Privacy policy

Who operates the game

Union of Kingdoms is operated by Sven Manderscheid (developer name: Ekki). For questions about your personal information or to exercise your rights, contact hello@unionofkingdoms.com.

Account and sign-in information

We use your player name, email address, account identifier and a securely hashed password to provide your game account. Verification and password-recovery requests generate temporary tokens and account emails. If you choose an available Google sign-in option, Google supplies account identity and profile information so that we can authenticate and link your game account. Signing in through Google is optional; a password account is available.

Game progress and communication

We store your cities, world membership, resources, troops, research, inventory, alliances, marches, battle reports, achievements and other game progress. Player profiles may include a display name, biography and a chosen illustrated avatar. Communication features store messages, participants, friend relationships, blocks, reactions and reports of inappropriate content. Public and alliance communications are visible to players in the relevant channel. Private messages are visible to their participants. Group chats store group names, memberships and invitations; current members can read messages sent after they joined. Authorized moderators may review messages when necessary for support or safety.

For player safety, messages sent in world, alliance, private and group chat are also recorded in a separate moderation audit for 30 days. Only authorized moderators and administrators can review this archive for a documented investigation. Their access records are retained for 90 days. Gameplay histories, reports and backups have separate retention periods.

Support reports and optional screenshots

If you send a bug report or suggestion, we store the text, category, game area, account and world identifiers, browser or app information, IP address and technical context such as screen size and language. You may optionally attach a screenshot. Please remove personal or confidential information from screenshots before sending them. Custom profile-photo uploads are currently disabled in this Early Access version. If photo uploads are enabled later, the upload screen and this policy will explain any external image-moderation service before you use it.

Device and security information

The server receives IP addresses, browser or app information, login attempts and session identifiers to deliver the service, manage sign-in, detect abuse and troubleshoot errors. We also record activity timing and game events for operational statistics. Essential cookies keep you signed in and protect requests. Language, sound and graphics preferences may be stored on your device. The current Android package does not request location, camera or microphone access and does not use the Android advertising ID or include an advertising SDK.

Public campaign links and selected website links use aggregate click counters to help us understand which links are used. We store totals by link, UTC calendar day, broad source category and device category, plus the last counted click time. These statistics do not store IP addresses, full referring URLs, browser identifiers or player profiles, and they set no analytics cookies or browser storage. Temporary abuse protection uses a hashed daily request bucket. Detectable Do Not Track and Global Privacy Control signals disable counting. Counts measure clicks rather than unique visitors.

Android versions with Play Integrity enabled ask Google Play to assess app and device integrity to help us understand security risks. Google Play processes technical app and device information and a random request identifier. We do not include player names, email addresses or game content in this request. Our backend checks the result and retains only daily totals by app variant and integrity result for up to 30 calendar days, without player identifiers or raw verification tokens. The current mode only observes results and does not block players. Browser access is not checked with Play Integrity. Google Play handles its processing under its own terms and privacy policy.

Purposes and legal bases

We process account, game and communication information to provide the online game you request (performance of a contract). Optional support submissions help us respond to your request and fix the service. Security logging and moderation serve our legitimate interests in protecting accounts, preventing cheating and abuse, resolving disputes and maintaining a reliable game. If a particular optional feature relies on consent, its screen will request consent and explain how to withdraw it. Information required by applicable law is processed to meet those legal obligations.

Information visible to other players

Your player name, chosen profile content, alliance membership, in-game location and relevant game actions can be visible to other players. Do not use your real name or share personal information in a profile or player message unless you want that information to be visible. We do not sell personal information or use it for personalized advertising.

Service providers and external services

Hostinger provides the hosting infrastructure used by the game. Hosting and mail infrastructure process information needed to run the website, database, account emails, security records and backups. Authorized support and moderation personnel can access information necessary for their tasks. Optional Google sign-in and external Discord links involve the relevant provider under its own privacy terms. Discord is optional and leaving the game for Discord is your choice. We do not provide your password to these services. Providers may process information outside your country; applicable data-protection safeguards must be maintained for transfers outside the European Economic Area.

HostingerGoogleDiscord

How long information is kept

Account information and game progress are kept while the account is maintained, until a verified deletion request is fulfilled. Messages and support records are kept while needed to provide communication, resolve the associated request or investigate abuse. Security records are kept while needed to protect the service or resolve a specific incident. We review these purposes when handling a deletion request. Backup copies are restricted to recovery and expire through their rotation cycle. The game's own scheduled backup tool uses a 14-day retention setting; hosting-provider backups may follow a separate cycle. A period of inactivity may hide a city but does not delete an account.

Account deletion and privacy rights

You can request deletion of your Union of Kingdoms account and associated personal data from Options or Account in the game, or through the public Account and data deletion page without installing or signing in to the app. You can also contact hello@unionofkingdoms.com about access, correction, portability, restriction or objection, and withdrawal of consent where applicable. We verify account ownership before disclosing or deleting private information. You may complain to the data-protection authority where you live or work, or where you believe an infringement occurred.

Account and data deletion · Luxembourg data-protection authority (CNPD)

Younger players

Union of Kingdoms is intended for players aged 13 and older. If your local law requires parental permission to use an online service, obtain that permission before creating an account. If you believe a child has provided information without the necessary permission, contact us so that we can investigate and address the account.

Changes to this policy

We update this policy when the game's data practices change. The publication date identifies the applicable version. Changes that require additional information or consent will be explained in the affected feature before its use.