In short
- We don't ask for your email, phone, real name or a password to play. Your account is created with an anonymous ID.
- Our servers only keep what the game needs to run (your in-game name, leaderboard and ranked data, chat messages, friend list and game state).
- We never sell your data or use it for ad targeting.
- Ads only play when you ask for them and are served by Google AdMob.
- You can delete all your data with one tap in the game or by email.
Scope and data controller
This policy covers the mobile game Anvil Legends (package: com.anvillegends.game) developed by ScorchByte Studios ("we") and this website. ScorchByte Studios is responsible for processing your personal data. Send questions and requests to anvillegends.support@gmail.com.
Players in Türkiye have rights under Law No. 6698 on the Protection of Personal Data (KVKK); players in the European Economic Area and the UK have rights under the General Data Protection Regulation (GDPR).
Data we collect
Account ID
When the game first starts, a random, anonymous user ID is created with Google Firebase Authentication. It isn't linked to your real identity.
In-game profile and leaderboards
Your chosen nickname, unique player tag (Name#1234), avatar and cosmetics, power score, chapter, anvil level, ranked data (points, tier, weekly pool), a summary of your equipped items and companion, and your battle stats. These are visible to other players for leaderboards, ranked battles and friends.
Friends
If you use friends, your friend profile (name, avatar, power, chapter, tier, item summary, battle stats, last-seen time), friend requests and friend list are stored. Requests and friendships are visible only to the two players involved. There is no private messaging between friends.
Chat
Messages you post in server chat are shown with your name and avatar to players on the same server and are removed from chat after 24 hours. From version 1.0.3, to review reports and protect the community, a copy of each message is kept for up to 90 days in a moderation archive that only authorised team members can access. Reported messages and report records are kept until the review is complete.
Game state (support and fair play)
From version 1.0.3, the game periodically, and when the app goes to the background, writes your account state to the server: your name and tag, game version, operating system type (e.g. Android), progress (chapter, part), power score, resource balances, number of purchases, ranked points, equipment and a copy of your game save. We only use this for support (restoring lost progress or purchases), cheat detection and keeping the game balanced.
Game save and Google Play Games
Your progress is stored on your device. If you sign in to Google Play Games, a copy of your save is written to the saved games area of your Google Play Games account so it comes back on a new device. Google stores that copy; we have no access to your Google account.
Purchases
In-app purchases are processed by Google Play. Your payment details never reach us. A purchase token is kept in your game save so each purchase is delivered exactly once.
Data that stays on your device
The optional gender and country you can pick in your profile are stored only on your device; they aren't sent to our servers or shown to other players. Notifications are scheduled locally on your device; no identifier is sent to a server for them.
Advertising
The game only shows rewarded ads that you choose to watch (e.g. for a ticket or a gem chest). There are no forced ads. Ads are served by Google AdMob.
To show and measure ads and prevent fraud, AdMob may collect and share with Google your device's advertising ID, approximate location derived from your IP address, device and app information, ad interactions and crash/diagnostic data. In the EEA, UK and Switzerland, Google's consent form is shown on first launch. You can turn off ad personalisation or reset your advertising ID in your device's Settings › Google › Ads. Ad content is limited to a teen-appropriate level.
More information: policies.google.com/technologies/ads
What we don't collect
We don't collect precise location, contacts, photos, microphone, camera, payment card details or real identity information. Apart from the ad service's own measurement, the game uses no separate analytics or tracking service.
Why we use data, and our legal bases
| Purpose | Legal basis |
|---|---|
| Running the game: account, leaderboards, ranked, friends, chat, saves | Performance of a contract |
| Delivering purchases | Performance of a contract |
| Moderation, cheat detection, security | Legitimate interest (a fair, safe game) |
| Answering support requests | Legitimate interest / contract |
| Personalised ads (AdMob) | Consent where required (consent form) |
| Legal obligations | Legal obligation |
Data on our game servers is never sold, used for ad targeting or shared with the ad network.
Who we share data with
- Google Firebase (Authentication, Cloud Firestore, Realtime Database) — the infrastructure where data is hosted. Privacy
- Google AdMob — rewarded ads. Privacy
- Google Play and Google Play Games — distribution, payments and save backup.
- Cloudflare — hosting this website.
- Other players — the profile, leaderboard and chat information marked as "visible" above.
- Authorities — only when legally required.
These providers' servers may be located outside Türkiye and the EEA (e.g. in the US). Transfers rely on appropriate safeguards such as the providers' standard contractual clauses.
How long we keep data
| Data | Period |
|---|---|
| Chat messages (in game) | 24 hours |
| Chat moderation archive | Up to 90 days |
| Reports | Until the review is complete |
| Profile, leaderboard, ranked and friend data | Until you delete them |
| Game state (support and fair play) | Until you delete it |
| Suspension records | For the suspension and as long as needed to prevent abuse |
| Support emails | Up to 1 year after the request is resolved |
Anonymous accounts that stay inactive for a long time, and their data, may be cleaned up from time to time.
Your rights
You have the right to access your data, ask for it to be corrected, deleted or restricted, object to processing, receive it in a portable format and withdraw consent. This includes your rights under Article 11 of the KVKK.
- Deletion: in the game, Profile › Settings › Data › Delete all my data. Details on the Account & Data Deletion page.
- Other requests: email anvillegends.support@gmail.com with your in-game name and tag (Name#1234). We respond within 30 days at the latest.
- If you're not satisfied with our response, you can complain to the Personal Data Protection Board in Türkiye or your local data protection authority in the EEA.
Security
Data is transmitted over encrypted connections (HTTPS) and stored on Google Firebase. Access rules make sure each player can only change their own records; only authenticated, authorised team members can access moderation and support data, and every admin action is logged.
Children
Anvil Legends is not directed at children under 13 and does not knowingly collect their data. If you believe a child under 13 is using the game, contact us and we'll delete the related data.
This website
This site uses no cookies, contains no ad or tracking code and loads no third-party fonts or scripts. Our host, Cloudflare, may briefly process technical logs such as IP addresses to serve the site and protect it from attacks.
Changes
We may update this policy. We'll announce significant changes in the game or on this page, and the "last updated" date at the top changes with every revision.
Contact
ScorchByte Studios · anvillegends.support@gmail.com