Gods Of Myth Privacy Policy

Before you begin

Gods Of Myth is played with an account, so your war party travels with you between devices. This page sets out exactly what the game keeps, where it is kept, who else sees it, and how to get it back or have it removed.

The game is published by Johnathon Nicolaou, a sole trader based in Sydney, New South Wales, Australia, ABN 58 576 416 023, who is the data controller for the purposes of the EU and UK General Data Protection Regulation and the entity accountable under the Australian Privacy Act 1988 (Cth).

Questions, requests and complaints all go to one address: godsofmythsupport@gmail.com.

I.  The short version

• An account is required to play. You create one with an email address and password, or through Sign in with Apple or Google.
• Your progress is mirrored to the cloud so a new phone picks up where the old one left off. It is stored as a single encoded save under your account.
• Other players see your chosen name, your avatar and your Ranked Arena record. They never see your email address.
• You can delete the whole account from inside the game, from the Profile screen. It takes your save, your standing and your sign-in with it.
• Purchases are handled entirely by Apple. No payment card details ever reach the game.
• Advertising measurement is optional. The device advertising identifier is used only if you allow it when iOS asks. Refusing changes nothing about how the game plays, and you are never asked twice.
• There is no general analytics tracking. Firebase Analytics is switched off in the build, and the game collects no location, contacts, photos, microphone or camera data at all.

II.  What the game collects

Your account

When you create an account the game records:

• A username you choose — three to sixteen letters, numbers or underscores. It is held twice: once as you typed it, for display, and once lowercased, so two players cannot claim the same name.
• An email address, where one is available. Sign in with Apple lets you hide your real address, and when you do, we may receive only a relay address or none at all. A missing email address is a valid account.
• Which door you came in by — email, Google or Apple.
• When the account was created and last updated, and the revision number of your last save.

Passwords and identity tokens are held by Firebase Authentication, a Google service. The game itself never sees, stores or transmits your password.

Your game

So your progress survives a new phone, the whole of your save is mirrored to your account as a single encoded record. It contains your drachma balance, the cards and equipment you own, your battalions and teams, story and tutorial progress, daily rewards, achievements and trophies, season and Ranked Arena standing, per-card battle statistics, a revision number, the time of the save and the app version that wrote it. A copy also stays on your device, which is why the game plays with the aeroplane mode on.

Ranked Arena — deliberately public

If you take part in Ranked Arena, an entry is published to that week’s ladder where every other player can see it. It carries your account identifier, your display name, your chosen avatar, your points, your attack and defence record, the defence teams you published, and the times you submitted and last updated. Your email address is never part of a ladder entry.

Battle a friend

Hosting or joining a friend battle creates a short-lived match record holding the join code, both players’ account identifiers and display names, both decks, each round’s two decisions, the result and timestamps. It exists for the length of the battle and is not used for anything else.

Purchases

Drachma bundles and card packs are sold through Apple’s App Store. Apple processes the payment and tells the game that a transaction succeeded so the goods can be granted; the game records which transactions it has already honoured, so nothing is granted twice. No card number, billing address or payment credential ever passes through the game.

On your device only

Your audio and haptics settings, your collection filters, the version of these terms you accepted and the date you accepted them, and a local copy of your save are kept in the app’s own storage on your device. They are not uploaded. Diagnostic log lines go to Apple’s on-device unified log and are read only if you send a sysdiagnose or a TestFlight report.

Support email

If you write to support from inside the game, the message arrives carrying the app version, the build number and your iOS release — and nothing else. Anything further is what you choose to write.

III.  Advertising and measurement

Gods Of Myth shows no adverts. It does, however, advertise itself — and to know which campaigns find players who go on to enjoy the game, a small set of milestones is reported to Meta:

• the app was installed, and the app was launched;
• an account was created, and by which method (Apple, Google or email);
• the tutorial was finished;
• the Agora was opened;
• a purchase was begun, with the product identifier and currency;
• a purchase completed, with its amount and currency.

No username, email address, account identifier, card collection or battle record is ever sent to Meta. The events above are the complete list of what leaves the device for advertising purposes.

Whether those events can be joined to you personally depends on one answer you give. When iOS asks whether Gods Of Myth may track you across apps and websites:

• If you allow it, the device advertising identifier (IDFA) is readable, and an install or a purchase can be matched to the advert that led to it.
• If you refuse — or never answer — the identifier is not used, and measurement falls back to Apple’s SKAdNetwork, which reports in aggregate and identifies nobody. Nothing about the game changes, and you are not asked again.

IV.  Why each thing is collected

For players in the EU and the UK, the table below also sets out the legal basis under the GDPR.

V.  Who else sees it

• Other players. Your display name, avatar, Ranked Arena record and published defence teams are visible on the weekly ladder. Your friend sees your display name in a friend battle. Nothing else about you is shown to another player.
• Google (Firebase). Firebase Authentication holds your sign-in credentials; Cloud Firestore holds your account document, your save, ladder entries and match records. Google processes this on our instructions.
• Apple. Sign in with Apple, App Store purchases and SKAdNetwork attribution are Apple’s, under Apple’s own privacy policy.
• Meta. Receives only the advertising events listed in section III.

Your information is never sold, and it is never shared with data brokers. It may be disclosed where the law compels it, or where it is necessary to protect the safety or rights of players.

VI.  Where it is held

Account data, saves, ladder entries and match records are held on Google Cloud infrastructure operated by Firebase, and may be stored or processed outside Australia, including in the United States. Where information about players in the EU or the UK is transferred out of those regions, it travels under the European Commission’s Standard Contractual Clauses and the UK Addendum, which are part of Google’s terms for these services.

By using the game you acknowledge that, once your information is held overseas, Australian Privacy Principle 8.1 will not apply to it in the same way; the overseas recipient is bound instead by the contractual protections described above.

VII.  How long it is kept

• Your account and save are kept for as long as the account exists, so that a player returning after a year still finds their collection. Delete the account and they go at once — see section VIII.
• Ranked Arena entries belong to the week they were made and stay on that week’s ladder as the historical record of it.
• Friend battle records are transient and are abandoned once the battle ends.
• Purchase records are Apple’s, and Apple keeps them for as long as tax and consumer-law obligations require. They are not ours to delete.
• The local copy on your device is cleared when you sign out, and when you delete the account. Deleting the app removes it too.

VIII.  Your rights

Wherever you live, you may ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Some of it you can do yourself:

• Change your display name in Profile › Change your name.
• Sign out from the Profile screen, which saves to the cloud first and then clears the copy on that device.
• Delete your account outright — Delete account, just beneath Sign out on the Profile screen. No email, no waiting. What that removes is set out below.
• Withdraw tracking consent in iOS Settings, as described in section III.

Deleting your account

Because it cannot be undone, the game asks you to prove the account is yours one more time before anything is touched: your password if you signed up with an email address, or Apple’s or Google’s own sign-in sheet plus your username typed out if you came in that way. Back out at that point and nothing changes.

Once you confirm, the following go:

• Your account record — username, email address, which provider you used, and when the account was made.
• Your entire cloud save — collection, drachma, equipment, battalions, story and tutorial progress, trophies, season pass and ranked standing.
• Your sign-in itself, so the credential no longer exists. If you used Sign in with Apple, the app’s token is revoked at the same time, so Gods Of Myth stops appearing under your Apple ID.
• The copy held on that device, and your username is released for someone else to claim.

Two things do not go, and both are deliberate:

• The current week’s ladder keeps your points. Your name, your avatar and your published defence teams are removed from it immediately, and no one is sent to fight you again — but the points stay as a bare number, because pulling them out would move every player below you up a place in a week that has already been played. The week rolls over on its own.
• Earlier weeks’ ladder entries remain as the historical record of those weeks.

For anything the game cannot do for you — a copy of your data, or a correction — write to godsofmythsupport@gmail.com from the address on the account, or tell us the display name if the account has no address on it. Requests are answered within 30 days. You can also ask us to delete the account by email if you would rather not do it yourself.

If you are in the EU or the UK

You also have the right to restrict or object to processing, the right to data portability, and the right to withdraw consent at any time without affecting what was done before you withdrew it. You may complain to your national supervisory authority — in the UK, the Information Commissioner’s Office.

If you are in California

In the twelve months before the date at the top of this page, the categories collected were identifiers, commercial information (purchases), internet or application activity, and — only with your permission — inferences drawn for advertising measurement. Personal information is not sold. Reporting the advertising events in section III to Meta with the advertising identifier attached may be treated as “sharing” for cross-context behavioural advertising; refusing App Tracking Transparency is the opt-out, and it is honoured for every purpose. You will never be denied service, charged differently, or given a lesser version of the game for exercising any of these rights.

If you are in Australia

You may complain to us first at the address above. If you are not satisfied with the response, you may take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

IX.  Children

Gods Of Myth is not directed at children and is not intended for anyone under 13. Accounts are not knowingly created for, and information is not knowingly collected from, children under 13 — or under the higher age of digital consent where a local law sets one. If you believe a child has created an account, write to godsofmythsupport@gmail.com and the account and everything attached to it will be removed.

X.  Keeping it safe

Sign-in credentials are held by Firebase Authentication and never by the game. Sign in with Apple is protected by a single-use cryptographic nonce, so a token captured from another app cannot be replayed into this one. Database rules limit what any signed-in device may read: the game can ask whether a username is taken, but no player can download the list of every player’s name, and no player can write to another player’s account. Traffic between your device and the servers is encrypted in transit.

No system is perfectly secure. If a breach ever occurs that is likely to cause you serious harm, affected players will be notified and the Office of the Australian Information Commissioner informed, as the Notifiable Data Breaches scheme requires.

XI.  Changes to this policy

When this policy changes in a way you ought to know about, the version number is raised and the game asks every player to read and accept it again on next launch — the same gate you saw when you first opened it. Minor corrections are made in place, and the effective date at the top of this page always tells you when it last moved.

Write to us

Johnathon Nicolaou · ABN 58 576 416 023 · Sydney, New South Wales, Australia

Publisher of Gods Of Myth · Privacy enquiries, access and deletion requests

Terms of Service · Support