Vaelon

Privacy Policy

Effective: · Last updated:

This policy explains what information the Vaelon mobile game (iOS and Android) processes, why, who processes it for us, and the choices you have. Vaelon is operated by its publisher, who you can reach at support@vaelon.app.

1. Short version

  • You can play single player against the AI without an account. That data stays on your device.
  • Online play, friends, challenges, the leaderboard and match history need an account (Apple, Google or email and password).
  • Vaelon contains no advertising, no analytics or crash-reporting SDKs and no in-app purchases, and it does not track you across other companies' apps or websites.
  • We never sell your data. We use Google's Firebase to run accounts, the online database, online matches and push notifications.
  • You can delete your account inside the app. See the Delete account page.

2. Information we process

What we process depends on how you play.

On your device only (no account): your game settings, language, profile choices and statistics for single-player games are stored locally on your device.

Guest identifier: when you open an online feature before signing in, the game creates an anonymous Firebase user. It is a random identifier that contains no name or email.

When you sign in, we process:

  • Account data: your Apple, Google or email sign-in provider, a unique user ID, and your email address. With Apple or Google we may receive your name and email address from that provider, and we use the first part of your name or email as a suggested username that you can change. For email accounts the password is handled by Firebase Authentication; we cannot see it.
  • Profile data: your username, avatar choice or profile card, win and loss record (including online record) and favourite-unit counters.
  • Public profile: your username, avatar, friend code, number of games and wins and online record. Other signed-in players can find it by searching for your username and see it on the leaderboard and in matches.
  • Match history: for each finished match, date, whether it was online, category, formation, result, both teams' power and units, the battlefield, and your opponent's username and card. It is stored under your account.
  • Social data: your friend code, who you follow and who follows you, challenges you send or receive and their status.
  • Online match data: lobby details (host and guest user IDs, usernames, cards, match settings) and the match state and moves needed to run an online match between two players.
  • Push notification token: if you allow notifications, a Firebase Cloud Messaging token for your device, stored under your account so we can send friend and challenge notifications.

Technical data: to provide connections, sign-in and security, Google's Firebase services process technical information such as your IP address and installation identifiers.

We do not collect your precise or approximate location, contacts, photos, camera or microphone data, advertising identifier or payment information. The Android app requests only the network and notification permissions it needs. The iOS app requests notification permission if you enable notifications.

3. How we use it

  • To provide the game: sign you in, sync your profile, run online matches, friends and challenges, and show leaderboards and your history.
  • To send notifications you have asked for, such as friend and challenge alerts.
  • To keep the game fair and safe, for example to enforce usernames and the Terms of Use, prevent abuse and fix problems.
  • To answer your requests, including support, access and deletion requests.

We do not use your data for advertising or sell it, and we do not use automated decisions that have legal effects on you.

4. Who processes data for us

  • Google (Firebase Authentication, Cloud Firestore, Cloud Functions and Cloud Messaging) stores and processes account, profile, match and notification data on our behalf. Our database is hosted in Google's European multi-region and our functions run in Europe, but Google may process some data elsewhere under its own terms. See Firebase privacy information.
  • Apple (Sign in with Apple and the Apple Push Notification service) and Google (Google Sign-In and Android credential services) process data when you use those sign-in methods or receive notifications.

We share information only as described here, when the law requires it, or to protect the game and its players.

5. What other players can see

Your username, avatar card, game and win counts and online record are visible to other signed-in players. Opponents also see your username and card during a match. Do not use your real name or personal information as your username.

6. How long we keep data

  • Data on your device stays until you delete the app or its data.
  • Account, profile and social data stay while your account exists.
  • When you delete your account in the app, we delete your public profile, username claim, friend code, follow connections, notification tokens, private profile and your sign-in account.
  • Some records tied to your account identifier, such as past match-history entries and challenge or lobby records, are not removed automatically yet. They are no longer linked to a profile or sign-in, and you can ask us to delete them by email.
  • Google may keep technical copies such as backups and logs for a limited time under its own policies.

7. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to complain to your local data-protection authority. To use these rights, email support@vaelon.app from the address linked to your account. You can also change your username in your profile, turn notifications off in Settings, and delete your account in the app.

8. Deleting your account

Open your profile in the app and choose Delete Account. Step by step instructions, and the email option, are on the Delete account page.

9. Children

Vaelon is intended for players aged 13 and older and is not directed at children under 13. If you are under the age at which you may consent to data processing where you live, ask a parent or guardian before creating an account. If you believe a child has created an account without permission, email us and we will delete it.

10. Security

Data is sent over encrypted connections and our database is protected by access rules that limit each player to the data they are meant to see or change. No system is perfectly secure, so please use a strong, unique password for an email account.

11. Changes to this policy

If we add features that process additional data, we will update this policy before they launch. The date at the top shows when it was last updated.

12. Contact

Questions or requests: support@vaelon.app.