English · Italiano
This notice is issued under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and describes how personal data of users of the video game Autochess Of Ages (the “App”) and its online services is processed.
Angelo Falci — email:
angelo.falci94@gmail.com.
No Data Protection Officer (DPO) has been appointed, as it is not required. For any
privacy-related request, please write to the address above.
The App can be used as a guest, without creating an account. In that case, matches against the computer, preferences (volume, language, favorite civilization and hero) and local match history stay exclusively on your device and are never sent to our servers. The App uses no analytics, profiling, or advertising tools.
| Category | Data | When |
|---|---|---|
| Account data | Email address; username; Google account identifier (if you sign in with Google); cryptographic fingerprint (bcrypt hash) of the password, never the plaintext password (if you sign in with email and password) | Registration and login |
| Game data | Matches played, wins, placements, leaderboard score (MMR), units fielded and match results online, favorite civilization and hero | Online matches with an account |
| Session data | Access tokens (stored on the server only in hashed form) | Login |
| Technical data | IP address, date and time of the request, requested resource, user agent | Every connection to the servers |
| Purchase data | Transaction identifier, product, amount, currency, store, purchasing user identifier (the account identifier, or, for guest purchases, a device identifier) | Optional contributions through the in-app store |
If you sign in with Google, we only receive your email, identifier and name from your Google profile; your Google profile name is used as your initial username. We never receive your card or payment method details, which are handled exclusively by Google Play.
| Purpose | Legal basis | Retention |
|---|---|---|
| Account creation and management, authentication | Performance of a contract (Art. 6.1.b GDPR) | Until account deletion; login sessions expire after 90 days at most |
| Online matches, matchmaking, statistics, history and leaderboard | Performance of a contract (Art. 6.1.b) | Until account deletion (see §8 for anonymized data) |
| Game balancing through aggregated unit statistics | Legitimate interest in improving the game (Art. 6.1.f) | Until account deletion, then only in a form no longer attributable to you |
| Security, abuse prevention and troubleshooting (server logs) | Legitimate interest in service security (Art. 6.1.f) | 30 days |
| Recording contributions and displaying the total raised | Performance of a contract (Art. 6.1.b) and accounting/tax obligations (Art. 6.1.c) | For the period required by tax law (in Italy, 10 years) |
Providing account data is only necessary to use the online features: without it you can still play as a guest.
Your username, MMR score and game statistics are visible to other players in online matches and on the public leaderboard. Your email address and internal identifiers are never shown. If you sign in with Google and don't want your profile name displayed, use email/password login and choose a fictitious username.
Data is not sold or shared with third parties for their own purposes. It is only shared with the following providers, to the extent necessary for the service:
We may also disclose data to authorities when required by law.
Google and RevenueCat may process data in the United States. Such transfers rely on the EU–US adequacy decision (EU-U.S. Data Privacy Framework), for certified companies, or on the standard contractual clauses approved by the European Commission (Art. 46 GDPR).
You can delete your account at any time from the App (instructions). Deletion is immediate and removes your profile, email, username, credentials, sessions, statistics and preferences. Only the following remain:
Data processed by Google and RevenueCat remains subject to their respective policies; to have it deleted you can contact us, and we will forward the request, or contact the provider directly.
Within the limits set by Articles 15–22 GDPR you have the right to: access your data; request its rectification or deletion; request restriction of processing; receive your data in a structured format (portability); object to processing based on legitimate interest. To exercise these rights, write to angelo.falci94@gmail.com: we will respond within one month. We may ask you to write from the email address of your account to verify your identity.
You also have the right to lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the EU country where you reside or work.
Player matchmaking and MMR score calculation are automatic, but only concern gameplay and produce no legal effects nor significantly affect you (Art. 22 GDPR).
The App's online services are not directed at children under 13, who must not create an account. If you are below the age of digital consent in your country (14 in Italy), you may only create an account with the authorization of whoever holds parental responsibility. If we learn that an account belongs to a child under 13, we delete it. Parents may report this to the address in §1.
Communications with the servers are encrypted (TLS). Passwords and access tokens are stored only in hashed form, the database is not exposed to the Internet, and access to the servers is restricted. No system is 100% secure: in the event of a data breach posing a risk to you, we will notify you as required by Articles 33–34 GDPR.
The App and these web pages do not use cookies or tracking technologies.
This notice may be updated, for example when new features are introduced. The last update date is shown above; in case of significant changes we will notify you in the App.