Privacy Policy

1. Information we collect

• Player profile and account: an internal account identifier, display name, avatar and customization choices, authentication sessions, and account creation and activity information.
• Game activity: level, experience, resources, energy, upgrades, campaign progress, ratings, rewards, guild membership and roles, contributions, battle actions, results, and replay records.
• Social features: messages you send in global, guild, or private chat, their recipients and timestamps, read status, guild descriptions, blocked-player choices, reports, and your acceptance of the current Chat Rules. Do not put sensitive personal information in chat or public profile fields.
• Optional Google linking: when you choose to link or restore a profile through Google, we receive your Google account identifier and verified email address. We do not receive your Google password or request access to your Gmail messages or contacts.
• Technical information: server requests and connection logs, including IP address, browser or client information, request times and errors, and game performance and network diagnostics used to investigate lag, disconnections, and service problems.
• Support correspondence: your email address and information you provide when contacting us.

2. How we use information

We use this information to operate the game, save and restore progress, authenticate players, run multiplayer battles and replays, calculate rankings and rewards, provide guild and chat features, respond to requests, investigate reports and abuse, protect accounts, and diagnose or improve reliability and performance. Google account information is used for account linking, sign-in, and recovery.

Android builds with rewarded videos use Google AdMob (Google Mobile Ads SDK) and Google’s User Messaging Platform (UMP). Watching an ad is optional. AdMob may collect IP addresses (which may be used to estimate approximate location), advertising and other device or app identifiers, ad interactions, and diagnostic information, including crash and performance information, to deliver and measure ads, prevent fraud, and maintain its service. Depending on your region and choices, ads may be personalized or non-personalized. The browser game does not include the Android advertising SDK.

Before requesting a rewarded ad, the Android app requests an update of your advertising consent status and displays a consent form when required. You can revisit available choices in Settings → Privacy & Community → Advertising Privacy Choices. Ad availability depends on those choices, your region, and Google’s ad service. Test builds may show clearly labeled Google test ads, which do not grant gold.

We send a temporary reward-session identifier with an ad so Google can notify our server that the reward was earned. This identifier is linked to your player account on our server; we do not send your Google sign-in email, chat messages, or player name in this reward-verification data. We store reward sessions and verified transaction identifiers to award gold and prevent duplicate rewards. We do not sell players’ personal information.

3. Visibility and sharing

Other players can see information used by game features, such as your display name, avatar, ranking, selected profile statistics, guild affiliation, and battle or replay information. Global messages are visible to players who access global chat; guild messages are visible within the guild; private messages are delivered to the intended participants. Your Google email address is not displayed in your public player profile.

Messages are stored on the game server. Private chat is not end-to-end encrypted; the service operator may access stored information when necessary for support, moderation, security, or legal obligations.

Hosting, network delivery, and infrastructure providers process information necessary to deliver and secure the service. Google processes information when you use Google sign-in or the Android advertising features under its Privacy Policy. Read also how Google uses information from apps that use its services. We may disclose information where necessary to meet a legal obligation, respond to a valid legal request, or protect players and the service against fraud or abuse. Service providers may process data outside your country.

4. Device storage and permissions

The game uses browser or app storage for sign-in sessions, settings, cached assets, and saved game information. Clearing that storage can sign you out or remove local data; it does not delete your server account. The Android game uses network access and may use vibration for game feedback. It does not request access to your microphone, camera, contacts, or precise location.

5. Security

Production game connections use HTTPS and secure WebSockets to protect information in transit. Server authentication sessions are checked before access to protected account functions. No online service can guarantee complete security. Never send us your Google password or an authentication token.

6. Retention

Account and progress information is stored to let you return to the game. Chat, battle histories, replays, and related records may remain stored after a session ends; these records do not currently all have a fixed automatic expiry. Technical logs and backups are also retained for operation, troubleshooting, and recovery.

You can request deletion as described below. Limited information may need to be retained for fraud prevention, security investigations, dispute resolution, or legal obligations. Backup copies may remain until those backups are removed; they are not intended for ordinary game access. Contact us about the retention or deletion of a particular category of information.

7. Your choices and account deletion

To request deletion of your KRYFORT account and associated personal data:

1. Email rivetnova@gmail.com with the subject KRYFORT account deletion.
2. Include your player name and, if your account is linked to Google, send the request from that linked email address when possible. Do not include passwords or authentication tokens.
3. We may ask for information needed to verify that you own the account before processing the request. We will explain any information that must be retained and why.

The request covers your account, Google account association, profile and progress data, and personal information associated with your messages and other game records, subject to the retention exceptions above. Deletion ends access to that account and its progress. Uninstalling the game, clearing browser storage, or removing Google access alone does not delete server-side game data.

You may also contact us to request access to or correction of your information, or exercise other privacy rights available under the laws where you live. Depending on those laws, you may have rights to restrict or object to processing, receive a copy of your data, or complain to your local data protection authority.

8. Parents and guardians

If you believe a child has provided personal information that should not have been collected, contact us so we can investigate and address the request. Social features can expose messages and profile information to other players.

9. Changes and contact

We may update this policy when the game or its data practices change. The current policy and its update date will be published on this page. For any questions, contact Sergey Shafran at rivetnova@gmail.com.