last updated” date at the top. We will announce changes in the game, and for material changes we will tell you before they take effect.

19. Contact

Questions about this policy or your data: support@ampstack.dev.

By post: