Privacy Policy
This policy explains what personal data the mobile game Legendfall: 4v4 Arena ("Legendfall", "the game") processes, why, who receives it and what rights you have. It applies to the game on iPhone and Android and to this website.
1. Who is responsible
The controller of your personal data is the individual developer of Legendfall:
Mobile Software Studio
Bolu 14300, Türkiye
Email: [email protected]
Users in Turkey: see also our KVKK Aydınlatma Metni (in Turkish).
2. What data we process
| Data | Where it comes from | Why we use it |
|---|---|---|
| Player ID and sign-in tokens — a random account ID created by Unity Gaming Services and the session tokens that keep you signed in | Created automatically the first time you start the game (guest account) | To create and run your account, connect you to our servers and keep you signed in |
| Google or Apple sign-in data — a sign-in token from Google or Apple that contains your account identifier with that provider, and may contain your email address and name | Only if you choose "Link with Google" or "Link with Apple" | To link your game account to your Google or Apple account so you can recover it and play on another phone. The token is checked by Unity's authentication service. We do not store your email address in the game. |
| First name — Google gives your profile name; Apple gives your first name only on your first sign-in | Your Google or Apple sign-in | Only to suggest a player name. You can change the suggestion before you confirm it. |
| Player name — the display name you choose (3–14 characters) | You | Shown above your hero to other players in online matches and on leaderboards. Names are checked by an automatic filter. |
| Name reports — when a player reports a name: the reporter's player ID, the reported player ID and name, and the time | Other players or you, through the report button | To review offensive names and act against abuse |
| Game progress — level, heroes, items, currencies, quests, settings, the player name, the save time and your phone model | The game | To save your progress in the cloud when your account is linked to Google or Apple, and to restore it on another phone. The phone model helps you choose the right save when two phones have different progress. |
| Ranked data — league points and ranked results | Ranked matches | To keep the ranked leaderboard and to match you with players of similar skill |
| Connection data — IP address, network latency, region, game traffic and technical connection logs | Your phone, when you play online | To find a match and a nearby server, run the match and protect the service against cheating and attacks |
| Purchase data (when in-app purchases are available) — an app user ID, the products you bought, transaction IDs, dates, prices and store country | Apple App Store or Google Play, through RevenueCat | To deliver purchased items, restore purchases and prevent fraud |
| Crash reports — when the game crashes or hits an unexpected error: where the error happened (stack trace), the game's version, the time, device model, operating system version, free memory and disk, the game's language, whether it is a test or store build, and a random installation ID. Your player ID and name are not included | The game, through Google Firebase Crashlytics | To find and fix crashes and errors |
| Notification registration — if you allow notifications: a random installation ID that Firebase creates for your phone, and the game's language (the Turkish or English announcement list) | Your phone, only if you allow notifications | To send announcements (maintenance, a new season, an update) with Google Firebase Cloud Messaging. This ID is not linked to your account and is not stored on our servers. The game's own reminders (Banner War, daily reward, festivals, season end) are scheduled on your phone and are not sent anywhere. |
Payment details: all payments are processed by Apple or Google. We never receive your card number or other payment details.
Data that stays on your phone: your local save, settings and a device identifier that the game uses only to create a default name. This identifier is not sent to us or to anyone else.
What we do not do: we do not show ads, we do not use advertising IDs, we do not track you across apps or websites, we do not sell your data, and we do not use usage analytics (only the crash reports above). The game has no text or voice chat and does not use your location, camera, microphone, contacts or photos.
Notifications: the game asks for your phone's permission before sending notifications (when you first register for a Banner War, or in Settings). You can turn them off at any time in Settings → NOTIFICATIONS or in your phone's settings; turning them off removes you from the announcement lists.
3. Legal bases (EEA, UK and similar laws)
- Performance of a contract (GDPR Art. 6(1)(b)): your account, cloud save, player name, online and ranked matches, leaderboards, and delivering purchases.
- Consent (Art. 6(1)(a)): notifications, with your phone's permission, which you can withdraw at any time.
- Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing cheating, fraud and abuse, reviewing name reports, and fixing errors from crash reports. Our interest is a fair and safe game for all players.
- Legal obligation (Art. 6(1)(c)): keeping records that the law requires, for example for purchases and tax.
We do not make decisions about you based only on automated processing that have legal or similarly significant effects. The automatic name filter only blocks names; you can choose another name.
4. Who receives your data
We use these service providers. They process data on our behalf (processors), except Apple and Google, which act as independent controllers for their sign-in and store services.
- Unity Technologies (Unity Gaming Services: Authentication, Cloud Save, Leaderboards, Cloud Code) — accounts, sign-in, cloud save, leaderboards and server logic. Privacy policy
- Exit Games GmbH (Photon) — networking for online matches; processes IP addresses and connection data. Privacy policy
- Edgegap Technologies Inc. — dedicated game servers and matchmaking; processes IP addresses, latency, region and league points. Privacy policy
- Google LLC / Google Ireland Ltd. (Firebase Crashlytics, Firebase Cloud Messaging) — crash reports and notifications. Firebase privacy and security
- RevenueCat, Inc. (when in-app purchases are available) — purchase validation and purchase history. Privacy policy
- Apple and Google — sign-in (if you choose it), app distribution and payments. Apple · Google
Other players see your player name, hero, and match and ranked results. We may also disclose data if the law requires it or to protect the rights and safety of players and the service.
5. International transfers
The developer is located in Turkey. Our service providers run servers in several countries, including the United States, the European Union and other regions near the players. Online matches run on a server close to you, which may be in another country. When data is transferred out of the EEA, the UK or Turkey, we rely on adequacy decisions (for example the EU–U.S. Data Privacy Framework where the provider is certified) or on standard contractual clauses offered by the providers. You can ask us for more information about these safeguards.
6. How long we keep data
- Account, progress, player name and leaderboard entry: until you delete your account.
- Name reports: until the report is handled, and at most until the reported account is deleted, unless we need them longer to deal with repeated abuse.
- Connection logs at Photon and Edgegap: for a short time, according to the providers' own retention periods.
- Crash reports: 90 days in Firebase Crashlytics.
- Notification registration: until you turn notifications off or uninstall the game; Firebase deletes registrations that go unused for a long time.
- Purchase records: Apple, Google and RevenueCat may keep transaction records for as long as the law or fraud prevention requires, even after you delete your account.
7. Your rights
Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. You can delete your account in the game at any time. To use your other rights, email [email protected] and include your player ID (Settings → ACCOUNT) so we can find your account. We answer within one month.
You also have the right to complain to a data protection authority, in particular in the country where you live. In Turkey this is the Personal Data Protection Authority (KVKK), kvkk.gov.tr.
8. Deleting your account
See Delete your account for the steps and what is deleted.
9. Security
All connections between the game and our services are encrypted (HTTPS/TLS). Sign-in tokens are stored only on your phone. No method of storage or transmission is completely secure, but we limit the data we collect and who can access it.
10. Children
Legendfall is intended for players aged 13 and older and is not designed for children. We do not knowingly collect personal data from children under 13 (or the higher minimum age that applies in your country). If you believe a child has given us personal data, contact us and we will delete it.
11. Changes
We will update this policy when the game or the services we use change. We change the date at the top of the page, and we tell you in the game before important changes take effect.
12. Contact
Mobile Software Studio, Bolu 14300, Türkiye — [email protected]