Data Safety

Last updated: September 2026

This page mirrors the Google Play Data safety disclosure for Alderun, in plain words. The short version: the game collects nothing while you play offline, and the bare minimum needed to run a match while you play online. See also our Terms of use · Privacy policy.

This page covers the game. The player forum on our website is a separate service with its own summary of what it stores.

Data collected

Data type	What exactly	Why	When
Email address	The address you register with, or the one on your Google account if you sign in with Google.	It is your account. Used to send a sign-in code when you play on a new device, and a one-time confirmation link. Never used for marketing.	Only if you register an account or sign in with Google. Guests give no email.
Device or other IDs	A random identifier generated by the game. It is not your hardware ID. If you sign in with Google, also the identifier Google issues for your account in this app.	Keeps you signed in to the multiplayer service so lobbies and matches work, and lets Continue with Google reach the same account next time.	Only when you play online.
Display name	The nickname you choose, or a guest name we assign such as Guest#4271.	Shown to other players in lobbies, matches and chat.	Only when you play online.
Approximate age	Your year of birth, checked at registration. We keep only whether you are old enough.	To stop anyone under 13 creating an account.	Only at registration.
App activity (app interactions)	Records of what happened in the game: a mission started on a map with a hero, how it ended and after how long, the store being opened, a purchase failing. Sent with the random identifier above plus platform, OS version, device model, app version, language and the country your connection comes from (worked out on our server from your address, which is not stored — the two-letter country only, never a place). Nothing you type or say.	To see which maps and heroes get played, how long people play, where they stop, which regions play the game, and whether the store works — so we know what to fix and what to build next.	Whenever the game is played, online or offline.
Purchases	That a purchase was made and what it unlocks, kept on your account so we can give it back. The same purchase also appears in the gameplay statistics above — the amount and currency, and how many purchases have been made from this installation — under the random identifier and nothing else. No card, bank or billing details reach us — payment happens inside Google Play.	To unlock what you paid for and restore it after a reinstall or on another device, and to see how much the store sells and whether it works.	Only if you make a purchase.
IP address	The address your device connects from.	Running the match connection, and a short-lived counter to stop automated sign-up abuse. Not used to profile or locate you.	Only when you play online.

That is the complete list. The game collects no location, contacts, photos, files, health data, browsing history, or installed-app information, and no advertising ID. There is no advertising in the Google Play app and no data is used to target ads. It does collect the gameplay statistics described above. The third-party libraries in the Android build are Google’s sign-in library (which does nothing unless you tap Continue with Google) and Google Play Billing, used only if you buy something.

Data shared with others

To deliver sign-in codes and confirmation links we use the email providers Resend and Brevo, who receive the destination address and the message itself and act only on our instructions.

If you tap Continue with Google, your device signs in with Google, so Google knows you signed in to Alderun; it is governed by Google’s privacy policy. Registering with an email address instead avoids Google entirely.

The gameplay statistics are processed by GameAnalytics, who show them to us as charts. They receive the random identifier, the gameplay records and the purchase record described above — no email address, no name, nothing you type — and act on our instructions. Your device never contacts them directly; the records reach our own server first.

Nothing else is shared with anyone, and nothing is sold.

Deleting your data

Account → Delete Account inside the game removes your account and releases your email address immediately. You can also play entirely as a guest and never provide an email in the first place.

Offline play: your settings and progress are stored on your device and stay there. The gameplay statistics described above are still recorded while you play offline and are sent the next time the game is online.
In-lobby chat: relayed between players during the lobby only; not stored after the lobby closes.
Match data: orders and game state exist only to run the match and are discarded when it ends.

Data sharing

Nothing is sold, and nothing is shared with advertisers or data brokers. Multiplayer runs on our own servers. The only companies that receive anything are the service providers named above — the email providers that deliver sign-in codes, Google if you choose to sign in with it, and GameAnalytics, which turns the gameplay statistics into charts for us. Each acts only on our instructions and for no purpose of its own.

Security practices

Encrypted in transit: online play connects to our servers over TLS (https/wss).
Minimal retention: lobby listings expire automatically; chat and match data are not stored after the session ends.

Data deletion

There are no user accounts, so there is nothing to delete for offline play. If you have played online and want the random device identifier removed from our multiplayer service, write to us using the address on our contact page and we will remove it. You can also stop using online play at any time — the identifier is meaningless outside the game.