Privacy Policy

1. Introduction

Welcome to Guild Master Tycoon ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Guild Master Tycoon (the "App"). Please read this policy carefully. By using the App, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect the following types of information:

• Account Information: When you create an account we collect your email address and a password. The password is stored only as a salted hash and we never see it in plain text. Your account is also given a public display name (either one you choose or an alias we generate automatically at sign-up, such as "Crimson Falcon") and an internal Player ID, which you can see on the Settings screen. We do not offer sign-in through Google, Apple, or any other third party, and we do not collect a profile picture.
• Gameplay Data: Your cloud save, which includes your heroes and the names you give them, avatar customisation, buildings, inventory, quests, achievements, login streak, and earned titles. We also keep your leaderboard score, Colosseum rating and win/loss record, and your Territory Wars activity and rewards.
• Device and Push Data: Device model, operating system version, and app version. If you have multiplayer alerts turned on, we also store a push notification token for your device (see Section 6).
• Usage Data: Anonymous information about how you use the App, including session duration, features accessed, and crash reports (see Section 7).
• Purchase Information: In-app purchases are processed by the applicable platform (Apple App Store or Google Play Store) and by RevenueCat, our purchase management provider, under an anonymous identifier that is not linked to your account. To prevent a purchase from being rewarded twice, your cloud save keeps a short list of recent store transaction identifiers. We do not store your payment card details.
• Support and Feedback: If you send feedback from within the App, we receive your message together with your device model, operating system version, app version, login streak, hero count, and Player ID, delivered to us by email. If you reset your password, a one-time code is sent to your email address.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App and its features, including saving your progress to the cloud.
• Run multiplayer features such as leaderboards, the Colosseum, and Territory Wars, and show your public profile to other players (see Section 5).
• Send you push notifications about Colosseum and Territory Wars events (see Section 6).
• Run automated fair-play checks on synced progress (see Section 8).
• Improve, personalize, and expand our App experience.
• Process in-app transactions and manage your account, including sending password-reset codes.
• Communicate with you, including for customer support and updates.
• Monitor and analyze usage trends and preferences.
• Detect, prevent, and address technical issues, fraud, or cheating.
• Comply with legal obligations.

4. Sharing of Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with vendors who help us operate the App. These are Google LLC (Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging, Firebase App Check, and Google Cloud hosting of our game server in the United States), MongoDB Inc. (MongoDB Atlas, the database that stores accounts and cloud saves), RevenueCat Inc. (in-app purchase management), and Twilio Inc. (SendGrid, used to send password-reset codes and deliver in-app feedback to us). Each provider processes data only as needed to provide its service.
• Other Players: Your display name and certain gameplay information are visible to other players through the multiplayer features described in Section 5.
• Legal Requirements: We may disclose your information if required to do so by law, or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Display Names and What Other Players See

Your display name. Every account has a public display name. When you sign up we assign you a randomly generated alias. You can replace it with a name of your choice from the App's Settings screen, and change it again once every 24 hours. Display names must follow the content rules in our Terms of Use, are checked against a blocklist of offensive words, and are not guaranteed to be unique. We keep only your current display name; previous names are overwritten. Please do not use your real name, email address, or any other personal information as a display name or hero name.

What other players can see. Guild Master Tycoon has no chat, messaging, or friend features. Other players can see the following about you:

• Leaderboards: Your display name, earned title, and ranking figures (overall score, party-quest score, Colosseum rating with wins and losses, and Territory Wars hold time and battle counts).
• Colosseum: Opponents and players browsing for a challenger see your display name, title, and the name, class, level, power, and avatar appearance of the hero you sent. Battle results, battle recaps, and each player's recent-battles history show the display name and hero of the opponent they fought. Training bots are labelled as such.
• Territory Wars: Players in your war see the territory you hold, your display name, title, and banner, and the name, class, level, power, and avatar appearance of every hero in your garrison or attacking party. Siege results name both the attacker and the defender.
• Notifications: Your display name may appear in push notifications sent to players you fought or besieged, and theirs may appear in yours.

Hero names you type and the avatars you design are shown to other players wherever your hero appears. If you encounter a display name or hero name that you find offensive, please contact us using the details in Section 15 and we will review it.

6. Push Notifications

The App can send push notifications about multiplayer events through Google Firebase Cloud Messaging. The first time you sign in, the App asks for your device's notification permission and, if you grant it, turns multiplayer alerts on. We then store a push token for your device, together with the platform (iOS or Android) and the time it was registered, on your account. To send you relevant Colosseum alerts we also keep a summary of your heroes' levels.

We send notifications when a challenger is waiting in your level range, when a Colosseum battle you entered has been decided, when an opponent requests a rematch, when your territory comes under siege, and when a siege for or against you has been resolved. These notifications may include the display name of the other player involved.

Your choices:

• Turn alerts off at any time from the App's Settings screen using the "Colosseum Challenger Alerts" switch. This switch also controls Territory Wars alerts. Turning it off removes the push token for that device from our server.
• You can also block notifications for the App in your device's system settings.
• Push tokens are removed automatically when a notification can no longer be delivered to a device and when your account is deleted.

The App also schedules local reminders on your device (for example, when new daily quests are available or a battle has ended). These are created and shown entirely on your device and are never sent to us.

7. Analytics and Crash Reporting

We use the following third-party services provided by Google LLC to understand how the App is used and to diagnose technical problems:

• Google Firebase Analytics: Collects anonymous gameplay events (such as quest starts and completions, screen views, feature interactions, shop-offer views, and in-app purchases with the product purchased, its price, and currency) together with a Google-generated app instance identifier, device model, operating system version, app version, and approximate region derived from your device locale. This data is not linked to your name, email address, display name, or any account identifier we hold, and the App does not use your device's advertising identifier.
• Google Firebase Crashlytics: Collects crash reports, including stack traces, device state at the time of the crash, and operating system version, to help us identify and fix bugs. Crash data is associated only with an installation identifier.

Both services are operated by Google LLC and processed in accordance with Google's Privacy Policy. We do not enable Google Signals or use these services to deliver advertising.

Your choices:

• You can disable analytics collection at any time from the App's Settings screen using the "Anonymous Analytics" toggle. Disabling the toggle takes effect immediately.
• If you are located in the European Economic Area, the United Kingdom, or Switzerland, the App will ask for your consent before any analytics events are sent. Until you grant consent, analytics collection remains off. You may change your decision at any time from the Settings screen.
• Crash reporting remains active by default so we can continue to receive critical error reports. If you wish to disable crash reporting as well, please contact us using the details in Section 15.

8. Fair Play and Automated Cheat Detection

To keep leaderboards and multiplayer features fair, our server runs automated checks each time your progress is synced. These checks compare changes in your gold, gems, hero levels, and scores against the limits that normal play can reach. An account whose progress exceeds those limits is flagged automatically, and we record the time and reason for the flag.

A flagged account is excluded from all leaderboards, cannot enter the Colosseum or take part in Territory Wars, and stops receiving multiplayer notifications. The flag is not lifted automatically and the App does not currently notify you when it is applied. If you believe your account was flagged in error, contact us using the details in Section 15 and a person will review the decision.

If a flagged account is deleted, we keep a small record consisting of a one-way hash of the email address (which cannot be turned back into the address), the date of the flag, the date of deletion, and the reason. This record has no expiry date and is used only to re-apply the flag if a new account is created with the same email address. Accounts that were never flagged leave no such record.

9. Data Retention

We retain your account information and cloud save for as long as your account exists. You can delete your account at any time from the App's Settings screen ("Delete Account"; your password is required). Deleting your account removes your account record, including your email address, password hash, display name, cloud save, push tokens, and fair-play flags.

Records of the multiplayer matches, seasons, and wars you took part in are kept after deletion so that other players' history and past results remain intact. Those records continue to show the display name, title, hero names, and avatar appearance you had at the time, along with your Player ID, but no longer link to an email address. If you would like your name removed from these records, contact us using the details in Section 15.

Server logs, which may include your email address and Player ID, are kept for a limited period for security and debugging. Records relating to flagged accounts are retained as described in Section 8. We may also retain information where required to comply with legal obligations, resolve disputes, and enforce our agreements.

10. Data Security

We implement commercially reasonable security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

11. Children's Privacy

Guild Master Tycoon is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information promptly.

12. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access, correct, or delete your personal information.
• Object to or restrict certain types of processing.
• Data portability: receive a copy of your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

Several of these you can exercise yourself inside the App: change your display name, turn analytics and multiplayer alerts on or off, and delete your account, all from the Settings screen. For anything else, including a copy of your data, removal of your name from historical multiplayer records, or review of a fair-play flag, please contact us using the information provided below.

13. Third-Party Services

The App may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or on our website. Your continued use of the App after such changes constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: games@w3applications.com

← Back to Home